last executing test programs: 34.342780575s ago: executing program 3 (id=45): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008505090581fcffffff00000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x5, 0x6, 0xec5c, 0x4, 0x0, 0x749c, 0x3, 0x5, 0x9, 0x203}}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) read(r1, &(0x7f0000000040)=""/92, 0x5b) syz_usb_control_io(r0, 0x0, 0x0) 32.219484548s ago: executing program 3 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, 0x2}) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x1}) 32.217078998s ago: executing program 3 (id=56): ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x6b, 0x8}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24040881) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x80000) getsockname$inet(r4, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x366165ac99f309f5, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a080}, 0x80) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x405, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0x2, 0x39}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x73}}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x160b8ab137d7ea72) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000600)={'lo\x00', {0x2, 0x4e23, @multicast1}}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r0) (async) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000006c0)={@dev, @remote, 0x0}, &(0x7f0000000700)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe0, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2004000}, 0x20000001) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000008c0)={'virt_wifi0\x00', {0x2, 0x0, @multicast1}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r2, 0x413, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x80) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000a00)={0x7, 0xea, 0x1, 0x6, 0x800}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000001d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000ac0)={0x122c, r2, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "adfb966410bbc02f23f260049bc4c3c95c0bd10436731d01e74eafae2013bf90f937558e8fbc91ee19b6553187d1b5fb398436407892cfdf880e7ae39b2c3cf90e64e536b9"}, @NL80211_ATTR_VENDOR_DATA={0xeb, 0xc5, "8b3939f76e3559b413e0f27f2172ff65ef25b65200e548f20d5bce5554e332b6a42acfc69f0e9a5121bac915c9a033c61873e0b8073f3305cc1dd4089dabebee4b6d990d6d524fb3612eff580caf0a6bd672144f808badffa1ebf7cd7d8f75d584602125d4d0e9f9c286356fee7ad237636db56621fabe28d053bbfd2f644f077d50444f23647d560f1dc32cbbbde4963c3fe73d29b7c88134ea0dac804b944261b5290f2a4a828e1dcffe51118ce122ad510b66f594dbaf792deda44bc1acf6288f05bc2b79de8872fe54ccbc6110bd5a4237df63e3d85ffef259ced54c7e1fe0f9cb81e56d7a"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x793b6386}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "ef7bf2fddf7941bea7ff5ea5a2c7f355c6424baecfbfb25a4f5d088747febfd2625b11779617df289a336d8c1286b4daac044d39a11784f06e742fac73f7d62e5541273110ad6a3bc5fe554974600c2addacb6288512c82e112d21e860cd19798734a2e01fd9fa9e5af178d9cfccf59a38c56d3ed15eda20958297ead071dfb6a947b9772b81268513676c80906825783b5d4aa083cdb57dd664fec23bc76e1943b0741a36bdbd82f31937a4d7b8e1e610e44f1db070"}]}, 0x122c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0xae}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x85, 0x28, 0xb6}}]}, @NL80211_ATTR_IE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44054}, 0x80) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e80), 0x40000, 0x0) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000001ec0)) syz_genetlink_get_family_id$fou(&(0x7f0000001f00), r1) (async) r11 = add_key$keyring(&(0x7f0000001f40), &(0x7f0000001f80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xee01, r11) 32.161485661s ago: executing program 3 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='no,']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x40, 0x0, 0x7}}, 0x14) 31.959399523s ago: executing program 3 (id=59): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="2f565d412c03d2ae262f", 0xa}, {&(0x7f0000000100)="8ef148478464645412d4f9d01fe4ed707c6eb3a60e409809bb8e382fa339238b68889e6301128ad074d78ae7e63c689a1606b915d66d655ebfd8a957a57db00d7614f8b1213ad94e6d4b2bb7e0b89489c0e54ac9c6c630bd1c18c6a0af2aed920c04ae78de82448873ff5d3a08f518c023c8f44824fccab0fe54db9ddab0f01154b0eba3604408b26ebe1b379ba99ea336834aed6ee3a94e0555f583a89489caf105b27a6dc1cad9efa15e719e516b2abcbe2ccabe1d93662c1a1270289c7696d1c18e7ed8284f1ed64c4fb6d5b5d3f9809a712b088fcfb3ef09333028d77a3c6afe46151016b2d730833d92b2eec070a71f1419f8", 0xf5}], 0x2, 0x2, 0x5, 0x0) 31.899159077s ago: executing program 3 (id=60): socketpair(0x1, 0x1, 0x5, &(0x7f0000000080)) 31.862912659s ago: executing program 32 (id=60): socketpair(0x1, 0x1, 0x5, &(0x7f0000000080)) 5.465974443s ago: executing program 4 (id=216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000040)) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f00000017c0)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x7f, 0x20000000, {{0x32, 0x4, 0x3, 0x0, 0xc8, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x7, [{@multicast1, 0x2}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x8}]}, @timestamp_addr={0x44, 0x3c, 0x49, 0x1, 0x7, [{@multicast2, 0x7e014be2}, {@private=0xa010102, 0x2}, {@multicast2, 0xe}, {@broadcast, 0x2}, {@loopback, 0x6}, {@rand_addr=0x64010102, 0x9}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0xa, [{@rand_addr=0x64010101, 0x2}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x81a7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x8}]}, @end, @generic={0x7, 0xc, "b281775cdac41e86dfe0"}, @lsrr={0x83, 0xf, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x7, [{@local, 0x81}]}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000019c0)={'gre0\x00', &(0x7f0000001900)={'erspan0\x00', 0x0, 0x700, 0x40, 0x6, 0x2b8, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x67, 0x0, 0xb2, 0x29, 0x0, @loopback, @empty, {[@noop, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x1, 0x6, "fe233804"}, {0x5, 0x7, "dfdcb7ffcc"}, {0x7, 0x7, "f386abc776"}, {0x7, 0x8, "f4ebd22cd074"}]}, @timestamp_prespec={0x44, 0x34, 0x5d, 0x3, 0x9, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xffff}, {@loopback, 0x7}, {@broadcast, 0x1fa1}, {@private=0xa010102, 0x58c}]}, @rr={0x7, 0xb, 0x66, [@remote, @rand_addr=0x64010102]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001d40)={'syztnl1\x00', &(0x7f0000001cc0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xf9, 0x80000001, 0x0, @mcast1, @private0, 0x7800, 0x8001, 0x7, 0x3}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d80)={'ip6erspan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002140)={'erspan0\x00', &(0x7f0000002040)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x8, 0x2, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0xf, [{@broadcast, 0x8}, {@multicast1, 0x3}, {@empty, 0x5}]}, @cipso={0x86, 0x3e, 0x0, [{0x5, 0x11, "64814eaf40a3de8f53827f308fa8e6"}, {0x7, 0x7, "eff90d4989"}, {0x1, 0x12, "2ff766926800d0db47ce24d65ed82545"}, {0x1, 0xe, "d974ca735aaf259be44190d4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x3, [0x1, 0x7]}, @timestamp={0x44, 0x2c, 0x6a, 0x0, 0x7, [0x0, 0x180000, 0x24c5, 0x4, 0x1ef, 0x5, 0x1, 0x10000, 0x0, 0x7]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'ip6tnl0\x00', &(0x7f0000002180)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xa7, 0x9, 0x8, @private0, @loopback, 0x20, 0x10, 0x7, 0x9}}) sendmmsg$inet(r2, &(0x7f0000002380)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000000c0)="89c546db7541e0171219bf59c77f21d5fe555331809513dbc5445cec76dedce906b24d322e0fe88d44690efd8e1787342be422b921c674920b2d5b07d333c0fdc7695fca82a46de143023f37868ef14d01aac0f57a968b7fd9fcef1e71908b9c8fe83cacae39dcfdc9ec67630cc5a27464dad1387d3187640de3103f519f0a300aa75de6124c928f6e9eb4897ba785d84f275cad8cf51393374185b73b1626eec9bbc416e803d1ce08809873d389313c452779ab3c37a151e306393410f6095195ac5e9977768129c2c3ec07079a", 0xce}, {&(0x7f00000001c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000001200)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001240)="1239cabcce2037f070958e8ec58f57262ce6e056acf12f9fa0fbdf9b465673f6a3f35dd64838674d2cb4eee35e762b268b8da44b2d86a7d5e0371c628a4a8a27e287a543bc9d587c93391d25700ad440157cea23e59a53b369c9480f2e027d7d15ab02c87a1291268893bc1937f740c7231e0b17f4414bcec91dee3aefe4c64a36247e2d0e9e2518a4af1c7f349bc2ad9f97e80eb789ab78763f5fba62a839c4317f0cce1a4be3f15e71aff6ee94c433edc5d85b2d7341c68289d465", 0xbc}, {&(0x7f0000001300)="a79053c4bc457cb4a7ca495dba229255f441a1596ec0962f2e371d325d9030ecddd83bc94971", 0x26}, {&(0x7f0000001340)="de072b92f20f851854471ce02325d5f72689f7f59a306398704a8618f4190bfc6b0a00e3b1ef764a48eb77f1997865a11a1b34fe2240ab2076885af06159ca62650552f229f8", 0x46}], 0x3, &(0x7f0000001400)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x30}}, {{&(0x7f0000001440)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001480)="e04fef06b05c3c8877681da41c8ca1eaa1df7ac798782e496525b58c0e8a42f13d81bab5e6eba1fe8a874d804370b5dfad4a2344dcee745ff8", 0x39}], 0x1, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001580)="769b277a2094771107741f73403268a54a57471ff9cf68c338d37f65c46a879ddce8fb557470efb1bfcc04025c07e995e44de1abc7e97cd85d7b8edb2134f151110129659208f9ea85d3671e81fb71eb3bee1eb5e28fc28aa8ff3104d77bbcca828d67bf6e27ddfe893238e9600004d32d1a36ca925213633a4ed937fc773d40c7f50003a4cfe9bb281336af8c9f6a3b688839bb4961af9d5c33e3a22c3cd0eb924d0e8fb460172f8cc146ec35e8cc78ece9be53f8ed8dc7a6df472cdc421dde23594c44bd888185e836edbd3c6c8b1fad5d1dd93a", 0xd5}, {&(0x7f0000001680)="9cf8e5dc72784649b80ef55623a8d1413794ad6cbf7619a3b410a7f86a780447c741f46b7049e092f917d9dcaa22f549926ebfa38d61f1c94f892c4d03b3509148ffb5e7965f3d809a8ca216e817bea3b31c9ac99ce8e9b4ac7a0d14f9238c6fe65a8fb2a1f4f0f74c6ef95a220749373a06b4530ca040c06b5de41bc304b7efd819979b0b46d3cd19af30e5386b6327abe925d8942a3f7910ff420e89b88497211b872d2b015a7293c3496502af8571f46b3bb60f374187b1280b46e1abfa7cad38994e04d3bb4b5e8e5d30e1d258a5388c967c13", 0xd5}], 0x2, &(0x7f0000001a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x62, [@remote, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @multicast1, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x6, [{@multicast2, 0x5}, {@empty, 0x92d7}]}, @noop, @generic={0x83, 0x6, "45d528fe"}]}}}, @ip_retopts={{0x12c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x5, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@remote, 0x4}, {@broadcast, 0x8}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x21a}, {@initdev={0xac, 0x1e, 0x46, 0x0}, 0xfffffffe}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}]}, @generic={0x82, 0x3, "89"}, @lsrr={0x83, 0x3, 0x6b}, @timestamp_addr={0x44, 0x54, 0xb0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x200000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, {@remote, 0x80000001}, {@broadcast, 0x69e}, {@multicast1}, {@broadcast, 0x3}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x2a8}]}, @end, @timestamp_prespec={0x44, 0x44, 0xc, 0x3, 0x3, [{@local, 0x2}, {@remote, 0xffff}, {@empty, 0xff}, {@broadcast, 0x9}, {@remote, 0xefc9}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x2}, {@empty, 0x2c}]}, @timestamp={0x44, 0x28, 0xd2, 0x0, 0x9, [0xd73f, 0x7, 0x9, 0x3ff, 0x6, 0x1, 0x5, 0x7, 0x8]}, @ssrr={0x89, 0x7, 0x98, [@local]}]}}}], 0x1f8}}, {{&(0x7f0000001c00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001c40)="ae2cd58c60bd785b282687b112d5eb1c7fe647de55389ac9dde470a1b113d724cb524b9468da0281c6616e92f139245c", 0x30}], 0x1, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff57c1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x293}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xf8}}, {{&(0x7f0000001ec0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001f00)="5369968fd9fce8d436d17771742704ae00175a8a74620af0aada096b982b7a5b0d3b3ae771d4d99b509daccc99ee1a5eb54f353b6d3331a141cfe197fd688cdec2e07510bfaeccd0f908a138dfb70771c9e8d6b7078bd22e9872f2f8c8b1c5e754b94dce0524985af8494e4d143d184c00e46cd8854525f6fba64b2e794170fc61485ad4643b96b07e0a978ea09c545fbe7973b39f511155a69eb7e6057f1008af35bba39e4afe86ad34260edc250e420350efd7791021f34d5a0e913e0788ca27d22a975f8ac7202a92453f7f950a76b20614d2ab1c2b01578dd7774be7a3ee8af5617e46810699b2a5a476a61eb0681ec5c6ceff1093c069d5c0f685b6", 0xfe}], 0x1, &(0x7f0000002240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x14, [@loopback, @private=0xa010101, @multicast2, @multicast2, @remote, @remote]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x5f, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}, @noop]}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x110}}], 0x6, 0x8000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000002500)={"4bd457e891ebaec10706ed4792b80747", 0x0, 0x0, {0x10, 0x7}, {0xd4a, 0x6}, 0x1, [0x101, 0x4, 0x7, 0x4, 0x8, 0xb, 0x101, 0x9, 0x4, 0x18000, 0x8, 0x9, 0x3, 0x100000000, 0x9, 0x3]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000002600)) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) r14 = syz_open_procfs(r11, &(0x7f00000026c0)='uid_map\x00') r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740), r10) sendmsg$TIPC_NL_LINK_GET(r14, &(0x7f0000002a80)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002780)={0x29c, r15, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x96, 0x3, "82a53c5ad32889c7de2cc311eb0eb5340a064c05935e42c22dab1cee8d5d582f5ff9d4f5fc55e8587d890911d80700bb7dc40e8849ee2a7ad28c86033b32efb5eabe41ca2bebd36dd89191b67751835696f85e990e1a6e2214b372ce82b832d0f4315832e63850b7f0a9447f77baefe6b44306131bf1d6cde64986dd4a459d788b8860b4e15a8a3046270c21fe0295ad7a09"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "bd5f8cbac3b8a39fcb5ce2f2580ac3ad9eac30ec61c3157b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0f57d1eba593b9619d29d7758ad99f8dfd2aebcc48ac0df5942d6465eade76d394a406"}}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa5c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "2290df2856a581c4e1bb291b884f19ea80b990500d4d7543e7dfd758b6e2186f9abbb348c37e81d58ad81669a5f56fd9d09228fa903c4b3b90c0cc959cfcba308f5ac75c3a19f1988d65e01a102e84476cc3cf97f75f26d3052a6b0d733cac991b19ae23f7ea727d5ca88ac436e30f2b177be4ad36789f3022c5494913b6a75e6e17a0bd54db1b715d4c7a031cd727015577137c2a860d5708db3322b2f8075606ed780371fcfb022dc6faf8d64242792ac5091885a65a68c84a192cd2faae9f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbe86}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async, rerun: 64) fcntl$setflags(r0, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000002b40)={'syztnl2\x00', &(0x7f0000002ac0)={'tunl0\x00', r8, 0x7, 0x7800, 0x76, 0x9, {{0xc, 0x4, 0x0, 0x26, 0x30, 0x67, 0x0, 0x7f, 0x4, 0x0, @remote, @local, {[@timestamp={0x44, 0x1c, 0xce, 0x0, 0x6, [0x9, 0x4, 0xd67c, 0xffffffff, 0x4, 0x334]}]}}}}}) (async) ioctl$sock_SIOCGIFCONF(r14, 0x8912, &(0x7f0000002bc0)=@req={0x28, &(0x7f0000002b80)={'veth0_vlan\x00', @ifru_addrs=@in={0x2, 0x4e20, @broadcast}}}) (async, rerun: 64) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async, rerun: 64) r16 = accept$nfc_llcp(r14, &(0x7f0000002c00), &(0x7f0000002c80)=0x60) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r16, 0x8982, &(0x7f0000002cc0)={0x7, 'ip6gretap0\x00', {0x3}, 0xe}) (async) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d40), r10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d80)={0xe4, r17, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000004}, 0x40011) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000002f00)={'bridge_slave_0\x00'}) (async) ioctl$USBDEVFS_FREE_STREAMS(r14, 0x8008551d, &(0x7f0000002f40)={0xd931, 0x19, [{0x6, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0xa, 0x1}, {0x3}, {}, {0xe, 0x1}, {}, {0x2, 0x1}, {0x2}, {0xb}, {0x2}, {0x6}, {0x1}, {0x7}, {0x5}, {0xf}, {0x0, 0x1}, {0x7}, {0x4}]}) (async) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002f80)={r11, r12, r13}, 0xc) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 5.460729643s ago: executing program 4 (id=217): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0xfffffffffffffff3, 0x8, 0x0, 0x0, 0x7}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x128, 0x9}) 5.349450009s ago: executing program 4 (id=218): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1}}}}]}]}, 0x6c}}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x28}, 0x1c) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xfff, 0x81) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4cb0000392b190000000000000000000000004800", [0xfd, 0x3]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x30}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 5.247344205s ago: executing program 4 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r4, 0x1, &(0x7f0000000380)="35738b86") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2bbd05e, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000380)={0xe, 0x0, [{0x0, 0x0, 0x4}, {0x20, 0x0, 0x9}, {0xfffffffe, 0x0, 0x7fff}, {0x6, 0x0, 0xf}, {0xf84, 0x0, 0x1}, {0x100000, 0x0, 0x5}, {0x4ced, 0x0, 0x7}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x8000000000000002}, {0x4, 0x0, 0x80000000}, {0x800, 0x0, 0xd2f}, {0x22aa, 0x0, 0x1ff}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0xa}, {0x820, 0x0, 0x8592}, {0x52051b97, 0x0, 0x200}]}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00') mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r6, 0xa4c1d000) 5.207661198s ago: executing program 4 (id=220): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd", 0x5f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'veth0_macvtap\x00'}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000103000000092100000001220500090581030000000000d1e9b863482a01f0d945a66a5076577a72e20330092926313823d4d1e46fd9abb1e009160e56b2b22c091f190b84ec8539468cbf4ed0ecce57c351fb37c67d93f31b59fe9269025c0b9c40909bd23521675961d1d9b243e9c87e5f43f62ec69a9df551ba3e38aa403198a2ab"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000340)={0x0, 0x1, 0x2, {0x2, 0xf}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd2, 0x60, 0x3e, 0x0, "b0c13b71", "f96ca827"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x3, 0x9, 0x9, 0x5, 0x9}}}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003190000001903"], 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 5.122985092s ago: executing program 4 (id=221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @multicast2, @multicast2}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4e24, 0x0, 0x4e24, 0x7, 0xa, 0x0, 0x80, 0x89, r2}, {0x6, 0x7, 0xe, 0x7, 0xfffffffffffff801, 0x2, 0x4, 0x6}, {0x77, 0x0, 0x934, 0x2}, 0x6, 0x6e6bbe, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3505, 0x1, 0x0, 0x5, 0x2, 0x9}}, 0xe8) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000240)=0xaf, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', r2, 0x700, 0xf820, 0x847d, 0x2, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x2f, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0xe, 0x0, [{0x7, 0x8, "58a9effffa56"}]}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20008000) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) fchmod(r3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000005c0)) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000600)=0xfc, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x8, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x7, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @private=0xa010100}}]}, 0x410) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000ac0)={0x6, &(0x7f0000000a80)=[{0x4, 0x1, 0x5, 0xba}, {0x4e9f, 0x8, 0x10, 0x3}, {0x3e, 0xd, 0xf, 0x8}, {0x2, 0xa, 0xc6, 0x1}, {0x4, 0x9, 0x22, 0xed19}, {0x0, 0x1, 0x5, 0x1}]}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000b00)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000b40)='net/netlink\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000b80)) sendto$inet(r8, &(0x7f0000000bc0)="579cf3029cef9be31adc9014a4ef57664a06f7ef89ac38479fb782c3d181d28eef644d5c8e2ab2516025fc89f9fee6b078a13033cd626b688c3ed154232b3977925c35a39a3e9a", 0x47, 0x4, &(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) read$FUSE(r8, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r8, &(0x7f0000002cc0)={0x18, 0xffffffffffffffda, r9, {0x42}}, 0x18) rt_sigtimedwait(&(0x7f0000002d00)={[0x5]}, &(0x7f0000002d40), &(0x7f0000002dc0), 0x8) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000002f00)=0x2, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002f80), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000003100)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xcc, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0xe473630ee913315) 5.036965418s ago: executing program 33 (id=221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @multicast2, @multicast2}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4e24, 0x0, 0x4e24, 0x7, 0xa, 0x0, 0x80, 0x89, r2}, {0x6, 0x7, 0xe, 0x7, 0xfffffffffffff801, 0x2, 0x4, 0x6}, {0x77, 0x0, 0x934, 0x2}, 0x6, 0x6e6bbe, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3505, 0x1, 0x0, 0x5, 0x2, 0x9}}, 0xe8) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000240)=0xaf, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', r2, 0x700, 0xf820, 0x847d, 0x2, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x2f, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0xe, 0x0, [{0x7, 0x8, "58a9effffa56"}]}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20008000) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) fchmod(r3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000005c0)) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000600)=0xfc, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x8, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x7, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @private=0xa010100}}]}, 0x410) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000ac0)={0x6, &(0x7f0000000a80)=[{0x4, 0x1, 0x5, 0xba}, {0x4e9f, 0x8, 0x10, 0x3}, {0x3e, 0xd, 0xf, 0x8}, {0x2, 0xa, 0xc6, 0x1}, {0x4, 0x9, 0x22, 0xed19}, {0x0, 0x1, 0x5, 0x1}]}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000b00)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000b40)='net/netlink\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000b80)) sendto$inet(r8, &(0x7f0000000bc0)="579cf3029cef9be31adc9014a4ef57664a06f7ef89ac38479fb782c3d181d28eef644d5c8e2ab2516025fc89f9fee6b078a13033cd626b688c3ed154232b3977925c35a39a3e9a", 0x47, 0x4, &(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) read$FUSE(r8, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r8, &(0x7f0000002cc0)={0x18, 0xffffffffffffffda, r9, {0x42}}, 0x18) rt_sigtimedwait(&(0x7f0000002d00)={[0x5]}, &(0x7f0000002d40), &(0x7f0000002dc0), 0x8) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000002f00)=0x2, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002f80), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000003100)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xcc, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0xe473630ee913315) 4.410178924s ago: executing program 5 (id=222): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x81, 0x0, 0x7, 0x0}) (async) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000040)=0x9) (async) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000ac14904900000000000000000200010000000000fd000501feffff4b03000500ff00000002"], 0x50}}, 0x50) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r6, 0x72b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x24004884) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1c0000001c005f0214fffffffffffff8070000000d00000000005200", 0x1c) 4.347479547s ago: executing program 5 (id=230): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x88}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0xa, 0x22, {0x22, 0x4, "864962638e81a90dcd4d1ab0005ed5f1a41daf3c7c63304dcd04dbb7fc535e5d"}}, &(0x7f0000000080)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "192d2ebf"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xfbb}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0xe2, "172b1ac689155399066897abd8642fbc84e910b9d972dfe7213d06a7468b42f9515cdadaf2de459cdb43d3524db491ec1e7ab9fa0a6f75f4f5494ed643ae63cebd122e51c9c0aa612448ddda9d8bbfe1195c06791a22a5196369cba8ddaa10311496eec4542d74bce0861b7da2908b72d8d8febd72c74708afa20620317d59c8cb49c51d3c6a1b93a293cf3053cffb74a59cda09eb7cdd63291645e989e720b039927895d6239377337b1fa160797abfd3f261fae4a32d294053f2c062a96bb583ffe1ba64b20cfeb4e16feb3ff00350ab06226c8115c0b3ff61649e4326d81afbdd"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x1, 0x79, "432ef39fb0b93db9d9abd7008bf714610000cb0d9c282ac82be11576e0da2f345870d54d2e6d9c9cfc6af71854e5327cd734ea6e8eca17fc965eba69d7945946d409582d3850cc797917f77e783d85d50601d38550f2d02c49d85cbff9623f0bd55a99d17b120c3a0d72de5868f87f79b379b1156e2ab8ae96"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xe}}) 1.622641095s ago: executing program 2 (id=241): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x7, "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"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000001201"], 0xffe) 1.581150808s ago: executing program 2 (id=242): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1}, 0x6e) getsockname$unix(r3, 0x0, &(0x7f00000004c0)) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x153) write(r0, &(0x7f0000000f80)="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", 0xffffffb7) 1.563410359s ago: executing program 2 (id=243): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x10, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0xfd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x10, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x6ba, &(0x7f00000005c0)={{0x12, 0x1, 0x6b3d9eedcff3a3e2, 0x5a, 0xaa, 0x9d, 0x8, 0x9846, 0x9041, 0x1dd7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a8, 0x2, 0x2, 0x4, 0x30, 0x2, [{{0x9, 0x4, 0x49, 0x82, 0xb, 0xff, 0xff, 0xff, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x6c, 't'}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x27c, 0x2, 0xff, 0x9, 0x7, 0x8}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x47}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x6, 0x7, "9f952a"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x1, 0x80, "26fee651062c"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x8, "f5"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x4, "5ffe44"}]}], [{{0x9, 0x5, 0xd, 0x8, 0x1ef, 0x9, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7d, 0x10}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x6, 0x6, [@generic={0x39, 0x21, "9fa90ce7566f4e8cdc94005306531497fcb3c500bf2fab2c831bb7308f2415b4ff4abd7c8aaef3aefc35e6b1d8b6e6c68b884a062ff839"}, @generic={0x32, 0x30, "7c5ccf64c096faea7027f764085c18e47c6421aec8a59b3b7ead3bb1377f37f1ebe70eea8078608d1f647706336b5b92"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xc, 0x9, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x4, 0x85, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x90c4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x3, 0x0, 0xb, [@generic={0x54, 0x0, "2a5bda0838c3f45a9f5e72a22cd87b8b872dc7259313f67d937937e7fb5b8982981bf601351f9de690cfa2c1cbf3aa7231604bfa53fcf6ef2841811dcde7113032b71ba0564e9ea8a6368bc34468c1750478"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x6, 0x2, 0x10, [@generic={0x85, 0xa, "a8c03737d5a52bcf7f3809b99702fd78f210ab6699d9fed8be837e77d96da55f8299b095a90b18c3b55eeb19dd1773a2fb7ad85a39059e374e43404ff66b0ece632d9baa99ea772e4490b6fcc33aaee6475b97cf64da518b8fdcfac08edcb72375ce7d98453435063e44b3d88fefe02e5dcc2663f353a5dce363fb7bad3b91f317d58d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x8, 0x5, 0xfa, [@generic={0xe0, 0x3, "c1f6ae57edada0e89f42c057cdcfa0a10b1b3355293ac07a4f734dba5f0a359fd2a69741278367ecb0c6dcf7cb98ab066d7ed83e5829cae33ff3bafa0bc020695688ddd21124d90a317088f189ede487dd9124c727f9624fc5b7e9d26c7e02042134283ef779f53dc5f815520a5459271de27ea7f0b873ac45cbefe1128aad95781e5e2ba2b24edec76af4f0d79a1b9e8803df3d169beeb900894e613b385a232497e8edf3f95a65628d806881850931c323bbf8a81b84bc3415efbb6556f110eb12b86229312db1be0eef650d1f386f9cb4dc30dcae8714e5828df21fb3"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x46, 0x2, 0xc7, [@generic={0x4a, 0x11, "1ced6a39e5579c14f732dcd043e5132a0d07ae43c99e9a60059394fbab7aa5f755133c05d7a114dff21d2c1c6520ce2823def16e48e2d2f900b849edfe4d7b00231c7456705305f4"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0xd0, 0x6, 0x9, [@generic={0x72, 0x23, "51dcdac732a1415d166962503749dc935e0a26f3339d5a326eccaff40457723286e78002f7ee508c2c49ef9cb93cef5972387862bb069bbaf3d3ba40f305b7afb9507b6a97dc248083091e5dc196df69c7fd840c5aca34b91fab95aba2da5776bd67bbd22914f46694076b19b781673e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x1, 0x0, [@generic={0xa0, 0x0, "bd7cde4ac8cad352c042c396658e379eabd825e25e4a4042c4c9f3cf4b167bf4a318f812aa3edb12ac0b2f6c3c9f01f44516cc04344019c4e98c082d3590feae2a5407262a11e09adfe4ce2afe6ba99e831171cff6c8e7eb667e0d07d6b70c90c7ab2efbbbf5743280479f63d8f1ea4be6b19812839036b221d84903ac4a30ed278b17b9d292ca4d48cb9442a0a86014c0d251c421fff3bec489f6aa8205"}]}}]}}, {{0x9, 0x4, 0xb4, 0x81, 0x6, 0xff, 0xff, 0xff, 0x2, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0xb, 0xf, "c4", "97e6a9"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x7f, "ac54", "c065"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1ff, 0xe2a, 0x40, "d595b00e41"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x38, 0x2, 0x1, 0x40, [@generic={0x82, 0x11, "09d046fd87ec883927638254df3e3e69d1d56d0fde96d3f98bcb93829635c9e2bea1cc7d881643a4c9155eb0d51d08c00972e4351cb8c81f15036c205708ee841d413014c304e75a4ec75140ab0b474aa87f73474bd14f79986fb6494cb601b7c00f2b0e6896d5861f037917e696e1310e19c088af1dbe2b539afa515cdcde34"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x1, 0x17, 0x5, [@generic={0xd6, 0x31, "9e28d061dae30d42001ed2e63723b725b93e5c61d00cb9cc9787818f0366172eabefae0c1aa9141799214b2ab824c5ec01453096082e579dcae9fa6a2894704437603cdc7a8f9313d46f3d30336f2e9e5513ac4d84e3bb060c0896f5692c371d1f0b712ea713f6e82fb90ac58c1454f0bd7941276ce0e76b74f9cf839864e5bcfe0a6c667266645fc84e6740508ffae63a6cb101c42fe224df781603abe04bb384148a35ed68f66cc776088d16c55b176aea857a7319f40ff395d96c9ad2638a220c63bcfe14e1f9a1602023ebe0b95af68613c2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x1, 0x8, 0x3, [@generic={0x45, 0xa, "40d4242dce98aeddbc0d482b0c2117034e74fa1b744b14d163028df4c0a3a075c7daf1b043527535f792b273670f3c86772eb00ac665071440ff3f10dec3f0218c9f37"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0xc6, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x22}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x2}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9, 0x7, 0xff, 0xf7}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2c, 0x9, 0xff, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x49, 0xc8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "671cc75be44c68e42ede4967c538c211"}]}, 0x9, [{0x82, &(0x7f0000000140)=@string={0x82, 0x3, "b9b0f81387c3d100152072acd0f517f618545d26750a7e9f8ea55aab4ba1772ef91c5c20a6408d7a86d60bdb61643e49ca03a9b5a28b096e77acdad6ff92b0af8501fdded6d6a7567ad47523bbcfb7a6f3518cc9805d4a1a69f30a0f7ff5d9ba421dcc58af4c9b4d30eda4678353124cb893a6121e837c2da5e95ecad50ea9f3"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c0d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0xdf, &(0x7f0000000280)=@string={0xdf, 0x3, "71633f2da37a1c505044e2acb7a274ffb8ececa11de5a3559284d625675e7c11ecec57c3461d9ba5e2a273c60b0151895c674ce951c6642fa1da310e041b34d094df4650df86fdbfe15a6529c9e26e94e068951c9fd1a832a8525313cc9f8df51f615a8cd5a06f817564f26705646c32a3d964dc114d947583d1170ed55925c0ee787415538a56693e82697f0655dbd4552615440596b99bab8ab156f1e93de8bfde6fa9a0c521715c62a3652dda0e0ce6450ca6c6ba939c5324919410110831ac70d49a1d37f65e2008d3f46af87b6c8ffb260373ce0e167e7e97574b"}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "95622d21ac122c2c3d8a0221fef901e81dcc8ab3683ca3f7a1d7a5e34fbf6a54891d7ea2caf3d9eac0677a1ecbbe08d27778427b38b9ebbd299f930415823d02a1371c477afb90f578d80a032a15bf3e8b9859e7a442a78aa63ace70a94a28a4c8cf43"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44e}}, {0x34, &(0x7f0000000480)=@string={0x34, 0x3, "a3840bf8fc27aa024550c72e741df8aa33c1eee7b022ef9de8007009b8d8b8ee7d6b566102ee1d31f56f50b79a93b3555889"}}, {0x4b, &(0x7f00000004c0)=@string={0x4b, 0x3, "9d0f88b600d3d6bbe8adad9a81a8744c7f10f41899472e2d16edbcadd5e040f54f941678d23fe55d4529a7347a157e1a613b652c3d38b846efcd1209ed554d0b4469d83bd6bfa1564b"}}, {0x3b, &(0x7f0000000540)=@string={0x3b, 0x3, "f57e71e9ba90e3c75438ffeb49c81ef0770d9bb4a9ce7959b7f6ac9173a89970e24b10e8032c8874906a875405cbb39c8df28c44368e3e3b35"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x40, 0xf, 0x3e, {0x3e, 0x0, "ccaa943e651c91e136864738e096e3e1b0d06e318a9dee680aebe17ee408c4909daa3c3442bbb83e42466f17b63399b44efabfaa036b1681ecd7f197"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x1c, &(0x7f0000000e40)={0x0, 0xf, 0x8, "95a00c1021d49a1f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x3}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) 1.415162078s ago: executing program 1 (id=245): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000200)=0x6, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) (async) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="021604023800000026bd7000fedbdf251400180005ff940078cd1e7c0718bb0ff6883b31b0d6ddecc97577107d7a49cf4228f6c04b5ac7ba91a09efc24d53ea70868700a4f977c7f1146f75f5faa602e1398222eb835aa98e5fa736a301370557c095056ce1a029fefa9cfbbd4a972b89deed1bddf2b081d8224e8d3343072b9a7bd6cafd805701f8e0ebacfa4e1daee0dce72e2d305d3b7086adc867ef50048506006950000000019000800e8050000cf681d6aa04d76580fefc750198affada65de67dbee2d507f7647fee22f919b03ebc8a6fb3f8eb1b8eb8b006c0a859548960108d757ce26596c720f6546dbcd752d6d09de6f7dbd11d61014ae02c9486282d7c31b72ca10a266a2ecc00e9a38f7cd25985fb18619992263b9d8ca83510d285395a5afbd810512752c8c031ed2dc868a815b87d23b8eae59d27f236fecc4f007db3710be99f78aa7371e8c947c8a7ba195cfd0c107bfcafa7a23d8d4b8ac8cfa900023d54217229c5357ca31bcd74473c30960b121c67ac9882361565516aac00000002001000000004d5000004d300000000040004005141000000040000000000000200000000000000060000000000000003000500ff20000002004e207f0000e3cf2e71f86444dbcdd7782269d8e183e4cf39e3aa23dafefd5fe7f73f371f5a801d53d1bcfd78eb207139fd7d14e933c3712cbbe249e8e2a5a6ec549424c467a302a6ddb8c76912202dbf9861cc27b355c6a59e3755dd5679c77e1c677652f5600000000000000000"], 0x1c0}}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x6, 0x4}) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) (async) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x115080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.296052465s ago: executing program 5 (id=249): r0 = fsopen(&(0x7f0000000100)='sysv\x00', 0x1) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000300)=""/260, 0x104}, {&(0x7f0000000280)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000001"], 0x6) 1.295613005s ago: executing program 5 (id=251): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f000000d700), 0x26000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000b80)=""/4096) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbf9, {{}, {}, {0x18, 0x17, {0x401d, 0x3, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x48084}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xd47fc000) symlinkat(&(0x7f0000000200)='./file7\x00', r5, &(0x7f0000000180)='./file7\x00') mount$cgroup2(0x0, &(0x7f00000000c0)='./file7\x00', &(0x7f0000000100), 0x280c00c, &(0x7f0000000000)=ANY=[]) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) (async) landlock_create_ruleset(&(0x7f0000000040)={0x1fff}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) listen(r1, 0x7fff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x4) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f000000d700), 0x26000, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000b80)=""/4096) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbf9, {{}, {}, {0x18, 0x17, {0x401d, 0x3, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x48084}, 0x4000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xd47fc000) (async) symlinkat(&(0x7f0000000200)='./file7\x00', r5, &(0x7f0000000180)='./file7\x00') (async) mount$cgroup2(0x0, &(0x7f00000000c0)='./file7\x00', &(0x7f0000000100), 0x280c00c, &(0x7f0000000000)=ANY=[]) (async) 1.139422784s ago: executing program 0 (id=254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfa, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d6, 0x2, 0x2b}}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0) syz_io_uring_setup(0x4504, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x80000000, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x7, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0xa, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1d, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x100], [0x9, 0xbb31, 0x3, 0x1, 0x5, 0x1, 0x9, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x9, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0xf00, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x78}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x890) read$hidraw(r3, &(0x7f0000000000)=""/7, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 903.575917ms ago: executing program 1 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {0x0, 0x4000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x12c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0xc0, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0xa2, 0x3, "5dbbcea4022477ee4141c62a20d4140e9626924fb56eab4dd2ae97443830d5f5a1e907a9246586f8aa587743dd4d38836e1021b1009aee311745c86290c94c66f6e950535d49dbfa98bf99307ad012e47d80874eba9596da70c05045559dd48dc7d4b656adf5aeeb25dc23e94efaf4bb4da6274fa5df4fc43a31fcaccf8e4984b5bd0d9dec428f53ca6bca88e666b670edae579f9865c5084af6dff6a19e"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc43}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x5}, {0x1b}, {0x36}, {0x9, 0x1}, {0x12}, {0x1}, {0x9}, {0x1}, {0x30}, {0x69, 0x1}, {0x0, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0x30}, {0x48}, {0x6c, 0x1}, {0x6c}, {0xc}, {0x6, 0x1}, {0x6}, {0xb}, {0xc}, {0x9, 0x1}, {0x68}, {0x36}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x12c}, 0x1, 0x0, 0x0, 0x8010}, 0x404c051) 879.816119ms ago: executing program 1 (id=256): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0xfffffffe}, 0xfffffe29, 0x3}) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) (async) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xff3c) 711.440369ms ago: executing program 1 (id=257): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40841, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000000540)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9dp\x00\x00\x00\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t=T_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\x05\x00\x00\x00<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\xbe/]\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\x00\x00\x00\x00\x00\x00\x00\b$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000340), 0xb, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)=0xfffffffd, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f30c4b9e16dc30101220f01c3", 0x5d}], 0x1, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000002080), 0x2010800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, 0xffffffffffffffff, 0xffffd000) mount$9p_fd(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002140), 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3dcaaa202000cd2b45b3daf1c015216c433fc40144f795da5359caac0776df", @ANYRESHEX=r1, @ANYBLOB=',access=user,version=9p2000,subj_user={)@#*,obj_role=\\$,pcr=00000000000000000053,\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000002000fcffffff12000000180001801400020076657468305f746f5f62617461ffff080006000900"/54], 0x3c}}, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0xffff, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb3}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r1, &(0x7f0000002180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x0, 0x0, 0x2, {0xa, 0xe23, 0x80000001, @mcast2, 0x9}}}, 0x3a) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) setsockopt(r2, 0x7fff, 0x5, &(0x7f00000001c0)="c2f4f4a405097b030f6324c3851b7b339d0e7d75c26f9c5c108c47f399484709d505dbf2a31ed0120a1a1ea51455484edf3995962eb37085136e96845f06c75288bc7feb040021355805e09de2bd4808e3e9716f6293b9635d287fbddac23d8633c048c24837c9135ab6e646cdc367b377176c91f2aeb0a85bd74784e5949b7fad8b194ea23a32e441d45cdf26a940108affe45b4041f86e465c63cc0ada15fc370570092f65ac0c1291693beefd4caad893deecf19b1062309a042eafdb6271453c69f84fb6b42134de04f41b18a54a95209b2c2ba12443af997a9bcfb257fd36b6d8bd9450e5c5e1a0e83a1b704316ac", 0xf1) 580.170616ms ago: executing program 1 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x228281, 0x0, 0x7}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 556.919528ms ago: executing program 1 (id=259): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffdc2fff, 0x1000, 0x0, 0x1}, 0x6b) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x38, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xb, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x620, 0x2f, 0x9, 0xe4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x311, 0x2, 0x2, 0x4, 0x8, 0x4e}, 0xa5, &(0x7f0000000140)={0x5, 0xf, 0xa5, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b9d5e06606aa312e146fbc51c29c1ce8"}, @ssp_cap={0x24, 0x10, 0xa, 0x1d, 0x6, 0x960, 0x11000, 0x0, [0xc0, 0xcf, 0x3f0f, 0xff3f00, 0xc0, 0x0]}, @ptm_cap={0x3}, @generic={0x65, 0x10, 0x2, "5f100db65fcad84b46d8f2ab6e10ccf5dc05d57eca3bf3067d111171d6cebaaaad9c89903aeab78818c768d54ba8b7c3d81ded899fcbd77f9d54097222570d51c2738477f191cc14029ed1ee3e3d3dbd006f1751e1406e1801f5a8d2bcca631fb903"}]}, 0x2, [{0x6, &(0x7f0000000200)=@string={0x6, 0x3, "67470f90"}}, {0xd7, &(0x7f0000000240)=@string={0xd7, 0x3, "b6b779dd210d3f75eb01cdd885addc32845984888ed7cba40dd68934ed861059fbefafdd479945e3c0aea157e0ea11259b04829e577f8d2a9d09b7c18990237ca9e792fa70e92fad7c1c8145d5c74697b38d9ec374ea631b7e369895ee7da29913a0dbb441a356092851fda3e604708b709aa73d1af037511ad1ff2394b3c9abb798e1472ad71d6856de98d540056913ecd8a75dc78745f0f9770e68e2988f17d96cf65e1cc7eb7dbcdee47610f01a09cecf327e4c1895f57dd6cda1ae17bc95392e4f2d6a31d854a39e288156386d832912ed5eb8"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "2e773e89"}]}}, 0x0}, 0x0) 299.240373ms ago: executing program 0 (id=260): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="2f565d412c03d2ae262f", 0xa}, {&(0x7f0000000100)="8ef148478464645412d4f9d01fe4ed707c6eb3a60e409809bb8e382fa339238b68889e6301128ad074d78ae7e63c689a1606b915d66d655ebfd8a957a57db00d7614f8b1213ad94e6d4b2bb7e0b89489c0e54ac9c6c630bd1c18c6a0af2aed920c04ae78de82448873ff5d3a08f518c023c8f44824fccab0fe54db", 0x7b}], 0x2, 0x2, 0x5, 0x0) 297.597763ms ago: executing program 2 (id=261): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x7, "3c19224070e2fb71b8210d572f752d40e62de3cca1177da9ba5511826640a938147cdcc86e35c2eb5d2637fac388af589cfd167b13991b4e82c8b5ed5b0fd6b8a8e619aae3a11063f1b542b15a5e6f050c14c7ac5f3e473c2726b776bd956694eab812831f242d944534c724f1b8688989db76654d5ea36e1f80a3f39de78778b4ea99ac74a66f8f6b8e42e13a0c8ca9841598ef6a7f423858535855fdb10f9ae49cf744b1a225671c23f17e5196e4a9725a861d5849c75088a178f253031d36ee0e3e13453bb92c46bef2901968d747aebd59147a6876e836490c8cd7b8594c8ddbab919a83fd5b0c8024e0d4989043046db34abbda7dad33a8afd5b05a73de"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000fff501"], 0xffe) 297.337863ms ago: executing program 0 (id=262): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0xf, 0x1, 0x1, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x8, 0xaf, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0xf, 0x1, 0x1, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x8, 0xaf, 0x4}}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7c020000100033060000000000000000ac141425000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000cd2d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000400000000000000000000000200000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="0300000080010100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0090000fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b4b8a3542814e02b742120e6f30979c39195eff53a948009f9c5b73cc002ca5e0e93d3d11d326b04cf06a436e8c581a4f7369563bd6abdd10da7883c39167b66286bce85900000038a274ebab2fdb3d03aaebf52b7cd5eb6eb7699a9db4e130a1f14fa38ccd5758b681a9117ff1ae5d37e813687a04a33a87a45fb86bd3bef8192b61cec48f5ed576b627dc3fa638d4241e443f764486c05b8b21d2e41ddad8dd78db4c74b8f424356d377aa2a0af62932d8b0395225e773362d4963a1c52274ac80eb257cfec9fa7c9ca1266fb7a81090826e04b8e2676d4d042b9dd05a270016b30df999e4634a99fe61680254cf067424dc7cc8940338e199400"], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 272.470105ms ago: executing program 0 (id=263): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) clock_getres(0x5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='\n', 0x1, 0xc0d0, 0x0, 0x0) close(r1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 271.875175ms ago: executing program 0 (id=264): r0 = syz_open_dev$rtc(&(0x7f00000065c0), 0x0, 0x101200) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x40, &(0x7f0000000000)=0x3d, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x5}}, {@stats}]}) 215.341567ms ago: executing program 2 (id=265): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0xc, 0xb, 0x3, 0xd0, 0x40, 0x7, 0x0, 0xff, 0x19}, {0xeeee8000, 0x2, 0x3, 0x8, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x26, 0x3}, {0x6000, 0x4000, 0xa, 0x5, 0x1, 0x7, 0x0, 0x9, 0xb2, 0x3b, 0xb, 0x81}, {0x6000, 0x10000, 0x9, 0xb, 0xff, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0x10, 0x3, 0x5, 0x0, 0xab, 0x7f, 0xff, 0x83, 0xf4, 0x6}, {0xffff1000, 0x191bd000, 0xc, 0x3, 0xb5, 0xa, 0x1, 0xf2, 0x80, 0x16, 0x5, 0xe}, {0x1000, 0x25000, 0x4, 0x5, 0xc, 0x8, 0x4, 0xfe, 0x3, 0x4, 0x2, 0x70}, {0x0, 0x2, 0xc, 0x1, 0x2f, 0x7, 0xfe, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x3ff}, 0xc0000031, 0x0, 0x1000, 0x2026, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x67, 0x5]}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000443000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x4e22, @local}}) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r10, 0x8000000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00007cf000/0x2000)=nil, &(0x7f00005dd000/0x1000)=nil, 0x1ff, &(0x7f0000000040)=[{0x4, 0x1000, 0x9}], 0x1, 0x49600000000000, 0x6, 0x5, 0xc, 0x10}) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='overlay\x00', 0x9000, &(0x7f00000002c0)='\x00') 215.099897ms ago: executing program 0 (id=266): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x30}}}}, 0x32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000002100)={{0x2, 0x4e24, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 'lo\x00'}) lseek(0xffffffffffffffff, 0x2000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xffff1957, @private1, 0x6}}, 0x0, 0x0, 0x34, 0x0, "fc08b5be8339929a01aecbb9510203520030b1dd9faec7d5229683947bc8a74b53529f99bdbd0f015ba321343b0fdb9ab8c6792aad1c423583d106da4da652b46c52fbf57dab158bde450203d3267ba1"}, 0xd8) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b707"], 0x0) close(r1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 2 (id=267): memfd_secret(0x80000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x20440, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ftruncate(r0, 0x400000000000007) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000021, 0x0, 0x2000000}]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 23.090962][ T36] audit: type=1400 audit(1770731461.230:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.094088][ T282] cgroup: Unknown subsys name 'net' [ 23.113840][ T36] audit: type=1400 audit(1770731461.230:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.141135][ T36] audit: type=1400 audit(1770731461.270:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.141625][ T282] cgroup: Unknown subsys name 'devices' [ 23.327093][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.332746][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.427289][ T36] audit: type=1400 audit(1770731461.570:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.450842][ T36] audit: type=1400 audit(1770731461.570:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.475649][ T36] audit: type=1400 audit(1770731461.570:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.501616][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.510445][ T36] audit: type=1400 audit(1770731461.650:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.535872][ T36] audit: type=1400 audit(1770731461.650:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.544788][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.561937][ T36] audit: type=1400 audit(1770731461.690:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.595709][ T36] audit: type=1400 audit(1770731461.690:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.433211][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.441069][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.448297][ T291] bridge_slave_0: entered allmulticast mode [ 24.454818][ T291] bridge_slave_0: entered promiscuous mode [ 24.462233][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469552][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.476817][ T291] bridge_slave_1: entered allmulticast mode [ 24.483114][ T291] bridge_slave_1: entered promiscuous mode [ 24.535640][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.542696][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.550020][ T289] bridge_slave_0: entered allmulticast mode [ 24.556431][ T289] bridge_slave_0: entered promiscuous mode [ 24.565588][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.572649][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.579794][ T289] bridge_slave_1: entered allmulticast mode [ 24.586203][ T289] bridge_slave_1: entered promiscuous mode [ 24.606383][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.613534][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.620788][ T292] bridge_slave_0: entered allmulticast mode [ 24.627156][ T292] bridge_slave_0: entered promiscuous mode [ 24.639538][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.646800][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.653879][ T290] bridge_slave_0: entered allmulticast mode [ 24.660519][ T290] bridge_slave_0: entered promiscuous mode [ 24.666791][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.674027][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.681204][ T292] bridge_slave_1: entered allmulticast mode [ 24.687652][ T292] bridge_slave_1: entered promiscuous mode [ 24.703941][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.711025][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.718211][ T290] bridge_slave_1: entered allmulticast mode [ 24.724562][ T290] bridge_slave_1: entered promiscuous mode [ 24.873908][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.881056][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.888432][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.895506][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.907243][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.914321][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.921639][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928725][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.939064][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.946168][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.953458][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.960524][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.973947][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.981053][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.988393][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.995462][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.040914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.048401][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.056320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.063566][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.070891][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.078271][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.085662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.092977][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.103270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.110483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.125303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.132379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.157502][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.164689][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.172923][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180038][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.187823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.195038][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.202536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.209655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.242106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.249224][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.265549][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.272630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.291345][ T290] veth0_vlan: entered promiscuous mode [ 25.317303][ T292] veth0_vlan: entered promiscuous mode [ 25.335700][ T290] veth1_macvtap: entered promiscuous mode [ 25.342073][ T289] veth0_vlan: entered promiscuous mode [ 25.365766][ T292] veth1_macvtap: entered promiscuous mode [ 25.379946][ T291] veth0_vlan: entered promiscuous mode [ 25.403589][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.420465][ T289] veth1_macvtap: entered promiscuous mode [ 25.439225][ T333] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.453801][ T291] veth1_macvtap: entered promiscuous mode [ 25.774591][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.784604][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.804581][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.824615][ T331] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.924649][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 25.931048][ T45] usb 3-1: config 8 has an invalid interface number: 138 but max is 0 [ 25.939294][ T45] usb 3-1: config 8 has no interface number 0 [ 25.945483][ T45] usb 3-1: config 8 interface 138 has no altsetting 0 [ 25.953899][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 25.956383][ T10] usb 1-1: config 67 has an invalid descriptor of length 0, skipping remainder of the config [ 25.963379][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.975769][ T10] usb 1-1: config 67 has 0 interfaces, different from the descriptor's value: 6 [ 25.983827][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 25.994930][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 25.996512][ T45] usb 3-1: Product: syz [ 26.006138][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.009958][ T45] usb 3-1: Manufacturer: syz [ 26.017058][ T64] usb 2-1: config index 0 descriptor too short (expected 45, got 43) [ 26.022551][ T45] usb 3-1: SerialNumber: syz [ 26.031279][ T64] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 26.045125][ T331] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 26.050925][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 26.053340][ T331] usb 4-1: config 0 has no interface number 0 [ 26.073378][ T64] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.082229][ T331] usb 4-1: config 0 interface 184 has no altsetting 0 [ 26.090129][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.091837][ T331] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 26.099126][ T64] usb 2-1: Product: syz [ 26.110557][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.120510][ T64] usb 2-1: Manufacturer: syz [ 26.125250][ T64] usb 2-1: SerialNumber: syz [ 26.132924][ T64] rtl8150 2-1:1.0: couldn't find required endpoints [ 26.139761][ T331] usb 4-1: Product: syz [ 26.143979][ T331] usb 4-1: Manufacturer: syz [ 26.146277][ T64] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 26.157648][ T331] usb 4-1: SerialNumber: syz [ 26.165019][ T331] usb 4-1: config 0 descriptor?? [ 26.171298][ T331] smsc75xx v1.0.0 [ 26.254265][ T342] can0: slcan on ptm0. [ 26.312377][ T45] snd-usb-audio 3-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 26.322474][ T338] can0 (unregistered): slcan off ptm0. [ 26.330934][ T10] usb 1-1: string descriptor 0 read error: -71 [ 26.339563][ T45] usb 3-1: USB disconnect, device number 2 [ 26.353569][ T10] usb 1-1: USB disconnect, device number 2 [ 26.360050][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.370187][ T64] usb 2-1: USB disconnect, device number 2 [ 26.778816][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 26.789995][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 26.851900][ T386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.926489][ T389] netlink: 'syz.0.8': attribute type 15 has an invalid length. [ 27.144720][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.214547][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.294581][ T64] usb 3-1: device descriptor read/64, error -71 [ 27.374520][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 27.380831][ T31] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 27.389467][ T31] usb 2-1: config 0 has no interface number 0 [ 27.395825][ T31] usb 2-1: config 0 interface 232 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.407915][ T31] usb 2-1: config 0 interface 232 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.420565][ T31] usb 2-1: config 0 interface 232 has no altsetting 0 [ 27.427847][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 27.437292][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.446626][ T31] usb 2-1: config 0 descriptor?? [ 27.544518][ T64] usb 3-1: device descriptor read/64, error -71 [ 27.784534][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.854539][ T31] uclogic 0003:28BD:0905.0001: interface is invalid, ignoring [ 27.914580][ T64] usb 3-1: device descriptor read/64, error -71 [ 28.054819][ T10] usb 2-1: USB disconnect, device number 3 [ 28.067459][ T408] overlayfs: missing 'lowerdir' [ 28.073353][ T408] netlink: 'syz.0.13': attribute type 12 has an invalid length. [ 28.154625][ T64] usb 3-1: device descriptor read/64, error -71 [ 28.210421][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 28.221847][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 28.231756][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 28.241403][ T331] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 28.250996][ T331] usb 4-1: USB disconnect, device number 2 [ 28.264725][ T64] usb usb3-port1: attempt power cycle [ 28.604541][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.625553][ T64] usb 3-1: device descriptor read/8, error -71 [ 28.631196][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 28.631248][ T36] audit: type=1400 audit(1770731466.770:151): avc: denied { ioctl } for pid=409 comm="syz.1.14" path="socket:[4205]" dev="sockfs" ino=4205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.662426][ T36] audit: type=1400 audit(1770731466.790:152): avc: denied { write } for pid=409 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.767148][ T64] usb 3-1: device descriptor read/8, error -71 [ 28.894734][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.984566][ T355] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.984566][ T331] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.004565][ T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.025902][ T64] usb 3-1: device descriptor read/8, error -71 [ 29.045977][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.056172][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 29.065216][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.079934][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 29.089063][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.097153][ T10] usb 2-1: Product: syz [ 29.101389][ T10] usb 2-1: Manufacturer: syz [ 29.106493][ T10] usb 2-1: SerialNumber: syz [ 29.111901][ T10] usb 2-1: config 0 descriptor?? [ 29.145625][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.156741][ T331] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 29.165934][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.167562][ T64] usb 3-1: device descriptor read/8, error -71 [ 29.178240][ T331] usb 4-1: config 0 descriptor?? [ 29.183660][ T355] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.186134][ T415] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 29.195209][ T355] usb 1-1: not running at top speed; connect to a high speed hub [ 29.209454][ T355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.219973][ T355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.231351][ T355] usb 1-1: string descriptor 0 read error: -22 [ 29.237679][ T355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.247179][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.258054][ T355] usb 1-1: 0:2 : does not exist [ 29.284671][ T64] usb usb3-port1: unable to enumerate USB device [ 29.613712][ T331] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 29.812651][ T36] audit: type=1400 audit(1770731467.950:153): avc: denied { write } for pid=414 comm="syz.3.16" name="hidraw0" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.863005][ T355] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 29.870746][ T355] usb 1-1: Warning! Unlikely big volume range (=2133), cval->res is probably wrong. [ 29.880359][ T355] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/2133/1 [ 29.888949][ T36] audit: type=1400 audit(1770731468.030:154): avc: denied { map } for pid=414 comm="syz.3.16" path="socket:[4221]" dev="sockfs" ino=4221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.913011][ T36] audit: type=1400 audit(1770731468.030:155): avc: denied { read } for pid=414 comm="syz.3.16" path="socket:[4221]" dev="sockfs" ino=4221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.937601][ T355] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 29.948131][ T355] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 29.960039][ T355] usb 1-1: USB disconnect, device number 3 [ 29.970590][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.137527][ T355] usb 4-1: USB disconnect, device number 3 [ 30.314559][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.464528][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 30.471710][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 30.480945][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.489685][ T45] usb 3-1: config 0 descriptor?? [ 30.634605][ T355] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.660709][ T36] audit: type=1400 audit(1770731468.800:156): avc: denied { read } for pid=425 comm="syz.3.20" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.666309][ T426] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.683437][ T36] audit: type=1400 audit(1770731468.800:157): avc: denied { open } for pid=425 comm="syz.3.20" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.724056][ T36] audit: type=1400 audit(1770731468.810:158): avc: denied { ioctl } for pid=425 comm="syz.3.20" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.785772][ T355] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1 [ 30.797294][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 30.808231][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.822094][ T355] usb 1-1: New USB device found, idVendor=046d, idProduct=c535, bcdDevice=f1.0d [ 30.831263][ T355] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 30.839573][ T355] usb 1-1: Manufacturer: syz [ 30.845178][ T355] usb 1-1: config 0 descriptor?? [ 30.851445][ T355] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 30.949144][ T422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.957865][ T422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.967640][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 30.975333][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 30.982462][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 30.989567][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 30.996678][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 31.003725][ T45] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 31.011001][ T45] uclogic 0003:5543:0781.0003: No inputs registered, leaving [ 31.019808][ T45] uclogic 0003:5543:0781.0003: hidraw0: USB HID vff.fc Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 31.054579][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.168015][ T45] usb 3-1: USB disconnect, device number 7 [ 31.205923][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 31.214937][ T10] usb 4-1: can't read configurations, error -22 [ 31.344560][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 31.495592][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 31.504330][ T10] usb 4-1: can't read configurations, error -22 [ 31.510851][ T10] usb usb4-port1: attempt power cycle [ 31.585326][ T355] usb 2-1: USB disconnect, device number 4 [ 31.622318][ T36] audit: type=1400 audit(1770731469.760:159): avc: denied { create } for pid=432 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.642564][ T36] audit: type=1400 audit(1770731469.780:160): avc: denied { write } for pid=432 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.854502][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 31.886012][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 31.904719][ T10] usb 4-1: can't read configurations, error -22 [ 31.934545][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 31.964537][ T355] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.034798][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 32.056020][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 32.064794][ T10] usb 4-1: can't read configurations, error -22 [ 32.071172][ T10] usb usb4-port1: unable to enumerate USB device [ 32.094523][ T355] usb 2-1: device descriptor read/64, error -71 [ 32.104524][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 32.110959][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.121148][ T45] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 32.131702][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.140875][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.149110][ T45] usb 3-1: Product: syz [ 32.153341][ T45] usb 3-1: Manufacturer: syz [ 32.157982][ T45] usb 3-1: SerialNumber: syz [ 32.334566][ T355] usb 2-1: device descriptor read/64, error -71 [ 32.365874][ T435] netlink: 'syz.2.23': attribute type 11 has an invalid length. [ 32.373748][ T435] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 32.381383][ T435] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.23'. [ 32.393576][ T45] usb 3-1: USB disconnect, device number 8 [ 32.574507][ T355] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.704510][ T355] usb 2-1: device descriptor read/64, error -71 [ 32.954529][ T355] usb 2-1: device descriptor read/64, error -71 [ 33.005604][ T438] capability: warning: `syz.2.24' uses deprecated v2 capabilities in a way that may be insecure [ 33.064617][ T355] usb usb2-port1: attempt power cycle [ 33.344524][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 33.398992][ T45] usb 1-1: USB disconnect, device number 4 [ 33.414513][ T355] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.447545][ T355] usb 2-1: device descriptor read/8, error -71 [ 33.495693][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.506956][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.517136][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.530052][ T10] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 33.539226][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.548548][ T10] usb 3-1: config 0 descriptor?? [ 33.575709][ T355] usb 2-1: device descriptor read/8, error -71 [ 33.743839][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 33.743873][ T36] audit: type=1400 audit(1770731471.880:170): avc: denied { create } for pid=448 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.769733][ T36] audit: type=1400 audit(1770731471.890:171): avc: denied { setopt } for pid=448 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.789222][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.824581][ T355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.845798][ T355] usb 2-1: device descriptor read/8, error -71 [ 33.893958][ T452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.894419][ T36] audit: type=1400 audit(1770731472.030:172): avc: denied { getopt } for pid=451 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.924545][ T45] usb 1-1: device descriptor read/64, error -71 [ 33.943720][ T36] audit: type=1400 audit(1770731472.080:173): avc: denied { read write } for pid=453 comm="syz.3.30" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.968927][ T36] audit: type=1400 audit(1770731472.080:174): avc: denied { open } for pid=453 comm="syz.3.30" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.996950][ T355] usb 2-1: device descriptor read/8, error -71 [ 34.004328][ T10] acrux 0003:1A34:0802.0004: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 34.020165][ T10] acrux 0003:1A34:0802.0004: no inputs found [ 34.026275][ T10] acrux 0003:1A34:0802.0004: Failed to enable force feedback support, error: -19 [ 34.100330][ T36] audit: type=1400 audit(1770731472.240:175): avc: denied { create } for pid=453 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 34.120448][ T36] audit: type=1400 audit(1770731472.260:176): avc: denied { create } for pid=453 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.140198][ T36] audit: type=1400 audit(1770731472.260:177): avc: denied { getopt } for pid=453 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.144843][ T355] usb usb2-port1: unable to enumerate USB device [ 34.194542][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.348744][ T36] audit: type=1400 audit(1770731472.490:178): avc: denied { create } for pid=464 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.380161][ T331] usb 3-1: USB disconnect, device number 9 [ 34.389386][ T36] audit: type=1400 audit(1770731472.520:179): avc: denied { write } for pid=466 comm="syz.3.34" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.434523][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.574518][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.677291][ T481] 9p: Unknown access argument : -22 [ 34.814625][ T45] usb 1-1: device descriptor read/64, error -71 [ 34.924619][ T45] usb usb1-port1: attempt power cycle [ 34.954524][ T397] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 35.024564][ T331] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.104519][ T397] usb 3-1: Using ep0 maxpacket: 32 [ 35.110917][ T397] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 35.119255][ T397] usb 3-1: config 0 has no interface number 0 [ 35.125416][ T397] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 35.135455][ T397] usb 3-1: config 0 interface 196 has no altsetting 0 [ 35.143665][ T397] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 35.152889][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.160972][ T397] usb 3-1: Product: syz [ 35.165259][ T397] usb 3-1: Manufacturer: syz [ 35.169885][ T397] usb 3-1: SerialNumber: syz [ 35.175738][ T397] usb 3-1: config 0 descriptor?? [ 35.180970][ T486] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.188484][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 35.195342][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.206486][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.216416][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.229315][ T331] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 35.238401][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.247402][ T331] usb 2-1: config 0 descriptor?? [ 35.281531][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.305548][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.395299][ T397] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 35.402858][ T397] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 35.412344][ T397] usb 3-1: USB disconnect, device number 10 [ 35.445848][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.554517][ T489] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 35.664120][ T331] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0005/input/input5 [ 35.681281][ T331] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0005/input/input6 [ 35.692719][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.702003][ T331] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0005/input/input7 [ 35.721361][ T331] kye 0003:0458:5015.0005: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 35.740605][ T489] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 35.755383][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.762226][ T489] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 35.773224][ T489] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 35.785678][ T489] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.794825][ T489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.807978][ T489] usb 4-1: Product: syz [ 35.812249][ T489] usb 4-1: Manufacturer: syz [ 35.817251][ T489] usb 4-1: SerialNumber: syz [ 35.824948][ T489] cdc_mbim 4-1:1.0: skipping garbage [ 35.885655][ T45] usb 1-1: device descriptor read/8, error -71 [ 35.958901][ T506] 9pnet_fd: p9_fd_create_unix (506): problem connecting socket: ./file0: -30 [ 35.974769][ T506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8256 sclass=netlink_route_socket pid=506 comm=syz.2.47 [ 35.995263][ T45] usb usb1-port1: unable to enumerate USB device [ 36.010970][ T508] UHID_CREATE from different security context by process 32 (syz.2.48), this is not allowed. [ 36.024944][ T496] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 36.032306][ T496] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 36.056758][ T45] usb 2-1: USB disconnect, device number 9 [ 36.091891][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 36.453364][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.458419][ T355] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 36.462851][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.506635][ T518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.515601][ T519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.624512][ T355] usb 3-1: Using ep0 maxpacket: 32 [ 36.635388][ T355] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.643996][ T496] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 36.651360][ T496] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 36.658675][ T489] cdc_mbim 4-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 36.664641][ T355] usb 3-1: config 0 has no interface number 0 [ 36.666739][ T489] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 36.674301][ T355] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.687558][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.695812][ T355] usb 3-1: Product: syz [ 36.700085][ T355] usb 3-1: Manufacturer: syz [ 36.704903][ T355] usb 3-1: SerialNumber: syz [ 36.710389][ T355] usb 3-1: config 0 descriptor?? [ 36.716585][ T355] smsc95xx v2.0.0 [ 36.804706][ T525] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 36.812339][ T525] netlink: 'syz.1.54': attribute type 6 has an invalid length. [ 36.819960][ T525] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.54'. [ 36.864538][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.872692][ T489] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 36.882161][ T489] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 36.890576][ T489] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 36.900511][ T489] usb 4-1: USB disconnect, device number 8 [ 37.025879][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.036894][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.043526][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 37.052732][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.061700][ T45] usb 1-1: config 0 descriptor?? [ 37.117774][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 37.128625][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.338601][ T355] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 37.349542][ T355] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 37.397058][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 37.403429][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 37.412409][ T45] usb 1-1: USB disconnect, device number 9 [ 37.437603][ T531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=531 comm=syz.3.56 [ 37.451719][ T530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=530 comm=syz.3.56 [ 37.497060][ T536] tmpfs: Unknown parameter 'no' [ 37.520992][ T536] ======================================================= [ 37.520992][ T536] WARNING: The mand mount option has been deprecated and [ 37.520992][ T536] and is ignored by this kernel. Remove the mand [ 37.520992][ T536] option from the mount to silence this warning. [ 37.520992][ T536] ======================================================= [ 37.558190][ T536] kvm: kvm [535]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 37.567181][ T536] kvm: kvm [535]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 37.714594][ T397] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.857455][ T12] bridge_slave_1: left allmulticast mode [ 37.863146][ T12] bridge_slave_1: left promiscuous mode [ 37.868874][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.876708][ T12] bridge_slave_0: left allmulticast mode [ 37.882351][ T12] bridge_slave_0: left promiscuous mode [ 37.884588][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 37.888981][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.895111][ T397] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 37.924368][ T397] usb 2-1: config 0 has no interface number 0 [ 37.932922][ T397] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 37.944320][ T397] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 37.962520][ T397] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 37.971810][ T397] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 37.980859][ T397] usb 2-1: Product: syz [ 37.985237][ T397] usb 2-1: SerialNumber: syz [ 37.990932][ T397] usb 2-1: config 0 descriptor?? [ 38.026976][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.034089][ T539] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.041301][ T539] bridge_slave_0: entered allmulticast mode [ 38.048923][ T539] bridge_slave_0: entered promiscuous mode [ 38.057717][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.065164][ T539] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.072543][ T539] bridge_slave_1: entered allmulticast mode [ 38.079021][ T539] bridge_slave_1: entered promiscuous mode [ 38.097286][ T12] veth1_macvtap: left promiscuous mode [ 38.102886][ T12] veth0_vlan: left promiscuous mode [ 38.194510][ T355] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 38.206768][ T397] usb 2-1: USB disconnect, device number 10 [ 38.227298][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.234425][ T539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.241735][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.248985][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.271765][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.279183][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.289580][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.296664][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.306013][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.313137][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.341765][ T539] veth0_vlan: entered promiscuous mode [ 38.354229][ T539] veth1_macvtap: entered promiscuous mode [ 38.361106][ T355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.375276][ T355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.395405][ T355] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.404726][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.412745][ T355] usb 1-1: SerialNumber: syz [ 38.429117][ T553] fuse: Bad value for 'user_id' [ 38.434013][ T553] fuse: Bad value for 'user_id' [ 38.510127][ T565] Zero length message leads to an empty skb [ 38.619671][ T541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.628809][ T541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.638496][ T355] usb 1-1: 0:2 : does not exist [ 38.650512][ T355] usb 1-1: USB disconnect, device number 10 [ 38.661870][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.742864][ T569] fuse: Bad value for 'fd' [ 38.763114][ T571] fuse: Unknown parameter 'grXup_id' [ 38.768565][ T397] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.783807][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 38.783841][ T36] audit: type=1400 audit(1770731476.930:217): avc: denied { setopt } for pid=570 comm="syz.1.69" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.810545][ T571] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 38.820347][ T571] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 38.828956][ T571] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 38.836974][ T571] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 38.935570][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.946822][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.962567][ T397] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.973823][ T397] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 38.983733][ T397] usb 5-1: Manufacturer: syz [ 38.984014][ T576] kvm: user requested TSC rate below hardware speed [ 38.998783][ T397] usb 5-1: config 0 descriptor?? [ 39.230851][ T489] usb 3-1: USB disconnect, device number 11 [ 39.248649][ T586] input: syz1 as /devices/virtual/input/input8 [ 39.293309][ T36] audit: type=1400 audit(1770731477.430:218): avc: denied { read } for pid=589 comm="syz.0.75" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.317947][ T36] audit: type=1400 audit(1770731477.430:219): avc: denied { open } for pid=589 comm="syz.0.75" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.342408][ T355] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.350259][ T36] audit: type=1400 audit(1770731477.440:220): avc: denied { ioctl } for pid=589 comm="syz.0.75" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.524534][ T355] usb 2-1: Using ep0 maxpacket: 8 [ 39.530829][ T355] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 39.540721][ T355] usb 2-1: config 1 interface 0 has no altsetting 0 [ 39.548840][ T355] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 39.558124][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.566269][ T355] usb 2-1: Product: syz [ 39.570620][ T355] usb 2-1: Manufacturer: ᐉ [ 39.575387][ T355] usb 2-1: SerialNumber: syz [ 39.581169][ T584] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 39.594500][ T489] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 39.634510][ T64] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.747131][ T489] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 39.756493][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.764538][ T489] usb 3-1: Product: syz [ 39.768772][ T489] usb 3-1: Manufacturer: syz [ 39.773405][ T489] usb 3-1: SerialNumber: syz [ 39.785608][ T64] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 39.798075][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.808742][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 39.817178][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.828728][ T64] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 39.832386][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.841469][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.854109][ T397] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 39.857004][ T64] usb 1-1: Product: syz [ 39.868239][ T397] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 39.869151][ T64] usb 1-1: Manufacturer: syz [ 39.877633][ T397] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 39.881295][ T64] usb 1-1: SerialNumber: syz [ 39.889815][ T397] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 39.901515][ T397] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 39.911136][ T64] usb 1-1: config 0 descriptor?? [ 39.919690][ T397] usb 5-1: USB disconnect, device number 2 [ 39.919863][ T64] usb-storage 1-1:0.0: USB Mass Storage device detected [ 39.935215][ T64] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 40.061489][ T355] usblp0: Disabling reads from problematic bidirectional printer [ 40.126010][ T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.136024][ T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.178970][ T397] usb 1-1: USB disconnect, device number 11 [ 40.386691][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.387017][ T36] audit: type=1400 audit(1770731478.530:221): avc: denied { write } for pid=601 comm="syz.4.79" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.401274][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.465141][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.474224][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.522925][ T592] kvm: pic: non byte write [ 40.664512][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.815637][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.825871][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 40.834991][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.843969][ T9] usb 5-1: config 0 descriptor?? [ 40.851007][ T9] usb 5-1: bad CDC descriptors [ 40.954576][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.975119][ T489] rtl8150 3-1:1.0: couldn't reset the device [ 40.981225][ T489] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.991549][ T489] usb 3-1: USB disconnect, device number 12 [ 41.051916][ T36] audit: type=1400 audit(1770731479.190:222): avc: denied { getopt } for pid=611 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.077008][ T31] usb 5-1: USB disconnect, device number 3 [ 41.107043][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.119612][ T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.137105][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 41.143934][ T45] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 41.153135][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.167375][ T45] usb 1-1: config 0 descriptor?? [ 41.271793][ T36] audit: type=1326 audit(1770731479.410:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=628 comm="syz.4.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a8879bf79 code=0x0 [ 41.389782][ T45] sunplus 0003:04FC:05D8.0007: item fetching failed at offset 0/1 [ 41.397854][ T45] sunplus 0003:04FC:05D8.0007: probe with driver sunplus failed with error -22 [ 41.424513][ T489] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 41.574707][ T489] usb 3-1: Using ep0 maxpacket: 32 [ 41.581199][ T489] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.589507][ T489] usb 3-1: config 0 has no interface number 0 [ 41.597393][ T489] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.606599][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.614669][ T489] usb 3-1: Product: syz [ 41.618890][ T489] usb 3-1: Manufacturer: syz [ 41.623526][ T489] usb 3-1: SerialNumber: syz [ 41.629138][ T489] usb 3-1: config 0 descriptor?? [ 41.636110][ T489] smsc95xx v2.0.0 [ 42.038111][ T489] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 42.064524][ T489] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 42.131277][ T355] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 5 proto 3 vid 0x03F0 pid 0x0004 [ 42.145103][ T355] usb 2-1: USB disconnect, device number 11 [ 42.151951][ T355] usblp0: removed [ 42.227243][ T36] audit: type=1400 audit(1770731480.370:224): avc: denied { bind } for pid=643 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.247204][ T36] audit: type=1400 audit(1770731480.390:225): avc: denied { write } for pid=643 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.274349][ T489] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 42.285344][ T489] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 42.514511][ T355] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 42.594515][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.644562][ T355] usb 2-1: device descriptor read/64, error -71 [ 42.745644][ T45] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 42.754110][ T45] usb 5-1: config 160 has no interface number 0 [ 42.760459][ T45] usb 5-1: config 160 interface 200 has no altsetting 0 [ 42.768802][ T45] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 42.777938][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.785982][ T45] usb 5-1: Product: syz [ 42.790180][ T45] usb 5-1: Manufacturer: syz [ 42.794822][ T45] usb 5-1: SerialNumber: syz [ 42.884554][ T355] usb 2-1: device descriptor read/64, error -71 [ 43.124563][ T355] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 43.255387][ T355] usb 2-1: device descriptor read/64, error -71 [ 43.495028][ T355] usb 2-1: device descriptor read/64, error -71 [ 43.604694][ T355] usb usb2-port1: attempt power cycle [ 43.728830][ T64] usb 1-1: USB disconnect, device number 12 [ 43.747828][ T647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.760920][ T36] audit: type=1400 audit(1770731481.900:226): avc: denied { ioctl } for pid=646 comm="syz.0.93" path="socket:[5928]" dev="sockfs" ino=5928 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.792771][ T36] audit: type=1400 audit(1770731481.900:227): avc: denied { setopt } for pid=646 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.944571][ T355] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 43.966768][ T355] usb 2-1: device descriptor read/8, error -71 [ 44.095663][ T355] usb 2-1: device descriptor read/8, error -71 [ 44.109627][ T31] usb 3-1: USB disconnect, device number 13 [ 44.194498][ T489] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 44.334535][ T355] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 44.355646][ T355] usb 2-1: device descriptor read/8, error -71 [ 44.355737][ T489] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.372909][ T489] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.382726][ T489] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.395807][ T489] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.402461][ T489] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 44.411600][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.420412][ T489] usb 1-1: config 0 descriptor?? [ 44.454511][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 44.485659][ T355] usb 2-1: device descriptor read/8, error -71 [ 44.584494][ T31] usb 3-1: device descriptor read/64, error -71 [ 44.594616][ T355] usb usb2-port1: unable to enumerate USB device [ 44.633474][ T658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.642048][ T658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.824535][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.064507][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 45.194529][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.245242][ T45] usb 5-1: MIDIStreaming interface descriptor not found [ 45.246583][ T36] audit: type=1400 audit(1770731483.390:228): avc: denied { create } for pid=663 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 45.290264][ T45] usb 5-1: USB disconnect, device number 4 [ 45.314579][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.434551][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.544517][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 45.544949][ T31] usb usb3-port1: attempt power cycle [ 45.704514][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 45.710174][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 45.719157][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.724708][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.726960][ T9] usb 2-1: can't read configurations, error -61 [ 45.864553][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 45.884490][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 45.891132][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.901207][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 45.911229][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 45.918983][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 45.929662][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.938905][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.947194][ T45] usb 5-1: SerialNumber: syz [ 45.952728][ T31] usb 3-1: device descriptor read/8, error -71 [ 45.963873][ T671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 45.971309][ T671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 46.014543][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.020176][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 46.029204][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.036876][ T9] usb 2-1: can't read configurations, error -61 [ 46.043335][ T9] usb usb2-port1: attempt power cycle [ 46.085591][ T31] usb 3-1: device descriptor read/8, error -71 [ 46.179673][ T666] can: request_module (can-proto-6) failed. [ 46.187874][ T45] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 46.197617][ T45] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 46.207190][ T45] usb 5-1: USB disconnect, device number 5 [ 46.324576][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 46.345563][ T31] usb 3-1: device descriptor read/8, error -71 [ 46.384517][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 46.404910][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.410513][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 46.419422][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.427061][ T9] usb 2-1: can't read configurations, error -61 [ 46.475719][ T31] usb 3-1: device descriptor read/8, error -71 [ 46.554578][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 46.574911][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.580461][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 46.589556][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 46.595014][ T31] usb usb3-port1: unable to enumerate USB device [ 46.597790][ T9] usb 2-1: can't read configurations, error -61 [ 46.609919][ T9] usb usb2-port1: unable to enumerate USB device [ 46.722740][ T674] netlink: 'syz.4.102': attribute type 2 has an invalid length. [ 46.862121][ T36] audit: type=1326 audit(1770731485.000:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5e79bf79 code=0x7fc00000 [ 46.958221][ T489] usbhid 1-1:0.0: can't add hid device: -71 [ 46.964244][ T489] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 46.986471][ T489] usb 1-1: USB disconnect, device number 13 [ 47.064493][ T36] audit: type=1400 audit(1770731485.200:230): avc: denied { getopt } for pid=680 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.147959][ T684] process 'syz.2.106' launched './file1' with NULL argv: empty string added [ 47.156764][ T36] audit: type=1400 audit(1770731485.290:231): avc: denied { execute } for pid=683 comm="syz.2.106" name="file1" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.179292][ T36] audit: type=1400 audit(1770731485.320:232): avc: denied { execute_no_trans } for pid=683 comm="syz.2.106" path="/19/file1" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.524528][ T64] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 47.584550][ T489] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.676150][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.684997][ T64] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 47.693710][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.704012][ T64] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 47.718621][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.727742][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.735793][ T64] usb 3-1: Product: syz [ 47.739957][ T64] usb 3-1: Manufacturer: syz [ 47.744588][ T64] usb 3-1: SerialNumber: syz [ 47.755639][ T489] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 47.764003][ T489] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 47.774454][ T489] usb 5-1: config 220 has no interface number 2 [ 47.780924][ T489] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 47.794508][ T489] usb 5-1: config 220 interface 0 has no altsetting 0 [ 47.801324][ T489] usb 5-1: config 220 interface 76 has no altsetting 0 [ 47.808425][ T489] usb 5-1: config 220 interface 1 has no altsetting 0 [ 47.816952][ T489] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 47.826121][ T489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.834130][ T489] usb 5-1: Product: syz [ 47.844579][ T489] usb 5-1: Manufacturer: syz [ 47.849302][ T489] usb 5-1: SerialNumber: syz [ 47.873457][ T36] audit: type=1400 audit(1770731486.010:233): avc: denied { getopt } for pid=689 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.892956][ T36] audit: type=1400 audit(1770731486.030:234): avc: denied { mount } for pid=689 comm="syz.0.108" name="/" dev="ramfs" ino=6082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.915046][ T36] audit: type=1400 audit(1770731486.030:235): avc: denied { unlink } for pid=689 comm="syz.0.108" name="#3" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.937110][ T36] audit: type=1400 audit(1770731486.030:236): avc: denied { mount } for pid=689 comm="syz.0.108" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.970763][ T355] hid-generic 0002:7AA9:0006.0008: unknown main item tag 0x6 [ 47.983680][ T355] hid-generic 0002:7AA9:0006.0008: item fetching failed at offset 4/65 [ 47.993376][ T355] hid-generic 0002:7AA9:0006.0008: probe with driver hid-generic failed with error -22 [ 48.003508][ T64] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 48.011392][ T64] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 48.019488][ T64] usb 3-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 48.026792][ T64] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 48.038522][ T64] usb 3-1: USB disconnect, device number 18 [ 48.061520][ T622] udevd[622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.072778][ T489] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 48.093435][ T489] usb 5-1: No valid video chain found. [ 48.100374][ T489] usb 5-1: selecting invalid altsetting 0 [ 48.111024][ T489] usb 5-1: USB disconnect, device number 6 [ 48.284531][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.434521][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 48.441060][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.449503][ T31] usb 1-1: config 4 has an invalid interface number: 207 but max is 0 [ 48.457797][ T31] usb 1-1: config 4 has no interface number 0 [ 48.463892][ T31] usb 1-1: config 4 interface 207 has no altsetting 0 [ 48.472236][ T31] usb 1-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=f6.38 [ 48.481370][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.489405][ T31] usb 1-1: Product: syz [ 48.493676][ T31] usb 1-1: Manufacturer: syz [ 48.498463][ T31] usb 1-1: SerialNumber: syz [ 48.515124][ T701] netlink: 196 bytes leftover after parsing attributes in process `syz.2.112'. [ 48.563332][ T707] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 48.706508][ T717] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 48.714987][ T717] overlayfs: missing 'lowerdir' [ 48.715656][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 48.763631][ T721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 48.772891][ T721] veth1_macvtap: left promiscuous mode [ 48.844491][ T489] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 48.874493][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 48.880799][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 48.892056][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33010, setting to 1024 [ 48.903283][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.912452][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.920836][ T31] plusb 1-1:4.207: probe with driver plusb failed with error -22 [ 48.929542][ T31] usb 1-1: USB disconnect, device number 14 [ 48.936403][ T45] usb 2-1: config 0 descriptor?? [ 48.943378][ T45] hub 2-1:0.0: USB hub found [ 49.014504][ T489] usb 5-1: Using ep0 maxpacket: 32 [ 49.020965][ T489] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 49.029142][ T489] usb 5-1: config 0 has no interface number 0 [ 49.036794][ T489] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 49.045897][ T489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.053935][ T489] usb 5-1: Product: syz [ 49.058318][ T489] usb 5-1: Manufacturer: syz [ 49.062953][ T489] usb 5-1: SerialNumber: syz [ 49.064613][ T64] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 49.075794][ T489] usb 5-1: config 0 descriptor?? [ 49.081650][ T489] smsc95xx v2.0.0 [ 49.143233][ T45] hub 2-1:0.0: 1 port detected [ 49.152756][ T45] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 49.164479][ T45] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 49.175831][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 49.181960][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 49.225706][ T64] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.239557][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.248883][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.256937][ T64] usb 3-1: SerialNumber: syz [ 49.354826][ T45] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 49.465229][ T721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.474070][ T721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.483654][ T489] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 49.493423][ T64] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.494926][ T489] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.512016][ T64] usb 3-1: USB disconnect, device number 19 [ 49.524866][ T45] usb 2-1: device firmware changed [ 49.530302][ T45] usb 2-1: USB disconnect, device number 20 [ 49.664494][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 49.815548][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.826552][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 49.834222][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.844153][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.857119][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.866417][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.875284][ T31] usb 1-1: config 0 descriptor?? [ 50.014507][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 50.028337][ T45] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 50.046221][ T45] usb 2-1: config 4 has no interface number 0 [ 50.052456][ T45] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 40384, setting to 1024 [ 50.063910][ T45] usb 2-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024 [ 50.074206][ T45] usb 2-1: config 4 interface 228 has no altsetting 0 [ 50.086955][ T45] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 50.097950][ T45] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 50.107452][ T45] usb 2-1: Product: syz [ 50.111800][ T45] usb 2-1: Manufacturer: syz [ 50.116551][ T45] usb 2-1: SerialNumber: syz [ 50.121285][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 50.128085][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 50.136715][ T741] wg2: entered promiscuous mode [ 50.139208][ T489] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 50.154273][ T741] wg2: entered allmulticast mode [ 50.159373][ T727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.167840][ T31] usb 1-1: USB disconnect, device number 15 [ 50.173896][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 50.173913][ T36] audit: type=1400 audit(1770731488.310:247): avc: denied { sqpoll } for pid=742 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.184381][ T489] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 50.217008][ T489] usb 5-1: USB disconnect, device number 7 [ 50.391532][ T45] usb 2-1: USB disconnect, device number 21 [ 50.408035][ T622] udevd[622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.564672][ T354] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 50.657366][ T793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 50.674642][ T489] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 50.694505][ T354] usb 3-1: device descriptor read/64, error -71 [ 50.824583][ T489] usb 1-1: Using ep0 maxpacket: 8 [ 50.830960][ T489] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.839494][ T489] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 50.847552][ T489] usb 1-1: config 9 has no interface number 0 [ 50.853627][ T489] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0x2C, changing to 0xC [ 50.865802][ T489] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 50.875755][ T489] usb 1-1: config 9 interface 5 has no altsetting 0 [ 50.883842][ T489] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 50.893020][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.901085][ T489] usb 1-1: Product: syz [ 50.905317][ T489] usb 1-1: Manufacturer: syz [ 50.909944][ T489] usb 1-1: SerialNumber: syz [ 50.924132][ T36] audit: type=1400 audit(1770731489.060:248): avc: denied { map } for pid=797 comm="syz.1.132" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.938175][ T354] usb 3-1: device descriptor read/64, error -71 [ 50.950797][ T36] audit: type=1400 audit(1770731489.100:249): avc: denied { execute } for pid=797 comm="syz.1.132" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.001902][ T36] audit: type=1400 audit(1770731489.140:250): avc: denied { getopt } for pid=799 comm="syz.1.133" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.022187][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.124449][ T489] usb 1-1: USB disconnect, device number 16 [ 51.154507][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.194520][ T354] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 51.324573][ T354] usb 3-1: device descriptor read/64, error -71 [ 51.394654][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.571202][ T354] usb 3-1: device descriptor read/64, error -71 [ 51.643571][ T36] audit: type=1400 audit(1770731745.783:251): avc: denied { read } for pid=813 comm="syz.1.137" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.667653][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 51.675344][ T36] audit: type=1400 audit(1770731745.783:252): avc: denied { open } for pid=813 comm="syz.1.137" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.699155][ T36] audit: type=1400 audit(1770731745.813:253): avc: denied { ioctl } for pid=813 comm="syz.1.137" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.705271][ T354] usb usb3-port1: attempt power cycle [ 51.784813][ T36] audit: type=1400 audit(1770731745.933:254): avc: denied { write } for pid=813 comm="syz.1.137" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.864492][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.104516][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.104516][ T354] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 52.118677][ T355] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 52.136325][ T354] usb 3-1: device descriptor read/8, error -71 [ 52.234586][ T9] usb usb5-port1: attempt power cycle [ 52.265597][ T354] usb 3-1: device descriptor read/8, error -71 [ 52.274610][ T355] usb 1-1: Using ep0 maxpacket: 32 [ 52.280892][ T355] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 52.289291][ T355] usb 1-1: config 0 has no interface number 0 [ 52.295461][ T355] usb 1-1: config 0 interface 184 has no altsetting 0 [ 52.303754][ T355] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 52.313187][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.321221][ T355] usb 1-1: Product: syz [ 52.325410][ T355] usb 1-1: Manufacturer: syz [ 52.330004][ T355] usb 1-1: SerialNumber: syz [ 52.335350][ T355] usb 1-1: config 0 descriptor?? [ 52.341088][ T355] smsc75xx v1.0.0 [ 52.504522][ T354] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 52.525829][ T354] usb 3-1: device descriptor read/8, error -71 [ 52.530364][ T825] cgroup: Need name or subsystem set [ 52.538422][ T36] audit: type=1400 audit(1770731746.683:255): avc: denied { getopt } for pid=824 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.559250][ T825] overlayfs: workdir and upperdir must be separate subtrees [ 52.584513][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 52.605640][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.655627][ T354] usb 3-1: device descriptor read/8, error -71 [ 52.735548][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.764633][ T354] usb usb3-port1: unable to enumerate USB device [ 52.769801][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 52.782717][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 52.793418][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 52.811569][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 52.826137][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 52.836460][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 52.844613][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 52.850959][ T355] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 52.862634][ T36] audit: type=1400 audit(1770731747.013:256): avc: denied { watch watch_reads } for pid=838 comm="syz.0.145" path="/35" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.865714][ T355] usb 1-1: USB disconnect, device number 17 [ 52.974652][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 52.995623][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.005667][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 67, using maximum allowed: 30 [ 53.022682][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.034229][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.046349][ T31] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 53.059564][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 53.066441][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 53.075858][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.087426][ T850] netlink: 'syz.0.150': attribute type 2 has an invalid length. [ 53.095543][ T31] usb 2-1: config 0 descriptor?? [ 53.121496][ T852] overlayfs: missing 'workdir' [ 53.127412][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.234662][ T9] usb usb5-port1: unable to enumerate USB device [ 53.374519][ T355] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 53.508120][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 53.514328][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.515150][ T832] netlink: 'syz.1.143': attribute type 27 has an invalid length. [ 53.530010][ T31] usb 2-1: USB disconnect, device number 22 [ 53.537673][ T355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.548021][ T355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.569167][ T355] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.581599][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.590712][ T355] usb 1-1: SerialNumber: syz [ 53.744621][ T489] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 53.799486][ T355] usb 1-1: 0:2 : does not exist [ 53.807737][ T355] usb 1-1: USB disconnect, device number 18 [ 53.818409][ T622] udevd[622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.915696][ T489] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 53.926989][ T489] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.934958][ T489] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a52, bcdDevice= 0.40 [ 53.944003][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.952213][ T489] usb 3-1: Product: syz [ 53.956668][ T489] usb 3-1: Manufacturer: О [ 53.961205][ T489] usb 3-1: SerialNumber: syz [ 53.968372][ T855] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.174559][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 54.185560][ T489] usbhid 3-1:1.0: can't add hid device: -71 [ 54.191526][ T489] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 54.200436][ T489] usb 3-1: USB disconnect, device number 24 [ 54.324685][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 54.332381][ T31] usb 5-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.345569][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.352237][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 54.361647][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.373144][ T31] usb 5-1: config 0 descriptor?? [ 54.614728][ T64] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 54.699302][ T869] fuse: Bad value for 'fd' [ 54.734553][ T876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 54.765584][ T64] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 54.774069][ T64] usb 1-1: config 160 has no interface number 0 [ 54.781437][ T64] usb 1-1: config 160 interface 200 has no altsetting 0 [ 54.793459][ T64] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 54.802595][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.810643][ T64] usb 1-1: Product: syz [ 54.814879][ T64] usb 1-1: Manufacturer: syz [ 54.819494][ T64] usb 1-1: SerialNumber: syz [ 54.985874][ T355] usb 5-1: USB disconnect, device number 12 [ 54.994556][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 55.032122][ T64] usb 1-1: MIDIStreaming interface descriptor not found [ 55.042913][ T64] usb 1-1: USB disconnect, device number 19 [ 55.054823][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.145714][ T9] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 55.156333][ T9] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 2 [ 55.166419][ T9] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 55.176769][ T9] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 2 [ 55.186810][ T9] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 55.197340][ T9] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 2 [ 55.207469][ T9] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 55.217819][ T9] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 2 [ 55.227053][ T9] usb 3-1: New USB device found, idVendor=f951, idProduct=5111, bcdDevice= 0.00 [ 55.236273][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.446307][ T9] usb 3-1: string descriptor 0 read error: -71 [ 55.453879][ T9] usb 3-1: USB disconnect, device number 25 [ 55.543727][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 55.610708][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 55.610726][ T36] audit: type=1400 audit(1770731749.753:264): avc: denied { bind } for pid=892 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.717718][ T36] audit: type=1400 audit(1770731749.863:265): avc: denied { getopt } for pid=885 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.884502][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 56.044520][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 56.050938][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.059150][ T31] usb 1-1: config 0 has no interface number 0 [ 56.066920][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.076027][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.084340][ T31] usb 1-1: Product: syz [ 56.088696][ T31] usb 1-1: Manufacturer: syz [ 56.093450][ T31] usb 1-1: SerialNumber: syz [ 56.101799][ T31] usb 1-1: config 0 descriptor?? [ 56.109514][ T31] smsc95xx v2.0.0 [ 56.144544][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 56.284531][ T9] usb 2-1: device descriptor read/64, error -71 [ 56.509096][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 56.519901][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.534706][ T9] usb 2-1: device descriptor read/64, error -71 [ 56.604558][ T64] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 56.724571][ T489] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 56.765734][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.776885][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 56.784533][ T64] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.793594][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.803492][ T64] usb 5-1: config 0 descriptor?? [ 56.884521][ T489] usb 3-1: Using ep0 maxpacket: 32 [ 56.890891][ T489] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 56.899178][ T489] usb 3-1: config 0 has no interface number 0 [ 56.905345][ T489] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.917072][ T489] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 56.924712][ T9] usb 2-1: device descriptor read/64, error -71 [ 56.926180][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.940504][ T489] usb 3-1: Product: syz [ 56.944790][ T489] usb 3-1: Manufacturer: syz [ 56.949429][ T489] usb 3-1: SerialNumber: syz [ 56.954970][ T489] usb 3-1: config 0 descriptor?? [ 56.960284][ T907] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 57.141745][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 57.152765][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 57.162165][ T31] usb 1-1: USB disconnect, device number 20 [ 57.174547][ T9] usb 2-1: device descriptor read/64, error -71 [ 57.215817][ T64] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 57.226181][ T908] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 57.228228][ T64] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input11 [ 57.285244][ T9] usb usb2-port1: attempt power cycle [ 57.315649][ T64] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 57.617649][ T31] usb 5-1: USB disconnect, device number 13 [ 57.624630][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 57.645693][ T9] usb 2-1: device descriptor read/8, error -71 [ 57.744545][ T489] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 57.754933][ T489] asix 3-1:0.188: probe with driver asix failed with error -32 [ 57.775977][ T9] usb 2-1: device descriptor read/8, error -71 [ 57.793161][ T36] audit: type=1400 audit(1770731751.933:266): avc: denied { map } for pid=915 comm="syz.0.176" path="socket:[7580]" dev="sockfs" ino=7580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.815043][ T916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.176'. [ 57.817168][ T36] audit: type=1400 audit(1770731751.933:267): avc: denied { read } for pid=915 comm="syz.0.176" path="socket:[7580]" dev="sockfs" ino=7580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.857066][ T36] audit: type=1400 audit(1770731752.003:268): avc: denied { bind } for pid=917 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.876454][ T36] audit: type=1400 audit(1770731752.003:269): avc: denied { name_bind } for pid=917 comm="syz.0.177" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 57.898256][ T36] audit: type=1400 audit(1770731752.003:270): avc: denied { node_bind } for pid=917 comm="syz.0.177" saddr=::ffff:10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 58.024656][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 58.045805][ T9] usb 2-1: device descriptor read/8, error -71 [ 58.114528][ T64] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 58.175619][ T9] usb 2-1: device descriptor read/8, error -71 [ 58.219493][ T36] audit: type=1400 audit(1770731752.363:271): avc: denied { read } for pid=919 comm="syz.4.178" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.242233][ T36] audit: type=1400 audit(1770731752.363:272): avc: denied { open } for pid=919 comm="syz.4.178" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.285153][ T9] usb usb2-port1: unable to enumerate USB device [ 58.292181][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.303435][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.938412][ T924] netlink: 64 bytes leftover after parsing attributes in process `syz.1.179'. [ 58.949002][ T924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.504521][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 59.545701][ T31] usb 3-1: USB disconnect, device number 26 [ 59.654489][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 59.660813][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.669142][ T9] usb 2-1: config 0 has no interface number 0 [ 59.676799][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.703325][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.719457][ T9] usb 2-1: Product: syz [ 59.729093][ T9] usb 2-1: Manufacturer: syz [ 59.733749][ T9] usb 2-1: SerialNumber: syz [ 59.741348][ T9] usb 2-1: config 0 descriptor?? [ 59.747750][ T9] smsc95xx v2.0.0 [ 59.756416][ T947] 9pnet_fd: Insufficient options for proto=fd [ 59.803686][ T949] netlink: 'syz.2.187': attribute type 28 has an invalid length. [ 59.812786][ T949] netlink: 176 bytes leftover after parsing attributes in process `syz.2.187'. [ 59.870532][ T953] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 59.877993][ T953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 59.886281][ T777] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.989728][ T36] audit: type=1400 audit(1770731754.133:273): avc: denied { watch } for pid=956 comm="syz.4.190" path="/29/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.110493][ T959] fuseblk: Bad value for 'group_id' [ 60.115884][ T959] fuseblk: Bad value for 'group_id' [ 60.149795][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.161106][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.354566][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 60.371129][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 60.382060][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 60.505598][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.512239][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 60.521350][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.530135][ T10] usb 5-1: config 0 descriptor?? [ 60.583682][ T941] rust_binder: Write failure EINVAL in pid:109 [ 60.870002][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.885862][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.899742][ T64] usb 1-1: can't set config #1, error -71 [ 60.909533][ T64] usb 1-1: USB disconnect, device number 21 [ 61.137948][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 61.144429][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 61.153158][ T10] usb 5-1: USB disconnect, device number 14 [ 61.324527][ T64] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 61.475712][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2632, setting to 64 [ 61.486751][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 61.499672][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.508906][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.516947][ T64] usb 1-1: Product: syz [ 61.521145][ T64] usb 1-1: Manufacturer: syz [ 61.525788][ T64] usb 1-1: SerialNumber: syz [ 61.732064][ T968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.894585][ T954] Bluetooth: hci0: command 0x1003 tx timeout [ 61.894585][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 61.908539][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.044506][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 62.050722][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.059230][ T10] usb 5-1: config 0 has no interface number 0 [ 62.065495][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 62.074518][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 62.083615][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.091673][ T10] usb 5-1: Product: syz [ 62.095992][ T10] usb 5-1: Manufacturer: syz [ 62.100619][ T10] usb 5-1: SerialNumber: syz [ 62.106181][ T10] usb 5-1: config 0 descriptor?? [ 62.113126][ T10] smsc75xx v1.0.0 [ 62.174551][ T45] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 62.280917][ T489] usb 2-1: USB disconnect, device number 27 [ 62.309873][ T36] audit: type=1400 audit(1770731756.453:274): avc: denied { read } for pid=973 comm="syz.1.198" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.333064][ T36] audit: type=1400 audit(1770731756.453:275): avc: denied { open } for pid=973 comm="syz.1.198" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.335298][ T45] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 62.365834][ T968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.366398][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.384252][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.394137][ T45] usb 3-1: config 1 has no interface number 1 [ 62.402175][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 62.419436][ T45] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.434023][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.443242][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.451424][ T45] usb 3-1: Product: syz [ 62.456088][ T45] usb 3-1: Manufacturer: syz [ 62.460715][ T45] usb 3-1: SerialNumber: syz [ 62.492359][ T979] overlay: ./file0 is not a directory [ 62.575356][ T64] cdc_ncm 1-1:1.0: bind() failure [ 62.582109][ T64] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 62.588996][ T64] cdc_ncm 1-1:1.1: bind() failure [ 62.672081][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 62.682889][ T45] usb 3-1: USB disconnect, device number 27 [ 62.695141][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.784531][ T418] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 62.793171][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.802246][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.896383][ T64] usb 1-1: USB disconnect, device number 22 [ 62.944491][ T418] usb 2-1: Using ep0 maxpacket: 8 [ 62.950692][ T418] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 62.960939][ T418] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.971291][ T418] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.980447][ T418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.988586][ T418] usb 2-1: Product: syz [ 62.992771][ T418] usb 2-1: Manufacturer: syz [ 62.997418][ T418] usb 2-1: SerialNumber: syz [ 63.254894][ T418] usb 2-1: cannot find UAC_HEADER [ 63.265698][ T418] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.277876][ T418] usb 2-1: USB disconnect, device number 28 [ 63.291279][ T622] udevd[622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.338179][ T36] audit: type=1400 audit(1770731757.483:276): avc: denied { mount } for pid=985 comm="syz.2.201" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.360506][ T36] audit: type=1400 audit(1770731757.483:277): avc: denied { remount } for pid=985 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.381153][ T36] audit: type=1400 audit(1770731757.483:278): avc: denied { mounton } for pid=985 comm="syz.2.201" path="/47/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.425796][ T36] audit: type=1400 audit(1770731757.573:279): avc: denied { write } for pid=988 comm="syz.0.202" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.448561][ T36] audit: type=1400 audit(1770731757.573:280): avc: denied { map } for pid=988 comm="syz.0.202" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.486784][ T36] audit: type=1400 audit(1770731757.623:281): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.510225][ T992] loop2: detected capacity change from 0 to 8388607 [ 63.520398][ T622] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 63.600087][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 63.628052][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 63.644829][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 63.664202][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 63.674680][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 63.685155][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 63.694647][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 63.706300][ T10] usb 5-1: USB disconnect, device number 15 [ 63.721318][ T36] audit: type=1400 audit(1770731757.863:282): avc: denied { read } for pid=996 comm="syz.0.204" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.746230][ T36] audit: type=1400 audit(1770731757.863:283): avc: denied { open } for pid=996 comm="syz.0.204" path="/57/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.905701][ T1016] tc_dump_action: action bad kind [ 63.984511][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 64.014540][ T1022] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.014568][ T1022] rust_binder: Read failure Err(EFAULT) in pid:184 [ 64.164503][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 64.193813][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 64.205240][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.221429][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.233138][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 64.246397][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 64.255532][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.269669][ T45] usb 3-1: config 0 descriptor?? [ 64.285269][ T1038] netlink: 'syz.0.215': attribute type 4 has an invalid length. [ 64.313074][ T1040] tipc: Started in network mode [ 64.318175][ T1040] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 64.327943][ T1040] tipc: Enabled bearer , priority 10 [ 64.516611][ T778] bridge_slave_1: left allmulticast mode [ 64.522343][ T778] bridge_slave_1: left promiscuous mode [ 64.528223][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.536805][ T778] bridge_slave_0: left allmulticast mode [ 64.542569][ T778] bridge_slave_0: left promiscuous mode [ 64.548498][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.691041][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.000B/input/input12 [ 64.716148][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.000B/input/input13 [ 64.727675][ T778] tipc: Disabling bearer [ 64.736847][ T778] tipc: Left network mode [ 64.751309][ T778] veth1_macvtap: left promiscuous mode [ 64.757335][ T778] veth0_vlan: left promiscuous mode [ 64.760122][ T45] kye 0003:0458:5013.000B: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 64.866504][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.873670][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.880936][ T1044] bridge_slave_0: entered allmulticast mode [ 64.887305][ T1044] bridge_slave_0: entered promiscuous mode [ 64.893814][ T418] usb 3-1: USB disconnect, device number 28 [ 64.894951][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.913569][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.920726][ T1044] bridge_slave_1: entered allmulticast mode [ 64.930910][ T1044] bridge_slave_1: entered promiscuous mode [ 65.004285][ T1054] netlink: 'syz.0.225': attribute type 27 has an invalid length. [ 65.043234][ T1056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1056 comm=syz.1.226 [ 65.133919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.141066][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.151524][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.158696][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.185881][ T1044] veth0_vlan: entered promiscuous mode [ 65.201044][ T1044] veth1_macvtap: entered promiscuous mode [ 65.304556][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 65.454534][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 65.462984][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 65.469726][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 65.479282][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.488376][ T10] usb 2-1: config 0 descriptor?? [ 65.504479][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.664590][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 65.671085][ T31] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 65.679512][ T31] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 65.690049][ T31] usb 6-1: config 0 has no interface number 0 [ 65.697786][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 65.706996][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.715242][ T31] usb 6-1: Product: syz [ 65.719458][ T31] usb 6-1: Manufacturer: syz [ 65.724070][ T31] usb 6-1: SerialNumber: syz [ 65.729588][ T31] usb 6-1: config 0 descriptor?? [ 65.735965][ T31] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 65.742346][ T31] usb 6-1: No valid video chain found. [ 65.898560][ T10] wacom 0003:056A:00D0.000C: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 65.910253][ T10] wacom 0003:056A:00D0.000C: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 65.923677][ T10] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.000C/input/input14 [ 66.098805][ T31] usb 2-1: USB disconnect, device number 29 [ 66.614897][ T418] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 66.777210][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 66.788540][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25647, setting to 1024 [ 66.799939][ T418] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 66.809414][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.818225][ T418] usb 3-1: config 0 descriptor?? [ 66.823582][ T1098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.864524][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 67.026106][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.037209][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.047117][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.060112][ T10] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 67.069292][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.078573][ T10] usb 2-1: config 0 descriptor?? [ 67.244557][ T64] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 67.395733][ T64] usb 1-1: config index 0 descriptor too short (expected 45, got 43) [ 67.404005][ T64] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 67.414370][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.428945][ T64] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 67.438171][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.446316][ T64] usb 1-1: Product: syz [ 67.450520][ T64] usb 1-1: Manufacturer: syz [ 67.455337][ T64] usb 1-1: SerialNumber: syz [ 67.462824][ T64] rtl8150 1-1:1.0: couldn't find required endpoints [ 67.471786][ T418] usbhid 3-1:0.0: can't add hid device: -71 [ 67.477825][ T418] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 67.485699][ T64] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 67.498917][ T418] usb 3-1: USB disconnect, device number 29 [ 67.509258][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.520283][ T1106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.529087][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.537099][ T1106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.600988][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 67.601015][ T36] audit: type=1400 audit(1770731761.743:290): avc: denied { listen } for pid=1100 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.626979][ T36] audit: type=1400 audit(1770731761.773:291): avc: denied { connect } for pid=1100 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.646629][ T36] audit: type=1400 audit(1770731761.773:292): avc: denied { connect } for pid=1100 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.669901][ T397] usb 1-1: USB disconnect, device number 23 [ 67.685629][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 67.693389][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 67.704147][ T10] usb 2-1: USB disconnect, device number 30 [ 68.270229][ T397] usb 6-1: USB disconnect, device number 2 [ 68.318272][ T36] audit: type=1400 audit(1770731762.463:293): avc: denied { listen } for pid=1135 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.339520][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 68.358007][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.389654][ T1137] tipc: Enabling of bearer rejected, failed to enable media [ 68.515544][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.526611][ T10] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.539786][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.546693][ T10] usb 3-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 68.555902][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.565006][ T10] usb 3-1: config 0 descriptor?? [ 68.772858][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.782130][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.790914][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 68.800658][ T10] usb 3-1: string descriptor 0 read error: -71 [ 68.809077][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 68.815331][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.827334][ T10] usb 3-1: USB disconnect, device number 30 [ 69.324565][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 69.460206][ T1176] kvm: pic: non byte write [ 69.486354][ T10] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.497611][ T10] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 69.508729][ T10] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.521605][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.531282][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 69.540389][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.550281][ T10] usb 2-1: config 0 descriptor?? [ 69.555703][ T1163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.644505][ T397] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 69.656684][ T36] audit: type=1400 audit(1770731763.803:294): avc: denied { append } for pid=1182 comm="syz.2.267" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.663726][ C1] BUG: TASK stack guard page was hit at ffffc9000e5cfff8 (stack is ffffc9000e5d0000..ffffc9000e5d8000) [ 69.663857][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 69.663921][ C1] CPU: 1 UID: 0 PID: 1185 Comm: syz.2.267 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 69.663994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 69.664029][ C1] RIP: 0010:__list_del_entry_valid_or_report+0xc/0x140 [ 69.664116][ C1] Code: 89 de 4c 89 f1 e8 44 cb 4c fe 0f 0b 66 90 b8 ff d2 8d ad 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 [ 69.664160][ C1] RSP: 0018:ffffc9000e5d0000 EFLAGS: 00010246 [ 69.664216][ C1] RAX: ffffea0004525108 RBX: ffffea0004525108 RCX: ffffffff8635a840 [ 69.664248][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffea0004525108 [ 69.664283][ C1] RBP: ffffc9000e5d0010 R08: ffff8881f6f72280 R09: 0000000000000002 [ 69.664319][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffff8881f6f722a0 [ 69.664348][ C1] R13: dffffc0000000000 R14: ffff8881f6f72280 R15: ffff8881f6f72320 [ 69.664386][ C1] FS: 00007f286cbde6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 69.664431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.664476][ C1] CR2: ffffc9000e5cfff8 CR3: 00000001023c8000 CR4: 00000000003526b0 [ 69.664512][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.664541][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 69.664570][ C1] Call Trace: [ 69.664587][ C1] [ 69.664605][ C1] ___rmqueue_pcplist+0x2b7/0x31b0 [ 69.664679][ C1] ? __kasan_check_read+0x15/0x20 [ 69.664729][ C1] ? __zone_watermark_ok+0x134/0x630 [ 69.664778][ C1] ? __cfi___zone_watermark_ok+0x10/0x10 [ 69.664829][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 69.664880][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 69.664947][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 69.665043][ C1] get_page_from_freelist+0x6f5/0x4a20 [ 69.665110][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 69.665165][ C1] ? static_key_count+0x45/0x70 [ 69.665224][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 69.665307][ C1] ? lruvec_init+0x271/0x280 [ 69.665406][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 69.665449][ C1] ? unwind_next_frame+0x3c1/0x750 [ 69.665502][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.665552][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.665655][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.665707][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.665803][ C1] stack_depot_save_flags+0x672/0x800 [ 69.665892][ C1] stack_depot_save+0x12/0x20 [ 69.665933][ C1] save_stack+0x133/0x240 [ 69.666010][ C1] ? free_contig_range+0x260/0x260 [ 69.666072][ C1] ? __reset_page_owner+0x450/0x450 [ 69.666146][ C1] ? zone_page_state_add+0x43/0x90 [ 69.666220][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 69.666307][ C1] ? prep_new_page+0x1c/0x110 [ 69.666344][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 69.666402][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 69.666452][ C1] ? stack_depot_save_flags+0x672/0x800 [ 69.666511][ C1] ? kasan_save_track+0x4f/0x80 [ 69.666597][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 69.666666][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 69.666739][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.666811][ C1] ? krealloc_noprof+0x8d/0x130 [ 69.666877][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.666974][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3eb/0x1f00 [ 69.667068][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 69.667176][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 69.667265][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 69.667345][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.667452][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 69.667521][ C1] ? sched_clock_noinstr+0xd/0x30 [ 69.667575][ C1] __set_page_owner+0x8e/0x600 [ 69.667648][ C1] ? __zone_watermark_ok+0x134/0x630 [ 69.667695][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 69.667762][ C1] ? kasan_unpoison+0x4a/0x70 [ 69.667825][ C1] post_alloc_hook+0x3b8/0x3f0 [ 69.667900][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 69.668011][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 69.668087][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 69.668151][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 69.668225][ C1] prep_new_page+0x1c/0x110 [ 69.668270][ C1] get_page_from_freelist+0x496e/0x4a20 [ 69.668347][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 69.668401][ C1] ? static_key_count+0x45/0x70 [ 69.668446][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 69.668511][ C1] ? lruvec_init+0x271/0x280 [ 69.668585][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 69.668640][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.668696][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.668759][ C1] ? unwind_get_return_address+0x51/0x90 [ 69.668826][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.668891][ C1] stack_depot_save_flags+0x672/0x800 [ 69.668955][ C1] kasan_save_track+0x4f/0x80 [ 69.669058][ C1] ? kasan_save_track+0x3e/0x80 [ 69.669116][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 69.669158][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 69.669224][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.669283][ C1] ? krealloc_noprof+0x8d/0x130 [ 69.669352][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.669466][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3eb/0x1f00 [ 69.669531][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 69.669614][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 69.669694][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 69.669773][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.669859][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 69.669947][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x17dc/0xa690 [ 69.670034][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 69.670124][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 69.670175][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 69.670225][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.670293][ C1] ? do_syscall_64+0x57/0xf0 [ 69.670365][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.670476][ C1] kasan_save_alloc_info+0x40/0x50 [ 69.670535][ C1] __kasan_kmalloc+0x96/0xb0 [ 69.670587][ C1] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.670652][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.670755][ C1] krealloc_noprof+0x8d/0x130 [ 69.670853][ C1] _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.670950][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 69.671048][ C1] ? __kasan_check_write+0x18/0x20 [ 69.671105][ C1] ? mutex_unlock+0x90/0x240 [ 69.671158][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 69.671214][ C1] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3eb/0x1f00 [ 69.671298][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 69.671375][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 69.671465][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.671532][ C1] ? __kernel_text_address+0x11/0x40 [ 69.671598][ C1] ? __kasan_check_write+0x18/0x20 [ 69.671658][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 69.671728][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 69.671803][ C1] ? stack_trace_save+0xaa/0x100 [ 69.671847][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 69.671929][ C1] ? stack_depot_save_flags+0x399/0x800 [ 69.671981][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 69.672046][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.672123][ C1] ? kasan_save_track+0x4f/0x80 [ 69.672194][ C1] ? kasan_save_track+0x3e/0x80 [ 69.672255][ C1] ? kasan_save_free_info+0x4a/0x60 [ 69.672298][ C1] ? __kasan_slab_free+0x5f/0x80 [ 69.672351][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 69.672407][ C1] ? audit_log_end+0x1f1/0x240 [ 69.672479][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 69.672526][ C1] ? slow_avc_audit+0x19f/0x220 [ 69.672588][ C1] ? avc_has_perm+0x1ec/0x240 [ 69.672642][ C1] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 69.672701][ C1] ? security_binder_transfer_binder+0x54/0xf0 [ 69.672754][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xd35/0x6640 [ 69.672833][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 69.672933][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.673017][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 69.673104][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x17dc/0xa690 [ 69.673165][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 69.673250][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 69.673322][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 69.673387][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.673459][ C1] ? do_syscall_64+0x57/0xf0 [ 69.673546][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.673652][ C1] ? __kasan_slab_free+0x6a/0x80 [ 69.673717][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 69.673779][ C1] ? __wake_up+0x169/0x190 [ 69.673864][ C1] ? audit_log_end+0x1f1/0x240 [ 69.673941][ C1] ? audit_log_end+0x1f1/0x240 [ 69.674011][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 69.674073][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 69.674128][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 69.674191][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 69.674248][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 69.674320][ C1] ? call_rcu_hurry+0x30/0x30 [ 69.674392][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 69.674463][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.674532][ C1] ? do_syscall_64+0x57/0xf0 [ 69.674601][ C1] ? avc_update_node+0x2f1/0x9c0 [ 69.674673][ C1] ? slow_avc_audit+0x19f/0x220 [ 69.674733][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 69.674795][ C1] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 69.674918][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x10/0x10 [ 69.675040][ C1] ? __set_page_owner+0x3fe/0x600 [ 69.675111][ C1] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 69.675181][ C1] ? bpf_lsm_binder_transfer_binder+0xd/0x20 [ 69.675246][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0xeeb/0x6640 [ 69.675322][ C1] ? kasan_unpoison+0x4a/0x70 [ 69.675383][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 69.675461][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 69.675532][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 69.675588][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread16translate_object+0x10/0x10 [ 69.675695][ C1] ? __kasan_check_write+0x18/0x20 [ 69.675746][ C1] ? _raw_spin_lock+0x92/0x120 [ 69.675816][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.675887][ C1] ? __kasan_check_read+0x15/0x20 [ 69.675939][ C1] ? folio_add_file_rmap_ptes+0x28b/0x3d0 [ 69.676019][ C1] ? insert_page_into_pte_locked+0x292/0x430 [ 69.676106][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 69.676189][ C1] ? __kasan_check_read+0x15/0x20 [ 69.676242][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 69.676320][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.676405][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 69.676487][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 69.676568][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page24copy_from_user_slice_raw+0x333/0x4d0 [ 69.676652][ C1] ? __kasan_check_write+0x18/0x20 [ 69.676713][ C1] ? check_stack_object+0x12b/0x150 [ 69.676777][ C1] ? __check_object_size+0xe0/0x830 [ 69.676826][ C1] ? __cfi___check_object_size+0x10/0x10 [ 69.676897][ C1] ? __kasan_check_write+0x18/0x20 [ 69.676953][ C1] ? _copy_from_user+0x87/0xa0 [ 69.677027][ C1] ? _RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x67d/0x760 [ 69.677123][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.677179][ C1] ? _RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x217/0x760 [ 69.677286][ C1] ? __cfi__RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x10/0x10 [ 69.677383][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x2fcf/0x57b0 [ 69.677484][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x300b/0x57b0 [ 69.677617][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 69.677883][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 69.677940][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.678001][ C1] ? stack_depot_save_flags+0x399/0x800 [ 69.678051][ C1] _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 69.678157][ C1] ? kasan_save_track+0x3e/0x80 [ 69.678220][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0xcb/0x650 [ 69.678345][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 69.678405][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.678464][ C1] ? do_syscall_64+0x57/0xf0 [ 69.678525][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.678592][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 69.678692][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 69.678741][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 69.678801][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.678867][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.678948][ C1] ? krealloc_noprof+0xfa/0x130 [ 69.679017][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 69.679108][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 69.679186][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 69.679273][ C1] ? __kasan_check_write+0x18/0x20 [ 69.679319][ C1] ? _raw_spin_lock+0x92/0x120 [ 69.679341][ C1] ? __asan_memset+0x39/0x50 [ 69.679360][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x26e/0x650 [ 69.679446][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 69.679528][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 69.679645][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 69.679709][ C1] ? avc_has_perm+0x155/0x240 [ 69.679759][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 69.679835][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 69.679907][ C1] ? __kasan_check_write+0x18/0x20 [ 69.679966][ C1] ? _raw_spin_lock+0x92/0x120 [ 69.680028][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.680092][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 69.680153][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 69.680203][ C1] _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 69.680303][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 69.680409][ C1] ? __kasan_check_write+0x18/0x20 [ 69.680480][ C1] ? _raw_spin_lock+0x92/0x120 [ 69.680545][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.680616][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1790/0xa690 [ 69.680690][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.680757][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x17dc/0xa690 [ 69.680891][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 69.681183][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 69.681240][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.681296][ C1] ? __kernel_text_address+0x11/0x40 [ 69.681358][ C1] ? unwind_get_return_address+0x51/0x90 [ 69.681416][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.681468][ C1] ? arch_stack_walk+0x10a/0x170 [ 69.681553][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 69.681620][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.681655][ C1] ? __kernel_text_address+0x11/0x40 [ 69.681715][ C1] ? unwind_get_return_address+0x51/0x90 [ 69.681767][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.681804][ C1] ? arch_stack_walk+0x10a/0x170 [ 69.681872][ C1] ? stack_depot_save_flags+0x38/0x800 [ 69.681932][ C1] ? kasan_save_track+0x4f/0x80 [ 69.682004][ C1] ? kasan_save_track+0x3e/0x80 [ 69.682066][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 69.682115][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 69.682180][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.682253][ C1] ? krealloc_noprof+0x8d/0x130 [ 69.682337][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.682433][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x7fb/0x1cf0 [ 69.682511][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x460/0x5da0 [ 69.682590][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 69.682651][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 69.682719][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 69.682782][ C1] ? do_syscall_64+0x57/0xf0 [ 69.682852][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.682935][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 69.682996][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 69.683074][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 69.683136][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 69.683243][ C1] ? krealloc_noprof+0xfa/0x130 [ 69.683305][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 69.683400][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 69.683505][ C1] ? __kasan_check_write+0x18/0x20 [ 69.683571][ C1] ? _raw_spin_lock+0x92/0x120 [ 69.683651][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.683738][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xe7b/0x1cf0 [ 69.683818][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.683881][ C1] ? _raw_spin_unlock+0x45/0x60 [ 69.683946][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 69.684006][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 69.684099][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 69.684225][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 69.684300][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.684361][ C1] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 69.684458][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 69.684588][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 69.684647][ C1] ? kernel_text_address+0xa9/0xe0 [ 69.684706][ C1] ? __kernel_text_address+0x11/0x40 [ 69.684760][ C1] ? unwind_get_return_address+0x51/0x90 [ 69.684812][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.684861][ C1] ? arch_stack_walk+0x10a/0x170 [ 69.684934][ C1] ? stack_depot_save_flags+0x38/0x800 [ 69.684992][ C1] ? stack_depot_save+0x12/0x20 [ 69.685063][ C1] ? save_stack+0x149/0x240 [ 69.685153][ C1] ? free_contig_range+0x260/0x260 [ 69.685207][ C1] ? __reset_page_owner+0x450/0x450 [ 69.685273][ C1] ? __kasan_check_write+0x18/0x20 [ 69.685332][ C1] ? __update_page_owner_handle+0x318/0x370 [ 69.685404][ C1] ? __kasan_check_write+0x18/0x20 [ 69.685462][ C1] ? __set_page_owner+0x3fe/0x600 [ 69.685533][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 69.685605][ C1] ? kasan_unpoison+0x4a/0x70 [ 69.685665][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 69.685736][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 69.685795][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 69.685874][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 69.685933][ C1] ? prep_new_page+0x1c/0x110 [ 69.685982][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 69.686054][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 69.686145][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 69.686207][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 69.686266][ C1] ? move_to_free_list+0x2c0/0x320 [ 69.686332][ C1] ? __count_memcg_events+0xdf/0x3b0 [ 69.686406][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 69.686509][ C1] ? __kasan_check_read+0x15/0x20 [ 69.686582][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 69.686644][ C1] ? __asan_memcpy+0x5a/0x80 [ 69.686699][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 69.686768][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 69.686820][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 69.686895][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 69.686970][ C1] ? do_pte_missing+0x1476/0x44f0 [ 69.687064][ C1] ? ioctl_has_perm+0x39a/0x500 [ 69.687129][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 69.687181][ C1] ? pte_offset_map_rw_nolock+0xba/0x110 [ 69.687238][ C1] ? handle_mm_fault+0x171c/0x1bf0 [ 69.687307][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 69.687362][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 69.687414][ C1] ? __kasan_check_write+0x18/0x20 [ 69.687468][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 69.687541][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 69.687621][ C1] ? __kasan_check_write+0x18/0x20 [ 69.687677][ C1] ? recalc_sigpending+0x16c/0x1d0 [ 69.687757][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 69.687845][ C1] ? __set_current_blocked+0x278/0x2c0 [ 69.687940][ C1] ? __fget_files+0x2c5/0x340 [ 69.688025][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.688070][ C1] ? security_file_ioctl+0x3e/0x110 [ 69.688120][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 69.688204][ C1] __se_sys_ioctl+0x132/0x1b0 [ 69.688271][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 69.688340][ C1] x64_sys_call+0x1878/0x2ee0 [ 69.688414][ C1] do_syscall_64+0x57/0xf0 [ 69.688485][ C1] ? clear_bhb_loop+0x50/0xa0 [ 69.688548][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.688612][ C1] RIP: 0033:0x7f286bd9bf79 [ 69.688667][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.688706][ C1] RSP: 002b:00007f286cbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.688754][ C1] RAX: ffffffffffffffda RBX: 00007f286c016180 RCX: 00007f286bd9bf79 [ 69.688809][ C1] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000026 [ 69.688854][ C1] RBP: 00007f286be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 69.688900][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.688938][ C1] R13: 00007f286c016218 R14: 00007f286c016180 R15: 00007ffc07f36b78 [ 69.688980][ C1] [ 69.689009][ C1] Modules linked in: [ 69.689048][ C1] ---[ end trace 0000000000000000 ]--- [ 69.689070][ C1] RIP: 0010:__list_del_entry_valid_or_report+0xc/0x140 [ 69.689132][ C1] Code: 89 de 4c 89 f1 e8 44 cb 4c fe 0f 0b 66 90 b8 ff d2 8d ad 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 [ 69.689180][ C1] RSP: 0018:ffffc9000e5d0000 EFLAGS: 00010246 [ 69.689237][ C1] RAX: ffffea0004525108 RBX: ffffea0004525108 RCX: ffffffff8635a840 [ 69.689281][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffea0004525108 [ 69.689318][ C1] RBP: ffffc9000e5d0010 R08: ffff8881f6f72280 R09: 0000000000000002 [ 69.689350][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffff8881f6f722a0 [ 69.689387][ C1] R13: dffffc0000000000 R14: ffff8881f6f72280 R15: ffff8881f6f72320 [ 69.689418][ C1] FS: 00007f286cbde6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 69.689457][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.689493][ C1] CR2: ffffc9000e5cfff8 CR3: 00000001023c8000 CR4: 00000000003526b0 [ 69.689530][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.689558][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 69.689596][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 69.691028][ C1] Kernel Offset: disabled