last executing test programs: 2.076910568s ago: executing program 1 (id=184): r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\xff\xea\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 2.076298528s ago: executing program 1 (id=185): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773abf3df90de567196d0001000020000904c40102fffd0180090502020200000905040200020000000000"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket(0x10, 0x803, 0x0) splice(r3, 0x0, r2, &(0x7f0000000040)=0x4, 0x100000001, 0x2) recvfrom$inet(r1, &(0x7f0000000100)=""/226, 0xe2, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.564068548s ago: executing program 1 (id=189): setreuid(0xee01, 0x0) setrlimit(0x5, &(0x7f0000000280)={0xc801, 0x10001}) syz_clone3(&(0x7f0000000400)={0x10000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000200), {0xa}, &(0x7f0000000240)=""/35, 0x23, &(0x7f00000002c0)=""/226, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r2 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) setpriority(0x2, r1, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x82) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x27, 0x0, &(0x7f0000000300)) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000004c0)=0xd28) r5 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000006c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000008c0)={{r3}, r6, 0x10, @unused=[0xffffffffffffffff, 0xfffffffffffffffe, 0x8001, 0x6], @devid}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0)) 1.556875689s ago: executing program 1 (id=190): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) utime(&(0x7f00000001c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) 1.488791463s ago: executing program 1 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x28, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x2000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 1.486369673s ago: executing program 1 (id=192): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r2, 0x82, 0x81, &(0x7f0000000680)="d537f11baac1a88dde009c9e3b77824a33c7605dab5bab035bcb88eb00437920bd0b728bf842bee34e3c5717014c818015f04d90d4dc59ef93195ef4f4c5689e0d1dc382c9fd078a81c17e78410ace89adf1a0545806ef6dfddba49b5345f62c60f5aef44446c9ba7e285864226eea6169b1878a00100000000000005ae0654bcb") openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 728.811977ms ago: executing program 2 (id=195): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x6, 0x48, 0x65, 0x0, 0x11, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x4}}}}}}}, 0x5e) 728.508607ms ago: executing program 2 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x4000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff0000002800"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 726.574537ms ago: executing program 2 (id=197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87}, {0x6}]}) 696.600119ms ago: executing program 2 (id=198): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0042, 0x0) (rerun: 64) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000070}}], 0x20}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x83, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x420, 0x7e, 0x4, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x10, 0x6}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0x5, 0x0, 0x20, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x402}}, {0x59, &(0x7f0000000300)=@string={0x59, 0x3, "2b670583c364c92070ef3c80a4e4ae37d6b1467bd72c6c8018359ca26b3d63c703913db9fe166ccf5e828981b0c528671c1e46264677224d71ebf4cde0da01b332675f6b92834b9b1019b0bbc0c89a878d3f68ad544458"}}, {0xb6, &(0x7f0000000380)=@string={0xb6, 0x3, "266762ba769df30866156029acfd7b93ac1a45fb0a795adffc2d9b086c475da5af3c02a3e76af66636a73de7e3b2051a8be39a8f2471c7ea84517d391bf85a4bff6b08cc57ff0498388bdd936d444d321c1a9507748623b017e1930a956e7a57b8f9f985c1ac968caa49e5c67c2367f3d6a2ae570fa260cc3bc7ea0e0585d72d27535809ebb46a3ce0ffb7847af50985f964091d5015d2f03f2c8d313b3d44e5dfc3133a1606848f69f10e3d7fdbb68a3437e9a6"}}, {0xce, &(0x7f0000000440)=@string={0xce, 0x3, "f8f775bd0b2fd1b544c37e338d1611fcac67c314e5efd87dfcc8dc7bbb04fdd15ef445622821aa5764605051421edc3fb6fe15f5658d61ead7c70ee4ef080ee0b1eaacbcbc96141e84f801e4b6cd392de121a6ba8f541e38c652a6c9448869dc4487f8c3d454da7c0b27ac68a541ca5978234d91f8a954904b351a0174275442888c8a19439871013defc2f8bfe2be90badc5de1904cde209395ac455428b21e332b34393d8a093936f0b351e7d942ff989b10cb656d7fa20f1f57a316d05440e193477d3a2cd34f1f8196d9"}}, {0x97, &(0x7f0000000540)=@string={0x97, 0x3, "1a2f3ae409ad29b0afb11c001bbdfc7dc88e90d5995f36d50a6f4b71f51a483ba49b71da541409412836972b0c2f59f73cbe1120661f5adb8de49a252b64c371ad79b112e0ff24e26a7bd8b8b63a34652a398b70ccc6053e74b1811e9aea1a09e76df3c2f0fee674b55c8b0cabed740346721d6bf9413bcb5df275e972cb72aad25a9bf93c3bf9cdbccfb32a31a4669a6139db5731"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) (async) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) 635.313143ms ago: executing program 2 (id=199): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) cachestat(r0, &(0x7f0000000000)={0x5, 0x3}, &(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009e, 0x1}}], 0x20}) mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x9, 0x7, 0x31237648, 0x1, 0x2, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r8, 0x4068aea3, &(0x7f00000001c0)={0xcc, 0x0, 0x1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x3, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x16, 0x1, 0xe}]}}}}}) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a009aad9d8851d0010000000000000000000a00006e0800939adbed591633ac153877ad3b9393210333e307f01fb7bcdac70819bcd6dd21ebca30a20dae08d603f6245d2371032faec5e11cd38ed63bde4a5982c806a367bba4a200e86aa4bac001601a188e7d8fa6cd0a67181ab3bccef35a00025cf9ff91a5785eda9a311ef07d21b0844b06736cbbe1ca4a9785d6955677"], 0x1c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="0080"], 0x14}], 0x1, 0x0, 0x0, 0x24004011}, 0x20000000) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x268040, 0x70) 487.328981ms ago: executing program 2 (id=201): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001000000000100002000000101220500090581031000000000"], 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) r2 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x101) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) accept4(r1, &(0x7f0000000300)=@caif=@dbg, &(0x7f0000000380)=0x80, 0x0) read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff14000200475400f6a13bb10000a8880065584803", 0xfffffe4c, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x40}, 0x14) setreuid(r4, r3) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000200)={0x1f, 0xffff, 0x2}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0xff, 0x5, 0x5, 0xfff}, {0x4, 0xb, 0x0, 0x7}, {0x5, 0x7, 0x55, 0x9}, {0x53, 0xc5, 0x4, 0x3ff}, {0x8, 0x0, 0x2, 0x8}, {0x5, 0x2, 0x0, 0x9}, {0x5, 0xa, 0x4, 0x1}, {0x6f6, 0x6, 0xd9, 0x7}, {0x1a, 0x33, 0x7, 0x6}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 482.549932ms ago: executing program 0 (id=204): madvise(&(0x7f0000497000/0x3000)=nil, 0x3000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000000) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) (async) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) (async) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$rtl8150(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5112"}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="2012db00"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341) (async) write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) 436.799224ms ago: executing program 0 (id=205): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x6, 0x48, 0x65, 0x0, 0x11, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x4}}}}}}}, 0x5e) 436.265445ms ago: executing program 0 (id=206): r0 = socket$can_raw(0x1d, 0x3, 0x1) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) dup(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r3, 0x5188}], 0x1, 0x6) r7 = open(&(0x7f0000000080)='./file0\x00', 0x81, 0x1) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x62}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x5f}, 0x0, @in=@private=0xa010100, 0x3506, 0x4, 0x1, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80001, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$nl_route(0x10, 0x3, 0x0) 436.011114ms ago: executing program 0 (id=207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 431.779935ms ago: executing program 0 (id=208): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0x0, 0x80000}) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x84) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) (async) setresuid(0x0, 0x0, r3) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)={@loopback, @initdev, 0x0}, &(0x7f0000000300)=0xff2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="7f000000000001000000000000000000ff0100000000000000000000000000014e2100004e24f9d208f88ff27743425e3ae72b00090200206001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000002c001300fe800000000000000000000000000019e00000010000000000000000000000000000000002000000"], 0x160}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) prlimit64(0x0, 0x9, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r12, r11, r12) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 384.275307ms ago: executing program 0 (id=209): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x2f, &(0x7f0000000380)=@string={0x2f, 0x3, "eb84a476b7673e7f81bc10d37e6c05d4dfcf57a9d554b67807954886678f54f70032c68c070c4595f40402ec14"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 122.410992ms ago: executing program 3 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xdf, 0x3, 0xb3, 0x81, 0x2d1, 0x3, 0x6, 0x9, 0x29c, 0x38, 0x289, 0x10000, 0x1, 0x20, 0x1, 0x4, 0x0, 0xffff}, [{0x4, 0x8, 0xab, 0xa56, 0x7, 0x6, 0x5}], "8a9576d164d6a5d8d241ca4cb87397e701c5b26b59b4d4fe1cfe3cf79f868e857662cec631", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x77d) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x40, 0x2, 0x0, 0x2, 0x2, 0x3, 0x2, 0x115, 0x38, 0x3e3, 0x7, 0x0, 0x20, 0x4, 0x7, 0xdd29, 0x4}, [{0x2, 0x0, 0x5, 0x7, 0xffff, 0x2, 0x7, 0x400}, {0x2, 0x7f, 0x7, 0x200, 0x100, 0x7, 0x2, 0x80000000}, {0x70000000, 0x2, 0xaa, 0x3, 0x6, 0x4, 0x8001, 0x2}, {0x6474e551, 0xbd8, 0x1, 0x6, 0x40, 0x5a, 0x9, 0x5}], "98b5454dc214c27a1355199d60622f8daccc45fd2455a1b2365adcd3f4a64cb360b7f779c0b9f8cbaa70784495accc93f2", ['\x00', '\x00', '\x00']}, 0x3e9) clock_gettime(0x0, &(0x7f0000000d00)) (async) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000d80)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002840)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002800)={&(0x7f0000000ec0)={0x18f8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1858, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x329, 0x1ff, 0x7, 0x1000, 0x8000]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xfffb, 0xfffe, 0xfffc, 0x27, 0x80, 0x6, 0x1000, 0x6, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x27, 0x7f, [@cf={0x4, 0x6, {0xff, 0x1, 0x1, 0x7}}, @cf={0x4, 0x6, {0x5, 0x6, 0x2, 0x2}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x20d, 0x2a, [@ibss={0x6, 0x2, 0x5}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0xc6, "8e652057cdee64f5532495ad3d08186f5f56e83f4009d467888c6effc784bed574651f77ef80e190e4258fce381d094313dda47e5dad66319d2a994b0ca04d0f67f6c54a6e4c18d4668844d25625a23b4f5fe7eff8f7f5d89545ee48382e7ac2a203f46ef29422d9dbb09e3eb0a7733957b34c6db627c1eb0e756e222f5ea70b1a877ca8e1b3821751960fbaa826a76d85e1ec38bfdf01861c91fc70f07c678b7fabb9e5f4442e2b084486792e860e7d5b289f8c08f1cf7c6ef352138c92d0214c3736dcccd2"}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x4, 0x0, {0xfffffffffffffffd, 0x7, 0x0, 0x6c, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x0, 0x5ad, 0x3}}, @perr={0x84, 0xee, {0xa7, 0xe, [{{}, @device_b, 0x0, @void, 0x18}, {{0x0, 0x1}, @broadcast, 0x7294c631, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x2b}, {{}, @device_b, 0xfffffbff, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x40}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x2d}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x1}, {{}, @device_b, 0x1000, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0x75b5, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x1f}, {{}, @device_b, 0x6, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x908}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x3a}, {{}, @device_a, 0x0, @void, 0xfff9}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x77, 0x9, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x9, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x6, 0x58f2d92e, 0x7}}, @chsw_timing={0x68, 0x4, {0x7, 0x6}}, @chsw_timing={0x68, 0x4, {0x3, 0x1200}}]}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x78, 0x2, "7c1052420e833f627b99da763dddf9b3021c5cb2ece22fad73f2959e1719cc8e33b42a247a95c5d719494b07caf7b14057134bddbb63c11df68dadaf810d8d6d55ea0d0113a7c0c026a93bafc386229dfc351090466495093df19838f309de131918d546db59621bcc1c38857609c5222f168635"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x52, 0x2, "43153d188607011ce384e3a4071bbb76d509c30ed3e00a87a96d6a34671db04b9f7cf6a5f8b0467dc2d1f1663254f0be887ece2818665198b61ee1edcc4810267dfedb60efa2b3417b516c81374e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x203, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7b, 0x8, 0x7}}, @prep={0x83, 0x1f, {{}, 0x7, 0x2, @device_b, 0x8, @void, 0x0, 0xed82, @broadcast, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @tim={0x5, 0xcb, {0x10, 0xe0, 0x4, "92997b2bb30d81c8809064a531195772d294d904df8fa904736c16390463c37af0661744801743fa0b7f9978b131fbd37935a975be6f432d864e655e73fd18443d368030cbfdbab45573f6875b2a249a968c6cdf51f2a13a80e54cd88fb91e06fb2a9fdbd08850d83096300f33e46775f1d538f3798938625b79008c8ff95642494dad853fb27e69ff34dec1001d6fe82443fff85838efe10ac24bd6aea7a26f15c4d10c38e3357285b071868085ad4f7a962a1f71f85b181c04d8753e79513746798320fcbb357a"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @preq={0x82, 0x83, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x5, 0xffffff36, @device_a, 0xffffff20, @value=@device_b, 0x3, 0x595, 0x9, [{{0x1}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_b, 0x7f}, {{}, @broadcast, 0xbac}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_a, 0x1}, {{0x1}, @device_b, 0xc86}, {{0x1, 0x0, 0x1}, @device_b, 0x2}]}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x7f, 0xff, 0x7, @device_b, 0x8, @value=@device_b, 0x7fff, 0x7, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0xf}, {{}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x40}, {{0x0, 0x0, 0x1}, @device_a, 0x6}]}}, @preq={0x82, 0x25, {{0x1, 0x1}, 0x52, 0xf5, 0xce12, @device_b, 0x5, @void, 0x5, 0x80, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x7}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x3e, 0xf, [@cf={0x4, 0x6, {0x0, 0x3, 0x9, 0x3}}, @peer_mgmt={0x75, 0x6, {0x1, 0x6, @val=0x8, @void, @void}}, @dsss={0x3, 0x1, 0xb3}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @supported_rates={0x1, 0x5, [{0x16}, {0x48, 0x1}, {0x30, 0x1}, {0x30, 0x1}, {0x16, 0x1}]}, @supported_rates={0x1, 0x7, [{0x3}, {0x12}, {0x30, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x9}, {0x30}]}, @challenge={0x10, 0x1, 0x3c}]}, @NL80211_ATTR_IE_PROBE_RESP={0x121, 0x7f, [@peer_mgmt={0x75, 0x18, {0x1, 0x2800, @val=0x4, @val=0xd, @val="6654ca8a92cec77697f1329106cd7f20"}}, @random={0x5, 0x6c, "7c0abff4cefae4f425175f6830eeef400c922314d035e32c6c762aa69dc32c5741379f7ac99b857f43d95a6b73e8aabcc0bec7ae80eb2a98029802587c69ca7f42849259367504705c50ee83d63c65f61bfaf7b6dd8dd630c20462f3994d18cc078c2baf2dec7e3e8b2d78a5"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @chsw_timing={0x68, 0x4, {0x9, 0x70}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0x3, 0x20}}, @cf={0x4, 0x6, {0x7, 0x29, 0x9, 0x7}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @gcr_ga={0xbd, 0x6, @device_b}, @random={0x2, 0x5d, "56c9e20e21037000a5a3a2a85b6efd7e8bab323a6510e83c36db15a07eb04078199415b2e52e35ea0aed01a7700a00c1d1755edaccd62c6cd14bc2dac4430b02bbe80f0c46544ecae42993ebc1e80a74e4bd391be023dbc4130a64e353"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x40, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xa9, 0x4}}, @chsw_timing={0x68, 0x4, {0x5, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0x10, @val=0x3c, @void}}, @preq={0x82, 0x25, {{}, 0x45, 0xff, 0x7, @device_a, 0x1, @void, 0xa, 0xfff, 0x1, [{{0x1}, @broadcast, 0x9}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x9a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_b, @from_mac, {0x3, 0x61e}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1}}, 0xfffffffffffffff8, @random=0x8c, 0x2, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0xb0, 0x2}}, @val={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x6, 0xf, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x3a, "4ae24bf36a709c905ee6b52778ea1ecd97c4ae75a02df8f104046c26def635a8cd9c6b6cbaa6822a8a5e3b95577d67907cb05ed2fddf090622b4"}]}}, @NL80211_ATTR_BEACON_HEAD={0x4bd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @random="1821be7b9645", {0x5, 0x5}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3}}, 0x2, @random=0x6, 0x840, @val={0x0, 0x19, @random="6011fbce5e877b94dd4454be30c1df9a68e61e1d09a0c24404"}, @val={0x1, 0x6, [{0x6, 0x1}, {0x4, 0x1}, {0x24}, {0x12}, {0x18, 0x1}, {0x9, 0x1}]}, @val={0x3, 0x1, 0x6}, @void, @void, @val={0x5, 0x95, {0x7a, 0x41, 0x1, "20d2fc15664cfba39db1afc0dd3579468c67d1f5bd77cf408f6fd7d572d310827f1be0de1bb54807e4f8e37cfdb1f402e6c820d72524361c2fbcf525808969188a3937c58d7316e258ce96f598c6563d523a5117cfa9c731867eea14e06c79a9040f1f843735149d9a2636a4903ad744bfef79a70578bbe1aea4bad2c48876d58112c759003417b5fd3de35a6eb9177ccf8e"}}, @val={0x25, 0x3, {0x2, 0x30, 0x80}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xa5, 0xcc}}, @val={0x2d, 0x1a, {0x300, 0x0, 0x6, 0x0, {0xd, 0x2, 0x0, 0x2b3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0xfffffffb, 0xe}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x8, "4cc59fd65ff450be"}, {0xdd, 0x91, "8b0157dd3b47c6213f2af943797b033d8512b7cfe48b220e91b6f5fc9f344c83773c67972bf9d31d22ddc10f09cd1043e5290a3bbc311384c560c4a4c201653556b5230861c902ee775ef534f38b41d85e7dad7136fe7a6cdde23a0693f14a126462a2fa85d0256d0937920d76b7b2ce8f9989224e86e82d99341922b5e3ed4bd56d2f57abe5cf8cee3a09294327a6ca54"}, {0xdd, 0xaf, "159baabba8aea102180940442fdff058a06c672d6d43be082a9fa1dbe5c6314d5b852fc52778639c5062f1374f5c649b0ae0f638c4850429cba13c95d4637a17dd348dbda432d6d3a512e57fbc0e10a2a06629860eaafcebcb02a29e0f5f2e0dda57c69b70fb843c4929bf526b0f21fe68dd1b2519d9ddd9197e3c49dacb94552eb62da387c75627555eeb0834a4e739e289fbaa0d70e0cb2453cc7158076af5db7a93b81e9569232871861de205fb"}, {0xdd, 0x88, "7e0e28621273649f37df7be31df5fd1f41d12e07cdcd09665e515bdd998e4f51b4c374c1da1e8391a33e154a2ac3d2aaf55b8938f38833f6411ce61ad2c1e7dcf9ff0ff102b0174eaa448828a7806e7b8f96be74b9f43d2393207359326ce54dd0bf5943d4d8a6a9431888eecf69ffa5e5230f1be778dbef2818b066d9f8a75cb9477b25b647f6be"}, {0xdd, 0x76, "1feafa52803a673940323070c7c47308a51e0c10cc2d3f5e16e39952004c0ffdfb8ebe8f378d7f8c2d623bacaed6d1c430f34af535d9728f190b1b8139f11f42ef166feef17ff21753c1f4b49e57d1656a2d3305a806a149998dcfa5edfcdc0f3781085e2ae2df419ed3eff605fc48c8f8ecd871145c"}, {0xdd, 0x50, "daa780d5e7cc9a423f045316c2556e1cb3d0f65260c2e0d2c0583cc44180fb274a46480da4e36413ac7e1a7260457a69be7a53d0141a7b7ce156bca5c718394a48fd56433a2645f0558ff2fb60bf5fd3"}, {0xdd, 0x42, "7d8301f9ab30094a706907f4b4a8ad7f7ffcf19d21ca696a5fb9aea1934a67c9f0bba77a2be9543a2412ee5aa1295e308ebdb7b23a89277f9089527b94476c2be409"}, {0xdd, 0xbd, "7695e0210d28a2436a755717921996540634a7bb88d6ed0018fca392457beeed532e2bf764fac24a358cda4e8abc98f57e4fcf24fa00ebf3b65b7d7370407ba78a2150e42a43771b7d8d95f0332b35e0810a679365abd4206d33e18b6cb9eb20d9216f88b0f08a3d8a9ff199a40ca7f706c73038afcc9aac2524d0402753dcbb41a7e16e3bdb2e4cf6cd4f339b3b8e7427ef0e6a67c848524fa0a53315d8874b4c8f07151d6eb55a34e2cd20426d22e571bdd14f5ee6aea36d706fdc60"}]}}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@challenge={0x10, 0x1, 0x9d}]}, @NL80211_ATTR_BEACON_TAIL={0xec, 0xf, [@ht={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x5, 0x8}}, @challenge={0x10, 0x1, 0x84}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x7, @broadcast, 0x53bb, @value=@device_b, 0x400, 0x9, @device_a, 0x6}}, @link_id={0x65, 0x12, {@from_mac=@broadcast}}, @dsss={0x3, 0x1, 0x4}, @random_vendor={0xdd, 0xd, "65a1dca28b4c6383a94ced545a"}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @void, @val=0xc, @void}}, @ibss={0x6, 0x2, 0x3}, @perr={0x84, 0x6e, {0xe, 0x6, [{{}, @device_a, 0xec3, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x24}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x14}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x15}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xde, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x9, 0xb6, @device_b, 0x0, 0x7, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x1, @device_b, 0x1, @value, 0x8, 0x3, @device_b, 0x2}}, @sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0xfa}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val, @void, @val="6cbfc4dab45d5179a9895708a80a60bd"}}, @fast_bss_trans={0x37, 0x7a, {0x8, 0x1, "84025ebbeb1120f60a95339c01451ace", "cc147c14c3a4d76fac7ed59b9fd239e126c710c0fdc1e1d1cf08037ffa5afb44", "336ada7f9c97283bc48cd70f026cd6ee1b81f98932f4ac1a2e6ea985b6a11327", [{0x1, 0x26, "003bb2f8947e47593354900ffaaefcd5914881b70bbcdfa88a1af7cc11c425e07baa8fbe91cd"}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x4a3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x98}, @broadcast, @device_a, @random="0cd755ee496e", {0x9, 0x8}}, 0x5, @default, 0x10, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb002788c40b54fd0, 0x1}]}, @val={0x3, 0x1, 0x88}, @void, @val={0x6, 0x2, 0xb2a}, @val={0x5, 0x22, {0x81, 0x5, 0x3, "ae5c7c1b7b320e744b65f456eb12a7734de1969a8d6c30366e491adf95f362"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0x8, 0x80, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x654, 0x1}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x9}}, @val={0x76, 0x6, {0xd6, 0x10, 0x33, 0x29b3}}, [{0xdd, 0x38, "ad0b00c58f2dcf3096877e54c69372d70bb36b970ec03becff3c70b4b35f89021e333afbaa46ab0613dbf1f1371a0f866a61fa985396be4e"}, {0xdd, 0x9d, "21f77c0f4533e4b6eaab3f48bbd22140685940d5641bf0484d7c40052d100587540dbb97cb7575779e44d5da3d6c87fb383c35a665bb4fce16a05f9fbaa3fb6c7b166306fe1252865e4ee8e0b5daa3bc181d2eb341b8042f4be569524f873154d0965588c9015af57d3040b5d8de69ebb88b5ee56f2df1ba2b63dbe2ae0cb0cccdbe6ae6295535db6533b58482ab083e8a7b99952f8055a32ecc7cbc86"}, {0xdd, 0x3f, "4d903bbde5f4727a702bc37396bb8bb1ad44a08f848b1bb42ed336650c6fc82907f52702c2f09b65e2da25c68d669db110337f818994c803cdd65452b0ac41"}, {0xdd, 0x92, "948e32830211c178c81d3b99c46efb827abffff07894efd15327e543cf14ce688954a599f1d0fa91712ab83c181eec77e5c67daeca7dde1cce4e26ed52ec28786a03cee842b388e9d9a750099da4f871aaa1dc9996dcc76c0d1193f1129767f249285be00c9aadad58eedba788bfbe3f1f70ce3f98d423f7a82cdcfceeea6b759a4a2e73c6787bb1d9bf3e612fa5a1b12def"}, {0xdd, 0x96, "9163c64b1f4bcb40ab9f6141654697557276c5370be28ab03e9b865d1079ead9cf66f36fe69ee7ba7d62ddfe59d0d678c1b8fc437feb7b7a4932b6623282a7d4a2740b359f0170a702937ef029a8d00900b974e26fdcf715bf842d21bb56cd85c517e66275d28707ee8672f82557912b6b44c4d0e3e09b8dfb64df498e777aff82ba059fda2336a5f5e7d20db6e5ef82a938e2f4c2b4"}, {0xdd, 0x44, "bc89d2459b7a6cd248c44a4780e79440e08e58f07488af900d0becffe5ae6ca7b3bceb420e8254dac14924c6a68c79515758fbacc010d491870e1714246ee203cf8201cf"}, {0xdd, 0x9a, "a5ed436ba75bedbcaab73b4e64a4b3f6837f624064fefe3d5644ac4aff661ebc13f5bbb606d044e984b25c49f9658badd0d638a1888bd3c678e8d507a72096656c13d564f1aeddf62c54ff8c5b23cc71371e4fd325c042a4d39b91914011d506c4a6214f92071ccf4adf883f2c34dd9c52d2b4c10d7e6b5c5f8ef26460579a8b35649456917c8cc3e37eef134b118ca9eaf8cd6be520dbc6926a"}, {0xdd, 0xee, "a6ac345938c18156497e89db8b9f9c2e83eaf46fae7d783695aee852398861924100a3b17d6e4801317d865926e38c953536df4eac6d8ad8ae1d99a4735f10e2843c8b7c66615e9cab26c5a98d474a1dc6119415528a6760606bfb75d3d217fb9c39a4c362db35fd58f482b16c58d6a768848ed5365f6e24e3730ca9229d01cb136f31d4a04eb0665151eb66cfafaf19e7a8d245fdcf63070f6de8e1f65cfe2593fb67753de34a34799e6b2e6b31fe63872d3013196cc44099379db46b736f5a9bbca0942fc77bb022ae2c0f4836dbc0b4d84e81757fe18ef437c171fc0d785562666e00181dd40dd9be17fbc1d0"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3fe, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8fb}, @device_a, @device_b, @from_mac=@device_b, {0x0, 0x5}}, 0x0, @default, 0x1804, @void, @val, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x2, 0x8, 0x2, 0xc40}}, @val={0x6, 0x2, 0xc}, @void, @val={0x25, 0x3, {0x0, 0xab, 0x5}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8}}, @void, [{0xdd, 0x15, "8354f76fa35ca23ab16c00912162d21e5785131f2d"}, {0xdd, 0xc5, "efbad8140d913f20f76f2b79af5f0571bc933541df70eb433d2b86b1d2ddbb74cd4506dde010374439b9a660e0a037ffd1c87777415d1920d75f8d4f1712591e5df5372359a7237a5eb28d744b71aff4b901a98bae05e3130ea50e4889a20ea744d01a07fc72aa5f1d3cf19be6029c406e358a09a4ed8066f17cf15ab1bc2abbf99993b16f0ca6f5c4a1f504382648763f1f942b14a809e091c28d8dbcc113adca250559ac8c3442cc9328fa3980589b6ca973cafd8dd15f4cef58ce67e0034b23c6d4d3a8"}, {0xdd, 0x21, "442558550ca51d274c485d11b3e04066a03e29f8bcdb6785e76dd8b7d03051d41e"}, {0xdd, 0xf2, "758fff921351eda6f7da2befcab8515063260d0e9387146915af38087ec5a9f79339ff04f2f186ec833f65df6ea7d67cca9ac6d4206bac1deab1b5e912a032961fbabfb1d0cc6b99d94885742883ee20fe4bcea230cf2cffa47270328d9c9f2686b5c6c492cd50d2dff93b5241da62af237881f72a95c25d63fc865893ef33037f4a130bb4bc257d6e6a72c27df24acb5afdfe5d11c6e082b6b2ef7a0292b60c877c1a9496f926c99ccb1b845d78aac2e0914fb9dfb9f9934a81955f5cd22f5f51837da59b9d44dbb139f5af26ea0dcf36ebfc29c51eb3d615ffeaf6bf2b145116a4eb8993c2a9378fa4f859132783b80b18"}, {0xdd, 0xd3, "d2b0d0c15bb0819de57d6130de06ef5cbe2f707c647f6bc6828019fbd77246749b4ed7c6dab7d24667a3abfa8865474d31f9353e6c85d38924b4b56f4626377e7f68daaf837d466cbb3dec3ac33ae88e122a47596d45440ba8aac61fdefbf9a3da8aa001663708c920f2917ca086800f31604d627691c8b7a0bbcd7c680ab67e6be15e631f1a33c26c53110f28ea3d8a60d6a1cd4f40c3841aa105e03bbfe151bb9a068da6afac7c23522a6b92fcd026893d22dfcfd3c6d98fe1cd1ee09a7889ce1c8070bf457a36ebecf6348f8608bb8945a7"}, {0xdd, 0x4b, "a3056b1ab801602bc175b6a5404e5b9813ec1885f4d1d22c6b5f502758c39565dc73b085c50d405fe423277418433599bcfa082cbcdf548f045427fdc479ca3c42442a733922448bd01562"}, {0xdd, 0x96, "b1a64bffef7cba995372def0e8654c65973a04c19e360b8cfed4890e2205a236626fc9f8e279c05a8c6e7380dc911bbbefe91e8495b3f9c8a148215667cafa77aa4263398d9e20561f710e4b9080827a2c5501c11b7056b88aaf1907239a76fd9b7f0f8d61984f077b6cfca80457659dc9fe88da99e91eabd5fd0ba9377ec15383385263b7b0c1c0a0ec8fadbc54734e131bd82f6a44"}]}}, @NL80211_ATTR_BEACON_TAIL={0xf3, 0xf, [@random={0x22, 0xd5, "82e5a52d46daa0fc79ac128654999b0f6fb587b09e7de6a9a41e862993386e9a03156bdf7d9b3313abc11e160636e3e0f1d0303d3140d2dd0bb210676e29bd0c4228d4f6de4af010e45fbaf734a5cb0c4d2e0d6fbe4dbb48460e2a99147389c4bda0e9276d593ec915f261cc350cbeb3a5967d38fda3be7b4b508ef92fd5ef4caf7788684bb75a94472fbb82f17b9b85d91fc1014530ac52776c71860301f7e4d8ce91a5df86d7475ef61608e6baa699f7c965e6a99968465c32fe9b6964c76bdf1ed1fd4b0159d9e2836e0834421607952db3eb7c"}, @peer_mgmt={0x75, 0x16, {0x0, 0x40, @val=0xc8d2, @void, @val="9069375c56da861ce4f822fcc0f1fdba"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0xd2d9, 0xf636]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x4, 0xfb95, 0x2, 0x5, 0x9, 0xd6, 0x2, 0x7fff, 0x8, 0x24]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x73, 0xf, [@mesh_chsw={0x76, 0x6, {0x6, 0xf0, 0x2d, 0xc}}, @tim={0x5, 0x62, {0x9, 0xec, 0xd, "bfd09ecae0ebb58b1d377ad96924162943f5251db3aeb5b0773b1a29639ea607f762d4f8054215f7637440ed6aa756ce0fe6cdde9636c03a9f705369b3a7e02050a3903b514d66eaae03719404a133c70d2c9bf7d1399400f7124ec52a0715"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]]}]}, 0x18f8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000028c0)={@multicast1, @local, 0x0}, &(0x7f0000002900)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002a00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a80), r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @multicast2, @multicast2}, &(0x7f0000002b00)=0xc) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000002c80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0xac23493203b74091}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0xd0, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x58}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5b}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0xc003) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000002c80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0xac23493203b74091}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0xd0, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x58}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5b}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0xc003) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002cc0)={0x0, 0x6, 0x1, [0x633, 0x1, 0x6, 0x8, 0x80], [0x0, 0x100000001, 0x7, 0x3, 0x24, 0x3, 0x4, 0x5, 0x3, 0x9, 0x9, 0x1, 0x4, 0xc, 0x6ff, 0xe, 0xbbcd, 0x5, 0x400, 0x4, 0xfffffffffffffff7, 0x3fffc0, 0x3, 0x7ff, 0x2, 0x7, 0x6a94, 0x1, 0x8, 0x4f5, 0x7fffffff, 0x7, 0xf, 0x2, 0x1f99, 0x5, 0x440, 0x0, 0xff, 0x2, 0x7ff, 0x1, 0x6, 0xba8, 0x5, 0x0, 0x4, 0x8001, 0x8, 0x0, 0x9, 0x10001, 0x0, 0x7fffffff, 0x9, 0x5, 0x9509, 0x3, 0xfffffffffffffff9, 0x2, 0x0, 0x5, 0x31, 0x2, 0x7, 0x5, 0x1, 0x2, 0x400, 0xcc, 0x5, 0xf1, 0xffff, 0x89ed, 0x10001, 0x6, 0x3, 0xe, 0x1, 0x5, 0xe02, 0x5, 0x9, 0x6, 0x8, 0x9, 0x65, 0x0, 0x9, 0x800, 0x9, 0x5, 0x46b, 0x5, 0x4, 0x7ff, 0x3, 0x5, 0x49, 0x9, 0x6, 0x81, 0x6, 0x3, 0x8000000000000001, 0x7451, 0x4, 0xf7, 0x1, 0x6, 0xfffffffffffffffc, 0x9, 0x1, 0xe, 0x9, 0x10000, 0x5, 0x9, 0x0, 0x31a34b34, 0xfe00]}) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000003100)={r12, "98802e0f12299acf9e152d39bdb83607"}) accept4$tipc(r2, &(0x7f0000004100)=@name, &(0x7f0000004140)=0x10, 0x0) (async) r13 = accept4$tipc(r2, &(0x7f0000004100)=@name, &(0x7f0000004140)=0x10, 0x0) preadv2(r13, &(0x7f0000004440)=[{&(0x7f0000004180)=""/49, 0x31}, {&(0x7f00000041c0)=""/250, 0xfa}, {&(0x7f00000042c0)=""/246, 0xf6}, {&(0x7f00000043c0)=""/127, 0x7f}], 0x4, 0x2, 0x4dbd, 0x2) (async) preadv2(r13, &(0x7f0000004440)=[{&(0x7f0000004180)=""/49, 0x31}, {&(0x7f00000041c0)=""/250, 0xfa}, {&(0x7f00000042c0)=""/246, 0xf6}, {&(0x7f00000043c0)=""/127, 0x7f}], 0x4, 0x2, 0x4dbd, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r14 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r14, &(0x7f0000004480)="ad0b144c33723ae4809aaa6676a5841b9c19a5d0386f5ffea31a6979c389b99491f8fb4b2c84c94fe2e6cdb820d9beeb0da45c54f7e01798a960", 0x3a, 0x40000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004500), r2) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004500), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000045c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x14, r15, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r16 = signalfd4(r9, &(0x7f0000004600)={[0x1000]}, 0x8, 0x80000) lstat(&(0x7f0000004640)='./file0\x00', &(0x7f0000004680)) (async) lstat(&(0x7f0000004640)='./file0\x00', &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r16, 0xffffffff80000403, r17, &(0x7f0000004700)) (async) quotactl_fd$Q_GETFMT(r16, 0xffffffff80000403, r17, &(0x7f0000004700)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000004740)=0x6) (async) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000004740)=0x6) 122.140952ms ago: executing program 3 (id=212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x82) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0xc, 0x8001, 0x40, 0x3, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4000}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)={[0x2]}, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000380)=""/211, 0xd3}], 0x1, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40012100) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) 66.371126ms ago: executing program 3 (id=213): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0xe32e, 0x4}}]}) r1 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1, 0x4}) write$eventfd(r1, &(0x7f0000000080)=0x430f, 0x8) 55.732777ms ago: executing program 3 (id=214): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x6, 0x48, 0x65, 0x0, 0x11, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010101, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x4}}}}}}}, 0x5e) 455.059µs ago: executing program 3 (id=215): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x2, 0x9, 0x1, 0xffffff7f, 0x6, 0x0, [{0x795, 0x81, 0x5, '\x00', 0x3}, {0x2200, 0x1, 0x6d, '\x00', 0x200}, {0xb8be, 0x0, 0x6, '\x00', 0x208}, {0x7, 0x7fffffffffffffff, 0xde, '\x00', 0x1080}, {0x2, 0xffffffffffff0000, 0x1ff, '\x00', 0x2000}, {0x9, 0x7fffffffffffffff, 0xfffffffffffffff7, '\x00', 0x800}]}) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000) fallocate(r0, 0x28, 0x119b, 0x713) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000240)) r2 = memfd_secret(0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x8001, 0x7, 0xa5, 0x7fffffff, 0x1]}, &(0x7f0000000340)=0x54) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000380)={0x1, 0x0, @pic={0x2, 0x0, 0x4, 0x5, 0x9, 0x6, 0x1, 0xf9, 0x8, 0x0, 0x35, 0x1, 0xf, 0xc5, 0x9}}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f00000005c0)={0xd5, 0x0, 0x5c}) (async) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000640)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000780)) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) (async) r3 = accept$inet(r0, 0x0, &(0x7f00000007c0)) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={0x0, @rand_addr, @initdev}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000940)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000980)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x6d, 0x6, {{0x3d, 0x4, 0x1, 0x8, 0xf4, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x9e, 0x0, 0x2, [0x3]}, @cipso={0x86, 0x33, 0x0, [{0x5, 0x4, "87f6"}, {0x2, 0xa, "ab4f2579b02b7e19"}, {0x7, 0x7, "5abed20464"}, {0x0, 0x7, "ddf5139f61"}, {0x5, 0x11, "503f91f56183304e416ecc02f2ceea"}]}, @noop, @cipso={0x86, 0x4e, 0x2, [{0x0, 0xd, "1a518d158a49566772e05f"}, {0x2, 0xe, "5c29b644a974217248c166a2"}, {0x2, 0x2}, {0x7, 0x4, "b35f"}, {0x7, 0xa, "a995e73ff835131b"}, {0x1, 0xb, "ed3383b56e15635cd2"}, {0x2, 0x7, "7414129fdc"}, {0x1, 0xb, "c113313444c80cc135"}]}, @generic={0x44, 0x7, "f7e70ba896"}, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x5, [{@rand_addr=0x64010101, 0x41b}, {@rand_addr=0x40, 0x6}]}, @rr={0x7, 0x27, 0x48, [@dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @local, @broadcast, @loopback, @remote]}, @timestamp={0x44, 0x14, 0x79, 0x0, 0x4, [0x9, 0x6, 0x3, 0x9]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x8, 0x4, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0x1, 0x7}}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000bc0)={@local, 0x0}, &(0x7f0000000c00)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000d40)={&(0x7f0000000800), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xac, r4, 0x208, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) (async) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000d80)={0x8, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000dc0)={0x4, 0x5, 0xffff1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0xece, r11}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000e80)=@x86={0x20, 0x2, 0xe3, 0x0, 0x10, 0x4, 0x4, 0x2, 0x4, 0x3, 0x5, 0x2, 0x0, 0x7, 0x5, 0xf, 0xd, 0x1, 0xab, '\x00', 0xff, 0x5}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000ec0)=0x1, 0x4) r12 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbc, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x408, 0x4, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xb, 0x5a}}]}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x110, 0xf, 0x6, 0x4, 0x20, 0x49}, 0x50, &(0x7f0000000f80)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x36, "be58b68bb86defebc42c193fc80f84d3"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "703fa14fd050f2c279e5d74bb32b9a96"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x10, 0xf000, 0x9, [0xff3f00, 0x3fc0, 0x30, 0x3f00]}]}, 0xa, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x807}}, {0x15, &(0x7f0000001040)=@string={0x15, 0x3, "a5f1dc9ad0108449421262f3261aa0d469ff26"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3c01}}, {0x1c, &(0x7f0000001140)=@string={0x1c, 0x3, "1ec688aa192daaa9a8e054fcf45a342be66a01fbe62f61786318"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x402}}, {0xb, &(0x7f0000001200)=@string={0xb, 0x3, "506514dc01d7510895"}}, {0x2a, &(0x7f0000001240)=@string={0x2a, 0x3, "5c51e700f843200d7f9b134c5407315b94c86f1a353c9539f2b8ac33fcddc09370810f4e73fefd45"}}]}) syz_usb_disconnect(r12) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000001340)=@gcm_128={{0x304}, "f9a93bfbcca59b15", "a08042a7f3489d47e095db7c85dc4a13", "68068afe", "0f3dbb76243cbc6e"}, 0x28) (async) openat(r2, &(0x7f0000001380)='./file0\x00', 0x2000, 0x102) 0s ago: executing program 3 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x12002, 0x20050001, 0x3, 0xffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r8 = openat$incfs(r7, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x30) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fcdbdf25110000000c00098048e41300060000004540916faca65ed2f4e4f9eefe7c6d8615bad2d80dd271722bcd3f"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000083, 0x0, 0x7ffd}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 22.040495][ T36] audit: type=1400 audit(1769614038.530:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.041654][ T283] cgroup: Unknown subsys name 'net' [ 22.063197][ T36] audit: type=1400 audit(1769614038.530:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.090433][ T36] audit: type=1400 audit(1769614038.560:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.090595][ T283] cgroup: Unknown subsys name 'devices' [ 22.293254][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.298850][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.390815][ T36] audit: type=1400 audit(1769614038.880:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.413997][ T36] audit: type=1400 audit(1769614038.880:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.438763][ T36] audit: type=1400 audit(1769614038.880:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.448020][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.470634][ T36] audit: type=1400 audit(1769614038.960:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.496095][ T36] audit: type=1400 audit(1769614038.960:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.528868][ T36] audit: type=1400 audit(1769614039.020:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.554416][ T36] audit: type=1400 audit(1769614039.020:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.554754][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.321984][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.329041][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.336196][ T291] bridge_slave_0: entered allmulticast mode [ 23.342595][ T291] bridge_slave_0: entered promiscuous mode [ 23.359674][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.366760][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.373854][ T291] bridge_slave_1: entered allmulticast mode [ 23.380006][ T291] bridge_slave_1: entered promiscuous mode [ 23.415027][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.422090][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.429141][ T290] bridge_slave_0: entered allmulticast mode [ 23.435434][ T290] bridge_slave_0: entered promiscuous mode [ 23.443336][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.450368][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.457441][ T290] bridge_slave_1: entered allmulticast mode [ 23.463634][ T290] bridge_slave_1: entered promiscuous mode [ 23.508658][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.515722][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.522785][ T293] bridge_slave_0: entered allmulticast mode [ 23.528917][ T293] bridge_slave_0: entered promiscuous mode [ 23.550535][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.557620][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.564702][ T293] bridge_slave_1: entered allmulticast mode [ 23.570850][ T293] bridge_slave_1: entered promiscuous mode [ 23.579895][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.586988][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.594064][ T292] bridge_slave_0: entered allmulticast mode [ 23.600188][ T292] bridge_slave_0: entered promiscuous mode [ 23.607854][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.614909][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.621978][ T292] bridge_slave_1: entered allmulticast mode [ 23.628204][ T292] bridge_slave_1: entered promiscuous mode [ 23.711689][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.718732][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726067][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.733121][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.743308][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.750343][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.757617][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764656][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.816872][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.824197][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.831844][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.839049][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.849442][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.856497][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.874626][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.881677][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.889264][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.896312][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.903889][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.910899][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.987470][ T290] veth0_vlan: entered promiscuous mode [ 23.995589][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002638][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.010265][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.017321][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.025022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.032076][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.049959][ T290] veth1_macvtap: entered promiscuous mode [ 24.063692][ T291] veth0_vlan: entered promiscuous mode [ 24.086220][ T293] veth0_vlan: entered promiscuous mode [ 24.105682][ T293] veth1_macvtap: entered promiscuous mode [ 24.114241][ T292] veth0_vlan: entered promiscuous mode [ 24.121630][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.129112][ T291] veth1_macvtap: entered promiscuous mode [ 24.153517][ T292] veth1_macvtap: entered promiscuous mode [ 24.313108][ T358] batadv_slave_0: entered promiscuous mode [ 24.319103][ T355] batadv_slave_0: left promiscuous mode [ 24.471317][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.491285][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.571317][ T108] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.622389][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.633412][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 24.642488][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 24.647814][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.656613][ T66] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 24.665044][ T10] usb 4-1: config 0 descriptor?? [ 24.670042][ T66] usb 3-1: config 0 has no interface number 0 [ 24.676309][ T66] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 24.687336][ T66] usb 3-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 24.698621][ T66] usb 3-1: config 0 interface 196 has no altsetting 0 [ 24.706796][ T66] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 24.715928][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.724204][ T66] usb 3-1: Product: syz [ 24.728374][ T66] usb 3-1: Manufacturer: syz [ 24.732828][ T108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.733126][ T66] usb 3-1: SerialNumber: syz [ 24.741312][ T108] usb 2-1: not running at top speed; connect to a high speed hub [ 24.746438][ T66] usb 3-1: config 0 descriptor?? [ 24.758585][ T350] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 24.765964][ T108] usb 2-1: config 7 has an invalid interface number: 85 but max is 0 [ 24.774300][ T108] usb 2-1: config 7 has no interface number 0 [ 24.780416][ T108] usb 2-1: config 7 interface 85 has no altsetting 0 [ 24.788512][ T108] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 24.797633][ T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.805740][ T108] usb 2-1: Product: syz [ 24.809901][ T108] usb 2-1: Manufacturer: syz [ 24.814532][ T108] usb 2-1: SerialNumber: syz [ 25.072440][ T361] 9pnet: p9_errstr2errno: server reported unknown error 00000000 [ 25.078601][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.088722][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.111480][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.123676][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.126438][ T365] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 25.133552][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.142009][ T365] SELinux: failed to load policy [ 25.150322][ T108] usb-storage 2-1:7.85: USB Mass Storage device detected [ 25.154978][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.184799][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 25.190788][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 25.200395][ T10] usb 4-1: USB disconnect, device number 2 [ 25.215938][ T108] usb 2-1: USB disconnect, device number 2 [ 25.238286][ T377] overlayfs: missing 'workdir' [ 25.243458][ T377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.376512][ T66] ipheth 3-1:0.196: Unable to find endpoints [ 25.385086][ T66] usb 3-1: USB disconnect, device number 2 [ 25.447629][ T382] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 25.501304][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.652724][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.661096][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.671812][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 25.680774][ T31] usb 1-1: config 1 has no interface number 1 [ 25.686985][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 25.699509][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.708904][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.716965][ T31] usb 1-1: Product: syz [ 25.721870][ T31] usb 1-1: Manufacturer: syz [ 25.726467][ T31] usb 1-1: SerialNumber: syz [ 25.829284][ T397] can0: slcan on ptm0. [ 25.892238][ T396] can0 (unregistered): slcan off ptm0. [ 25.939475][ T31] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 25.947743][ T31] usb 1-1: USB disconnect, device number 2 [ 26.041324][ T378] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.191332][ T378] usb 2-1: Using ep0 maxpacket: 16 [ 26.197594][ T378] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 26.207794][ T378] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.218940][ T378] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.228751][ T378] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.241574][ T378] usb 2-1: config 7 interface 0 has no altsetting 0 [ 26.248211][ T378] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 26.257258][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.271292][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.366017][ T405] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.421285][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 26.427545][ T66] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.440657][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.447339][ T66] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 26.465883][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.475558][ T66] usb 4-1: config 0 descriptor?? [ 26.685833][ T378] hid (null): global environment stack underflow [ 26.692471][ T378] hid (null): global environment stack underflow [ 26.698820][ T378] hid (null): report_id 36711 is invalid [ 26.704581][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.712430][ T378] hid (null): unknown global tag 0x32 [ 26.717933][ T378] hid (null): unknown global tag 0xc [ 26.735336][ T378] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0001/input/input4 [ 26.757674][ T378] kye 0003:0458:5010.0001: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 26.811272][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.871336][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 26.878321][ T31] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.895895][ T378] usb 2-1: USB disconnect, device number 3 [ 26.902490][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.922926][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.930384][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.939505][ T31] usb 1-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40 [ 26.950294][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.959298][ T31] usb 1-1: Product: ﳿ [ 26.963506][ T31] usb 1-1: Manufacturer: ࠎ솹燒㽾䌙硯ﺬ붥圽栅娿灘옯ꫜ⣳䎧⦿ଇ៣必果忨ḓ꜏쉦Ѫพ䯹諧ᅢ퉯袸Ȅ쪴峠란徏阮ǺⰍ䫂Ꮯ裩ꛫ㿟ꅮ谑넛㉰馮௖쑉ɱ鈻ꐩ劵튚譖᝜귆쬖ꐧ赡鍪瑱徟쥖ꬔ锣硂区䟴쨪⾎뉯濦鳗˧͛톝螀焅ʷ [ 26.982295][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 26.992231][ T31] usb 1-1: SerialNumber: Љ [ 27.000905][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 27.016411][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.031501][ T10] usb 3-1: config 0 descriptor?? [ 27.212284][ T31] usbhid 1-1:1.0: can't add hid device: -71 [ 27.218256][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 27.227520][ T31] usb 1-1: USB disconnect, device number 3 [ 27.651359][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.671296][ T378] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.801273][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 27.806454][ T378] usb 1-1: device descriptor read/64, error -71 [ 27.813935][ T31] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 27.824062][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.834966][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.844756][ T31] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.857546][ T31] usb 2-1: config 7 interface 0 has no altsetting 0 [ 27.864210][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 27.873262][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.051402][ T378] usb 1-1: device descriptor read/64, error -71 [ 28.084261][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 28.084278][ T36] audit: type=1400 audit(1769614044.580:148): avc: denied { read write } for pid=415 comm="syz.1.25" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.113958][ T36] audit: type=1400 audit(1769614044.580:149): avc: denied { open } for pid=415 comm="syz.1.25" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.290842][ T36] audit: type=1400 audit(1769614044.780:150): avc: denied { read } for pid=415 comm="syz.1.25" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.313695][ T378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.313748][ T36] audit: type=1400 audit(1769614044.780:151): avc: denied { open } for pid=415 comm="syz.1.25" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.321447][ T31] usbhid 2-1:7.0: can't add hid device: -71 [ 28.344851][ T36] audit: type=1400 audit(1769614044.780:152): avc: denied { ioctl } for pid=415 comm="syz.1.25" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.351401][ T31] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 28.376281][ T36] audit: type=1400 audit(1769614044.790:153): avc: denied { set_context_mgr } for pid=415 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.387047][ T31] usb 2-1: USB disconnect, device number 4 [ 28.410527][ T36] audit: type=1400 audit(1769614044.790:154): avc: denied { ioctl } for pid=415 comm="syz.1.25" path="socket:[3665]" dev="sockfs" ino=3665 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.511274][ T378] usb 1-1: device descriptor read/64, error -71 [ 28.751283][ T378] usb 1-1: device descriptor read/64, error -71 [ 28.837414][ T36] audit: type=1400 audit(1769614045.330:155): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.861348][ T378] usb usb1-port1: attempt power cycle [ 28.902436][ T423] can: request_module (can-proto-0) failed. [ 28.921085][ T36] audit: type=1326 audit(1769614045.410:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759b79aeb9 code=0x7ffc0000 [ 28.944735][ T36] audit: type=1326 audit(1769614045.410:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759b79aeb9 code=0x7ffc0000 [ 29.036392][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 29.047755][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 29.058632][ T66] usb 4-1: USB disconnect, device number 3 [ 29.161321][ T351] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 29.211294][ T378] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.242327][ T378] usb 1-1: device descriptor read/8, error -71 [ 29.312812][ T351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.321583][ T351] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 29.329527][ T351] usb 2-1: can't read configurations, error -22 [ 29.351311][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.382287][ T378] usb 1-1: device descriptor read/8, error -71 [ 29.461287][ T351] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 29.487273][ T31] usb 3-1: USB disconnect, device number 3 [ 29.502497][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.513509][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.523276][ T66] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 29.532346][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.541047][ T66] usb 4-1: config 0 descriptor?? [ 29.616951][ T434] usb usb8: usbfs: process 434 (syz.2.33) did not claim interface 0 before use [ 29.622760][ T351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.640786][ T351] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 29.648881][ T351] usb 2-1: can't read configurations, error -22 [ 29.655504][ T351] usb usb2-port1: attempt power cycle [ 29.831287][ T378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.852670][ T378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.863653][ T378] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 29.872724][ T378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.881425][ T378] usb 1-1: config 0 descriptor?? [ 29.951275][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.951939][ T66] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 29.991348][ T351] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 30.012959][ T351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.021780][ T351] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 30.029705][ T351] usb 2-1: can't read configurations, error -22 [ 30.111281][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 30.117414][ T31] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 30.127588][ T31] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.138516][ T31] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.148287][ T31] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.161113][ T31] usb 3-1: config 7 interface 0 has no altsetting 0 [ 30.167023][ T66] usb 4-1: USB disconnect, device number 4 [ 30.167770][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 30.174829][ T351] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 30.182620][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.203574][ T351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.212403][ T351] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 30.220322][ T351] usb 2-1: can't read configurations, error -22 [ 30.226856][ T351] usb usb2-port1: unable to enumerate USB device [ 30.288989][ T378] pantherlord 0003:0F30:0111.0003: report_id 1120568166 is invalid [ 30.296980][ T378] pantherlord 0003:0F30:0111.0003: item 0 4 1 8 parsing failed [ 30.304833][ T378] pantherlord 0003:0F30:0111.0003: parse failed [ 30.311083][ T378] pantherlord 0003:0F30:0111.0003: probe with driver pantherlord failed with error -22 [ 30.491633][ T66] usb 1-1: USB disconnect, device number 7 [ 30.605913][ T31] hid (null): invalid report_size 26551 [ 30.611972][ T31] hid (null): global environment stack underflow [ 30.618297][ T31] hid (null): report_id 36711 is invalid [ 30.623953][ T31] hid (null): unknown global tag 0x32 [ 30.629324][ T31] hid (null): unknown global tag 0xc [ 30.637372][ T31] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0004/input/input5 [ 30.652956][ T31] kye 0003:0458:5010.0004: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 30.805886][ T31] usb 3-1: USB disconnect, device number 4 [ 30.961270][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.111288][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 31.117512][ T66] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 31.127641][ T66] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.138518][ T66] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.148249][ T66] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 31.161024][ T66] usb 4-1: config 7 interface 0 has no altsetting 0 [ 31.167635][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 31.176687][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.251289][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.381393][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.589383][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.597935][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.614775][ T66] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0005/input/input7 [ 31.626184][ T430] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.631287][ T31] usb 1-1: device descriptor read/64, error -71 [ 31.638560][ T66] kye 0003:0458:5010.0005: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 31.781251][ T430] usb 3-1: Using ep0 maxpacket: 8 [ 31.787868][ T430] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.800782][ T430] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.808788][ T430] usb 3-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40 [ 31.812533][ T378] usb 4-1: USB disconnect, device number 5 [ 31.817981][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.831700][ T430] usb 3-1: Product: ﳿ [ 31.835873][ T430] usb 3-1: Manufacturer: ࠎ솹燒㽾䌙硯ﺬ붥圽栅娿灘옯ꫜ⣳䎧⦿ଇ៣必果忨ḓ꜏쉦Ѫพ䯹諧ᅢ퉯袸Ȅ쪴峠란徏阮ǺⰍ䫂Ꮯ裩ꛫ㿟ꅮ谑넛㉰馮௖쑉ɱ鈻ꐩ劵튚譖᝜귆쬖ꐧ赡鍪瑱徟쥖ꬔ锣硂区䟴쨪⾎뉯濦鳗˧͛톝螀焅ʷ [ 31.864268][ T430] usb 3-1: SerialNumber: Љ [ 31.881323][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.011265][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.079330][ T430] usbhid 3-1:1.0: can't add hid device: -71 [ 32.087910][ T430] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 32.099575][ T430] usb 3-1: USB disconnect, device number 5 [ 32.271288][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.338807][ T464] ======================================================= [ 32.338807][ T464] WARNING: The mand mount option has been deprecated and [ 32.338807][ T464] and is ignored by this kernel. Remove the mand [ 32.338807][ T464] option from the mount to silence this warning. [ 32.338807][ T464] ======================================================= [ 32.373868][ T464] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.381378][ T31] usb usb1-port1: attempt power cycle [ 32.391269][ T378] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 32.551261][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 32.558161][ T378] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.569180][ T378] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 32.580298][ T378] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 32.590323][ T378] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 32.608428][ T378] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.617528][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.625592][ T378] usb 2-1: Product: syz [ 32.629754][ T378] usb 2-1: Manufacturer: syz [ 32.634459][ T378] usb 2-1: SerialNumber: syz [ 32.731282][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 32.752228][ T31] usb 1-1: device descriptor read/8, error -71 [ 32.840302][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.840979][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.848198][ T460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.855946][ T430] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.864680][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.882169][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.011286][ T430] usb 3-1: Using ep0 maxpacket: 16 [ 33.017616][ T430] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 33.027763][ T430] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.038651][ T430] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.048445][ T430] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 33.061253][ T430] usb 3-1: config 7 interface 0 has no altsetting 0 [ 33.065407][ T378] cdc_ncm 2-1:1.0: bind() failure [ 33.068577][ T430] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 33.075429][ T378] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 33.082275][ T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.090609][ T378] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 33.108155][ T378] usb 2-1: USB disconnect, device number 9 [ 33.121321][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.142253][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.272349][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.299330][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 33.299347][ T36] audit: type=1400 audit(1769614049.790:269): avc: denied { read } for pid=475 comm="syz.3.49" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.327991][ T36] audit: type=1400 audit(1769614049.790:270): avc: denied { open } for pid=475 comm="syz.3.49" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.381382][ T31] usb usb1-port1: unable to enumerate USB device [ 33.534085][ T430] hid (null): invalid report_size 26551 [ 33.539665][ T430] hid (null): global environment stack underflow [ 33.546010][ T430] hid (null): report_id 36711 is invalid [ 33.551670][ T430] hid (null): unknown global tag 0x32 [ 33.557027][ T430] hid (null): unknown global tag 0xc [ 33.564913][ T430] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0006/input/input8 [ 33.580549][ T430] kye 0003:0458:5010.0006: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 33.581515][ T378] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 33.617276][ T36] audit: type=1400 audit(1769614050.100:271): avc: denied { read } for pid=480 comm="syz.1.51" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.638293][ T36] audit: type=1400 audit(1769614050.100:272): avc: denied { open } for pid=480 comm="syz.1.51" path="net:[4026532306]" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.661543][ T36] audit: type=1400 audit(1769614050.100:273): avc: denied { create } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.681186][ T36] audit: type=1400 audit(1769614050.110:274): avc: denied { accept } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.700821][ T36] audit: type=1400 audit(1769614050.110:275): avc: denied { remount } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.720490][ T36] audit: type=1400 audit(1769614050.110:276): avc: denied { create } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.737980][ T414] usb 3-1: USB disconnect, device number 6 [ 33.740340][ T36] audit: type=1400 audit(1769614050.110:277): avc: denied { write } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.765864][ T36] audit: type=1400 audit(1769614050.110:278): avc: denied { nlmsg_write } for pid=480 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.821610][ T378] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 33.830113][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.842102][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.853823][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.865624][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.876646][ T108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 33.884962][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.896637][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.908302][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.919982][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.930977][ T378] usb 4-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 33.940011][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.948774][ T378] usb 4-1: config 0 descriptor?? [ 34.021277][ T108] usb 2-1: device descriptor read/64, error -71 [ 34.261358][ T108] usb 2-1: device descriptor read/64, error -71 [ 34.411277][ T414] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 34.511274][ T108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 34.530679][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 34.537053][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.546766][ T378] usb 4-1: USB disconnect, device number 6 [ 34.561319][ T414] usb 1-1: Using ep0 maxpacket: 16 [ 34.567475][ T414] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 34.577589][ T414] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.588537][ T414] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.598446][ T414] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 34.611479][ T414] usb 1-1: config 7 interface 0 has no altsetting 0 [ 34.618103][ T414] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 34.627154][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.651288][ T108] usb 2-1: device descriptor read/64, error -71 [ 34.891605][ T108] usb 2-1: device descriptor read/64, error -71 [ 35.001404][ T108] usb usb2-port1: attempt power cycle [ 35.038730][ T488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.061619][ T488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.097410][ T414] hid (null): invalid report_size 29535 [ 35.128293][ T414] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0007/input/input9 [ 35.154636][ T414] kye 0003:0458:5010.0007: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 35.231273][ T378] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.298830][ T414] usb 1-1: USB disconnect, device number 12 [ 35.341273][ T108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 35.362271][ T108] usb 2-1: device descriptor read/8, error -71 [ 35.382332][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 35.393367][ T378] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 35.402471][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.410448][ T378] usb 3-1: Product: syz [ 35.416044][ T378] usb 3-1: Manufacturer: syz [ 35.420639][ T378] usb 3-1: SerialNumber: syz [ 35.425818][ T378] usb 3-1: config 0 descriptor?? [ 35.441283][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.492275][ T108] usb 2-1: device descriptor read/8, error -71 [ 35.591266][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 35.597502][ T66] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 35.607697][ T66] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.618593][ T66] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.628350][ T66] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.641152][ T66] usb 4-1: config 7 interface 0 has no altsetting 0 [ 35.642500][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.648320][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 35.657295][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.665584][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.682079][ T378] usb 3-1: USB disconnect, device number 7 [ 35.731295][ T108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 35.752263][ T108] usb 2-1: device descriptor read/8, error -71 [ 35.882275][ T108] usb 2-1: device descriptor read/8, error -71 [ 35.991418][ T108] usb usb2-port1: unable to enumerate USB device [ 36.095654][ T66] hid (null): invalid report_size 26551 [ 36.101319][ T66] hid (null): global environment stack underflow [ 36.107640][ T66] hid (null): report_id 36711 is invalid [ 36.113324][ T66] hid (null): unknown global tag 0x32 [ 36.118695][ T66] hid (null): unknown global tag 0xc [ 36.126992][ T66] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0008/input/input10 [ 36.142905][ T66] kye 0003:0458:5010.0008: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 36.297589][ T108] usb 4-1: USB disconnect, device number 7 [ 36.451324][ T378] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.461715][ T560] 9pnet: p9_errstr2errno: server reported unknown error  [ 36.462084][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 36.479590][ T560] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 36.601266][ T378] usb 3-1: Using ep0 maxpacket: 16 [ 36.608746][ T378] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 36.618028][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.626073][ T378] usb 3-1: Product: syz [ 36.630372][ T378] usb 3-1: Manufacturer: syz [ 36.635133][ T378] usb 3-1: SerialNumber: syz [ 36.642983][ T378] r8152-cfgselector 3-1: Unknown version 0x0000 [ 36.649271][ T378] r8152-cfgselector 3-1: config 0 descriptor?? [ 36.696425][ T565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 36.721332][ T66] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 36.871317][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 36.877448][ T66] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.886295][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.896515][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.907311][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.918342][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.927423][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.935437][ T66] usb 1-1: Product: syz [ 36.939580][ T66] usb 1-1: Manufacturer: syz [ 36.944190][ T66] usb 1-1: SerialNumber: syz [ 37.041334][ T108] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 37.051422][ T61] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.059320][ T10] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 37.155089][ T66] usb 1-1: USB disconnect, device number 13 [ 37.192324][ T108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.202471][ T61] usb 4-1: Using ep0 maxpacket: 8 [ 37.207518][ T108] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.221277][ T108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.230368][ T61] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 37.240670][ T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.248683][ T108] usb 2-1: SerialNumber: syz [ 37.253315][ T61] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.262721][ T61] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 37.272099][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.280638][ T108] usb 2-1: bad CDC descriptors [ 37.287025][ T61] usb 4-1: config 0 descriptor?? [ 37.482059][ T61] usb 2-1: USB disconnect, device number 14 [ 37.951268][ T61] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 38.101271][ T61] usb 1-1: Using ep0 maxpacket: 16 [ 38.107351][ T61] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 38.117503][ T61] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.128392][ T61] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.138132][ T61] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 38.150961][ T61] usb 1-1: config 7 interface 0 has no altsetting 0 [ 38.157817][ T61] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 38.167024][ T588] syz.2.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.177204][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.196154][ T589] syz.3.73: attempt to access beyond end of device [ 38.196154][ T589] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 38.271293][ T66] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 38.421314][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 38.429755][ T66] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 38.440627][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.451718][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.461493][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 38.474474][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 38.483524][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.492273][ T66] usb 2-1: config 0 descriptor?? [ 38.572331][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.583409][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.593377][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 38.594609][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.602776][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.612214][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.621734][ T10] usb 3-1: config 0 descriptor?? [ 38.636669][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.646320][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.654989][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 38.655003][ T36] audit: type=1400 audit(1769614055.150:301): avc: denied { write } for pid=580 comm="syz.0.78" name="file2" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.655839][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.661191][ T36] audit: type=1400 audit(1769614055.150:302): avc: denied { open } for pid=580 comm="syz.0.78" path="/15/file2" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.684009][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.726470][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.735115][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.744909][ T61] hid (null): unknown global tag 0xe [ 38.750204][ T61] hid (null): unknown global tag 0xe [ 38.755583][ T61] hid (null): unknown global tag 0xd [ 38.761757][ T61] hid (null): unknown global tag 0xc [ 38.767112][ T61] hid (null): usage index exceeded [ 38.772477][ T61] hid (null): unknown global tag 0xd [ 38.780006][ T61] hid (null): unknown global tag 0xd [ 38.785332][ T61] hid (null): unknown global tag 0xc [ 38.794269][ T61] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0009/input/input11 [ 38.810434][ T61] kye 0003:0458:5010.0009: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 38.948424][ T61] usb 1-1: USB disconnect, device number 14 [ 39.123812][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 39.129870][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.138662][ T66] usb 2-1: USB disconnect, device number 15 [ 39.235041][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.243784][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.256253][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 39.267958][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.279718][ T10] usb 3-1: USB disconnect, device number 9 [ 39.571280][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.644381][ T36] audit: type=1400 audit(1769614056.140:303): avc: denied { create } for pid=600 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.701280][ T61] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 39.721267][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 39.727481][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 39.737890][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.749010][ T10] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.759301][ T10] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.772114][ T10] usb 3-1: config 7 interface 0 has no altsetting 0 [ 39.778740][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 39.794830][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.816740][ T414] usb 4-1: USB disconnect, device number 8 [ 39.854145][ T61] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 39.869960][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.878743][ T61] usb 1-1: config 0 descriptor?? [ 40.021406][ T378] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 40.151305][ T414] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.171267][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 40.177390][ T378] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 40.185598][ T378] usb 2-1: config 0 has no interface number 0 [ 40.191720][ T378] usb 2-1: config 0 interface 230 has no altsetting 0 [ 40.199845][ T378] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 40.208935][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.216957][ T378] usb 2-1: Product: syz [ 40.218654][ T10] hid (null): invalid report_size 26551 [ 40.221122][ T378] usb 2-1: Manufacturer: syz [ 40.226992][ T10] hid (null): global environment stack underflow [ 40.231505][ T378] usb 2-1: SerialNumber: syz [ 40.238015][ T10] hid (null): report_id 36711 is invalid [ 40.243552][ T378] usb 2-1: config 0 descriptor?? [ 40.251269][ T10] hid (null): unknown global tag 0x32 [ 40.254245][ T378] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 40.258378][ T10] hid (null): unknown global tag 0xc [ 40.266955][ T378] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 40.273556][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000A/input/input12 [ 40.289896][ T61] samsung 0003:0419:0001.000B: item fetching failed at offset 2/5 [ 40.296813][ T10] kye 0003:0458:5010.000A: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 40.302598][ T61] samsung 0003:0419:0001.000B: parse failed [ 40.316024][ T61] samsung 0003:0419:0001.000B: probe with driver samsung failed with error -22 [ 40.325256][ T414] usb 4-1: Using ep0 maxpacket: 8 [ 40.332095][ T414] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.345057][ T414] usb 4-1: config 1 interface 0 has no altsetting 0 [ 40.354084][ T414] usb 4-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40 [ 40.363206][ T414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.371212][ T414] usb 4-1: Product: ﳿ [ 40.375430][ T414] usb 4-1: Manufacturer: ࠎ솹燒㽾䌙硯ﺬ붥圽栅娿灘옯ꫜ⣳䎧⦿ଇ៣必果忨ḓ꜏쉦Ѫพ䯹諧ᅢ퉯袸Ȅ쪴峠란徏阮ǺⰍ䫂Ꮯ裩ꛫ㿟ꅮ谑넛㉰馮௖쑉ɱ鈻ꐩ劵튚譖᝜귆쬖ꐧ赡鍪瑱徟쥖ꬔ锣硂区䟴쨪⾎뉯濦鳗˧͛톝螀焅ʷ [ 40.403702][ T414] usb 4-1: SerialNumber: Љ [ 40.425143][ T61] usb 3-1: USB disconnect, device number 10 [ 40.493037][ T10] usb 1-1: USB disconnect, device number 15 [ 40.612918][ T414] usbhid 4-1:1.0: can't add hid device: -71 [ 40.618933][ T414] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 40.628373][ T414] usb 4-1: USB disconnect, device number 9 [ 40.669412][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 40.679136][ T608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.687794][ T608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.943287][ T36] audit: type=1400 audit(1769614057.440:304): avc: denied { ioctl } for pid=617 comm="syz.2.91" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.967725][ T36] audit: type=1400 audit(1769614057.440:305): avc: denied { bind } for pid=617 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.261268][ T414] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 41.371289][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.400034][ T627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.408527][ T627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.422242][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.433174][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.442946][ T414] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 41.452040][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.462126][ T414] usb 1-1: config 0 descriptor?? [ 41.463741][ T36] audit: type=1400 audit(1769614057.960:306): avc: denied { create } for pid=628 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.486376][ T36] audit: type=1400 audit(1769614057.970:307): avc: denied { bind } for pid=628 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.505655][ T36] audit: type=1400 audit(1769614057.970:308): avc: denied { listen } for pid=628 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.521280][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 41.525210][ T36] audit: type=1400 audit(1769614057.970:309): avc: denied { connect } for pid=628 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.531456][ T10] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 41.549624][ T36] audit: type=1400 audit(1769614057.970:310): avc: denied { write } for pid=628 comm="syz.2.95" path="socket:[4873]" dev="sockfs" ino=4873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.582301][ T10] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.593724][ T10] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.603571][ T10] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 41.616407][ T10] usb 4-1: config 7 interface 0 has no altsetting 0 [ 41.623053][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 41.632112][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.875329][ T414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 41.883157][ T414] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 42.044116][ T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.052710][ T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.074832][ T414] cp2112 0003:10C4:EA90.000C: error requesting version [ 42.082535][ T414] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 42.092629][ T414] usb 1-1: USB disconnect, device number 16 [ 42.262754][ T10] usbhid 4-1:7.0: can't add hid device: -71 [ 42.268830][ T10] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 42.279747][ T10] usb 4-1: USB disconnect, device number 10 [ 42.552622][ T378] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 42.881480][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 43.011283][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.018934][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.171287][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 43.177529][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 43.187672][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.198549][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.208362][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 43.221271][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 43.227862][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 43.236913][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.281273][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.491277][ T66] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.521300][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 43.641282][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 43.648274][ T66] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.661398][ T66] usb 3-1: config 1 interface 0 has no altsetting 0 [ 43.668059][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.680210][ T9] hid (null): invalid report_size 26551 [ 43.685923][ T9] hid (null): global environment stack underflow [ 43.692313][ T9] hid (null): report_id 36711 is invalid [ 43.698035][ T9] hid (null): unknown global tag 0x32 [ 43.703470][ T9] hid (null): unknown global tag 0xc [ 43.709160][ T66] usb 3-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40 [ 43.719750][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.728160][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000D/input/input13 [ 43.739587][ T66] usb 3-1: Product: ﳿ [ 43.744023][ T66] usb 3-1: Manufacturer: ࠎ솹燒㽾䌙硯ﺬ붥圽栅娿灘옯ꫜ⣳䎧⦿ଇ៣必果忨ḓ꜏쉦Ѫพ䯹諧ᅢ퉯袸Ȅ쪴峠란徏阮ǺⰍ䫂Ꮯ裩ꛫ㿟ꅮ谑넛㉰馮௖쑉ɱ鈻ꐩ劵튚譖᝜귆쬖ꐧ赡鍪瑱徟쥖ꬔ锣硂区䟴쨪⾎뉯濦鳗˧͛톝螀焅ʷ [ 43.772762][ T66] usb 3-1: SerialNumber: Љ [ 43.777950][ T9] kye 0003:0458:5010.000D: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 43.865033][ T414] usb 4-1: USB disconnect, device number 11 [ 43.921425][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.997371][ T66] usbhid 3-1:1.0: can't add hid device: -71 [ 44.003417][ T66] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 44.012155][ T66] usb 3-1: USB disconnect, device number 11 [ 44.031401][ T10] usb usb1-port1: attempt power cycle [ 44.321906][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 44.321922][ T36] audit: type=1400 audit(1769614060.820:319): avc: denied { ioctl } for pid=660 comm="syz.1.107" path="socket:[5486]" dev="sockfs" ino=5486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.352115][ T36] audit: type=1400 audit(1769614060.820:320): avc: denied { bind } for pid=660 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.363989][ T666] FAULT_INJECTION: forcing a failure. [ 44.363989][ T666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.375973][ T36] audit: type=1400 audit(1769614060.830:321): avc: denied { lock } for pid=663 comm="syz.1.108" path="socket:[5497]" dev="sockfs" ino=5497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 44.386664][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 44.407790][ T36] audit: type=1400 audit(1769614060.830:322): avc: denied { write } for pid=663 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.423305][ T666] CPU: 0 UID: 0 PID: 666 Comm: syz.1.109 Not tainted syzkaller #0 2e88900194e885de5c8b36fd08cb790c546b675d [ 44.423339][ T666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.423356][ T666] Call Trace: [ 44.423362][ T666] [ 44.423370][ T666] __dump_stack+0x21/0x30 [ 44.423405][ T666] dump_stack_lvl+0x140/0x1c0 [ 44.423426][ T666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.423448][ T666] dump_stack+0x19/0x20 [ 44.423468][ T666] should_fail_ex+0x3d7/0x530 [ 44.423486][ T666] should_fail+0xf/0x20 [ 44.423502][ T666] should_fail_usercopy+0x1e/0x30 [ 44.423520][ T666] _copy_from_user+0x20/0xa0 [ 44.423541][ T666] pending_reads_dispatch_ioctl+0x561/0x2080 [ 44.423569][ T666] ? proc_fail_nth_write+0x184/0x220 [ 44.423588][ T666] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.423605][ T666] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 44.423624][ T666] ? selinux_file_ioctl+0x732/0x1480 [ 44.423642][ T666] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 44.423659][ T666] ? __cfi_vfs_write+0x10/0x10 [ 44.423681][ T666] ? __kasan_check_write+0x18/0x20 [ 44.423701][ T666] ? mutex_unlock+0x90/0x240 [ 44.423726][ T666] ? __cfi_mutex_unlock+0x10/0x10 [ 44.423749][ T666] ? __fget_files+0x2c5/0x340 [ 44.423774][ T666] ? __fget_files+0x2c5/0x340 [ 44.423796][ T666] ? bpf_lsm_file_ioctl+0xd/0x20 [ 44.423813][ T666] ? security_file_ioctl+0x3e/0x110 [ 44.423838][ T666] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 44.423856][ T666] __se_sys_ioctl+0x135/0x1b0 [ 44.423880][ T666] __x64_sys_ioctl+0x7f/0xa0 [ 44.423903][ T666] x64_sys_call+0x1878/0x2ee0 [ 44.423926][ T666] do_syscall_64+0x57/0xf0 [ 44.423946][ T666] ? clear_bhb_loop+0x50/0xa0 [ 44.423967][ T666] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.423988][ T666] RIP: 0033:0x7f759b79aeb9 [ 44.424007][ T666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.424022][ T666] RSP: 002b:00007f759c633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.424048][ T666] RAX: ffffffffffffffda RBX: 00007f759ba15fa0 RCX: 00007f759b79aeb9 [ 44.424062][ T666] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 44.424075][ T666] RBP: 00007f759c633090 R08: 0000000000000000 R09: 0000000000000000 [ 44.424087][ T666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.424098][ T666] R13: 00007f759ba16038 R14: 00007f759ba15fa0 R15: 00007ffe857ebb48 [ 44.424114][ T666] [ 44.432332][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.761284][ T414] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.764014][ T677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.777459][ T677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.812387][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.911260][ T414] usb 3-1: Using ep0 maxpacket: 32 [ 44.917387][ T414] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 44.925634][ T414] usb 3-1: config 0 has no interface number 0 [ 44.931853][ T414] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 44.943149][ T414] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 44.951278][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 44.952248][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.967739][ T414] usb 3-1: Product: syz [ 44.971911][ T414] usb 3-1: Manufacturer: syz [ 44.976495][ T414] usb 3-1: SerialNumber: syz [ 44.981650][ T414] usb 3-1: config 0 descriptor?? [ 44.986901][ T670] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 45.051301][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 45.072250][ T10] usb 1-1: device descriptor read/8, error -71 [ 45.081370][ T9] usb 4-1: device descriptor read/64, error -71 [ 45.194829][ T670] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 45.202334][ T10] usb 1-1: device descriptor read/8, error -71 [ 45.311414][ T10] usb usb1-port1: unable to enumerate USB device [ 45.323815][ T9] usb 4-1: device descriptor read/64, error -71 [ 45.338902][ T36] audit: type=1400 audit(1769614061.830:323): avc: denied { listen } for pid=680 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.358194][ T36] audit: type=1400 audit(1769614061.830:324): avc: denied { getopt } for pid=680 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.377454][ T36] audit: type=1400 audit(1769614061.830:325): avc: denied { accept } for pid=680 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.391025][ T682] futex_wake_op: syz.1.116 tries to shift op by -1; fix this program [ 45.561304][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.605767][ T414] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 45.621349][ T414] asix 3-1:0.188: probe with driver asix failed with error -61 [ 45.639436][ T36] audit: type=1400 audit(1769614062.130:326): avc: denied { audit_control } for pid=685 comm="syz.0.118" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.691290][ T9] usb 4-1: device descriptor read/64, error -71 [ 45.931267][ T9] usb 4-1: device descriptor read/64, error -71 [ 45.951330][ T414] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 46.041376][ T9] usb usb4-port1: attempt power cycle [ 46.101272][ T414] usb 1-1: Using ep0 maxpacket: 16 [ 46.107408][ T414] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 46.117558][ T414] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.128442][ T414] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.138230][ T414] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 46.151027][ T414] usb 1-1: config 7 interface 0 has no altsetting 0 [ 46.157655][ T414] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 46.166733][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.184332][ T692] FAULT_INJECTION: forcing a failure. [ 46.184332][ T692] name failslab, interval 1, probability 0, space 0, times 1 [ 46.197060][ T692] CPU: 1 UID: 0 PID: 692 Comm: syz.1.120 Not tainted syzkaller #0 2e88900194e885de5c8b36fd08cb790c546b675d [ 46.197096][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.197107][ T692] Call Trace: [ 46.197115][ T692] [ 46.197122][ T692] __dump_stack+0x21/0x30 [ 46.197142][ T692] dump_stack_lvl+0x140/0x1c0 [ 46.197155][ T692] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.197170][ T692] ? _parse_integer+0x2e/0x40 [ 46.197186][ T692] dump_stack+0x19/0x20 [ 46.197197][ T692] should_fail_ex+0x3d7/0x530 [ 46.197207][ T692] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 46.197219][ T692] should_failslab+0xac/0x100 [ 46.197234][ T692] __kmalloc_noprof+0x69/0x500 [ 46.197246][ T692] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 46.197257][ T692] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 46.197267][ T692] ? proc_fail_nth_write+0x184/0x220 [ 46.197278][ T692] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.197288][ T692] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 46.197298][ T692] ? selinux_file_ioctl+0x732/0x1480 [ 46.197309][ T692] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 46.197318][ T692] ? __cfi_vfs_write+0x10/0x10 [ 46.197331][ T692] ? __kasan_check_write+0x18/0x20 [ 46.197342][ T692] ? mutex_unlock+0x90/0x240 [ 46.197358][ T692] ? __cfi_mutex_unlock+0x10/0x10 [ 46.197372][ T692] ? __fget_files+0x2c5/0x340 [ 46.197387][ T692] ? __fget_files+0x2c5/0x340 [ 46.197401][ T692] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.197422][ T692] ? security_file_ioctl+0x3e/0x110 [ 46.197438][ T692] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 46.197448][ T692] __se_sys_ioctl+0x135/0x1b0 [ 46.197463][ T692] __x64_sys_ioctl+0x7f/0xa0 [ 46.197476][ T692] x64_sys_call+0x1878/0x2ee0 [ 46.197490][ T692] do_syscall_64+0x57/0xf0 [ 46.197502][ T692] ? clear_bhb_loop+0x50/0xa0 [ 46.197515][ T692] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.197527][ T692] RIP: 0033:0x7f759b79aeb9 [ 46.197537][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.197546][ T692] RSP: 002b:00007f759c633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.197559][ T692] RAX: ffffffffffffffda RBX: 00007f759ba15fa0 RCX: 00007f759b79aeb9 [ 46.197566][ T692] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 46.197573][ T692] RBP: 00007f759c633090 R08: 0000000000000000 R09: 0000000000000000 [ 46.197580][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.197587][ T692] R13: 00007f759ba16038 R14: 00007f759ba15fa0 R15: 00007ffe857ebb48 [ 46.197595][ T692] [ 46.441295][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.495238][ T9] usb 4-1: device descriptor read/8, error -71 [ 46.632315][ T9] usb 4-1: device descriptor read/8, error -71 [ 46.649800][ T414] hid (null): invalid report_size 26551 [ 46.655400][ T414] hid (null): global environment stack underflow [ 46.661742][ T414] hid (null): report_id 36711 is invalid [ 46.667369][ T414] hid (null): unknown global tag 0x32 [ 46.672753][ T414] hid (null): unknown global tag 0xc [ 46.679575][ T414] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.000E/input/input14 [ 46.695854][ T414] kye 0003:0458:5010.000E: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 46.847787][ T414] usb 1-1: USB disconnect, device number 21 [ 46.870202][ T36] audit: type=1400 audit(1769614063.360:327): avc: denied { unlink } for pid=669 comm="syz.2.113" name="#1" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.892212][ T36] audit: type=1400 audit(1769614063.360:328): avc: denied { mount } for pid=669 comm="syz.2.113" name="/" dev="overlay" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.892348][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.942431][ T9] usb 4-1: device descriptor read/8, error -71 [ 47.033477][ T701] process 'syz.1.123' launched '/dev/fd/5' with NULL argv: empty string added [ 47.072314][ T9] usb 4-1: device descriptor read/8, error -71 [ 47.112924][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.121452][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.130314][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.138930][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.181365][ T9] usb usb4-port1: unable to enumerate USB device [ 47.415934][ T715] fuse: Bad value for 'group_id' [ 47.420944][ T715] fuse: Bad value for 'group_id' [ 47.428484][ T715] rust_binder: inc_ref_done called when no active inc_refs [ 47.675736][ T719] FAULT_INJECTION: forcing a failure. [ 47.675736][ T719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.696066][ T719] CPU: 1 UID: 0 PID: 719 Comm: syz.1.129 Not tainted syzkaller #0 2e88900194e885de5c8b36fd08cb790c546b675d [ 47.696096][ T719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.696107][ T719] Call Trace: [ 47.696113][ T719] [ 47.696121][ T719] __dump_stack+0x21/0x30 [ 47.696148][ T719] dump_stack_lvl+0x140/0x1c0 [ 47.696165][ T719] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.696178][ T719] ? check_stack_object+0x81/0x150 [ 47.696190][ T719] ? __virt_addr_valid+0x2a6/0x380 [ 47.696201][ T719] dump_stack+0x19/0x20 [ 47.696213][ T719] should_fail_ex+0x3d7/0x530 [ 47.696223][ T719] should_fail+0xf/0x20 [ 47.696232][ T719] should_fail_usercopy+0x1e/0x30 [ 47.696243][ T719] _copy_from_user+0x20/0xa0 [ 47.696255][ T719] pending_reads_dispatch_ioctl+0xccf/0x2080 [ 47.696266][ T719] ? proc_fail_nth_write+0x184/0x220 [ 47.696277][ T719] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.696287][ T719] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 47.696298][ T719] ? selinux_file_ioctl+0x732/0x1480 [ 47.696308][ T719] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 47.696318][ T719] ? __cfi_vfs_write+0x10/0x10 [ 47.696330][ T719] ? __kasan_check_write+0x18/0x20 [ 47.696343][ T719] ? mutex_unlock+0x90/0x240 [ 47.696358][ T719] ? __cfi_mutex_unlock+0x10/0x10 [ 47.696378][ T719] ? __fget_files+0x2c5/0x340 [ 47.696393][ T719] ? __fget_files+0x2c5/0x340 [ 47.696406][ T719] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.696416][ T719] ? security_file_ioctl+0x3e/0x110 [ 47.696432][ T719] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 47.696442][ T719] __se_sys_ioctl+0x135/0x1b0 [ 47.696460][ T719] __x64_sys_ioctl+0x7f/0xa0 [ 47.696473][ T719] x64_sys_call+0x1878/0x2ee0 [ 47.696488][ T719] do_syscall_64+0x57/0xf0 [ 47.696500][ T719] ? clear_bhb_loop+0x50/0xa0 [ 47.696513][ T719] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.696525][ T719] RIP: 0033:0x7f759b79aeb9 [ 47.696536][ T719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.696545][ T719] RSP: 002b:00007f759c633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.696558][ T719] RAX: ffffffffffffffda RBX: 00007f759ba15fa0 RCX: 00007f759b79aeb9 [ 47.696566][ T719] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 47.696573][ T719] RBP: 00007f759c633090 R08: 0000000000000000 R09: 0000000000000000 [ 47.696580][ T719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.696587][ T719] R13: 00007f759ba16038 R14: 00007f759ba15fa0 R15: 00007ffe857ebb48 [ 47.696595][ T719] [ 47.978633][ T9] usb 3-1: USB disconnect, device number 12 [ 48.035216][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.044551][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.441278][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.466731][ T746] FAULT_INJECTION: forcing a failure. [ 48.466731][ T746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.479933][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.0.140 Not tainted syzkaller #0 2e88900194e885de5c8b36fd08cb790c546b675d [ 48.479963][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.479975][ T746] Call Trace: [ 48.479981][ T746] [ 48.479989][ T746] __dump_stack+0x21/0x30 [ 48.480014][ T746] dump_stack_lvl+0x140/0x1c0 [ 48.480036][ T746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.480057][ T746] ? check_stack_object+0x12b/0x150 [ 48.480079][ T746] dump_stack+0x19/0x20 [ 48.480098][ T746] should_fail_ex+0x3d7/0x530 [ 48.480115][ T746] should_fail+0xf/0x20 [ 48.480131][ T746] should_fail_usercopy+0x1e/0x30 [ 48.480149][ T746] _copy_to_user+0x24/0xa0 [ 48.480169][ T746] simple_read_from_buffer+0xed/0x160 [ 48.480195][ T746] proc_fail_nth_read+0x1aa/0x220 [ 48.480213][ T746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.480231][ T746] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 48.480250][ T746] ? bpf_lsm_file_permission+0xd/0x20 [ 48.480267][ T746] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 48.480284][ T746] vfs_read+0x286/0xcb0 [ 48.480312][ T746] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.480331][ T746] ? __cfi_vfs_read+0x10/0x10 [ 48.480349][ T746] ? __kasan_check_write+0x18/0x20 [ 48.480371][ T746] ? mutex_lock+0x97/0x1d0 [ 48.480393][ T746] ? __cfi_mutex_lock+0x10/0x10 [ 48.480415][ T746] ? __fget_files+0x2c5/0x340 [ 48.480438][ T746] ksys_read+0x145/0x260 [ 48.480458][ T746] ? __cfi_ksys_read+0x10/0x10 [ 48.480478][ T746] ? __kasan_check_read+0x15/0x20 [ 48.480498][ T746] __x64_sys_read+0x7f/0x90 [ 48.480518][ T746] x64_sys_call+0x2638/0x2ee0 [ 48.480541][ T746] do_syscall_64+0x57/0xf0 [ 48.480564][ T746] ? clear_bhb_loop+0x50/0xa0 [ 48.480587][ T746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.480606][ T746] RIP: 0033:0x7f6c6675b78e [ 48.480622][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.480639][ T746] RSP: 002b:00007f6c6772cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.480659][ T746] RAX: ffffffffffffffda RBX: 00007f6c6772d6c0 RCX: 00007f6c6675b78e [ 48.480674][ T746] RDX: 000000000000000f RSI: 00007f6c6772d0a0 RDI: 0000000000000005 [ 48.480686][ T746] RBP: 00007f6c6772d090 R08: 0000000000000000 R09: 0000000000000000 [ 48.480698][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.480709][ T746] R13: 00007f6c66a16038 R14: 00007f6c66a15fa0 R15: 00007ffcf112c0d8 [ 48.480725][ T746] [ 48.691289][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 48.741500][ T9] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 48.749756][ T9] usb 3-1: config 4 has no interface number 0 [ 48.757154][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.768359][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.785700][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 48.794907][ T351] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.803559][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.813049][ T9] hub 3-1:4.128: USB hub found [ 48.828336][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.838322][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.952208][ T351] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 48.960939][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.971049][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.981320][ T351] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.990368][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.998371][ T351] usb 4-1: Product: 슨秩묃繮⃣䇯졮ᷚዳﳊ㲜থ䢾鬲閘糑鞘✪鮤뵡绢쎕杣ꨚﴱࣥ怗跊艔帕究퀀䛆㑛⣸죏⥫榓—㛔⡙ꎌ쬾걵窇ખꟄ﹤쵏㙤ꌐ椖옍ᐼ趄ᜍҋꚈ斨墳㌓畷 [ 49.019420][ T351] usb 4-1: Manufacturer: 瓂䚃䢶Ꙍ㠺㨢ꨛ픹磌掊ᥐ죸⽱䳹䖆偿ሙꄃ︀⍛뇀䈶㚗쑼랛큥喿쳾馛欷⊥†橶뵒㤨⛣腅Ꭰꟻ鿇怿᭜媻ꑎڬ澴콉鳿嶱뤴ꉓᗒꕼ킴ᒗ玑Ѵ⬩茘労距㺔砬ꡇ넔履赱烏ઘ蠴噘毝戀䴴䀅頻炭䊱劉ﲲӛ劯 [ 49.045764][ T9] hub 3-1:4.128: 2 ports detected [ 49.050800][ T9] hub 3-1:4.128: Using single TT (err -22) [ 49.056659][ T351] usb 4-1: SerialNumber: 蛦‧⃱ꪱ믒쀢蒞뚓䇵䱨ꮂ엩﮷祒Ὥꈗᓊ罼뇽㬢醣㯐苏⬟熮借ᔌ⒃惨쓿㦛蜜혩̧릻ၓ喇骸ⴃ [ 49.101278][ T414] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 49.246465][ T9] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 49.253038][ T9] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 49.254422][ T414] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 49.268944][ T414] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 49.278174][ T414] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 49.288462][ T414] usb 1-1: config 220 has no interface number 2 [ 49.292085][ T9] usb 3-1: USB disconnect, device number 13 [ 49.294746][ T414] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 49.313731][ T414] usb 1-1: config 220 interface 0 has no altsetting 0 [ 49.320503][ T414] usb 1-1: config 220 interface 76 has no altsetting 0 [ 49.327460][ T414] usb 1-1: config 220 interface 1 has no altsetting 0 [ 49.335803][ T414] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 49.344902][ T414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.353053][ T414] usb 1-1: Product: syz [ 49.357217][ T414] usb 1-1: Manufacturer: syz [ 49.361823][ T414] usb 1-1: SerialNumber: syz [ 49.456398][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 49.456427][ T36] audit: type=1400 audit(1769614065.950:338): avc: denied { write } for pid=760 comm="syz.1.147" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.485074][ T36] audit: type=1400 audit(1769614065.950:339): avc: denied { read } for pid=760 comm="syz.1.147" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.487095][ T351] usb 4-1: 0:2 : does not exist [ 49.516775][ T761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.525507][ T761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.536177][ T351] usb 4-1: USB disconnect, device number 16 [ 49.544583][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.568129][ T758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.576757][ T758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.586981][ T414] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 49.593577][ T414] usb 1-1: No valid video chain found. [ 49.599123][ T414] usb 1-1: selecting invalid altsetting 0 [ 49.608029][ T414] usb 1-1: USB disconnect, device number 22 [ 50.006438][ T36] audit: type=1400 audit(1769614066.500:340): avc: denied { setopt } for pid=767 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.026267][ T36] audit: type=1400 audit(1769614066.500:341): avc: denied { getopt } for pid=767 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.133665][ T36] audit: type=1400 audit(1769614066.630:342): avc: denied { read write } for pid=774 comm="syz.1.152" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.157610][ T36] audit: type=1400 audit(1769614066.630:343): avc: denied { open } for pid=774 comm="syz.1.152" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.183271][ T36] audit: type=1400 audit(1769614066.630:344): avc: denied { ioctl } for pid=774 comm="syz.1.152" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.236720][ T782] kvm: kvm [781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 50.245304][ T782] kvm: kvm [781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 50.259737][ T782] kvm_intel: kvm [781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 50.270253][ T782] kvm: kvm [781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 50.278892][ T782] kvm: kvm [781]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 50.460664][ T36] audit: type=1400 audit(1769614066.950:345): avc: denied { read } for pid=798 comm="syz.2.159" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.483686][ T36] audit: type=1400 audit(1769614066.950:346): avc: denied { open } for pid=798 comm="syz.2.159" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.531307][ T66] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 50.681275][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 50.687448][ T66] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.695686][ T66] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 50.705905][ T66] usb 1-1: config 0 has no interface number 0 [ 50.713520][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 50.722591][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.730561][ T66] usb 1-1: Product: syz [ 50.734732][ T66] usb 1-1: Manufacturer: syz [ 50.739327][ T66] usb 1-1: SerialNumber: syz [ 50.744588][ T66] usb 1-1: config 0 descriptor?? [ 50.750406][ T66] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 50.756802][ T66] usb 1-1: No valid video chain found. [ 50.811337][ T108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 50.941268][ T108] usb 4-1: device descriptor read/64, error -71 [ 50.952034][ T378] usb 1-1: USB disconnect, device number 23 [ 51.000026][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.008775][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.053829][ T36] audit: type=1400 audit(1769614067.540:347): avc: denied { connect } for pid=813 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.201274][ T108] usb 4-1: device descriptor read/64, error -71 [ 51.431308][ T351] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.441285][ T108] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 51.572004][ T108] usb 4-1: device descriptor read/64, error -71 [ 51.581300][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 51.587547][ T351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 51.594283][ T351] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 51.603480][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.612280][ T351] usb 3-1: config 0 descriptor?? [ 51.652313][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.660809][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.821327][ T108] usb 4-1: device descriptor read/64, error -71 [ 51.822016][ T351] waltop 0003:172F:0502.000F: unknown main item tag 0x0 [ 51.834704][ T351] waltop 0003:172F:0502.000F: item fetching failed at offset 3/5 [ 51.846261][ T351] waltop 0003:172F:0502.000F: probe with driver waltop failed with error -22 [ 51.931357][ T108] usb usb4-port1: attempt power cycle [ 52.020507][ T351] usb 3-1: USB disconnect, device number 14 [ 52.186611][ T855] x_tables: duplicate underflow at hook 1 [ 52.192968][ T855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=855 comm=syz.1.180 [ 52.271276][ T108] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 52.292268][ T108] usb 4-1: device descriptor read/8, error -71 [ 52.431614][ T108] usb 4-1: device descriptor read/8, error -71 [ 52.469213][ T866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.477772][ T866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.671279][ T66] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 52.681282][ T108] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.702763][ T108] usb 4-1: device descriptor read/8, error -71 [ 52.791277][ T351] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.821264][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 52.827378][ T66] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 52.837485][ T66] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.842349][ T108] usb 4-1: device descriptor read/8, error -71 [ 52.848360][ T66] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.864333][ T66] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.877225][ T66] usb 1-1: config 7 interface 0 has no altsetting 0 [ 52.883852][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 52.892893][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.951298][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 52.957502][ T351] usb 3-1: config index 0 descriptor too short (expected 25953, got 27) [ 52.965902][ T351] usb 3-1: config 9 has an invalid interface number: 144 but max is 0 [ 52.971388][ T108] usb usb4-port1: unable to enumerate USB device [ 52.974094][ T351] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 52.990485][ T351] usb 3-1: config 9 has no interface number 0 [ 52.996612][ T351] usb 3-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.009952][ T351] usb 3-1: config 9 interface 144 has no altsetting 0 [ 53.021786][ T351] usb 3-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 53.031313][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.039365][ T351] usb 3-1: Product: syz [ 53.043607][ T351] usb 3-1: Manufacturer: syz [ 53.048235][ T351] usb 3-1: SerialNumber: syz [ 53.057707][ T351] r8152-cfgselector 3-1: Unknown version 0x0000 [ 53.066024][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 53.240078][ T886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.248664][ T886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.265171][ T874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.273694][ T874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.283132][ T351] r8152 3-1:9.144: Expected endpoints are not found [ 53.291069][ T351] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 53.310296][ T66] hid (null): invalid report_size 26551 [ 53.315941][ T66] hid (null): global environment stack underflow [ 53.322314][ T66] hid (null): report_id 36711 is invalid [ 53.327952][ T66] hid (null): unknown global tag 0x32 [ 53.333772][ T66] hid (null): unknown global tag 0xc [ 53.343722][ T66] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0010/input/input15 [ 53.357657][ T66] kye 0003:0458:5010.0010: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 53.507113][ T351] usb 1-1: USB disconnect, device number 24 [ 53.887513][ T903] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 53.981991][ T108] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 54.132396][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.143492][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.155874][ T108] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 54.165042][ T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.173984][ T108] usb 4-1: config 0 descriptor?? [ 54.361290][ T378] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 54.380027][ T892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.388630][ T892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.431281][ T66] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 54.522693][ T378] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 54.530358][ T378] usb 3-1: can't read configurations, error -61 [ 54.556493][ T108] usbhid 4-1:0.0: can't add hid device: -71 [ 54.562871][ T108] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 54.571863][ T108] usb 4-1: USB disconnect, device number 21 [ 54.581276][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 54.591285][ T66] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 54.601489][ T66] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.614022][ T66] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.624086][ T66] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.640656][ T66] usb 1-1: config 7 interface 0 has no altsetting 0 [ 54.650215][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 54.661270][ T378] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 54.663510][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.697549][ T963] ------------[ cut here ]------------ [ 54.703056][ T963] WARNING: CPU: 0 PID: 963 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 54.712474][ T963] Modules linked in: [ 54.716398][ T963] CPU: 0 UID: 0 PID: 963 Comm: syz.3.216 Not tainted syzkaller #0 2e88900194e885de5c8b36fd08cb790c546b675d [ 54.727812][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.737906][ T963] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 54.743936][ T963] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ea a0 0b 06 00 0f 85 c2 00 00 00 c6 05 dd a0 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 54.763707][ T963] RSP: 0018:ffffc9001046f980 EFLAGS: 00010246 [ 54.769834][ T963] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 54.777871][ T963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001046fa38 [ 54.785895][ T963] RBP: ffffc9001046faa8 R08: ffffc9001046fa37 R09: 0000000000000000 [ 54.793914][ T963] R10: ffffc9001046fa20 R11: fffff5200208df47 R12: ffffc9001046f9c0 [ 54.800599][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 54.801932][ T963] R13: dffffc0000000000 R14: 1ffff9200208df34 R15: 0000000000000000 [ 54.818766][ T963] FS: 00007fec845e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.827756][ T963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.834378][ T963] CR2: 0000000000000000 CR3: 000000011dac8000 CR4: 00000000003526b0 [ 54.842395][ T963] Call Trace: [ 54.845686][ T963] [ 54.848614][ T963] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 54.854383][ T963] ? schedule+0xc5/0x240 [ 54.858648][ T963] ? futex_unqueue+0x136/0x160 [ 54.862687][ T378] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 54.863433][ T963] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 54.870968][ T378] usb 3-1: can't read configurations, error -61 [ 54.877212][ T963] ___kmalloc_large_node+0x81/0x210 [ 54.883691][ T378] usb usb3-port1: attempt power cycle [ 54.888689][ T963] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 54.900247][ T963] __kmalloc_large_node_noprof+0x1e/0xd0 [ 54.906012][ T963] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 54.912192][ T963] __kmalloc_noprof+0x326/0x500 [ 54.917049][ T963] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 54.923134][ T963] ? futex_wait+0x2ac/0x7b0 [ 54.927653][ T963] ? __cfi_futex_wait+0x10/0x10 [ 54.932534][ T963] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 54.938953][ T963] ? selinux_file_ioctl+0x732/0x1480 [ 54.944258][ T963] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 54.949816][ T963] ? do_futex+0x32a/0x510 [ 54.954191][ T963] ? __cfi_do_futex+0x10/0x10 [ 54.958865][ T963] ? __fget_files+0x2c5/0x340 [ 54.963589][ T963] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.968529][ T963] ? security_file_ioctl+0x3e/0x110 [ 54.973745][ T963] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 54.980165][ T963] __se_sys_ioctl+0x135/0x1b0 [ 54.984861][ T963] __x64_sys_ioctl+0x7f/0xa0 [ 54.989479][ T963] x64_sys_call+0x1878/0x2ee0 [ 54.994183][ T963] do_syscall_64+0x57/0xf0 [ 54.998610][ T963] ? clear_bhb_loop+0x50/0xa0 [ 55.003350][ T963] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.009247][ T963] RIP: 0033:0x7fec85b9aeb9 [ 55.013693][ T963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.033339][ T963] RSP: 002b:00007fec845e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.041773][ T963] RAX: ffffffffffffffda RBX: 00007fec85e15fa0 RCX: 00007fec85b9aeb9 [ 55.049757][ T963] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000c [ 55.057756][ T963] RBP: 00007fec85c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 55.065755][ T963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.073755][ T963] R13: 00007fec85e16038 R14: 00007fec85e15fa0 R15: 00007ffd4153d558 [ 55.081761][ T963] [ 55.084780][ T963] ---[ end trace 0000000000000000 ]--- [ 55.106842][ T66] hid (null): invalid report_size 26551 [ 55.112494][ T66] hid (null): global environment stack underflow [ 55.118810][ T66] hid (null): report_id 36711 is invalid [ 55.124497][ T66] hid (null): unknown global tag 0x32 [ 55.129867][ T66] hid (null): unknown global tag 0xc [ 55.137363][ T66] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0011/input/input16 [ 55.155707][ T66] kye 0003:0458:5010.0011: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 55.231283][ T378] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 55.255784][ T378] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 55.263576][ T378] usb 3-1: can't read configurations, error -61 [ 55.304275][ T66] usb 1-1: USB disconnect, device number 25 [ 55.391308][ T378] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 55.412895][ T378] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 55.420514][ T378] usb 3-1: can't read configurations, error -61 [ 55.426927][ T378] usb usb3-port1: unable to enumerate USB device