last executing test programs: 4.10385713s ago: executing program 0 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@broadcast, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab149c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'vxcan1\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000001}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x7, 0x5}) ioctl$FIBMAP(r5, 0x80081272, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g', @ANYRESDEC=0x0]) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000100000000000208004500003a0000000040117cb17f0000017f000001"], 0x48) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000080)="00000000350283", 0x7}], 0x2) 4.10369537s ago: executing program 0 (id=79): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\a', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 4.10345953s ago: executing program 0 (id=80): r0 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000400)={r0, 0x0, 0x100000000}) fchmod(r5, 0x120) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000200)=@x86={0x7d, 0x3, 0x0, 0x0, 0x8, 0x8c, 0x7, 0x5, 0x7, 0x9, 0x1, 0x7, 0x0, 0x0, 0x304, 0xf, 0x8, 0x65, 0x1, '\x00', 0x7, 0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x4) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd028bebe06c", 0x7}], 0x1, 0x645, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0xc000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x5}, {0x9, 0x5, 0xff, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x2, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5f, 0x54, '\x00', 0xff}, {0x71, 0xd1, 0x81, '\x00', 0x7f}, {0x6, 0x4, 0xc}, {0x7f, 0x5, 0xa, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xde}, {0xff, 0x1, 0xfe, '\x00', 0xc0}, {0xfe, 0x5, 0x26}, {0xce, 0x0, 0x3, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x0, 0x40, '\x00', 0xf}, {0x3f, 0x6, 0x2, '\x00', 0x28}, {0x1, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xf4}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x9, 0x80, '\x00', 0x7f}, {0xff, 0x6, 0x3, '\x00', 0x10}, {0x5, 0x23, 0xf3, '\x00', 0x4}, {0x87, 0x6, 0x84}]}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="44fb64cec586f8ac7c18d3763a8af31493c79c87115a49609fe6e695efc7fdc105d4ea57d12791274d330e41fd5f299a20eefdaa1978929b7ab8dd1d50d0b3cebb9ec2ee4aee3b46faabfe42cb86f0d30b77302d9a159d0f484f6ecb38644b455a619f05808dc278d2e572611464bb3711bbb2143c0d5e34b36f7d9cb942a7231f9de8ea1a7c720ff974899f622c219be35923f09dd4fa9790aba9a1ce3186861b99cca367cb0b668953e381425b33c57323b32a4b1463425042e251c9b78b3d61", 0xc1}], 0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3f62f59fe2aa0715c8415ae43ab30682", 0x10}, {&(0x7f0000000240)="45eaeeb220b3b2abb10322908cd08aa3c88e273baa4ca012d9d6ca24eab61dd80a2089af023968b9c399825b13c9b843769e8a764cb3e38e50f2d4b30ea8c40b54d9825f5fce5ad272bfacff879948809d5105bea926ba4a9e8c624ed5dd2b67b6e309d51fc2b692ab770c06d187a9c77ae93d3841cbe4c513fbe67512abc1afb3b0af0a844ec68ebb032128ff6281939ed164a2f754e56636ed8ef70876d4179066f0", 0xa3}, {&(0x7f0000000300)="3d78c2b4fa5f52856e2f7af0bb29aa52d781d1285784f94bbcd48b2b3510cfa5c34c3df7ba0b6b13abc26e6cebd4836807c51b62d9b49fc39e484406163109bcb06d8e104ffb847d04621a7b9dfa49800e4c09644bfe471a9616cca7c8a66f0e30e1db68cef51781bf221606de8b20e3bb6b7145d4f2b79009f082aa2353eb3bfafd476a26780dfe7aa4e3980dd338cb6920d1844d723df44c6680d346d01f659ce164221b7d96e4e8b368084efb4ee8986d", 0xb2}], 0x3) 4.09870226s ago: executing program 0 (id=81): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x9, 0x0, 0x8}, 0x1, 0x7, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x1}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x7c, 0x4, {0x7, 0x25, 0x1, 0x4, 0xc2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x40, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1000}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 2.967721907s ago: executing program 2 (id=94): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x22, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000040)="170000000200010000ffbe8c5ee17688120033e00201fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e21, 0x3, @mcast2, 0x8}, {0xa, 0x4e21, 0x3, @empty, 0x100}, 0x1, {[0x81, 0x0, 0x6, 0x800000, 0x2, 0x3ff, 0x3, 0x2]}}, 0x5c) sendmmsg$sock(r4, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x56f6}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x10, 0x1, 0x24, 0x9e2e0000}}], 0x10}}], 0x1, 0x0) listen(r3, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 2.967195357s ago: executing program 2 (id=95): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8ebba116, 0x4) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000033000/0x1000)=nil, 0x1000}}) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x100008, 0x3, "a3c3b25c4a77"}}) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000400)='./file2\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x8) ftruncate(r4, 0x4) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_io_uring_complete(0x0, 0x0) r7 = socket$inet6(0xa, 0x6, 0x1) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000380)=0x7ff, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2.885301079s ago: executing program 2 (id=96): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x60, 0xff}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x8, 0xffffffffbfffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0xfffffffe, 0x0, 0x796}, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0xb0a0010000000000, 0x40040}, 0x8080) 2.87602816s ago: executing program 2 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000012000000000000aaff02000000000000000000000000000111"], 0xffe) 2.804816431s ago: executing program 0 (id=98): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="000000000011", 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 2.804486981s ago: executing program 0 (id=99): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@remote, 0x6}]}]}}}], 0x28}, 0x4000810) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x806, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x64, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/148, 0x94, 0x0, 0x2d}, @fda={0x66646185, 0xa, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/2, 0x2, 0x2, 0x2d}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x40}, @acquire_done={0x40106309, 0x3}], 0xa7, 0x0, &(0x7f00000004c0)="296146eb17418ceefd13ee1c4772720ba587c4648fde622eadfaf8daf441b65052dce2f13339e8c856956f600ad7800f0cb69c4001974277d277900ac21109532b0443acf688f79eb0ff8774790da2b7d898db1befd3c9f162f63890e98a9a4b01b4fb9fe927c704785ef0698a580a37ba18e36a27e14cde96e84ba8982b3db7886ddadd139c415d0782cd963c26a649b01de020ed6c850ae5368969273a1d438d2799b1a3024f"}) syz_usb_connect$uac1(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020410e424240000102030109027400030104c06b0904000000010100000a240106001e000201020924030100030505000b2408057114044392b9730904010000010200000904010101010200000905010920000900040725010000060009040200000802"], 0x0) 2.783409722s ago: executing program 2 (id=100): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xa0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x800) syz_ublk_setup_queues(r6, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10001f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 2.584861827s ago: executing program 2 (id=101): syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 994.439756ms ago: executing program 1 (id=110): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) (async, rerun: 64) mount$9p_unix(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000300), 0x8001, &(0x7f0000000380)={'trans=unix,', {[{@access_any}, {@noextend}, {@posixacl}, {@msize}, {@msize={'msize', 0x3d, 0x2}}, {@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}}) (async, rerun: 64) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) (rerun: 64) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (rerun: 64) landlock_restrict_self(r4, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) (async) io_cancel(r6, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x2}, 0x0) (async) syz_clone(0x20011000, &(0x7f0000000940)="12be72a2d92fcb10e3d558c469e1c35ed28f088435266e9d23c0d940bcb9d3c0ea67f2fd302e03dd9413526704", 0x2d, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20020a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000000000000900000000000000080000000000000000000080000000000000000000000000000000000000200081000000000000000900000000000000830000000000000000000000000000000400000000000000010102030000000044010500e0000001000000000000000000000000000004d43200000000000000ac1e000100000000000000000000000006350000020002000000000000000000000000007f000001000000000000000000000000000004d52b00000000000000fe8000000000000000000000f50000bb0000000000000400000800000000000000000000ac14142c000000000000000000000000000004d33200000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d532"], 0x1fc}}, 0x4080) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x18, 0xc04c890}}], 0x1, 0x20008001) 938.896987ms ago: executing program 1 (id=111): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\xf2b\xa5\xa4%\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)={0x40, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x24, 0x125, 0x0, 0x1, [@typed={0xa, 0x13, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 875.887628ms ago: executing program 1 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000002300)=[{&(0x7f0000000280)=""/5, 0x5}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/144, 0x90}, {&(0x7f0000002180)=""/147, 0x93}, {&(0x7f0000002240)=""/132, 0x84}], 0x9, &(0x7f0000003600)=[{&(0x7f00000023c0)=""/45, 0x2d}, {&(0x7f0000002400)=""/161, 0xa1}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000025c0)=""/31, 0x1f}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 458.423839ms ago: executing program 3 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2204490, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3d1f42eb61bf26f85c8616f2bada6c01c6224aae273a1b46500002000000000000a4df2221d4c7df", @ANYRESHEX=r2, @ANYBLOB=',\x00']) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff6401010131008c80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83e96804e6172083eaaa90cf56dd042b72000000080005800400ce80db9101ca6daf723a3a12ca8e1b98cd02255dc0abe1bdd5288ebf52ce567404df8e11222cd2aab84480edf15493092c38c10e2c7191cac77fcb7c12912033d80b6a1a6cf7a371add3d15019987bcb5fcdcf3455070377077820107c0136823c68478d8a276545cb837008a7184c34561a9a85f0b6665e38b972d4c6df861c5786a9b96c6e415e6a939bbd6333831fe798cd0e073527bd109aaf3d51dec53b25ec1a3defe0bef489396435b7a64c68e3fe538d3d9856a2e54d0ae004be31fa"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x8, &(0x7f0000000f00)}) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 32) r6 = getpgrp(0x0) (rerun: 32) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) (async, rerun: 64) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) write(r5, &(0x7f0000000000)="1c0000001a00590214f9f407000904101f0000000000000000020000", 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 458.185369ms ago: executing program 3 (id=116): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4a20, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0), 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="882c1665880c5bbfdbfe568f716539886705689f4710b4afa3d94b8c7e541320f4d3c5b1d340b26fb3376b3efc225804f0013c8cda991e7692b819e955b9072e2fb13acf60192cf7c149f40fd1bca769e56a359ff0c4c92ff15f4f2f67f9a64bdab2acdb188d0eeeaa619a8172ba93fa77588dcf66d56901cbb522404e518ea686b6b92a7b889c40c86c6ee143dc34243dba5c97b93866c68c8e638a250a745a7756b25141d1452dcf9f232368ea7f20f919c94ae76d634d11d41c4a476769ca645c2dd9e79412b6416a104859bfab941c", 0xd1}], 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 457.943829ms ago: executing program 3 (id=117): mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000df8000/0x1000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fedbdf25130000000c00060001000000010000000c000600030000000000000008000300", @ANYRES32=r5, @ANYBLOB="8144b4f1fffb33"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0xc0c5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000cb00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4008000}}], 0x2, 0x810) (async) signalfd(r7, &(0x7f0000000080)={[0xff]}, 0x8) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) (async) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xb8, &(0x7f00000006c0)={[{0xa5, 0x4e00, "2be43a7e61e46b67493680eb4c4bfdbe24548ea906897a82437b25edc569ce95e4e94f7d97b7619ff6144a422fabb0918a16a2973632e7c28fb4e770e41214b1d325a5ee7cdb827fe3c04690e15a809707e9c90e5cc5a9228c8f2b9aa0e17d404b652c6e3cc5bd962b0b88ff8e8eb138e53546dd58b30019ac414f87dc3d7b902ea5e175f93ef3df54fac2f822b01e3095e2d035592e81a88e47fad26d46a1617395caa9ad"}, {0x5, 0x4e00, "cb593a687d"}]}) 456.331179ms ago: executing program 3 (id=118): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00 ', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 455.812219ms ago: executing program 3 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1001, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x844) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000180)='nl80211\x00', 0x22000, &(0x7f00000001c0)={@align=0x124, {0x6, 0xffbf}}, 0x913, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)}, {[0x6, 0xbed3, 0x4, 0xc78]}, 0x7, 0x18, &(0x7f0000000280)=""/24}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="0f0116fdff83d18a66b9430200000f32d9e5c6050064360f01d12665efba610066edf30f6fc9d37a00", 0x29}], 0x1, 0x40, &(0x7f00000003c0)=[@dstype0={0x6, 0x6}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2dcd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0xa02, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c054}, 0x44851) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000780)=0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000007c0)={'virt_wifi0\x00', 0x2}) sendmsg$tipc(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)="2d691c611403cfa31a89e802066e4f01d3", 0x11, 0x880}, 0x20008004) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r7, 0x601, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000870) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r6) sync_file_range(r5, 0xfffffffffffffff6, 0x5, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x9, 0xfff, 0x51, @local, @remote, 0x40, 0x10, 0xfcb0, 0x20000}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001780)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000000c40)=@deltclass={0xac8, 0x29, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xc, 0xd}, {0x1, 0xfffb}, {0x3, 0x7}}, [@c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xd}}, @TCA_ATM_HDR={0x28, 0x3, "cd0b45abf0c3fce00fa198b4898c2ab50b853f81a3a2f97984a932b54b99d4c7b4ae1e0f"}, @TCA_ATM_HDR={0x14, 0x3, "3df7c0f9e44060d25ccf6161f4e35ed3"}, @TCA_ATM_HDR={0x28, 0x3, "e61e848bd2e88bdc291f29f725fdf13e67064ece18507814cbbb302545222ca66f50c92c"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x83}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x0, 0x400, 0x5, 0xff, 0x4}}]}}, @c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x11, 0x3, "deff023f5cec496cae888bb706"}, @TCA_ATM_HDR={0x23, 0x3, "6cff639f5f3cd1b8d1aec7870f05eacab110ff3c43327b20068ec8b6c8d936"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x36, 0x3, 0x1, 0x4, 0x4102, 0x6644, 0x3, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3e, 0x2, 0x8, 0x4, 0xffff8001, 0x7, 0x7, 0x15}}]}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0x1d, 0x2, 0x1, 0x4, 0x8, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0x4}, 0x1, 0xffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0xe, 0x1, 0x887, 0x6, 0x0, 0x7fffffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0x7, 0x8, 0x5, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x10, 0x2, 0x1e, 0xc, 0x15a, 0x4, 0x50, 0x4}}]}}, @c_cbq={{0x8}, {0x86c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x6, 0x3, 0xf2, 0x1, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xb, 0x1, 0x4, 0xc, 0xfffffffe, 0x10000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x2, 0x6, 0x1, 0x5, 0xc, 0x81, 0x0, 0x10, 0x7, 0x8, 0x6a6f, 0x4, 0xfff, 0x2, 0x7, 0x4, 0xfff, 0xa, 0x0, 0xfffffffc, 0x1, 0x4a87, 0xa0da, 0xfffffff8, 0x2, 0x7, 0x10000, 0x9, 0x4, 0x1, 0x8, 0xa, 0xf, 0x101, 0x3ff, 0x7, 0x5, 0x0, 0x3b7, 0x6, 0x3, 0xfffffffd, 0x6, 0x3, 0xf, 0xa, 0x0, 0xf34e, 0x7, 0x9, 0x6, 0x9, 0x8, 0x7ff, 0x5, 0x9, 0x4, 0x40, 0x7, 0x80, 0x7, 0x23, 0x7fff, 0x7, 0x7, 0x9, 0x3, 0x8466, 0x9, 0x0, 0x4, 0x80000001, 0x4, 0x2, 0x0, 0x9, 0x8, 0x4, 0x8, 0x2, 0x3cf, 0x7, 0x100, 0x1f04, 0x9, 0xcb48, 0x4, 0x3, 0x1, 0xa, 0x3, 0x0, 0x7, 0x9, 0x0, 0x4, 0xfffffff8, 0xe8, 0x8, 0xadff, 0x80, 0xf, 0xee, 0xfffffff6, 0x6818, 0x4, 0x5, 0x7, 0x5, 0x3, 0x3, 0xd, 0x2, 0x0, 0x2, 0x7, 0xffff3a0b, 0x2, 0x5, 0xfffffffd, 0xc089, 0x7, 0x5, 0x9, 0x9, 0x5, 0x9, 0xffffffff, 0x35, 0xb2, 0x9, 0x7fffffff, 0xc, 0x0, 0x1, 0x0, 0xd, 0x4, 0xa18b, 0x8, 0xffffffff, 0x5, 0x7, 0x9465, 0x2, 0x0, 0x101, 0x7, 0x14, 0xffff, 0xebdf, 0x7, 0x7, 0x1ff, 0x8001, 0x0, 0x14, 0x1ff, 0x1000, 0x4, 0x3, 0xe8f4, 0x2, 0x25dc, 0x8, 0x8c, 0x8, 0x7ff, 0x892, 0xf, 0x400, 0xfff, 0x8, 0x95b4, 0x57a6, 0x936, 0x16f5, 0xfffffffb, 0x8, 0x7ff, 0x30a5, 0x3, 0x200, 0x3, 0x9, 0x4, 0x2, 0x5, 0x1, 0x81, 0xe, 0x101, 0x8d0e, 0x9fbf, 0x8, 0x9, 0x7fffffff, 0x0, 0xfa9, 0x3, 0x0, 0x31, 0x4, 0xf, 0x6, 0x4, 0xffffffff, 0xfffffffe, 0x2, 0x6, 0x1ff, 0x100, 0x7, 0xb70, 0x4a61, 0x5, 0x5, 0x6, 0x195, 0x9, 0x4, 0x1ff, 0x3, 0x4, 0xe8, 0xcb4, 0x4, 0x9, 0x9, 0x1000, 0x6700, 0xb6, 0x87, 0x0, 0x1, 0x8000, 0x10, 0x6, 0x1ff, 0x7, 0x1, 0x0, 0x2a1, 0x10000, 0x6586, 0x9, 0x3, 0x5ac, 0x1, 0x8, 0x8, 0x7f, 0xc, 0x40, 0x70d3d827]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3a, 0x1, 0x16, 0x6, 0x3, 0x7, 0x80, 0x7fff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x296d, 0x9, 0x3, 0x81, 0x5, 0x2, 0x5, 0x3, 0x5, 0xff, 0xf13, 0x4, 0x4, 0x1200000, 0x3000000, 0xfffffffe, 0x7f, 0x7, 0xd, 0x9, 0x1, 0x1, 0x10000, 0x80000001, 0x8, 0x100, 0x2, 0xa, 0x115, 0x800, 0x0, 0xc5, 0x9, 0x4, 0x10000000, 0x9, 0x1000, 0xa, 0x2, 0x188, 0x8, 0x3, 0x8, 0x8, 0x9, 0x7, 0x8000, 0x9, 0x0, 0x7, 0x1a73, 0x3, 0x6, 0x5, 0x400, 0x9, 0x7, 0x80000000, 0x3ff, 0x401, 0xff, 0x3, 0x1, 0x4, 0x5, 0xa, 0x1, 0xc35f, 0x5, 0x200, 0x10, 0x6, 0x29b, 0x2, 0x8001, 0x8, 0x400, 0x5, 0x81, 0xcb2, 0x2, 0xd6, 0x3, 0x9, 0x9f2, 0x51fc, 0xff, 0x10000, 0x2, 0x0, 0x4, 0x0, 0x8, 0xfd, 0x1, 0x10000, 0x1c000, 0x200, 0x940f, 0x7, 0x7, 0x32, 0xfd43, 0xb, 0x2, 0xb5, 0x7, 0x7, 0x0, 0x2, 0x10000, 0x9, 0x81, 0x8, 0x1000, 0x42b, 0x1, 0x0, 0x40, 0xc, 0x500, 0x7f, 0x8, 0x2, 0x25, 0x2, 0x0, 0x10001, 0x8000, 0x0, 0x6, 0xd, 0x401, 0x4, 0x7fffffff, 0x5, 0x3, 0x8, 0x5, 0x4, 0x7fffffff, 0x0, 0x7f, 0xff, 0x0, 0x400, 0x3ff, 0xe, 0x6, 0x1, 0x3c, 0x3ff, 0x0, 0xddf0, 0x80000000, 0x60d5, 0xfffffff7, 0x0, 0x8001, 0x6000000, 0x8, 0x1, 0xffffffff, 0xb5aa, 0x6, 0xb3f, 0x6, 0x3, 0x4, 0x2, 0x3, 0x1ff, 0x5, 0xf9, 0xfff, 0xfffffffe, 0x9, 0xb, 0x1, 0x2, 0x53, 0x0, 0xfff, 0x50, 0x4, 0x279, 0x0, 0x80000000, 0x4, 0x42, 0x3, 0x80000000, 0xf0000000, 0x1, 0x10000, 0x8, 0x8, 0x3ff, 0x5, 0xfffffffb, 0x3, 0x9, 0xe, 0x401, 0x2, 0xfffffff9, 0x81, 0x7, 0x4, 0x7, 0xc, 0x0, 0x10001, 0x7, 0x6, 0x0, 0x7, 0x2, 0x1, 0x4, 0xe3, 0x6df6af37, 0x4d23, 0x4, 0x9, 0x200, 0x27, 0x6, 0x2800000, 0x401, 0x8ed, 0x5, 0x0, 0x1, 0x10000, 0x2, 0xb, 0x1, 0xd02, 0xb, 0x8, 0x5b4, 0xa, 0x5, 0x4, 0x1ff, 0x3, 0x1ff, 0x101, 0x2, 0x5, 0x2, 0x0, 0x2, 0x5e, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0xf7, 0x2, 0x6, 0x4, 0x101, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1e, 0x1, 0x9, 0x2, 0x19, 0x6, 0x5}}]}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1b, 0xffe0}, 0x9, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x5, 0x3, 0x1f, 0xc8, 0x2d6, 0x7, 0x3, 0xfffffffe}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc, 0x0, 0x62d, 0xa3b, 0x9, 0x6}}]}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3e, 0x2, 0x1c, 0xd, 0x4841b7e2, 0x3, 0x1, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xf}, 0x1000, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xd8, 0x6, 0x4, 0x0, 0x4, 0x5}}]}}]}, 0xac8}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$int_out(r3, 0x5462, &(0x7f00000017c0)) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000001800)={0xa, 0x4e23, 0xfffff715, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001840)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x70, r11, 0x208, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xb9e}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000001}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) 372.007561ms ago: executing program 3 (id=120): syz_usb_connect(0x0, 0xb6, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000f0d000/0x1000)=nil, r0, 0x0, 0x20010, 0xffffffffffffffff, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x318, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x18, 0x6, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0x2c, 0x1, {0x22, 0xff2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x9, 0xa0}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x60, 0x0, 0x2, 0x40, 0x62}, 0x14, &(0x7f00000000c0)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x7, 0xf0f, 0x1}, @ptm_cap={0x3}]}, 0x1, [{0xb9, &(0x7f0000000100)=@string={0xb9, 0x3, "4dcb9e008c86adf62e65e03b7b3bd4109279b170a09a79dc4afea3e3b5c91cf1607a92a6e5a67a9d24d02fc96c450afb2c0c25ff292adad47c4411410e7769bb47dd023515058384e61c611fc917b9fc0ed83ee6b4695f6f4f9ea2bc212e3d1c51e917cc2ed46ae82908297cb5cc486df22643b9169479c3440c5b13f120c744d96334934b7e28eadfe17882225906b303d102113ea28bb315ef9e6ee0085fc08ee9c85bb25323ead64417c2265dbbf196b3692eb3bd81"}}]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 70.175289ms ago: executing program 1 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x19) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) (async) r5 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000340)="ab") (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99e", 0x0, 0x63}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x80, 0x9, 0xfd, 0x0, 0x0, 0x3, 0x3, 0xff, 0xff, 0x1, '\x00', 0x8}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 58.674749ms ago: executing program 1 (id=122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="19022bbd7000fedbdf25200000000c00050000000000000000020a0001007770616e3100000009001f"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bdab, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x4000) 0s ago: executing program 1 (id=123): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_clone(0x11, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0xffffff7f, 0xd, 0x0, 0x15, "5b3e8a1901f9c719d762dde4bc687b14a1002a"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 22.551104][ T36] audit: type=1400 audit(1786275983.180:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.552128][ T286] cgroup: Unknown subsys name 'net' [ 22.573728][ T36] audit: type=1400 audit(1786275983.180:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.600972][ T36] audit: type=1400 audit(1786275983.210:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.601127][ T286] cgroup: Unknown subsys name 'devices' [ 22.720695][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.726312][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.837880][ T36] audit: type=1400 audit(1786275983.460:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.861030][ T36] audit: type=1400 audit(1786275983.460:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.885760][ T36] audit: type=1400 audit(1786275983.460:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.893689][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.917582][ T36] audit: type=1400 audit(1786275983.540:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.943087][ T36] audit: type=1400 audit(1786275983.540:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.956373][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.968761][ T36] audit: type=1400 audit(1786275983.580:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.002876][ T36] audit: type=1400 audit(1786275983.580:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.768743][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.776007][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.783108][ T294] bridge_slave_0: entered allmulticast mode [ 23.789437][ T294] bridge_slave_0: entered promiscuous mode [ 23.797065][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.804209][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.811318][ T294] bridge_slave_1: entered allmulticast mode [ 23.817428][ T294] bridge_slave_1: entered promiscuous mode [ 23.848470][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855529][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.862661][ T293] bridge_slave_0: entered allmulticast mode [ 23.868791][ T293] bridge_slave_0: entered promiscuous mode [ 23.877728][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.884781][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.891830][ T293] bridge_slave_1: entered allmulticast mode [ 23.897949][ T293] bridge_slave_1: entered promiscuous mode [ 23.942205][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.949258][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.956287][ T295] bridge_slave_0: entered allmulticast mode [ 23.962514][ T295] bridge_slave_0: entered promiscuous mode [ 23.968598][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.975659][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.982725][ T296] bridge_slave_0: entered allmulticast mode [ 23.988836][ T296] bridge_slave_0: entered promiscuous mode [ 23.995394][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002454][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.009522][ T296] bridge_slave_1: entered allmulticast mode [ 24.015623][ T296] bridge_slave_1: entered promiscuous mode [ 24.021675][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.028694][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.035761][ T295] bridge_slave_1: entered allmulticast mode [ 24.041910][ T295] bridge_slave_1: entered promiscuous mode [ 24.169102][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.176162][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.183450][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.190471][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.202696][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.209741][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.216980][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.224005][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.242751][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.249798][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.257061][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.264087][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.297971][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.305023][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.312303][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.319329][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.328788][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.336357][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.343518][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.351063][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.358216][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.365608][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.372820][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.379937][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.393124][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.400174][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.431190][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.438214][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.445803][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.452835][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.460400][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.467447][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.475475][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.482530][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.495755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.502782][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.524388][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.531431][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.551000][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.558024][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.576958][ T296] veth0_vlan: entered promiscuous mode [ 24.588275][ T293] veth0_vlan: entered promiscuous mode [ 24.601366][ T296] veth1_macvtap: entered promiscuous mode [ 24.611783][ T294] veth0_vlan: entered promiscuous mode [ 24.632155][ T293] veth1_macvtap: entered promiscuous mode [ 24.641818][ T294] veth1_macvtap: entered promiscuous mode [ 24.663166][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.665927][ T295] veth0_vlan: entered promiscuous mode [ 24.706734][ T295] veth1_macvtap: entered promiscuous mode [ 24.742591][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.886480][ T328] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 25.049017][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.119065][ T71] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.159429][ T333] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.209003][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 25.215178][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.226104][ T45] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 25.235784][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.244941][ T45] usb 3-1: config 0 descriptor?? [ 25.279127][ T71] usb 2-1: Using ep0 maxpacket: 8 [ 25.285395][ T71] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.293771][ T71] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 25.301935][ T71] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 25.312147][ T71] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 25.321324][ T71] usb 2-1: config 9 has no interface number 0 [ 25.327422][ T71] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 25.338930][ T71] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid wMaxPacketSize 0 [ 25.348710][ T71] usb 2-1: config 9 interface 5 has no altsetting 0 [ 25.356151][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.367124][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.377110][ T333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.389951][ T333] usb 1-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 25.399092][ T71] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 25.408141][ T71] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.416450][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.424452][ T71] usb 2-1: Product: syz [ 25.428636][ T71] usb 2-1: Manufacturer: syz [ 25.433658][ T71] usb 2-1: SerialNumber: syz [ 25.438447][ T333] usb 1-1: config 0 descriptor?? [ 25.649894][ T71] usb 2-1: USB disconnect, device number 2 [ 25.657100][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.666108][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.673342][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.680492][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.687619][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.694747][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.701945][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.709090][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.716209][ T45] monterey 0003:0566:3004.0001: unknown main item tag 0x0 [ 25.725241][ T45] monterey 0003:0566:3004.0001: hidraw0: USB HID v0.02 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0 [ 25.845777][ T333] input: HID 04b3:3109 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04B3:3109.0002/input/input4 [ 25.857832][ T324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.858433][ T333] lenovo 0003:04B3:3109.0002: input,hidraw1: USB HID v0.00 Joystick [HID 04b3:3109] on usb-dummy_hcd.0-1/input0 [ 25.873638][ T324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.133548][ T333] usb 1-1: USB disconnect, device number 2 [ 26.201799][ T351] : renamed from bridge0 (while UP) [ 26.227616][ T353] tmpfs: Bad value for 'size' [ 26.227616][ T354] tmpfs: Bad value for 'size' [ 26.489016][ T71] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.650018][ T71] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 26.662918][ T71] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.669626][ T71] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 26.678711][ T71] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.687741][ T71] usb 2-1: config 0 descriptor?? [ 26.687845][ T361] ======================================================= [ 26.687845][ T361] WARNING: The mand mount option has been deprecated and [ 26.687845][ T361] and is ignored by this kernel. Remove the mand [ 26.687845][ T361] option from the mount to silence this warning. [ 26.687845][ T361] ======================================================= [ 26.849011][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.999014][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 27.006640][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.c0 [ 27.015741][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.023763][ T9] usb 4-1: Product: syz [ 27.027936][ T9] usb 4-1: Manufacturer: syz [ 27.032546][ T9] usb 4-1: SerialNumber: syz [ 27.098552][ T71] logitech 0003:046D:CA04.0003: hidraw1: USB HID v10.01 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 27.110514][ T71] logitech 0003:046D:CA04.0003: no inputs found [ 27.271494][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.280079][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.333870][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 27.342709][ T9] usb 4-1: USB disconnect, device number 2 [ 27.370286][ T71] usb 2-1: USB disconnect, device number 3 [ 27.424880][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.563962][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 27.563979][ T36] audit: type=1400 audit(1786275988.190:148): avc: denied { name_bind } for pid=368 comm="syz.0.16" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.591930][ T36] audit: type=1400 audit(1786275988.190:149): avc: denied { node_bind } for pid=368 comm="syz.0.16" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.800259][ T71] usb 3-1: USB disconnect, device number 2 [ 27.878996][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.009136][ T9] usb 1-1: device descriptor read/64, error -71 [ 28.139001][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.248992][ T9] usb 1-1: device descriptor read/64, error -71 [ 28.290316][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.300097][ T310] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 28.309155][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.317128][ T310] usb 2-1: Product: syz [ 28.321285][ T310] usb 2-1: Manufacturer: syz [ 28.325872][ T310] usb 2-1: SerialNumber: syz [ 28.488981][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.536312][ T310] usb 2-1: USB disconnect, device number 4 [ 28.547879][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.619025][ T9] usb 1-1: device descriptor read/64, error -71 [ 28.859008][ T9] usb 1-1: device descriptor read/64, error -71 [ 28.898986][ T333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.928990][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.979065][ T9] usb usb1-port1: attempt power cycle [ 29.047635][ T386] overlayfs: workdir and upperdir must be separate subtrees [ 29.048998][ T333] usb 3-1: Using ep0 maxpacket: 16 [ 29.063838][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.080522][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.084216][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.091522][ T10] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 29.097902][ T36] audit: type=1400 audit(1786275989.710:150): avc: denied { read } for pid=390 comm="syz.1.25" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.114673][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.129862][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.140681][ T10] usb 4-1: Product: syz [ 29.154814][ T333] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.155253][ T10] usb 4-1: Manufacturer: syz [ 29.163974][ T36] audit: type=1400 audit(1786275989.710:151): avc: denied { open } for pid=390 comm="syz.1.25" path="net:[4026532316]" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.168680][ T10] usb 4-1: SerialNumber: syz [ 29.191292][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.204371][ T333] usb 3-1: config 0 descriptor?? [ 29.319266][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 29.340594][ T9] usb 1-1: device descriptor read/8, error -71 [ 29.378979][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.405740][ T10] usb 4-1: USB disconnect, device number 3 [ 29.412797][ T36] audit: type=1400 audit(1786275990.050:152): avc: denied { create } for pid=381 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 29.469972][ T9] usb 1-1: device descriptor read/8, error -71 [ 29.528985][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 29.535142][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.546063][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.558884][ T310] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.568446][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.577270][ T310] usb 2-1: config 0 descriptor?? [ 29.653086][ T333] usbhid 3-1:0.0: can't add hid device: -71 [ 29.659124][ T333] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 29.668850][ T333] usb 3-1: USB disconnect, device number 3 [ 29.709008][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 29.729866][ T9] usb 1-1: device descriptor read/8, error -71 [ 29.859957][ T9] usb 1-1: device descriptor read/8, error -71 [ 29.959506][ T333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.969086][ T9] usb usb1-port1: unable to enumerate USB device [ 29.984131][ T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.992651][ T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.002747][ T310] HID 045e:07da: Invalid code 65791 type 1 [ 30.008747][ T310] HID 045e:07da: Invalid code 768 type 1 [ 30.014434][ T310] HID 045e:07da: Invalid code 769 type 1 [ 30.020079][ T310] HID 045e:07da: Invalid code 770 type 1 [ 30.025729][ T310] HID 045e:07da: Invalid code 771 type 1 [ 30.031377][ T310] HID 045e:07da: Invalid code 772 type 1 [ 30.037015][ T310] HID 045e:07da: Invalid code 773 type 1 [ 30.043182][ T310] HID 045e:07da: Invalid code 774 type 1 [ 30.048812][ T310] HID 045e:07da: Invalid code 775 type 1 [ 30.054457][ T310] HID 045e:07da: Invalid code 776 type 1 [ 30.062344][ T310] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input5 [ 30.074150][ T36] audit: type=1400 audit(1786275990.710:153): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=474 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.099927][ T36] audit: type=1400 audit(1786275990.710:154): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=474 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.124815][ T333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 30.135884][ T36] audit: type=1400 audit(1786275990.760:155): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=474 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.165490][ T333] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 30.174740][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.182869][ T71] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.190425][ T333] usb 3-1: Product: 꼆眽똪✞킜膲뮗쿠匐孖㾔ㄳ멗抃ↆ撏枦탉讥䨌ۆ햏甬鬑調妤麚삫鳀ꛠ뜱륛 [ 30.204450][ T333] usb 3-1: Manufacturer: 땚塲丌뻂䠒왈䙞悋礴돮㇬第ǎ깳匛儊臹ᩌ＀퍣織䂴᷁俎ɩ쾙椃襸բ淚囿⬢蕱鎡啐貼솞䧄ｫ罞쌠䔴ᄼŇ哬籤ꞵ形ῷ䐳ቂޡអꃼ״徤鯏땻螇绯̈뱴뺸ꗎ鯑삪祾葔絷䧡ﱑㅋὭ囗ᑸ蟤罜龊芖쬅ꯣ쐪૯㻼ι즶㗱夻狈걐ꄽ볯憣䧫櫻앑겸볪쟋碶绘弖 [ 30.222783][ T310] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 30.239326][ T333] usb 3-1: SerialNumber: syz [ 30.348990][ T71] usb 4-1: Using ep0 maxpacket: 16 [ 30.355130][ T71] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.366319][ T71] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.376197][ T71] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.389029][ T71] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 30.398060][ T71] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.407063][ T71] usb 4-1: config 0 descriptor?? [ 30.473654][ T36] audit: type=1400 audit(1786275991.100:156): avc: denied { ioctl } for pid=381 comm="syz.2.21" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.502986][ T333] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.509989][ T333] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 30.518442][ T333] usb 3-1: found format II with max.bitrate = 9, frame size=65532 [ 30.526758][ T333] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 30.535236][ T333] usb 3-1: found format II with max.bitrate = 9, frame size=65532 [ 30.555458][ T333] usb 3-1: USB disconnect, device number 4 [ 30.618189][ T45] usb 2-1: USB disconnect, device number 5 [ 30.814037][ T71] hid (null): unknown global tag 0xe [ 30.820879][ T71] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x7 [ 30.828542][ T71] hid-multitouch 0003:0457:07DA.0005: unknown global tag 0xe [ 30.835932][ T71] hid-multitouch 0003:0457:07DA.0005: item 0 1 1 14 parsing failed [ 30.844145][ T71] hid-multitouch 0003:0457:07DA.0005: probe with driver hid-multitouch failed with error -22 [ 31.018107][ T36] audit: type=1400 audit(1786275991.640:157): avc: denied { mount } for pid=397 comm="syz.3.27" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 31.018651][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.048275][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.049115][ T396] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 31.066468][ T310] usb 4-1: USB disconnect, device number 4 [ 31.153990][ T416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=416 comm=syz.1.30 [ 31.167878][ T416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.185130][ T416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.209362][ T396] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 31.218561][ T396] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 31.226153][ T396] usb 1-1: can't read configurations, error -61 [ 31.359004][ T396] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 31.427947][ T438] binder: Bad value for 'stats' [ 31.449048][ T71] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 31.519322][ T396] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 31.528099][ T396] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 31.535666][ T396] usb 1-1: can't read configurations, error -61 [ 31.542026][ T396] usb usb1-port1: attempt power cycle [ 31.599984][ T71] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 31.611054][ T71] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.617760][ T71] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 31.627175][ T71] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.635686][ T71] usb 2-1: config 0 descriptor?? [ 31.640936][ T423] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 31.708976][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.808987][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.859906][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.870852][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.880589][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 31.889695][ T396] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 31.897167][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.905788][ T45] usb 3-1: config 0 descriptor?? [ 31.919637][ T396] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 31.928438][ T396] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 31.936017][ T396] usb 1-1: can't read configurations, error -61 [ 31.968978][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 31.975023][ T310] usb 4-1: config 9 has an invalid interface number: 234 but max is 2 [ 31.983360][ T310] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 31.992066][ T310] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 32.002145][ T310] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 32.011017][ T310] usb 4-1: config 9 has no interface number 0 [ 32.017090][ T310] usb 4-1: config 9 interface 234 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 32.027967][ T310] usb 4-1: config 9 interface 234 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 32.038927][ T310] usb 4-1: config 9 interface 234 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 32.050110][ T71] elecom 0003:056E:010C.0006: unknown main item tag 0x0 [ 32.052705][ T310] usb 4-1: config 9 interface 234 has no altsetting 0 [ 32.060893][ T71] elecom 0003:056E:010C.0006: unknown main item tag 0x1 [ 32.067063][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=e4.05 [ 32.072713][ T396] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 32.081811][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.089359][ T71] elecom 0003:056E:010C.0006: ignoring exceeding usage max [ 32.097302][ T310] usb 4-1: Product: syz [ 32.108501][ T310] usb 4-1: Manufacturer: syz [ 32.110193][ T71] elecom 0003:056E:010C.0006: hidraw0: USB HID v0.81 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 32.119005][ T310] usb 4-1: SerialNumber: syz [ 32.125017][ T396] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 32.141698][ T396] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 32.149404][ T396] usb 1-1: can't read configurations, error -61 [ 32.155789][ T396] usb usb1-port1: unable to enumerate USB device [ 32.268559][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 32.338968][ T45] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 5/7 [ 32.342010][ T310] usb 4-1: USB disconnect, device number 5 [ 32.346719][ T45] arvo 0003:1E7D:30D4.0007: parse failed [ 32.358394][ T45] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 32.371221][ T45] usb 2-1: USB disconnect, device number 6 [ 32.541425][ T396] usb 3-1: USB disconnect, device number 5 [ 32.858262][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 32.858277][ T36] audit: type=1400 audit(1786275993.480:180): avc: denied { append } for pid=446 comm="syz.3.41" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.886891][ T36] audit: type=1400 audit(1786275993.500:181): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 32.907749][ T36] audit: type=1400 audit(1786275993.520:182): avc: denied { name_bind } for pid=448 comm="syz.1.42" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 32.991149][ T36] audit: type=1400 audit(1786275993.620:183): avc: denied { connect } for pid=454 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.010702][ T36] audit: type=1400 audit(1786275993.620:184): avc: denied { read } for pid=454 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.042327][ T13] tipc: Subscription rejected, illegal request [ 33.118918][ T36] audit: type=1400 audit(1786275993.740:185): avc: denied { getattr } for pid=461 comm="syz.2.47" path="/" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.119257][ T462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.47'. [ 33.169016][ T396] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.200234][ T466] Zero length message leads to an empty skb [ 33.207493][ T36] audit: type=1400 audit(1786275993.830:186): avc: denied { append } for pid=465 comm="syz.2.48" name="sda1" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.343965][ T36] audit: type=1400 audit(1786275993.970:187): avc: denied { create } for pid=451 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.346012][ T452] rust_binder: 451:452 no such ref 0 [ 33.363263][ T36] audit: type=1400 audit(1786275993.970:188): avc: denied { ioctl } for pid=451 comm="syz.1.43" path="socket:[4659]" dev="sockfs" ino=4659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.376377][ T396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.393674][ T36] audit: type=1400 audit(1786275993.970:189): avc: denied { read } for pid=451 comm="syz.1.43" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.401830][ T396] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 33.430155][ T396] usb 2-1: can't read configurations, error -71 [ 33.498989][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.649627][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 33.658080][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.668318][ T45] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 33.677568][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.691625][ T45] usb 3-1: Found UVC 1.00 device (0000:0000) [ 34.020470][ T45] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 34.030191][ T45] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 34.040514][ T45] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 34.049213][ T45] usb 3-1: USB disconnect, device number 6 [ 34.075100][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.089965][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.104691][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.120062][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.127623][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.142460][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.157184][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.172891][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.187582][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.202251][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.216963][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.231639][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.246496][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.261176][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.275845][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.290516][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.305154][ T10] usb 4-1: device descriptor read/64, error -71 [ 34.311505][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.326198][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.340867][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.355548][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.370416][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.385115][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.401689][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.416373][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.431181][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.445943][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.460872][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.475597][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.490463][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.505153][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.519856][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.534615][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.551196][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.565879][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.581001][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.595708][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.610356][ T10] usb 4-1: device descriptor read/64, error -71 [ 34.616827][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.631731][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.646429][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.661145][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.676028][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.690866][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.705758][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.721787][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.736936][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.751660][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.766506][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.781192][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.796073][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.810778][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.825504][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.840357][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.854994][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.862978][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.879058][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 34.899709][ T506] fuse: Unknown parameter '1UCL)MQtaLҝR5Me>!hR\r{ER؋<;W:}%)J7Xx*V5<"ͲP6"Y:Wo&*X|^}' [ 35.011963][ T10] usb 4-1: device descriptor read/64, error -71 [ 35.044765][ T527] capability: warning: `syz.1.67' uses deprecated v2 capabilities in a way that may be insecure [ 35.130210][ T534] incfs: Options parsing error. -22 [ 35.135426][ T534] incfs: mount failed -22 [ 35.139836][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.188983][ T396] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 35.248985][ T10] usb 4-1: device descriptor read/64, error -71 [ 35.288987][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 35.295172][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.306105][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 35.315924][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 35.325869][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 35.339717][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.340145][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.348732][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.348752][ T9] usb 3-1: SerialNumber: syz [ 35.361102][ T396] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 35.367802][ T10] usb usb4-port1: attempt power cycle [ 35.372352][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.384819][ T518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.386751][ T396] usb 1-1: Product: syz [ 35.394662][ T518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.401907][ T396] usb 1-1: Manufacturer: syz [ 35.406352][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 35.413014][ T396] usb 1-1: SerialNumber: syz [ 35.417939][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 35.424340][ T396] usb 1-1: config 0 descriptor?? [ 35.438260][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 35.441207][ T396] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 35.454219][ T396] usb 1-1: No valid video chain found. [ 35.623799][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 35.649833][ T396] usb 1-1: USB disconnect, device number 11 [ 35.650891][ T9] usb 3-1: USB disconnect, device number 7 [ 35.720621][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.749961][ T10] usb 4-1: device descriptor read/8, error -71 [ 35.879944][ T10] usb 4-1: device descriptor read/8, error -71 [ 35.979013][ T45] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 36.119000][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.130268][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.138289][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 36.143393][ T10] usb 4-1: device descriptor read/8, error -71 [ 36.160347][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 36.176154][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.184405][ T45] usb 2-1: Product: syz [ 36.188576][ T45] usb 2-1: Manufacturer: syz [ 36.193303][ T45] usb 2-1: SerialNumber: syz [ 36.249377][ T556] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 36.281981][ T10] usb 4-1: device descriptor read/8, error -71 [ 36.389061][ T10] usb usb4-port1: unable to enumerate USB device [ 36.402147][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.411471][ T45] usb 2-1: USB disconnect, device number 9 [ 36.419054][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.539011][ T71] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 36.568979][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 36.575034][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.585171][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.594774][ T9] usb 3-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 36.604447][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.612457][ T9] usb 3-1: SerialNumber: syz [ 36.619355][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 36.628970][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.643280][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.708978][ T71] usb 1-1: Using ep0 maxpacket: 16 [ 36.715363][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.725020][ T71] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 36.734095][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.742099][ T71] usb 1-1: Product: syz [ 36.746255][ T71] usb 1-1: Manufacturer: syz [ 36.750853][ T71] usb 1-1: SerialNumber: syz [ 36.827464][ T554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.835944][ T554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.844262][ T45] usb 3-1: USB disconnect, device number 8 [ 36.883098][ T564] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 36.926236][ T567] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 36.975403][ T71] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.977273][ T573] netlink: 'syz.3.85': attribute type 22 has an invalid length. [ 36.997001][ T71] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.004598][ T71] usb 1-1: unable to issue vendor read request (ret = -71) [ 37.021981][ T71] usb 1-1: unable to issue vendor read request (ret = -71) [ 37.030291][ T71] usb 1-1: unable to issue vendor read request (ret = -71) [ 37.037899][ T71] usb 1-1: unable to issue vendor read request (ret = -71) [ 37.047652][ T71] usb 1-1: USB disconnect, device number 12 [ 37.060854][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.259010][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.408988][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.439918][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.449027][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.460155][ T9] usb 4-1: config 0 descriptor?? [ 37.558981][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 37.565210][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.576905][ T45] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 37.586141][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.594953][ T45] usb 2-1: Product: syz [ 37.602762][ T45] usb 2-1: Manufacturer: syz [ 37.607470][ T45] usb 2-1: SerialNumber: syz [ 37.613944][ T45] usb 2-1: config 0 descriptor?? [ 37.619726][ T45] usb 2-1: bad CDC descriptors [ 37.624650][ T45] usb 2-1: unsupported MDLM descriptors [ 37.673979][ T9] usb 4-1: Cannot read MAC address [ 37.674401][ T610] futex_wake_op: syz.2.100 tries to shift op by 144; fix this program [ 37.679221][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 37.700276][ T9] usb 4-1: USB disconnect, device number 10 [ 37.788990][ T71] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 37.821483][ T10] usb 2-1: USB disconnect, device number 10 [ 37.928987][ T71] usb 1-1: device descriptor read/64, error -71 [ 38.048992][ T45] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 38.168994][ T71] usb 1-1: device descriptor read/64, error -71 [ 38.179002][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.331388][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 38.331404][ T36] audit: type=1400 audit(1786275998.960:240): avc: denied { name_bind } for pid=617 comm="syz.1.104" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.382718][ T36] audit: type=1400 audit(1786275999.010:241): avc: denied { mounton } for pid=617 comm="syz.1.104" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.416202][ T621] kvm: MONITOR instruction emulated as NOP! [ 38.422178][ T71] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 38.429811][ T45] usb 3-1: device descriptor read/64, error -71 [ 38.478995][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.507346][ T36] audit: type=1400 audit(1786275999.130:242): avc: denied { create } for pid=627 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 38.558985][ T71] usb 1-1: device descriptor read/64, error -71 [ 38.614349][ T36] audit: type=1400 audit(1786275999.240:243): avc: denied { mount } for pid=627 comm="syz.1.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 38.614975][ T630] dummy_hcd dummy_hcd.0: remove, state 1 [ 38.637246][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.641820][ T630] usb usb1: USB disconnect, device number 1 [ 38.652879][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.668150][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 38.677174][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.679096][ T71] usb usb1-port1: attempt power cycle [ 38.688485][ T10] usb 4-1: config 0 descriptor?? [ 38.694389][ T630] dummy_hcd dummy_hcd.0: stopped [ 38.700406][ T45] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 38.701169][ T630] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 38.828996][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.068989][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.099149][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.106019][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.112848][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.119671][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.126445][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.133255][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.140063][ T10] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 39.147346][ T10] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 39.179199][ T45] usb usb3-port1: attempt power cycle [ 39.306584][ T10] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 39.314043][ T10] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 39.321508][ T10] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 39.331853][ T10] usb 4-1: USB disconnect, device number 11 [ 39.347704][ T36] audit: type=1400 audit(1786275999.970:244): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 39.367483][ T36] audit: type=1400 audit(1786275999.990:245): avc: denied { bind } for pid=632 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.406448][ T36] audit: type=1400 audit(1786276000.030:246): avc: denied { mounton } for pid=636 comm="syz.1.110" path=2F33382FE91F7189591E9233614B dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 39.431660][ T36] audit: type=1400 audit(1786276000.030:247): avc: denied { getopt } for pid=636 comm="syz.1.110" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.449622][ T642] netlink: 'syz.1.111': attribute type 19 has an invalid length. [ 39.459554][ T642] netlink: 'syz.1.111': attribute type 28 has an invalid length. [ 39.528982][ T45] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 39.549906][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.557007][ T36] audit: type=1400 audit(1786276000.180:248): avc: denied { unlink } for pid=643 comm="syz.1.112" name="#1" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.558131][ T646] overlayfs: maximum fs stacking depth exceeded [ 39.679997][ T45] usb 3-1: device descriptor read/8, error -71 [ 39.871752][ T653] mmap: syz.3.114 (653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.918987][ T45] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 39.938691][ T669] tipc: Started in network mode [ 39.943597][ T669] tipc: Node identity 80000001, cluster identity 4711 [ 39.950395][ T669] tipc: Node number set to 2147483649 [ 39.956505][ T669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.962309][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.109932][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.218996][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.229071][ T45] usb usb3-port1: unable to enumerate USB device [ 40.350380][ T10] usb 4-1: device descriptor read/64, error -71 [ 40.411167][ T682] pim6reg1: entered promiscuous mode [ 40.416490][ T682] pim6reg1: entered allmulticast mode [ 40.558546][ T605] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 40.571179][ T605] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.579596][ T605] CPU: 0 UID: 0 PID: 605 Comm: syz.0.99 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 40.590884][ T605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.600936][ T605] RIP: 0010:set_link_state+0x2a/0x1240 [ 40.606415][ T605] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fa cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 a8 be 26 fe 4d 8b 75 00 49 8d 95 93 [ 40.626019][ T605] RSP: 0018:ffffc9000e5df718 EFLAGS: 00010046 [ 40.632095][ T605] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888110c9df00 [ 40.640066][ T605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.648041][ T605] RBP: ffffc9000e5df7a0 R08: 0000000000000003 R09: 0000000000000004 [ 40.656009][ T605] R10: dffffc0000000000 R11: fffff52001cbbee0 R12: 0000000000000000 [ 40.663982][ T605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888101bcc000 [ 40.671949][ T605] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.680885][ T605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.687465][ T605] CR2: 00007f23709eb7c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 40.695435][ T605] Call Trace: [ 40.698710][ T605] [ 40.701639][ T605] ? __kasan_check_write+0x18/0x20 [ 40.706752][ T605] dummy_pullup+0xd1/0x130 [ 40.711175][ T605] ? __cfi_dummy_pullup+0x10/0x10 [ 40.716205][ T605] usb_gadget_disconnect_locked+0x14e/0x400 [ 40.722108][ T605] gadget_unbind_driver+0xaf/0x3f0 [ 40.727220][ T605] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 40.732939][ T605] device_release_driver_internal+0x4ad/0x830 [ 40.739023][ T605] driver_detach+0x1f5/0x2d0 [ 40.743617][ T605] bus_remove_driver+0x254/0x2b0 [ 40.748557][ T605] driver_unregister+0x79/0xb0 [ 40.753324][ T605] usb_gadget_unregister_driver+0x52/0x80 [ 40.759048][ T605] raw_release+0xdb/0x280 [ 40.763377][ T605] ? __cfi_raw_release+0x10/0x10 [ 40.768310][ T605] __fput+0x208/0xa30 [ 40.772271][ T605] ____fput+0x20/0x30 [ 40.776231][ T605] task_work_run+0x1e8/0x260 [ 40.780803][ T605] ? __cfi_task_work_run+0x10/0x10 [ 40.785892][ T605] ? __kasan_check_write+0x18/0x20 [ 40.790986][ T605] do_exit+0xa46/0x2850 [ 40.795132][ T605] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 40.801697][ T605] ? hrtimer_cancel+0x31/0x60 [ 40.806356][ T605] ? __cfi_do_exit+0x10/0x10 [ 40.810925][ T605] ? futex_wait+0x23c/0x7c0 [ 40.815407][ T605] ? __cfi_futex_wait+0x10/0x10 [ 40.820238][ T605] ? _raw_spin_lock_irq+0x116/0x120 [ 40.825416][ T605] do_group_exit+0x21f/0x2f0 [ 40.829988][ T605] ? __kasan_check_write+0x18/0x20 [ 40.835078][ T605] ? recalc_sigpending+0x184/0x1d0 [ 40.840187][ T605] get_signal+0x134c/0x1490 [ 40.844670][ T605] arch_do_signal_or_restart+0xbc/0x700 [ 40.850192][ T605] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.856323][ T605] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.862460][ T605] syscall_exit_to_user_mode+0x57/0xb0 [ 40.867912][ T605] do_syscall_64+0x63/0xf0 [ 40.872309][ T605] ? clear_bhb_loop+0x50/0xa0 [ 40.876964][ T605] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.882835][ T605] RIP: 0033:0x7f3444d9e0d9 [ 40.887231][ T605] Code: Unable to access opcode bytes at 0x7f3444d9e0af. [ 40.894238][ T605] RSP: 002b:00007fffaab04488 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.902627][ T605] RAX: fffffffffffffdfc RBX: 00000000000092ad RCX: 00007f3444d9e0d9 [ 40.910572][ T605] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3445025fac [ 40.918519][ T605] RBP: 0000000000000bea R08: 4000000000000000 R09: 0000000000000000 [ 40.926468][ T605] R10: 00007fffaab04590 R11: 0000000000000246 R12: 00007fffaab045b0 [ 40.934415][ T605] R13: 00007f3445025fac R14: 0000000000009e97 R15: 00007fffaab04590 [ 40.942367][ T605] [ 40.945363][ T605] Modules linked in: [ 40.949242][ T605] ---[ end trace 0000000000000000 ]--- [ 40.954677][ T605] RIP: 0010:set_link_state+0x2a/0x1240 [ 40.960140][ T605] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fa cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 a8 be 26 fe 4d 8b 75 00 49 8d 95 93 [ 40.979720][ T605] RSP: 0018:ffffc9000e5df718 EFLAGS: 00010046 [ 40.985770][ T605] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888110c9df00 [ 40.993731][ T605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.001677][ T605] RBP: ffffc9000e5df7a0 R08: 0000000000000003 R09: 0000000000000004 [ 41.009624][ T605] R10: dffffc0000000000 R11: fffff52001cbbee0 R12: 0000000000000000 [ 41.017572][ T605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888101bcc000 [ 41.025535][ T605] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.034442][ T605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.041000][ T605] CR2: 00007f23709eb7c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 41.048967][ T605] Kernel panic - not syncing: Fatal exception [ 41.055132][ T605] Kernel Offset: disabled [ 41.059435][ T605] Rebooting in 86400 seconds..