last executing test programs: 1m15.058571086s ago: executing program 2 (id=95): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 1m15.024611017s ago: executing program 2 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 1m14.976728019s ago: executing program 2 (id=98): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xccd, 0x35, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x12, 0x20, 0x5d, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0xffffffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x81, 0xfd, {0xa, 0x25, 0x25, 0xba12, 0xa1, 0x8dbb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xbc, 0x8, 0x1a, {0xa, 0x25, 0x25, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x5, 0x0, 0x1, 0x10, 0x4}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect$uac1(0x0, 0x87, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000008630703204000010203010902750003010600020904000000010100000a2401d4000ab64e"], 0x0) 1m13.645143261s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fchdir(r1) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 1m13.543977193s ago: executing program 2 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1, 0x1000, 0x10000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e27, @empty}, {0x306, @broadcast}, 0x48, {0x2, 0x8104, @loopback}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 1m13.509127264s ago: executing program 2 (id=110): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000010392ad33f40000102030109026900030180e0fb070b0101010a20000904000000010120000924b60b00000000000004010000010220000901022000090501094000050495082501810909020009042200000102200009040201010102200009058209100005041008250184790a0200"], 0x0) 1m13.378455857s ago: executing program 32 (id=110): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000010392ad33f40000102030109026900030180e0fb070b0101010a20000904000000010120000924b60b00000000000004010000010220000901022000090501094000050495082501810909020009042200000102200009040201010102200009058209100005041008250184790a0200"], 0x0) 39.846685767s ago: executing program 4 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x4, 0x3000, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x81, 0x25, 0x70, 0x3ff}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x93, 0x11df, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x152a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4fc4717f"}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x98}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x524, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x508, 0x111, 0x0, 0x1, {0x504, 0x5, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x53}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x260, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x40044}, 0x80) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f00000000c0)=0x564, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f188e00303e2e0ffcfd64f30f322e6626660f206436660f38dcfb0f01cf0f78250f09ea00303800b857008ee0", 0x2d}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 39.72046452s ago: executing program 4 (id=309): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x1e1, 0x2, 0x8, 0x100, 0x9d, 0x280010, r1}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) write(r0, 0x0, 0x0) 39.656013602s ago: executing program 4 (id=310): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) timer_delete(r1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) write$P9_RVERSION(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 39.655645252s ago: executing program 4 (id=311): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) fadvise64(r0, 0x2, 0x4, 0x2) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)={0x0, 0x3, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0xf1}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x5}]}, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.408735698s ago: executing program 4 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d02, &(0x7f0000000900)) (async) capset(&(0x7f0000000040), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x21, 0x0, 0x80000000, 0x106c, 0x200000000000, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0xc, 0x0, 0x0, 0x80008000], 0x46000, 0x3c0251}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x2404c000}, 0x20000000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 39.343516059s ago: executing program 4 (id=317): r0 = memfd_create(0x0, 0x2) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x4040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4005815) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000002c0)={{&(0x7f0000000080)=[{0x401, 0xf1d, 0x1, {0x0, 0x2}, 0x8, 0xffffffffffff9556, 0xfffffffc}, {0x7, 0xffff, 0x7, {0x5, 0xfffffffffffffff9}, 0x9, 0x80, 0x4}], 0x2, 0x40, 0x7fff, 0x6}, {&(0x7f0000000140)=[{0x7f, 0x4}], 0x1, 0x10, 0x8}, {&(0x7f00000001c0)=[0x8b6, 0x8], 0x2, 0x8, 0x35, 0x1ff}, {&(0x7f0000000200)=[{0x8, 0x68000000000000, 0x8, 0x2, 0x8}, {0x60000000000000, 0x345b, 0x1, 0xfffffffffffffffc, 0x201}], 0x2, 0x28, 0x8000, 0xdc1}, {&(0x7f0000000280), 0x0, 0x8, 0x401}}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000180)={0x0, 0xe000}) (async, rerun: 64) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000)=[{0x8, 0xffffffffffff514c, 0x6, 0x728}], 0x1, 0x20, 0x2, 0x32347068}) (rerun: 64) 24.175206426s ago: executing program 33 (id=317): r0 = memfd_create(0x0, 0x2) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x4040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4005815) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000002c0)={{&(0x7f0000000080)=[{0x401, 0xf1d, 0x1, {0x0, 0x2}, 0x8, 0xffffffffffff9556, 0xfffffffc}, {0x7, 0xffff, 0x7, {0x5, 0xfffffffffffffff9}, 0x9, 0x80, 0x4}], 0x2, 0x40, 0x7fff, 0x6}, {&(0x7f0000000140)=[{0x7f, 0x4}], 0x1, 0x10, 0x8}, {&(0x7f00000001c0)=[0x8b6, 0x8], 0x2, 0x8, 0x35, 0x1ff}, {&(0x7f0000000200)=[{0x8, 0x68000000000000, 0x8, 0x2, 0x8}, {0x60000000000000, 0x345b, 0x1, 0xfffffffffffffffc, 0x201}], 0x2, 0x28, 0x8000, 0xdc1}, {&(0x7f0000000280), 0x0, 0x8, 0x401}}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000180)={0x0, 0xe000}) (async, rerun: 64) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000)=[{0x8, 0xffffffffffff514c, 0x6, 0x728}], 0x1, 0x20, 0x2, 0x32347068}) (rerun: 64) 16.770124015s ago: executing program 5 (id=454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7, 0x1, 0xc, 0x49}, {0x467a, 0x7f, 0x83, 0x101}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x633, 0x70bd2d, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa0}, {@in=@empty, 0xfffffffd, 0x32}, @in6=@private2, {0xa, 0x0, 0x0, 0x9, 0x3, 0x4, 0x0, 0x100000000}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4, 0x81}}, 0xf0}}, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000100)={"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a50c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300"}) 16.647910888s ago: executing program 5 (id=455): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_script(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1a, 0xa, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r6) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[], 0x20}], 0x1, 0x0, 0x0, 0x404c8a5}, 0x0) r7 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r7, 0x5437, 0x0) 16.636899298s ago: executing program 5 (id=456): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0xfb7f, 0x2, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) (async, rerun: 32) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x20, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4001, 0xffffffff}}], 0x1, 0x0, 0x0) (rerun: 32) 16.54654649s ago: executing program 5 (id=457): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a0000000000000101620000090017"], 0x28}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/rt_acct\x00') write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x4283cafe) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc000000", @ANYRES64=r6, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="08000300e00000020800030064010101080006000800000008000700", @ANYRES32=r3, @ANYBLOB="05000500080000004400018014000400ff01000000000000000000000000000114000400fe8000000000000000000000000000aa08000600080000000800060001000000080006001200000008000400000000062800068008000700", @ANYRES32=r3, @ANYBLOB="14000400200100000000000000000000000000000800060000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800b}, 0x0) (async) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x81, 0x6, @remote}, 0x14) (async) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'geneve0\x00', 0x1}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x5, 0x9, 0x50, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x80, 0x4, 0x577}}) (async) writev(r8, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000020701010000000000ae3c000a0000010c0006400000000000000fff0900010073797a31000000000c00034000000000000000030c00024000000000000000020800054000000002080005400000000208000540000000020c000340000000000000000714000780080002400000000908000140000000080b0007800800014000000000080001400000000108000140000080010800014000000003"], 0xa0}}, 0x91) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000003c0)={0xffffffff, 0x1ff, 0x4, 0x1, 0x7, "027200000000000400", 0x80000, 0x1}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r7, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="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"], 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) 16.455850012s ago: executing program 5 (id=458): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d01, &(0x7f0000000040)) close(0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x420e, r4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) pipe(0x0) r6 = socket(0x11, 0x2, 0x0) bind$packet(r6, &(0x7f0000000500)={0x11, 0x18, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb1}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000f14496c906040000000000f93132", 0x2}, {&(0x7f0000000540)="4cfe4cdc21461cd266fa30695e4980adc33d9ade9ef96405ad887a02befb6ffd40586b3c8cba0edfca7c98bef49d5dffd929181facfcbbb54d5f3206b6b8e47c1c2b3fa5489a5d108f147ce4e1e4f4cb0ce0eb5571c79ee52495a24e14e74d4fb975aee45318f7569a6c178cc7df93d711a9854d1b6afcb5ceeba14af767ccb5b40d14235ce79f303a0542a37cb4b499edd5da6356824cff0ffe089d7cdf50398d94fda73af12d92beffbd6dd5a5bf1077759be9fe12a2b26d530bbb9cd5ccd85c276279946215139a6020b823294823bef8437b832a2df95bc5314fea42bc8e0cdb831e21ffc8d7cf438a0b224265ae8ed6a07ae53bbdbe1fc6b20ecbf2f2c81b60cb9bb3f4b57d6c7aef3ef3f9bf78ed8387a71aea6976fefe2920bd37858b26a519edf254b0047559953903195c4a3b4d99314a51b7f5ae0c5caceee798b0fbc29d90c454b68871a40f729341d6ddaed9c45e32292ef00ff4372015a20bc2c4f6db556696406f49c145ee247288b91d344b381dfc1b12324fcf83fdb9c2d161731d198bc99254f1c650cbdba10523d3014520e6e0a3b3e1e58d6d3cc2b44c0c84abc35426a3816fe49296f1fa2b0a2178d012dff99178d555e02d8d05b9cae19e7dd766826b8a02f47b70fa55cbad57d4cb537ef2daf7d7ff6df8ae6fd287d3620557df588d9b60aa147f3e15ff5d8959fd8679fbad9fa74341a4e735ef5152339a9deee18f1afe2eb68323ae7647e844202c30d23f8d334aa21d56d5d05c62308fc58ba3700fcfa8495e197284087fc83d41448b8e4d5c1029c2aa470181f365260f8b6ea6e534a89324fb342e14144c56b1689ffe0e8127044e0f3eda23dbfab6e5a44ffb95ea3f5e966a954fcfff5fd57a4fcb9beef8c3c403e9946fc9118870d7f22cdce58ecb0ec3215ab89cfa7a93c915477ee0b323cc0684c01e214e13a78dba43f132c85ec96f51318ec02cf7d91c8bf20cc7161232a77d3f4ae47fd05d232bd6502be5ece1a80c20dccb7467ec984262373976a33e72d7c60a7fba6bf7283b1e2314fc19a2eaad6208bf5dadc65bda2b579c9a6847905e8f4f8cf287003878a68e6c9e64b01749a64667c7ed1d98af9093fc6e0ae95259f087d26e4abeb58f45e6daed5303c5479ef98f55a6ab13efb99cccd401f833a1d60191e302e65e410c635d91e71b4c040ff68f5793e00c4b482dc6abe6b65f16edfd4974e0e709a61e1d6b887166f847ceb7c7a663a2d1d00dc5fa9314601bcef0207574194dc7cfffd011478dfdc71d45deab16aababa29aa218af2ea77fcaab90ab45e980a571ecbcfef84c39660485a9dccfb1371dab6e9340027007edf115df352b7084d40b2cc6255885b00571906f86718cb087b2046e8827bb470de62cff23e3e92807862d4b629ffc66e1914dde9de81ff8bdd08ded204fa8a86dfac61af154408711a827dacc7812dfe388b899a7105c29adf310a1f63c17e913e1c0371270645c5831a1a1b96f0e97ae3a8249ddea6399e3da7693cbdd95b4cb1351a26ccf15afd8a6b7c55fd76e9803749a0348beae1895f5aefab0aa1d38b0381f46148c3f131ceeeda632bf4626ada0d8c34e58e950d17dbe6ab51b62a8ebcce182b1af736282d74401d95a2dc737a8e53f89f3eb25a91535d4d2c217050a70f1ec7d2103dba4629cf8f5533860e7231d8cd1f01b44a73f71dd951178911a59f227d78c7b2f81529b27e1e408696e974612cf3b28c839c0b4eba5a194c5feaeb89cf09f089a3fba7fc2c764e897891391a6bedb8d25b96bfe0b46a4ccccdf2da32ff38f1298d4621fa109a63c4fad7113a22db0d1d25fc0d8e44c3d9b3d47b77d56e1a4163e5c5b582350550a3279e5ff9cee68ff2de07e65253913a2e5c52aab2a458499e61d95bca7d39d67c46f9143eda8479b7b6d8b5c319ef65be7adec6982d2612ea1a0106e95b496f52ead5a9c85b2836e08ae05f82d7d236deb5c3ca945fa3304d4a9c5dc2c099a5b9f0d65bc7a780c0a24917e7110cf1969a10145090e4dca224119b9db6bbde133dbc54b706ae1e66f04a058f56963a3beae525602e224200e8bdf191158962c27d82597457e924db6983c923efad1133a0a265da94d7a10cff54529cdc5f02e816147c30ca35e6b4aa43cca6c8871e61c686224a44cfca85c3297a618fd0392ee22c154d77fffa4b6203442f55fa379ae2a30c35048dd9e45a5ed7c870e3cd1fda0bed81703d87e54ade050c9e05b1b9c081896d51370d780f6a40dc9d7b5358a948702f94912558d47c6ab72ecf78c35c5bf25bc3531e8dead23856628b9a1c63f60568610a32e8adca4c0b264c1dc8019007d91bf0616dfc64a5fb7a18c7bbb0c25de7687206dcce8bf205997f99f4f16a25f0829399dbbe2db5943c0e83db17d259b4851bcebe2b836c8a48c15cb19f403e48184f711097bf38e0f3828a9da6c4f2b29514b1d70d0099d73c663f8d513a50729f71e15a0497f709408450eea71b30b8d23415536790a7afe908817238bd239af79c46236ff16d9c351ebba47038b7fb1863d07ecf3620973be0e7c33f88cc38caf0c7ac44782cf7ad743bbe31cb176d61f83f6667f76a2683cafc197ec5f677517a2e10894686023814533a3252baa4d93ef0dfd3a629209108c81f269b22a32ecc824fe61b9d64c7c8333cbd346c2d7d9f613cb2e7dfc79b26644ef0df6edbd67b4b95ce7280ce412b9dc0ef9fef00a8017f534b044bf74f0c52f617036c108bc0bba43ea7e6bd83d355153aeb7e63ca060c509296e279ad2c734155f598f2e1ab2eb9d92d8a55e69231ae9b75ea06a44186519a781ebab7c5b86952698f86123844ff22a95d5b98d50bf87d289617191f3283a41b7e0916321bebfebb6cc19dafd73965022e5e6ac71cbf2f8c752a481603376e7480c332705aa5899599e61e5b64b93cc0c735209ea3644599fc2322efcc30300d9b1ba4bfa7db6097a5ac4502043fbaba93468685b2132dfaf5c0ac372ed95455ec4e89577519c0559dfe73a3c4b3094e07b9f0ca36ab4c3ce99aa32917e5522a4af25fff6315dfc96971ba5783bc9a8ab04faa68453f5ade61df195e609673d47e1ed3f2e55e42790d4138b6798fbd8be0e973a365fb3f873300a1b1199020a95e158dfb96b2712d4642b7e894f722cbed45044848d7385b5ef9fd1493db842538b0a2045b323ea24e05f705ae82b63f7399d37f80692baf51f8f91815128a15aff7da32cafd63a31818aab2fbf0b05aafbb179a0d32bd5870f1dc6b6e02bdd18d7620c779bc006ed58d79ba279af6a6547346bd0d006a7c482efad03271b9d698049c602cf59f950b9b950349d0c82817dca0f4ad4ef7905078e15a566ccf61697c4e07f8ead05195ed5df25b9dcac1f2226d44fce6527850b662442293ea2ae6439ad88e76331974b38a6ad65c5d7f21f7669abd95e1f737cb6afabdebb304b0331aa782c3045055b359476ee9dcfad6b733262d17b0fc1de77f28964d35e7ac72f13cc38b97612b62cd2301ffacbd0d26ddc03754e7de5ac4e1192446df0292886b699739b7a737347448a9614e04f47adc3fc54ad22ea3f6077659fa860237c3a62575976d98bfdcb9b5bc53b971d332cb304805e8e207e21fb7038e8793d35de78bdb6328554b529c0b2547304826740951751431ea7579cfff0cc21215610c38ff26606af9035a673ecf551a173131d9a759aa1d35ad25bbc887eeeb47312e0ebbdfab0a6351ed28b894bb6ffdc0d4446bc72877467bde036029ca124a852492c7ea867beb5f6f11c6fd5f54b16007e13e3dd30f303d97a2579b0669f99bc6b60e761d2c86a47cce6f3978a5464a36b9cdbaafbef91101eb8820c33fc948600ea940ee6c4efb918a43dc9f9b3ca09d3d28e70fc780fcce8be508532af6b06d2641d6171e5050151b64d5bfd18f523df0b0a8f11818865093d5df1d35cd23c86dc29e07c4df70dcad8005178667ebab660b21b41fa098608ed246ddfc1886612e62e2b9322f24bfcbb3af255975d9d7a6306313bf864f486630e7a96d69f8c9786483b4b77ff06c7f7d81c20186ae348bb8685110bbf2fc727c51596bc90f0c63a4a5bc4d364e58d8b7b838489b0249c81cee9c037b542e5996bb528dfc74e09bbd27c7964dd3f5982bfb1f7167bdcbe2a0c75402c41a593f4437b735edb5fc670d33dc681accd29bec27632f80d63bba645d6dae7cff85d725db09da0ec2993eb1b78b0154e66ff44726ea8432ebb6a40b8f9267bd045dd6add7c6ca81803b75cb9e1b293c348738624166d34bee1607e3d6b70e551cba10d94f88c382c36de57274ad426ecce09802bfbc170c8456ef9ada4f03e1c6ef0543ce3afe32d9dde82996b9164a0265848fd1f29b0a3e642266b6c9988df306d8f0fa8e28ecfd45413d6a1abbf6bbc490109235ae61e3d5093daf55e35a76f7e2d87808c43949555a0050d5e9cf98abb12fd00aca3efcda3caba98d9f54196d0fdb4540cc1cf8e9d4a37f16f24ecdf03a7edeeb9ab4717e3110d158b20bc6a2f4a4ed0d35d273f6ca0800314e051e81980f9952cf671e8fa4c0b851111640879b22db13ab60aee4f79a0f68d00069283e6be04a079ae2060405d92fd17d32ead01d11383509577d7d8f910b7ec62d1524d40c2c782a896279b39eae4b66d3d7ded369aa606e12a5257e01023eb2d2eb294951f5cf0eb97c3aa02233a7536fb768b9c5ff85606c93ff2f88479dff735133e1e269779fd01705cf395e3a13188e4a8de3fce84b7764a5f87dd41ae8a30f6aadafcc1d7b29edf5e92f823341474e9a702ec802d1295098a744733553362378e8effe70b0e5af607cb56f768230277df70ccc23519f2a3c1f65dbbcc414e521be019fb5a6f49f1a37b73e9c4296342021284b54937de9e2b5c589d8a27745207667ef94e407ffaf335a10ed400291fde968041cdf748233497d05885f6e183f535b24aeaeaa7600e53713e3252fc2bef9be6e477b7a7ec42ccd707ca572cb15cb3d83a0f3d5391e45e393cf98206d595b8b42192e26f070ad8f07c917396ec40537982b36aacc0982ebb07f3e38a91005532b0391a7f72ef12b23878ec364fe8fa449317016119e8fc2f005a15c49ff0ba8acebf8da46e2a4eb629a6e9a51f08cf3b648d7627f487bb08c2a37a3b3e8ba36734ee1e80e606a9771f0ff22df505a2c45d4872818eb72f74855fb433b664623ee314a8dcdd9f735ccba78e8b5b64feaa7d762b5c190f3e8fe69b0caecd51c4d298bb3eb35dd8452733558072745b357d6ac38688727920ba8e44e9a5a1e997f2c28dd396200ff0944e085ebb4c0cdf4334219b9b02eddd71c5aa1cd7df384942841a7977f1a80fc2a61b11669419ce55822b8faac8f96847f7b4348667002d9735514e99f411e763299ee19b87cf3ae5ba938becbb028fea11d099fd491a019e2f9da1ba16718eabcb0e9667615f14f5ac6e698acfd0821fda0ba78938110c8d95388ee94a0309a40b632b7801d0b3720d7745a53f9805236c96d467824593654255a7c87fd4a7eee3ffc22cdfd3aaf0582075d22ae829e3ec560b68a991659b1a6401b284874b99447c94d771d49b09b8e0161929d12556fdfd30733429a4bd2f34fc75aba0ec803e70cbf359a85e86ba5b4a0e11f0c0785b57ca6a297737b5aa8d689002f6b0540fb1b7213420d98efdc0e8d9adeb56f7fc711ac69accd9a1784e244f6d093b893e16e86ef3cf5244ace3546b2b7d2be996cf8e5378a69e83aeba0a1dc61541f5d21f38969ddd8f1"}], 0x1) 16.453977222s ago: executing program 5 (id=459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) msync(&(0x7f0000a74000/0x3000)=nil, 0x3000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x80000000}]}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 12.131874807s ago: executing program 0 (id=486): socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.130475367s ago: executing program 0 (id=487): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x5, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x4, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0xcce8, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xffdffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) (async) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x5, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x4, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0xcce8, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xffdffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x7) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(r3, &(0x7f0000005300)=[{&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/179, 0xb3}, {&(0x7f00000035c0)=""/28, 0x1c}, {&(0x7f0000003600)=""/21, 0x15}, {&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/186, 0xba}], 0xa, 0x6, 0x7, 0x2) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c703000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) write(r2, &(0x7f0000000400)='onf', 0x3) write$FUSE_INIT(r2, &(0x7f0000002480)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7ff, 0x60c0091, 0x8, 0x2, 0x7, 0x3ff, 0x0, 0x0, 0x20, 0xffffff00}}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x146, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x134, 0x1, 0x1, 0x2, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0xce, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "cd"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xcc38, 0xb}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @country_functional={0x6, 0x24, 0x7, 0x10, 0x80}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xe, 0x5, 0x7, 0x8, 0x8}, @mdlm_detail={0xc8, 0x24, 0x13, 0x5, "bc76e4fd8af4d941f011c6a6838a2981ee244aa9dd9efe9911c2df6466afc84b2c53b54e271b3bcde9eb1a8a489431a45cdb31d322c1b1ec45f440799acb2116d4aec7e4e982c44082fd79d94f225b1301c31699c0ef9bc1a1e7a29afd1d76902caf75113cc5ac1cf46eaa9f5d0dce17501cadd1ced2254d9f9f8efa85c0a4c6241f8367a319b1387fd13ded8cbaadec5b3a4f1cbc9b78af7520636e8b1b60591a83a2f6be68d1cdc1962adbad47e0534d09c79183ad565b5eb8af1aa7084032a030e100"}, @mdlm={0x15, 0x24, 0x12, 0xf}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xf, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x8c, 0x3}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x2, 0xad, 0x1, 0x20, 0xa}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x411}}, {0xdb, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000003c0)=@string={0x4, 0x3, "68e3"}}]}) 9.1026673s ago: executing program 0 (id=509): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1, 0x1ff}}, 0x30) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0xf) ioctl(r1, 0x400455c8, &(0x7f0000000008)) r2 = socket$inet_udp(0x2, 0x2, 0x0) mlock2(&(0x7f0000e46000/0x4000)=nil, 0x4000, 0x1) bind$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e28, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000037c0)="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", 0x262}, {&(0x7f0000000380)="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"/1064, 0x428}], 0x1000000000000118}}], 0x2, 0x2000c044) writev(r2, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0x1}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usb_connect$uac1(0x0, 0xd8, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x20, 0xd0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x29}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x7, "a001"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0xbd, "da299daf9b79"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x0, 0xb, "aa183fad"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x4, 0x3, {0x7, 0x25, 0x1, 0xc, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x10, "c4100e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1c, 0x7, "11"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x7, 0xd9, "8a5cfb9d07"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd5, 0x4, 0x4, 0xff, "ab8bf4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4b, 0x4, 0x3, 0x39}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x8, 0x37, "2544a72967b164"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf8, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x5, 0x4, 0xf7, 0x20, 0xf3}, 0xbb, &(0x7f0000000900)={0x5, 0xf, 0xbb, 0x5, [@generic={0x8d, 0x10, 0x0, "075028552ff1aa47a2bc05f145fe7aa5d37978c287f4da52c9dcc049186058118d83bd749a65006a7978139cff10073eff72bf432b98cd59e2012e81fca0f102190f10b9f87164744dd98c9abbc54349e4611d02a09f8cda83d21e6447ad0cbc8d924dc0e0a8d386513b2b66a4ef9fe5cc6f14e2ad5fe7d82794ac70f782ef99c21392b59ff17dcc848d"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f1356095c9a9745bdf8025072054b294"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xb, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0x2, 0xf08}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x7, 0x6}]}, 0x3, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1009}}]}) 5.988574905s ago: executing program 0 (id=532): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0xffffffffffffff94, 0x7ff, 0x2, 0x0, 0x40, 0x1000005, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) syz_usb_connect(0x3, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x2}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x80000b1, 0x4) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r3, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 2.88836815s ago: executing program 0 (id=542): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088034975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946817591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88ce0f0000000000003df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891bbf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b502b7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06921a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c98e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08408897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c29742768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdcabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a951447c39bb38bed86faec216eb6992162f8dcbf719c145f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xffffff39}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x2000000, 0xffffffffffffff81, 0x2, 0x57, 0x2, [0x7fffffff, 0x33e, 0xfffff800, 0x80000000]}) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[], 0xd) 2.802914662s ago: executing program 0 (id=544): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1000, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) (async) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) syz_usb_connect$uac2(0x3, 0xd6, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) 1.306917088s ago: executing program 34 (id=459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) msync(&(0x7f0000a74000/0x3000)=nil, 0x3000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x80000000}]}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 1.301181258s ago: executing program 3 (id=553): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x6) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f00000001c0)=0x7ffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) (async) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 1.162684852s ago: executing program 3 (id=555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000200), 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x5) listen(r2, 0x5) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) recvmmsg(r2, &(0x7f0000003000)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/11, 0xb}], 0x4, &(0x7f0000000700)=""/34, 0x22}, 0x800}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001780)=""/129, 0x81}, {&(0x7f0000001840)=""/168, 0xa8}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001940)=""/80, 0x50}], 0x1, &(0x7f0000001a00)=""/90, 0x5a}, 0x7}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/196, 0xc4}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/223, 0xdf}, {&(0x7f0000001d40)=""/228, 0xe4}], 0x4, &(0x7f0000001e80)=""/56, 0x38}}, {{&(0x7f0000001ec0)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001f40)=""/49, 0x31}], 0x1, &(0x7f0000001fc0)=""/179, 0xb3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/177, 0xb1}, {&(0x7f0000002180)=""/254, 0xfe}, {&(0x7f0000002280)=""/253, 0xfd}], 0x4, &(0x7f00000023c0)=""/85, 0x55}, 0x4}, {{&(0x7f0000002440)=@x25, 0x80, &(0x7f0000002980)=[{&(0x7f00000024c0)=""/191, 0xbf}, {&(0x7f0000002580)=""/146, 0x92}, {&(0x7f0000002640)=""/130, 0x82}, {&(0x7f0000002700)=""/106, 0x6a}, {&(0x7f0000002780)=""/64, 0x40}, {&(0x7f00000027c0)=""/97, 0x61}, {&(0x7f0000002840)=""/11, 0xb}, {&(0x7f0000002880)=""/214, 0xd6}], 0x8, &(0x7f0000002a00)=""/14, 0xe}, 0x3ff}, {{&(0x7f0000002a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)=""/181, 0xb5}, {&(0x7f0000002bc0)=""/99, 0x63}, {&(0x7f0000002c40)=""/227, 0xe3}, {&(0x7f0000002d40)=""/52, 0x34}, {&(0x7f0000002d80)=""/157, 0x9d}, {&(0x7f0000002e40)=""/32, 0x20}, {&(0x7f0000002e80)=""/227, 0xe3}], 0x8}, 0x96}], 0x9, 0x40012102, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f32b9470b00000f323667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0xfffffffffffffec3}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0xffffffff80000001, 0x7, 0xfffffffffffffffc, 0x0, 0xcce, 0x5, 0x3, 0x1, 0x4, 0x0, 0x2, 0x40000000000001, 0x0, 0x1, 0xc6a, 0x101], 0x809a002, 0x181c1}) 560.021846ms ago: executing program 3 (id=557): openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000300)) getdents(r0, &(0x7f0000000280)=""/145, 0x91) 558.595906ms ago: executing program 3 (id=558): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010026bd7800fedbdf25e0000002000000000000000000000000640101000000000000000000000000000000000600000000020000003c414c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000100000000000000000000000000000000000000000000000000000000040000000000000010000000000000000600000000000000990c0000100000000008000000000000de0200000000000000000000b06b6e00000101020000000084010500ac1414aa000000000000000000000000000004d33300000000000000fe8000000000000000000000000000bb000000000000ff00070000000000000000000000fe8000000000000000000000000000aa000000003200000000000000fc000000000000000000000000000001000000000000000000000000ff01000000000000fe880000000000000000000000000101000004d43c00000002000000fc0000000000000000000000000000010235000001030000000000000600000000000000fe8000000000000000000000000000bb000000003c00000002000000fe8000000000000000000000000000aa00000000020000000000000003000000286a8b27ac141443000000000000000000000000000004d5320000000200000000000000000000000000000000000000ffffffff0400000004000000000000000800000020010000000000000000000000000002000004d333"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x8f, 0x6, 0x5, 0x14, @remote, @local, 0x20, 0x700, 0x9, 0x338d}}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x2, r10}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r12 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 255.936844ms ago: executing program 3 (id=559): unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x800) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000180)=""/70, 0x46}], 0x2}, 0x5}, {{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000580)=""/20, 0x14}], 0x4, &(0x7f0000000600)=""/37, 0x25}, 0x7}], 0x2, 0x10103, &(0x7f00000006c0)) wait4(0x0, 0x0, 0x80000000, 0x0) 185.380696ms ago: executing program 1 (id=560): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) r1 = socket$netlink(0x10, 0x3, 0x0) readahead(r0, 0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 83.753008ms ago: executing program 1 (id=561): r0 = socket$netlink(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x844) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x3, 0x2}, 0x10}}, 0x804) (async) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) (async) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x0, 0x4, r2, 0x0}]) (async) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000024001200080001007665746818000200140001000000000000000000000000000000000010000300766574683100000000000000", 0x64}], 0x1}, 0x0) (async) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa2, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x61fd9e25305acfc9, 0x10, {0x9, 0x21, 0xe843, 0xc, 0x1, {0x22, 0x84d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x77, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x8, 0x9a}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x0, 0xff, 0x10, 0x7}, 0x51, &(0x7f0000000080)={0x5, 0xf, 0x51, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xda1f, 0xff0f, 0xa, [0xc0c0, 0x3f00, 0x3fc0, 0xff3ff0, 0xf0, 0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2cb0f4c246de7a3ad5ae8683f6944ed1"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x337, 0xf00f, 0x4, [0x0, 0x0]}]}, 0x1, [{0xc4, &(0x7f0000000380)=@string={0xc4, 0x3, "c12617d4973ebb2a0e4b4252b4fb3334ace0ff1ffed794d1d726dce9ff9a50350596edac11075547069b71fa60acd1388db266d3773ac3dcebcfa94b5777a756b0fe0391ba689e1d057aee2483d8770dc8690ab3ea4d12dbd97446535585c0d18ad09b6cec882e05e2936fedd94336cacc187cd5f32ea377896f6c093147a27ee869c9a161bb40ec12c9a65a352615c97db08c9de3f4bae2295c776eabb798d5bc8a04eb230cb626a97eb9378a763a4401bc56ad7dd9e52fbfa34bbe5f8070f4d177"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000640)={0x24, &(0x7f00000004c0)={0x40, 0x24, 0x38, {0x38, 0x30, "bbd16ce879f711c964995e0f2f28fa8a617dbe52bd522fb56114d66014d513c4482611e8c0307567d57ca64e916d8a597832a6c22de9"}}, &(0x7f0000000500)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "e9469cbbb6957ff9a5a16e74b18c8b7efed9b638f7950d40ae665f42d35a138be8ddc91bc80fd0f428e8cd6b464b5f3ab0d47180d457715083681d6beb8cb26acd04b698848e2af2cbc8ac205e247d236ad3036fc87b38a167e59b6c73e995aec840e6a0e8fcfca9d59736afa0b9239f289d29fcb7eac877fdabcabbec0fdcd59487ff45ee89a837e9982ce0e2ed95fa1366f7315b977664f964acd32ae0afe947826ca3"}}, &(0x7f00000005c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "1e61739b"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x0, 0x1, {0x22, 0x1c3}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x17, 0xcc, "65bdc02ca0d0822a2bb5aeee45d16ea72cf13a2f074b764ce291ced0963d11321fa7f8829c4adf02ee7fd07b3b8ae9484c59d7f3751a6d379f00b8b1673cdbe549eec59e5e61acaa9964b4532cc6602c855caccd45663c4518e147692aa4bc592bf5521aee8e6f5b97e40c50fbffda7adc8f7603578a8b919362f5daadb2ca3f654371c392da6c457fc4df540b057d4269ab98409fa1158b6680eca27880825ad9483ce8ef986da4354308e82e6c8a729fd7ecd8a3ba71c3552272129d0ee0664fef9e62f404965b6c70a4ee"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x1, 0x53, "4a55330b9ba88b9a3775fb4a7ffc2b5305f354a13ea15ce17af10328f1f53ec9455757865e59a7b06a4bafc0a4f5a884dd28155a78a255fd47f1d5e24e84aad0d55aca38a860d98504add659cc13d25393bfb0"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xfb}}) 82.935968ms ago: executing program 1 (id=562): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000002780)) 82.538668ms ago: executing program 1 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x6c, 0x6, 0xf6, 0x4a, @private1, @private2, 0x61, 0x80, 0x100, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r2, 0x80, 0x40, 0x6, 0x506ed4ff, {{0x1d, 0x4, 0x0, 0x9, 0x74, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x34, 0xd7, 0x1, 0x3, [{@local, 0x9}, {@private=0xa010101, 0xac}, {@private=0xa010102, 0x7}, {@multicast2, 0x4da}, {@multicast1, 0xd5}, {@multicast1, 0x3ff}]}, @noop, @cipso={0x86, 0x18, 0x0, [{0x8e8bcb34a048d024, 0x12, "78d6ef24c24e532c3ece2c1e21f07d10"}]}, @rr={0x7, 0x13, 0x23, [@rand_addr=0x64010100, @private=0xa010102, @multicast1, @rand_addr=0x64010102]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x30}}, 0x801) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, "3b45e98887e8514b94c8c956dfe1baff8c6c79c372142ede92044304faa5c4ed", 0x4868, 0x7fffffff, 0x0, 0x7}, 0x3c) 47.808839ms ago: executing program 1 (id=564): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x7ff, 0x40, [0x0, 0x0, 0x9ad, 0x6], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="eb0a406f93d50cf6004e53a5b4724733"}}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r3, 0x10000000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000100)={0x0, "4a13583c03780ae2585029b1615d40e1"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001500)={0x0, "7434f54451263ed5021f960d9c5ff74e"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002500)={0x10, 0x0, {0x3, @struct={0x6ff2, 0x1}, r4, 0x7, 0x81, 0x8001, 0x400, 0x6, 0x40d, @usage=0x7, 0xfd0, 0x4, [0x5, 0xfffffffffffffff7, 0x1, 0x401, 0x6, 0xfffffffffffffffe]}, {0x8, @usage=0xedbc, r5, 0x80000000, 0x6, 0x6, 0x1000, 0x0, 0x48, @usage, 0x6, 0x0, [0x9b, 0xc, 0x5, 0x800, 0x4, 0x80000000000]}, {0xfffffffffffffff3, @struct={0xc4, 0xffff}, r6, 0x9, 0x80000000, 0x8, 0xfffffffffffeffff, 0x5, 0x42, @struct={0x40}, 0x0, 0xffff, [0x1, 0x2, 0x800, 0x3, 0xc, 0x7]}, {0x1, 0x5}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup3(r7, r3, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000002900)=0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002940), 0x20, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002980)={'wlan1\x00', @multicast}) r9 = epoll_create1(0x0) r10 = fsmount(r8, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000029c0)={'hsr0\x00'}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000002a00)={0x2}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000002b40)={r3, &(0x7f0000002a40)='@-]}*\x00', 0x10200, &(0x7f0000002a80)={@_ha_fsid={[0x9, 0x10001]}, {0x2, 0x4, 0x84cc, 0x6}}, 0xe, &(0x7f0000002ac0), &(0x7f0000002b00)=0xfff}) r11 = socket$packet(0x11, 0x3, 0x300) getdents64(r10, &(0x7f0000002b80)=""/243, 0xf3) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c80), 0x200000, 0x0) pwritev2(r12, &(0x7f00000031c0)=[{&(0x7f0000002cc0)="4283ed7f22ff832099aa75196fce8fb89c34eae118574a9267c0e4b0a1ed4dd5048238040e7c70ee944b2b8ffaa5c4938d1b0bbd47bb48df7a3d26cda8440206c47128ca7cb267bdfac57b3362151d5790d6da6b6d7d2e05b79925bcab5c1f44d10c713849ed18e4f6f8e082a550a5d943ae2bbe5b85a91d78e67cb8308b029e4d367f22b1a09c079e3ff09749510e6722f2f553258b559c7d67f18c7b7de69ee94fd193d14a3927cbc6ecd79c2004b640a6c69e3847dc1e9d39be32dd733d6c5d8bfb5b1819e99f9d95a30e6116af576d59a4a264e1694a731a2b3a04d93fa48ee58e3b525d2d9ec5c09c25e6cebe76d3910b6dfff97f", 0xf7}, {&(0x7f0000002dc0)="39bbe9742cba825b651f7ade0eb75d38447fce36312c26de7c0bbd7cde4356bb35325392f95eb82b44e69193780fb61befda08e5f929279c70accb1ef53aea89c6248617f5a9e4173c895005c8e11392e5496f003ccf960e1804a9b4e8738e46e4d39bca42f5d04abb2d6b4821c48104eb83b7d9a0e5be4ee614da5fb8c9cf60a3b35fabef8bd1b71b544b474f779023277a4998e6b71c77a47dd3c4870e8632f785e421542b8f0d8e4ed925ae48fc0a2f3c7fb6d6bde26ff38502a5", 0xbc}, {&(0x7f0000002e80)="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", 0xfe}, {&(0x7f0000002f80)="c7db999ffba8ca53a83c721a891817df319cb6327f7dc2c3721e2c54dfe9ef9bfa44", 0x22}, {&(0x7f0000002fc0)="d11d8e3af439862eb9baf8883b2b300f5c82bb45e012ddb9985c5b5eea69d9af1b9bcd109672522ce8e7c4a8fb048e04b2fa1903c7c59fef005dcd8988c3bfbec835de7a309b552cb73aeb74e74c6f23ec36c41202617de5", 0x58}, {&(0x7f0000003040)="8471747ca6697254f0fbfc2337115ce9099945de01adf86f2615cd112a1ba6c3b2ffc5b16b437427b1257069cd76eabdf3406f88c51e5dcf8f4bb8e2702a3d5337b3e59b893b0b6ea1bc67fcc591a57340be71692ed540d9a31e1386", 0x5c}, {&(0x7f00000030c0)="db2076b54dcd2494e266c669d8753b5b9a015fcffb1b35b9414aebd518ae10c8b9d50123ddf74930be97e345edcbad6acca67eb43984b9f6b068839b2be35978bb929147a6bd5035dd18bd667ccc700c161644dc36ca7549c10b0db9c094b5ecb17d6c5d805c9f69110a1e06c025b6a28b97dda04097928a8f53123c94712b97de2935a13ea29d66bdc0af8936a80e4371929a4246a5ccdf79776456b5d033a82cc6968f86ffe9def24a9a1f7c714f359f487782a6c9a2e6387c09ff18440fe3bacd94e7b632531287ede9e631363a735013345030", 0xd5}], 0x7, 0x6, 0xcc9, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003240)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f0000003380)={r0, &(0x7f0000003280)=']a((:[\x00', 0x2080, &(0x7f00000032c0)={@_ha_fsid={[0xe, 0xffffffff]}, {0x3ff, 0x7, 0x8001, 0x6}}, 0x10000, &(0x7f0000003300), &(0x7f0000003340)=0xfffffffc}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000033c0), 0x30000, 0x0) ioctl$TUNGETVNETBE(r13, 0x800454df, &(0x7f0000003400)=0x1) read$FUSE(r8, &(0x7f0000003440)={0x2020}, 0x2020) 541.48µs ago: executing program 3 (id=565): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="2c67ae819799bad8130f6fcc8469e62276f5b0be77b06f60b2ec8b9693c35a273496d47833d4", 0x26, 0x18854, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @window={0x3, 0x2, 0x9}, @timestamp], 0x9) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @window={0x3, 0x2, 0x9}, @timestamp], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0xcd, &(0x7f0000000500)=ANY=[@ANYBLOB="1201500200000040410e57504000010203010902bb0003017f2004080b8003012330010904000000010130000a2401092e00020000000f2410030060070009f8cdf704005b0a380c3705ee6bd1cf710b24050307148dd500a40b0904010000010230000904010101010230001724015e000000000900040000000000000006077fff0806240201030c0c2402020700060008045e860905010900000403090a2525060000000515000904020800010230000904020101010230000905820900020846030a2525000000000bfeff0f1400000000000000005a5a725f1940836b61e62610a910b1a3f5d9b8fa36758312cd441711bd636cd558863cf0662972a3df07c2874bd9268c4a8daa7d5f0c1f57ddd628d5ca5b78f03d296fcf0c"], 0x0) 0s ago: executing program 1 (id=566): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000000c0)={{0x7000, 0x25000, 0xb, 0x3, 0x8, 0x8, 0x2, 0x4, 0x8, 0x5, 0x7, 0x2}, {0x1, 0x2, 0xb, 0x7, 0x8, 0x76, 0x5, 0x81, 0x6, 0xc7, 0x6, 0x2}, {0xb000, 0x0, 0xe, 0x3, 0x3, 0x40, 0x80, 0x2, 0x8, 0x2, 0x5, 0x3}, {0x54000, 0xdddd2000, 0xe, 0xeb, 0x2, 0x1, 0xf, 0x0, 0x4, 0x0, 0x0, 0x6}, {0x54000, 0xa000, 0xd, 0x7, 0x3, 0xb, 0x6, 0x8, 0xbf, 0xfa, 0x0, 0x5}, {0x5000, 0xffffffff, 0x10, 0x1c, 0xd, 0x0, 0x8, 0x8, 0x93, 0x5, 0x6, 0xa1}, {0xc000, 0xdddd1000, 0xc, 0x80, 0x6, 0x4, 0x0, 0xc1, 0x0, 0x3, 0xdb, 0xa}, {0x25000, 0xf000, 0xa, 0xff, 0x4, 0x40, 0x9, 0x8, 0x7, 0x7}, {0x8080000, 0x6}, {0xeeee0000, 0x7}, 0x0, 0x0, 0xf000, 0x22002, 0x6, 0x1, 0x6000, [0x8, 0x0, 0xff, 0x9]}) mknodat(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000083512138240000102030109026900030180e009080b0101010a2000090400000001012000092401020007090002090401000001022000090401010101022000090501094000050409082501810909020009040200000102200009040201010102200009058209ff0305041008250183000a020009f6c72b1248269f6fc40f73d7e15f6944d4dae53f88a7baa3518f059b51b1ebc60fa1d073947438bd0121bdc2c16aff181986075f67f574cc27b8cd95af34d28373d2b3f1bb8d6cd2bd19a370b65d63a6acde37f35fa6985158837d"], 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x214000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x40) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002020000082505a1a440000102030109023b000101053d05090400050202060007052406000005240001000d240f01d808000002000800c0090582020004020481090503021000100200089e849c9b923e3c012d8ad690d830f970872c43c0965267035c2e53"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r7, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): t tclass=nfc_socket permissive=1 [ 47.517608][ T36] audit: type=1400 audit(1786479613.290:18535): avc: denied { ioctl } for pid=612 comm="syz.1.84" path="socket:[5392]" dev="sockfs" ino=5392 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.545891][ T36] audit: type=1400 audit(1786479613.330:18536): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.622122][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.631177][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.641520][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.654887][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 47.665285][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.673455][ T9] usb 3-1: Product: syz [ 47.677942][ T9] usb 3-1: Manufacturer: syz [ 47.682676][ T9] usb 3-1: SerialNumber: syz [ 47.790091][ T67] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.840032][ T320] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 47.897652][ T319] usb 1-1: 0:2 : does not exist [ 47.903712][ T605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.923259][ T605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.931606][ T319] usb 1-1: USB disconnect, device number 9 [ 47.941502][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 47.951502][ T36] audit: type=1400 audit(1786479613.730:18537): avc: denied { watch watch_reads } for pid=604 comm="syz.2.82" path="/19" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.983781][ T67] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 47.994434][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.003199][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.010267][ T67] usb 2-1: Product: syz [ 48.014941][ T67] usb 2-1: Manufacturer: syz [ 48.019682][ T67] usb 2-1: SerialNumber: syz [ 48.025258][ T9] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 48.025426][ T320] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.043286][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.054467][ T9] usb 3-1: USB disconnect, device number 8 [ 48.071421][ T320] usb 4-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 48.083162][ T317] udevd[317]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 48.093934][ T317] udevd[317]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 48.102354][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.120375][ T320] usb 4-1: Product: syz [ 48.124918][ T320] usb 4-1: Manufacturer: syz [ 48.129558][ T320] usb 4-1: SerialNumber: syz [ 48.141092][ T618] udevd[618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.268048][ T67] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.275311][ T67] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 48.291259][ T67] usb 2-1: USB disconnect, device number 15 [ 48.320158][ T319] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 48.336426][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.354844][ T320] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.370692][ T320] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 48.382286][ T320] usb 4-1: 4:0: failed to get current value for ch 1 (-22) [ 48.401323][ T320] usb 4-1: USB disconnect, device number 14 [ 48.416686][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.471131][ T319] usb 1-1: not running at top speed; connect to a high speed hub [ 48.480297][ T319] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 48.491201][ T319] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 48.506755][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.533005][ T319] usb 1-1: Found UVC 1.00 device (0000:0000) [ 48.986743][ T631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.002714][ T631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.082005][ T36] audit: type=1400 audit(1786479614.870:18538): avc: denied { create } for pid=632 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.120038][ T36] audit: type=1400 audit(1786479614.890:18539): avc: denied { setopt } for pid=632 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.287710][ T36] audit: type=1400 audit(1786479615.070:18540): avc: denied { watch watch_reads } for pid=639 comm="syz.2.91" path="/21/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.786581][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.798871][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.934860][ T319] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 49.956805][ T319] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 49.966797][ T319] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 49.976760][ T319] usb 1-1: USB disconnect, device number 10 [ 50.020165][ T311] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.055428][ T661] rust_binder: 660:661 error while translating object: ENOENT [ 50.063486][ T661] rust_binder: Failure in copy_transaction_data: ENOENT [ 50.063526][ T661] rust_binder: 660:661 transaction call to 660:0 failed ENOENT, code 0 size 72-24 [ 50.080662][ T67] rust_binder: 660: undelivered TRANSACTION_ERROR: 29201 [ 50.185657][ T36] audit: type=1400 audit(1786479615.970:18541): avc: denied { execute } for pid=667 comm="syz.3.101" name="file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.185760][ T668] process 'syz.3.101' launched './file0' with NULL argv: empty string added [ 50.217034][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 50.223504][ T36] audit: type=1400 audit(1786479616.010:18542): avc: denied { execute_no_trans } for pid=667 comm="syz.3.101" path="/31/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.226095][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 188, changing to 7 [ 50.278469][ T311] usb 3-1: string descriptor 0 read error: -22 [ 50.284990][ T311] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 50.294706][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.313216][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 50.476637][ T683] bridge0: port 1(dummy0) entered blocking state [ 50.483523][ T683] bridge0: port 1(dummy0) entered disabled state [ 50.491065][ T683] dummy0: entered allmulticast mode [ 50.497049][ T683] dummy0: entered promiscuous mode [ 50.502569][ T683] bridge0: port 1(dummy0) entered blocking state [ 50.509076][ T683] bridge0: port 1(dummy0) entered forwarding state [ 50.517480][ T683] dummy0: left allmulticast mode [ 50.522913][ T683] dummy0: left promiscuous mode [ 50.528867][ T67] usb 3-1: USB disconnect, device number 9 [ 50.532663][ T683] bridge0: port 1(dummy0) entered disabled state [ 50.564491][ T36] audit: type=1400 audit(1786479616.350:18543): avc: denied { connect } for pid=684 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.565004][ T685] netlink: 124 bytes leftover after parsing attributes in process `syz.0.107'. [ 50.600065][ T311] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 50.751616][ T311] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 50.761857][ T311] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x3 is Bulk; changing to Interrupt [ 50.771999][ T311] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.785438][ T311] usb 2-1: config 1 interface 0 has no altsetting 0 [ 50.794936][ T311] usb 2-1: string descriptor 0 read error: -22 [ 50.801547][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.810709][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.820683][ T680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.828335][ T680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.840056][ T319] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 50.848514][ T311] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 51.001384][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.011836][ T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.022963][ T319] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 51.032196][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.043717][ T319] usb 1-1: Product: syz [ 51.047952][ T319] usb 1-1: Manufacturer: syz [ 51.055337][ T680] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 51.060234][ T319] usb 1-1: SerialNumber: syz [ 51.064357][ T680] netlink: 'syz.1.105': attribute type 2 has an invalid length. [ 51.081708][ T680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.105'. [ 51.109776][ T680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.120587][ T680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.130476][ T67] usb 2-1: USB disconnect, device number 16 [ 51.197150][ T636] bridge_slave_1: left allmulticast mode [ 51.203118][ T636] bridge_slave_1: left promiscuous mode [ 51.209020][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.219640][ T636] bridge_slave_0: left allmulticast mode [ 51.225997][ T636] bridge_slave_0: left promiscuous mode [ 51.232358][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.292478][ T319] usb 1-1: 0:1 : does not exist [ 51.297447][ T319] usb 1-1: unit 1 not found! [ 51.302861][ T319] usb 1-1: unit 64 not found! [ 51.326233][ T319] usb 1-1: USB disconnect, device number 11 [ 51.349511][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.407327][ T636] veth1_macvtap: left promiscuous mode [ 51.418625][ T636] veth0_vlan: left promiscuous mode [ 51.537830][ T36] audit: type=1400 audit(1786479617.320:18544): avc: denied { mounton } for pid=700 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.624334][ T700] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.631584][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.638851][ T700] bridge_slave_0: entered allmulticast mode [ 51.645698][ T700] bridge_slave_0: entered promiscuous mode [ 51.653969][ T700] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.661251][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.668490][ T700] bridge_slave_1: entered allmulticast mode [ 51.675373][ T700] bridge_slave_1: entered promiscuous mode [ 51.720022][ T36] audit: type=1400 audit(1786479617.500:18545): avc: denied { associate } for pid=704 comm="syz.1.114" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.772641][ T36] audit: type=1400 audit(1786479617.550:18546): avc: denied { mount } for pid=706 comm="syz.3.115" name="/" dev="ramfs" ino=6585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.861287][ T700] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.868434][ T700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.876056][ T700] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.883228][ T700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.897090][ T36] audit: type=1400 audit(1786479617.680:18547): avc: denied { write } for pid=713 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.953195][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.990000][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.997180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.020577][ T319] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 52.049484][ T700] veth0_vlan: entered promiscuous mode [ 52.068211][ T700] veth1_macvtap: entered promiscuous mode [ 52.090650][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 52.171804][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.183649][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.194337][ T319] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 52.204303][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.215928][ T319] usb 4-1: config 0 descriptor?? [ 52.233031][ T67] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.260121][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 52.268576][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.290284][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.309974][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.327836][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 52.337651][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.349182][ T728] sd 0:0:1:0: PR command failed: 1026 [ 52.357535][ T10] usb 2-1: Product: syz [ 52.362315][ T728] sd 0:0:1:0: Sense Key : 0x5 [current] [ 52.368082][ T728] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 52.373174][ T10] usb 2-1: Manufacturer: syz [ 52.377824][ T10] usb 2-1: SerialNumber: syz [ 52.412185][ T67] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.423498][ T67] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 52.437828][ T67] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.447275][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.455472][ T67] usb 1-1: Product: syz [ 52.466992][ T67] usb 1-1: Manufacturer: syz [ 52.472248][ T67] usb 1-1: SerialNumber: syz [ 52.484462][ T67] cdc_mbim 1-1:1.0: skipping garbage [ 52.590124][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 52.606593][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.614886][ T10] usb 2-1: 0:2 : does not exist [ 52.632044][ T10] usb 2-1: USB disconnect, device number 17 [ 52.663379][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.692605][ T716] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 52.750201][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.754537][ T319] usbhid 4-1:0.0: can't add hid device: -71 [ 52.765663][ T319] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.775737][ T319] usb 4-1: USB disconnect, device number 15 [ 52.990066][ T9] usb 5-1: device descriptor read/64, error -71 [ 53.230107][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 53.309613][ T716] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 53.342437][ T67] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 53.358126][ T67] wwan wwan0: port wwan0mbim0 attached [ 53.375377][ T67] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, de:00:71:a1:d1:b1 [ 53.390285][ T9] usb 5-1: device descriptor read/64, error -71 [ 53.414772][ T736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.545069][ T470] usb 1-1: USB disconnect, device number 12 [ 53.555616][ T470] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 53.592332][ T470] wwan wwan0: port wwan0mbim0 disconnected [ 53.630588][ T9] usb 5-1: device descriptor read/64, error -71 [ 53.690080][ T67] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 53.745377][ T9] usb usb5-port1: attempt power cycle [ 53.851591][ T67] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.860002][ T67] usb 4-1: config 0 has no interface number 0 [ 53.866422][ T67] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.880073][ T67] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.893999][ T67] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.907465][ T67] usb 4-1: config 0 interface 1 has no altsetting 0 [ 53.918059][ T67] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 53.927254][ T67] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 53.935626][ T67] usb 4-1: Manufacturer: syz [ 53.943541][ T67] usb 4-1: config 0 descriptor?? [ 53.950453][ T319] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 54.092133][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 54.101022][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 54.125532][ T9] usb 5-1: device descriptor read/8, error -71 [ 54.133128][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.142100][ T319] usb 2-1: not running at top speed; connect to a high speed hub [ 54.151179][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.163435][ T319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 54.165862][ T67] usbhid 4-1:0.1: can't add hid device: -71 [ 54.175274][ T319] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 54.195059][ T319] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 54.207394][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.207664][ T67] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 54.216446][ T319] usb 2-1: Product: syz [ 54.228485][ T319] usb 2-1: Manufacturer: syz [ 54.233363][ T67] usb 4-1: USB disconnect, device number 16 [ 54.238983][ T319] usb 2-1: SerialNumber: syz [ 54.261774][ T9] usb 5-1: device descriptor read/8, error -71 [ 54.465126][ T319] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 54.473788][ T319] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 54.482055][ T319] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 54.490828][ T319] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 54.500154][ T319] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 54.500418][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 54.508017][ T319] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 54.508113][ T319] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 54.508137][ T319] usb 2-1: found format II with max.bitrate = 0, frame size=7 [ 54.542757][ T9] usb 5-1: device descriptor read/8, error -71 [ 54.552304][ T319] usb 2-1: USB disconnect, device number 18 [ 54.569219][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.671520][ T9] usb 5-1: device descriptor read/8, error -71 [ 54.780293][ T9] usb usb5-port1: unable to enumerate USB device [ 55.040051][ T319] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 55.050935][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 55.050956][ T36] audit: type=1400 audit(1786479620.840:18564): avc: denied { map } for pid=772 comm="syz.1.125" path="/dev/vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.202013][ T319] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 55.213476][ T319] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 55.227855][ T319] usb 4-1: config 1 interface 0 has no altsetting 0 [ 55.237908][ T319] usb 4-1: string descriptor 0 read error: -22 [ 55.244348][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 55.253814][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.399453][ T36] audit: type=1400 audit(1786479621.170:18565): avc: denied { unmount } for pid=700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.468089][ T816] fuse: Unknown parameter '0x00000000000000030x0000000000000005' [ 55.500224][ T814] netlink: 'syz.4.128': attribute type 4 has an invalid length. [ 55.669162][ T319] logitech 0003:046D:C626.0006: unknown main item tag 0x2 [ 55.676485][ T319] logitech 0003:046D:C626.0006: unexpected long global item [ 55.684204][ T319] logitech 0003:046D:C626.0006: parse failed [ 55.690944][ T319] logitech 0003:046D:C626.0006: probe with driver logitech failed with error -22 [ 55.790056][ T67] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 55.872717][ T319] usb 4-1: USB disconnect, device number 17 [ 55.952019][ T67] usb 5-1: unable to get BOS descriptor or descriptor too short [ 55.961905][ T67] usb 5-1: not running at top speed; connect to a high speed hub [ 55.971189][ T67] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.981603][ T67] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 55.992817][ T67] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 56.005649][ T67] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 56.015085][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.023452][ T67] usb 5-1: Product: syz [ 56.027748][ T67] usb 5-1: Manufacturer: syz [ 56.032460][ T67] usb 5-1: SerialNumber: syz [ 56.456120][ T36] audit: type=1400 audit(1786479622.240:18566): avc: denied { search } for pid=824 comm="syz.1.132" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.488094][ T36] audit: type=1400 audit(1786479622.270:18567): avc: denied { getopt } for pid=829 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.533689][ T36] audit: type=1400 audit(1786479622.320:18568): avc: denied { connect } for pid=824 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.909072][ T36] audit: type=1400 audit(1786479622.690:18569): avc: denied { create } for pid=849 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 57.140056][ T319] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.290037][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 57.297346][ T319] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 57.306453][ T319] usb 2-1: config 2 has no interface number 0 [ 57.313068][ T319] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 57.323310][ T319] usb 2-1: config 2 interface 88 has no altsetting 0 [ 57.332007][ T319] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 57.341324][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 57.349364][ T319] usb 2-1: Product: syz [ 57.353666][ T319] usb 2-1: Manufacturer: syz [ 57.358370][ T319] usb 2-1: SerialNumber: syz [ 57.370528][ T850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.582449][ T319] asix 2-1:2.88: probe with driver asix failed with error -71 [ 57.592494][ T319] usb 2-1: USB disconnect, device number 19 [ 58.585092][ T67] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 58.595778][ T67] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 58.605036][ T67] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 58.614128][ T67] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 58.623390][ T67] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.631631][ T67] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 58.639272][ T67] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 58.691568][ T67] usb 5-1: found format II with max.bitrate = 0, frame size=7 [ 58.715346][ T67] usb 5-1: USB disconnect, device number 6 [ 58.757861][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.779092][ T36] audit: type=1400 audit(1786479624.560:18570): avc: denied { read } for pid=868 comm="syz.4.144" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.812986][ T36] audit: type=1400 audit(1786479624.560:18571): avc: denied { open } for pid=868 comm="syz.4.144" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.843617][ T36] audit: type=1400 audit(1786479624.560:18572): avc: denied { ioctl } for pid=868 comm="syz.4.144" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.024777][ T873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 59.322803][ T876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.334318][ T876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.486463][ T880] loop6: detected capacity change from 0 to 1 [ 59.501268][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 59.517459][ T36] audit: type=1400 audit(1786479625.300:18573): avc: denied { block_suspend } for pid=879 comm="syz.1.148" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.070048][ T430] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.221760][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.233140][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.243086][ T430] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.256284][ T430] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.265642][ T430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.275095][ T430] usb 5-1: config 0 descriptor?? [ 60.698491][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.706905][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.714502][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.722101][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.729980][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.737654][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.745195][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.752718][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.760246][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.767675][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.775734][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.780678][ T319] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.783518][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.798233][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.805920][ T430] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 60.813737][ T430] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 60.825579][ T430] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 60.838226][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.908252][ T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.917153][ T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.940088][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 60.947151][ T319] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 60.957665][ T319] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 60.966861][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.975064][ T319] usb 2-1: Product: syz [ 60.979313][ T319] usb 2-1: Manufacturer: syz [ 60.984216][ T319] usb 2-1: SerialNumber: syz [ 60.991592][ T319] r8152-cfgselector 2-1: Unknown version 0x0000 [ 60.996158][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 60.997908][ T319] r8152-cfgselector 2-1: config 0 descriptor?? [ 61.016623][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.029967][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.040064][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.053092][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.062274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.071694][ T9] usb 4-1: config 0 descriptor?? [ 61.212708][ T319] r8152-cfgselector 2-1: Needed 2 retries to read version [ 61.220338][ T319] r8152-cfgselector 2-1: Unknown version 0x0000 [ 61.226728][ T319] r8152-cfgselector 2-1: bad CDC descriptors [ 61.278056][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 61.278131][ T36] audit: type=1400 audit(1786479627.060:18575): avc: denied { append } for pid=901 comm="syz.4.155" name="hiddev0" dev="devtmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.353627][ T430] usb 5-1: USB disconnect, device number 7 [ 61.416086][ T319] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 61.511260][ T9] microsoft 0003:045E:07DA.0008: report is too long [ 61.518350][ T9] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 61.526272][ T9] microsoft 0003:045E:07DA.0008: parse failed [ 61.532680][ T9] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 61.712727][ T9] usb 4-1: USB disconnect, device number 18 [ 61.848982][ T912] rust_binder: Failed to allocate buffer. len:19472, is_oneway:false [ 61.978002][ T36] audit: type=1400 audit(1786479627.760:18576): avc: denied { read } for pid=918 comm="syz.1.160" name="available_tracers" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.026632][ T36] audit: type=1400 audit(1786479627.760:18577): avc: denied { write } for pid=918 comm="syz.1.160" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.070047][ T36] audit: type=1400 audit(1786479627.770:18578): avc: denied { open } for pid=918 comm="syz.1.160" path="/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.099965][ T36] audit: type=1400 audit(1786479627.770:18579): avc: denied { ioctl } for pid=918 comm="syz.1.160" path="/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.126155][ T36] audit: type=1400 audit(1786479627.770:18580): avc: denied { remount } for pid=918 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.155318][ T36] audit: type=1400 audit(1786479627.770:18581): avc: denied { create } for pid=918 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 62.184490][ T36] audit: type=1400 audit(1786479627.970:18582): avc: denied { read write } for pid=923 comm="syz.1.163" name="usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.208408][ T319] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 62.217082][ T36] audit: type=1400 audit(1786479627.970:18583): avc: denied { open } for pid=923 comm="syz.1.163" path="/dev/usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.242289][ T36] audit: type=1400 audit(1786479628.000:18584): avc: denied { map } for pid=923 comm="syz.1.163" path="/dev/usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.303443][ T928] netlink: 17 bytes leftover after parsing attributes in process `syz.3.164'. [ 62.323631][ T928] netlink: 'syz.3.164': attribute type 4 has an invalid length. [ 62.361444][ T319] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 62.370029][ T319] usb 5-1: config 127 has no interface number 0 [ 62.381163][ T319] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 62.405554][ T319] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 62.418297][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.437200][ T319] usb 5-1: Product: syz [ 62.444115][ T319] usb 5-1: Manufacturer: syz [ 62.452295][ T319] usb 5-1: SerialNumber: syz [ 62.464199][ T917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 62.597938][ T938] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.597971][ T938] rust_binder: Read failure Err(EFAULT) in pid:161 [ 62.607675][ T938] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.615260][ T555] rust_binder: 910: undelivered TRANSACTION_ERROR: 29189 [ 62.617316][ T938] rust_binder: Read failure Err(EFAULT) in pid:161 [ 62.891773][ T917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 63.123605][ T319] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 63.336905][ T319] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 63.358788][ T319] asix 5-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 63.393141][ T319] asix 5-1:127.57: probe with driver asix failed with error -71 [ 63.421972][ T319] usb 5-1: USB disconnect, device number 8 [ 63.730051][ T430] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.740083][ T967] netlink: 96 bytes leftover after parsing attributes in process `syz.1.178'. [ 63.911712][ T430] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 63.930022][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.001291][ T976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.010304][ T976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.153575][ T430] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 64.250095][ T67] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 64.596125][ T67] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 64.605065][ T67] usb 5-1: can't read configurations, error -71 [ 64.703255][ T989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.712049][ T989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.798314][ T1000] mmap: syz.1.187 (1000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.290356][ T1005] program syz.4.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.672027][ T1011] loop2: detected capacity change from 0 to 7 [ 66.420486][ T67] usb 4-1: USB disconnect, device number 19 [ 66.457418][ T1036] syzkaller1: entered promiscuous mode [ 66.471462][ T1036] syzkaller1: entered allmulticast mode [ 66.760510][ T430] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 66.820296][ T67] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 66.920179][ T430] usb 5-1: Using ep0 maxpacket: 32 [ 66.928848][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 66.941101][ T430] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.952779][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.963989][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.977046][ T430] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 66.986239][ T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.994396][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 66.999616][ T430] usb 5-1: Product: syz [ 67.003927][ T430] usb 5-1: Manufacturer: syz [ 67.008825][ T430] usb 5-1: SerialNumber: syz [ 67.014434][ T67] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 67.023057][ T67] usb 4-1: config 0 has no interface number 0 [ 67.029506][ T430] usb 5-1: config 0 descriptor?? [ 67.034625][ T67] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 67.046059][ T67] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 67.056051][ T67] usb 4-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 67.056934][ T1043] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 67.066021][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.082921][ T430] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 67.093949][ T67] usb 4-1: config 0 descriptor?? [ 67.119948][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.148/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.146817][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 67.155250][ T555] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 67.308535][ T319] usb 4-1: USB disconnect, device number 20 [ 67.315730][ T555] usb 2-1: Using ep0 maxpacket: 32 [ 67.326117][ T555] usb 2-1: unable to get BOS descriptor or descriptor too short [ 67.336571][ T555] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 67.347524][ T555] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.362916][ T555] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 67.372974][ T555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.381204][ T555] usb 2-1: Product: syz [ 67.382333][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 67.382383][ T36] audit: type=1400 audit(1786479633.160:18603): avc: denied { write } for pid=1042 comm="syz.4.199" name="mcfilter" dev="proc" ino=4026532761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.386100][ T555] usb 2-1: Manufacturer: syz [ 67.421384][ T555] usb 2-1: SerialNumber: syz [ 67.472362][ T320] usb 5-1: USB disconnect, device number 11 [ 67.478377][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 67.634117][ T555] usb 2-1: MIDIStreaming interface descriptor not found [ 67.649257][ T555] usb 2-1: USB disconnect, device number 22 [ 68.049340][ T1057] netlink: 'syz.4.205': attribute type 2 has an invalid length. [ 68.057290][ T1057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 68.090745][ T36] audit: type=1400 audit(1786479633.880:18604): avc: denied { search } for pid=1061 comm="syz.4.206" name="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.180107][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 68.351530][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.363591][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.374798][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 68.384512][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.393030][ T9] usb 4-1: SerialNumber: syz [ 68.401321][ T9] usb 4-1: bad CDC descriptors [ 68.410195][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 68.421683][ T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 68.430527][ T9] scsi host1: usb-storage 4-1:1.0 [ 68.870063][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 69.020055][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 69.026554][ T9] usb 5-1: config 248 has an invalid interface number: 115 but max is 2 [ 69.035110][ T9] usb 5-1: config 248 has an invalid interface number: 241 but max is 2 [ 69.043645][ T9] usb 5-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 69.054583][ T9] usb 5-1: config 248 has 2 interfaces, different from the descriptor's value: 3 [ 69.063855][ T9] usb 5-1: config 248 has no interface number 0 [ 69.073120][ T9] usb 5-1: config 248 has no interface number 1 [ 69.080113][ T9] usb 5-1: config 248 interface 115 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 69.091666][ T9] usb 5-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 69.102353][ T9] usb 5-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 69.113327][ T9] usb 5-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 69.126755][ T9] usb 5-1: config 248 interface 115 has no altsetting 0 [ 69.133824][ T9] usb 5-1: config 248 interface 241 has no altsetting 0 [ 69.143023][ T9] usb 5-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 69.152305][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.160688][ T9] usb 5-1: Product: syz [ 69.165042][ T9] usb 5-1: Manufacturer: syz [ 69.169644][ T9] usb 5-1: SerialNumber: syz [ 69.179334][ T1078] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 69.401414][ T9] usb-storage 5-1:248.115: USB Mass Storage device detected [ 69.418486][ T9] usb-storage 5-1:248.115: Quirks match for vid 4971 pid 8017: 4000000 [ 69.458742][ T9] usb-storage 5-1:248.241: USB Mass Storage device detected [ 69.468188][ T9] usb-storage 5-1:248.241: Quirks match for vid 4971 pid 8017: 4000000 [ 69.471502][ T320] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 69.522331][ T9] usb 5-1: USB disconnect, device number 12 [ 69.531633][ T1096] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.539795][ T36] audit: type=1400 audit(1786479635.320:18605): avc: denied { mounton } for pid=1095 comm="syz.0.214" path="/37/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.552710][ T1096] overlayfs: failed to resolve 'metacopy=off': -2 [ 69.571841][ T1096] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.581359][ T36] audit: type=1400 audit(1786479635.370:18606): avc: denied { read } for pid=1095 comm="syz.0.214" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.604686][ T1096] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 69.605340][ T36] audit: type=1400 audit(1786479635.370:18607): avc: denied { open } for pid=1095 comm="syz.0.214" path="/37/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.614901][ T1096] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 69.638045][ T36] audit: type=1400 audit(1786479635.370:18608): avc: denied { getattr } for pid=1095 comm="syz.0.214" name="saved_tgids" dev="tracefs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.669972][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 69.676972][ T320] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 69.686388][ T320] usb 2-1: config 0 has no interface number 0 [ 69.694491][ T320] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 69.703851][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.711941][ T320] usb 2-1: Product: syz [ 69.716435][ T320] usb 2-1: Manufacturer: syz [ 69.721152][ T320] usb 2-1: SerialNumber: syz [ 69.727258][ T320] usb 2-1: config 0 descriptor?? [ 69.733952][ T320] smsc95xx v2.0.0 [ 69.753584][ T36] audit: type=1400 audit(1786479635.540:18609): avc: denied { read } for pid=1100 comm="syz.0.215" name="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.776225][ T36] audit: type=1400 audit(1786479635.540:18610): avc: denied { open } for pid=1100 comm="syz.0.215" path="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.870033][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 69.910827][ T36] audit: type=1400 audit(1786479635.690:18611): avc: denied { create } for pid=1104 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.030015][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 70.037696][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.046916][ T9] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 70.057489][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 70.070955][ T9] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 70.080625][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.088711][ T9] usb 5-1: Product: syz [ 70.093427][ T9] usb 5-1: Manufacturer: syz [ 70.098140][ T9] usb 5-1: SerialNumber: syz [ 70.147768][ T320] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 70.158796][ T320] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.320738][ T9] usb 5-1: USB disconnect, device number 13 [ 70.345112][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.613415][ T320] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 70.624663][ T320] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 70.635829][ T320] usb 2-1: USB disconnect, device number 23 [ 70.976871][ T36] audit: type=1400 audit(1786479636.760:18612): avc: denied { create } for pid=1112 comm="syz.3.220" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.147420][ T1119] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 71.158597][ T1119] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 71.169785][ T1119] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 71.390041][ T67] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 71.440032][ T320] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 71.541447][ T67] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.553196][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.564320][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.574139][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.587193][ T67] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.594218][ T320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.596563][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.608441][ T320] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 71.615231][ T67] usb 2-1: config 0 descriptor?? [ 71.622522][ T320] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 71.636604][ T320] usb 5-1: config 63 has no interface number 0 [ 71.643217][ T320] usb 5-1: config 63 interface 66 has no altsetting 0 [ 71.653540][ T320] usb 5-1: string descriptor 0 read error: -22 [ 71.659866][ T320] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 71.669761][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.721697][ T9] usb 4-1: USB disconnect, device number 21 [ 71.885098][ T430] usb 5-1: USB disconnect, device number 14 [ 72.039362][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.047114][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.054881][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.063021][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.070533][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.078217][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.085769][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 72.093521][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.101060][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.108569][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.117580][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.125537][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.133505][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.141068][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.148621][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.156167][ T67] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 72.163911][ T67] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 72.173662][ T67] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 72.260055][ T9] usb 4-1: device descriptor read/64, error -71 [ 72.341147][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.350633][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.365028][ T67] usb 2-1: USB disconnect, device number 24 [ 72.475563][ T1138] fuse: Bad value for 'rootmode' [ 72.500089][ T9] usb 4-1: device descriptor read/64, error -71 [ 72.639844][ T1143] netlink: 'syz.1.230': attribute type 10 has an invalid length. [ 72.647695][ T1143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 72.656812][ T1143] veth1: entered promiscuous mode [ 72.899993][ T320] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.059975][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 73.067118][ T320] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 73.079773][ T320] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 73.089532][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.097944][ T320] usb 2-1: Product: syz [ 73.102715][ T320] usb 2-1: Manufacturer: syz [ 73.107452][ T320] usb 2-1: SerialNumber: syz [ 73.160371][ T1143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.210013][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 73.226159][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 73.226184][ T36] audit: type=1400 audit(1786479639.010:18617): avc: denied { read write } for pid=1145 comm="syz.0.231" dev="sockfs" ino=9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.351011][ T9] usb 4-1: device descriptor read/64, error -71 [ 73.433126][ T320] usb 2-1: MIDIStreaming interface descriptor not found [ 73.461828][ T320] usb 2-1: USB disconnect, device number 25 [ 73.516792][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.600086][ T9] usb 4-1: device descriptor read/64, error -71 [ 73.700069][ T67] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 73.710321][ T9] usb usb4-port1: attempt power cycle [ 73.850069][ T67] usb 5-1: Using ep0 maxpacket: 8 [ 73.856903][ T67] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 73.865326][ T67] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 73.873686][ T67] usb 5-1: config 0 has no interface number 0 [ 73.879821][ T67] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 73.889800][ T67] usb 5-1: config 0 interface 200 has no altsetting 0 [ 73.898672][ T67] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 73.907911][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.916007][ T67] usb 5-1: Product: syz [ 73.920243][ T67] usb 5-1: Manufacturer: syz [ 73.924869][ T67] usb 5-1: SerialNumber: syz [ 73.930490][ T67] usb 5-1: config 0 descriptor?? [ 73.989354][ T36] audit: type=1400 audit(1786479639.770:18618): avc: denied { mounton } for pid=1161 comm="syz.1.236" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.070002][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 74.093917][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.138907][ T1150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.149189][ T1150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.163098][ T67] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input7 [ 74.181998][ T67] usb 5-1: USB disconnect, device number 15 [ 74.231385][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.470166][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 74.491209][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.621391][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.732389][ T9] usb usb4-port1: unable to enumerate USB device [ 74.758850][ T1172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.239'. [ 74.768809][ T1172] netlink: 328 bytes leftover after parsing attributes in process `syz.3.239'. [ 74.885256][ T1178] syz.3.241 uses obsolete (PF_INET,SOCK_PACKET) [ 74.950031][ T555] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 75.112339][ T555] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 75.120653][ T555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.131812][ T555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.141725][ T555] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.154814][ T555] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.164046][ T555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.173640][ T555] usb 5-1: config 0 descriptor?? [ 75.582536][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.591073][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.598535][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.606469][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.614425][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.621946][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.629417][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.637031][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.644587][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.652104][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.659557][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.667185][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.674704][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.682191][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.689623][ T555] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.697408][ T555] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 75.708002][ T555] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 75.829958][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 75.893824][ T9] usb 5-1: USB disconnect, device number 16 [ 76.100072][ T67] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 76.255296][ T67] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.267853][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.279282][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 76.289391][ T67] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.302579][ T67] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.311735][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.325161][ T67] usb 4-1: config 0 descriptor?? [ 76.452905][ T1189] 9pnet_fd: Insufficient options for proto=fd [ 76.459570][ T1189] 9pnet_fd: Insufficient options for proto=fd [ 76.740789][ T67] usbhid 4-1:0.0: can't add hid device: -71 [ 76.750647][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.777304][ T67] usb 4-1: USB disconnect, device number 26 [ 77.176855][ T36] audit: type=1400 audit(1786479642.960:18619): avc: denied { write } for pid=1220 comm="syz.4.251" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.500114][ T555] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 77.570019][ T67] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 77.640028][ T555] usb 2-1: device descriptor read/64, error -71 [ 77.721653][ T67] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 77.740042][ T67] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 77.749448][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.890016][ T555] usb 2-1: device descriptor read/64, error -71 [ 77.940025][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 77.980586][ T67] usb 5-1: string descriptor 0 read error: -71 [ 77.992511][ T67] hub 5-1:32.0: bad descriptor, ignoring hub [ 77.998609][ T67] hub 5-1:32.0: probe with driver hub failed with error -5 [ 78.040763][ T67] usb 5-1: USB disconnect, device number 17 [ 78.080019][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.139991][ T555] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 78.270028][ T555] usb 2-1: device descriptor read/64, error -71 [ 78.320022][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.510000][ T555] usb 2-1: device descriptor read/64, error -71 [ 78.560031][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 78.620217][ T555] usb usb2-port1: attempt power cycle [ 78.690069][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.760039][ T430] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 78.911734][ T430] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.922870][ T430] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.932796][ T10] usb 4-1: device descriptor read/64, error -71 [ 78.940611][ T430] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 78.949702][ T430] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 78.958176][ T430] usb 5-1: Product: syz [ 78.962546][ T430] usb 5-1: Manufacturer: syz [ 78.971585][ T555] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 78.983962][ T430] hub 5-1:4.0: USB hub found [ 78.991496][ T555] usb 2-1: device descriptor read/8, error -71 [ 79.040288][ T10] usb usb4-port1: attempt power cycle [ 79.121444][ T555] usb 2-1: device descriptor read/8, error -71 [ 79.360046][ T555] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 79.382321][ T555] usb 2-1: device descriptor read/8, error -71 [ 79.390087][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 79.411445][ T10] usb 4-1: device descriptor read/8, error -71 [ 79.511433][ T555] usb 2-1: device descriptor read/8, error -71 [ 79.561469][ T10] usb 4-1: device descriptor read/8, error -71 [ 79.620190][ T555] usb usb2-port1: unable to enumerate USB device [ 79.800066][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 79.831714][ T10] usb 4-1: device descriptor read/8, error -71 [ 79.860985][ T1258] syzkaller1: entered promiscuous mode [ 79.866529][ T1258] syzkaller1: entered allmulticast mode [ 79.935002][ T1262] fuseblk: Unknown parameter 'roup00000000000000000000' [ 79.943476][ T36] audit: type=1400 audit(1786479645.730:18620): avc: denied { create } for pid=1261 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.981539][ T10] usb 4-1: device descriptor read/8, error -71 [ 79.993332][ T36] audit: type=1400 audit(1786479645.780:18621): avc: denied { mounton } for pid=1263 comm="syz.0.266" path="/48/file4" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.016756][ T36] audit: type=1400 audit(1786479645.780:18622): avc: denied { unmount } for pid=1263 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.090284][ T10] usb usb4-port1: unable to enumerate USB device [ 80.391077][ T1272] netlink: 'syz.4.270': attribute type 12 has an invalid length. [ 80.436637][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.444168][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.451767][ T1274] bridge0: entered allmulticast mode [ 80.574210][ T36] audit: type=1400 audit(1786479646.360:18623): avc: denied { create } for pid=1278 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.664690][ T36] audit: type=1400 audit(1786479646.450:18624): avc: denied { ioctl } for pid=1282 comm="syz.3.275" path="socket:[15531]" dev="sockfs" ino=15531 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.742100][ T1285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 81.426547][ T36] audit: type=1400 audit(1786479647.210:18625): avc: denied { bind } for pid=1337 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.458356][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.468008][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.514564][ T1341] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 81.528808][ T36] audit: type=1400 audit(1786479647.310:18626): avc: denied { relabelto } for pid=1340 comm="syz.3.281" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 81.557112][ T36] audit: type=1400 audit(1786479647.310:18627): avc: denied { associate } for pid=1340 comm="syz.3.281" name="ttyS3" dev="devtmpfs" ino=28 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 82.080047][ T555] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 82.122006][ T1360] SELinux: policydb string length 524296 does not match expected length 8 [ 82.130833][ T36] audit: type=1400 audit(1786479647.910:18628): avc: denied { load_policy } for pid=1358 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.153612][ T1360] SELinux: failed to load policy [ 82.230000][ T555] usb 4-1: Using ep0 maxpacket: 32 [ 82.242229][ T555] usb 4-1: config 0 has an invalid interface number: 36 but max is 1 [ 82.250722][ T555] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 82.259688][ T555] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 82.269841][ T555] usb 4-1: config 0 has an invalid interface number: 246 but max is 1 [ 82.278337][ T555] usb 4-1: config 0 has no interface number 0 [ 82.284895][ T555] usb 4-1: config 0 has no interface number 1 [ 82.291312][ T555] usb 4-1: config 0 interface 36 altsetting 16 endpoint 0xA has invalid maxpacket 13502, setting to 64 [ 82.302866][ T555] usb 4-1: config 0 interface 36 altsetting 16 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 82.314169][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0x6, skipping [ 82.325391][ T555] usb 4-1: config 0 interface 36 altsetting 16 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 82.336596][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 82.347615][ T555] usb 4-1: config 0 interface 36 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 82.358810][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 82.369805][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 82.380790][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 82.391838][ T555] usb 4-1: config 0 interface 36 altsetting 16 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 82.403030][ T555] usb 4-1: config 0 interface 36 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 82.414051][ T555] usb 4-1: config 0 interface 246 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 82.425068][ T555] usb 4-1: config 0 interface 246 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 82.436084][ T555] usb 4-1: config 0 interface 246 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 82.450045][ T555] usb 4-1: config 0 interface 36 has no altsetting 0 [ 82.460077][ T555] usb 4-1: config 0 interface 246 has no altsetting 0 [ 82.475942][ T555] usb 4-1: New USB device found, idVendor=1781, idProduct=0c30, bcdDevice=c0.3f [ 82.485587][ T555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.496231][ T555] usb 4-1: Product: syz [ 82.501795][ T555] usb 4-1: SerialNumber: syz [ 82.510261][ T555] usb 4-1: config 0 descriptor?? [ 82.724903][ T555] ftdi_sio 4-1:0.36: FTDI USB Serial Device converter detected [ 82.739128][ T555] ftdi_sio ttyUSB0: unknown device type: 0xc03f [ 82.756780][ T555] ftdi_sio 4-1:0.246: FTDI USB Serial Device converter detected [ 82.765552][ T555] ftdi_sio ttyUSB1: unknown device type: 0xc03f [ 82.784201][ T555] usb 4-1: USB disconnect, device number 31 [ 82.810274][ T555] ftdi_sio 4-1:0.36: device disconnected [ 82.818956][ T555] ftdi_sio 4-1:0.246: device disconnected [ 82.953114][ T1367] 9pnet_fd: p9_fd_create_tcp (1367): problem binding to privport [ 82.992858][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.005342][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.016211][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.026299][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.107042][ T36] audit: type=1400 audit(1786479648.890:18629): avc: denied { getopt } for pid=1370 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.572874][ T1381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.585720][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 83.593845][ T1381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.666289][ T1385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.675480][ T1385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.751425][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.762661][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.772783][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.785824][ T10] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 83.795060][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.804315][ T10] usb 4-1: config 0 descriptor?? [ 83.830074][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 83.979999][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 83.986892][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.995945][ T31] usb 2-1: config 10 has an invalid interface number: 91 but max is 0 [ 84.004262][ T31] usb 2-1: config 10 has no interface number 0 [ 84.010540][ T31] usb 2-1: config 10 interface 91 has no altsetting 0 [ 84.019162][ T1377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.020029][ T31] usb 2-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 84.032519][ T430] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 84.038975][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.047171][ T1377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.052897][ T31] usb 2-1: Product: syz [ 84.065577][ T31] usb 2-1: Manufacturer: syz [ 84.070619][ T31] usb 2-1: SerialNumber: syz [ 84.294920][ T31] uvcvideo 2-1:10.91: Found Unit with invalid ID 0 [ 84.302797][ T31] usb 2-1: Found UVC 0.40 device syz (097b:61f6) [ 84.309297][ T31] uvcvideo 2-1:10.91: Entity type for entity Output 3 was not initialized! [ 84.318430][ T31] uvcvideo 2-1:10.91: Entity type for entity Media 2 was not initialized! [ 84.334136][ T31] usb 2-1: USB disconnect, device number 30 [ 84.348932][ T1387] netlink: 'syz.4.296': attribute type 5 has an invalid length. [ 84.358572][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.367975][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.430467][ T1395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.439398][ T1395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.485269][ T10] hid (null): bogus close delimiter [ 84.492793][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x1 [ 84.503925][ T1405] loop5: detected capacity change from 0 to 4 [ 84.505249][ T10] hid-multitouch 0003:0457:07DA.000B: bogus close delimiter [ 84.515238][ T1405] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.525552][ T10] hid-multitouch 0003:0457:07DA.000B: item 0 0 2 10 parsing failed [ 84.527243][ T1405] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.534811][ T10] hid-multitouch 0003:0457:07DA.000B: probe with driver hid-multitouch failed with error -22 [ 84.543422][ T1405] loop5: unable to read partition table [ 84.558023][ T1405] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.566722][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.583022][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.593106][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.601336][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.609820][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.618696][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.627662][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.636142][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 84.670919][ T1412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.679745][ T1412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.692102][ T555] usb 4-1: USB disconnect, device number 32 [ 84.746580][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.755592][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.764568][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.773458][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.782428][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.791358][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.800314][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.809211][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 84.818163][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 85.018430][ T1431] kvm: MONITOR instruction emulated as NOP! [ 85.218210][ T1442] rust_binder: 1441:1442 error while translating object: EPERM [ 85.226487][ T1442] rust_binder: Failure in copy_transaction_data: EPERM [ 85.226525][ T1442] rust_binder: 1441:1442 transaction call to 1441:0 failed EPERM, code 0 size 96-24 [ 85.254436][ T1446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.263475][ T555] rust_binder: 1441: undelivered TRANSACTION_ERROR: 29201 [ 85.325952][ T1454] MTRR 1 not used [ 85.510025][ T31] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 85.610066][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 85.671412][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.683853][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 85.693701][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.701792][ T31] usb 4-1: Product: syz [ 85.706272][ T31] usb 4-1: Manufacturer: syz [ 85.710996][ T31] usb 4-1: SerialNumber: syz [ 85.717020][ T31] usb 4-1: config 0 descriptor?? [ 85.727178][ T31] asix 4-1:0.0: probe with driver asix failed with error -22 [ 85.750009][ T10] usb 2-1: device descriptor read/64, error -71 [ 85.927946][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.937211][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.947193][ T430] usb 4-1: USB disconnect, device number 33 [ 86.000070][ T10] usb 2-1: device descriptor read/64, error -71 [ 86.198840][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 86.198865][ T36] audit: type=1400 audit(1786479651.980:18634): avc: denied { ioctl } for pid=1461 comm="syz.0.318" path="/52/file0" dev="tmpfs" ino=300 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.231319][ T1462] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=1462 comm=syz.0.318 [ 86.249993][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 86.280574][ T36] audit: type=1400 audit(1786479652.070:18635): avc: denied { create } for pid=1465 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.320017][ T36] audit: type=1400 audit(1786479652.070:18636): avc: denied { getopt } for pid=1465 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.341323][ T36] audit: type=1400 audit(1786479652.070:18637): avc: denied { setopt } for pid=1465 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.400056][ T10] usb 2-1: device descriptor read/64, error -71 [ 86.640072][ T10] usb 2-1: device descriptor read/64, error -71 [ 86.720012][ T430] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 86.760622][ T10] usb usb2-port1: attempt power cycle [ 86.873251][ T430] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.888754][ T430] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.896139][ T430] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 86.905991][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.924671][ T430] usb 4-1: config 0 descriptor?? [ 87.098605][ T36] audit: type=1400 audit(1786479652.880:18638): avc: denied { create } for pid=1477 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.119417][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 87.144719][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.196995][ T1480] fuse: Bad value for 'user_id' [ 87.202046][ T1480] fuse: Bad value for 'user_id' [ 87.281487][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.348471][ T430] input: HID 04b4:07b1 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04B4:07B1.000C/input/input8 [ 87.370282][ T430] cypress 0003:04B4:07B1.000C: input,hidraw0: USB HID v80.00 Joystick [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 87.550302][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 87.571371][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.578243][ T430] usb 4-1: USB disconnect, device number 34 [ 87.703282][ T10] usb 2-1: device descriptor read/8, error -71 [ 87.820318][ T10] usb usb2-port1: unable to enumerate USB device [ 88.387267][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 88.551406][ T10] usb 4-1: config 127 has an invalid interface number: 44 but max is 0 [ 88.559828][ T10] usb 4-1: config 127 has an invalid descriptor of length 255, skipping remainder of the config [ 88.571222][ T10] usb 4-1: config 127 has no interface number 0 [ 88.577819][ T10] usb 4-1: config 127 interface 44 altsetting 9 endpoint 0x2 has invalid maxpacket 3077, setting to 1023 [ 88.589769][ T10] usb 4-1: config 127 interface 44 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 88.603367][ T10] usb 4-1: config 127 interface 44 has no altsetting 0 [ 88.621625][ T10] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 88.630897][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.638950][ T10] usb 4-1: Product: syz [ 88.643228][ T10] usb 4-1: Manufacturer: syz [ 88.648090][ T10] usb 4-1: SerialNumber: syz [ 88.650199][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 88.670630][ T10] asix 4-1:127.44: probe with driver asix failed with error -22 [ 88.811560][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.822842][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.833449][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.846888][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.856094][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.874506][ T31] usb 2-1: config 0 descriptor?? [ 89.490644][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.498955][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.506770][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.514711][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.522397][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.530326][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.537774][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.545818][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.553568][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.561484][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.568946][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.577531][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.585239][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.593174][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 89.601283][ T31] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 89.615908][ T31] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.319645][ T31] usb 4-1: USB disconnect, device number 35 [ 91.477152][ T319] usb 2-1: USB disconnect, device number 35 [ 92.132320][ T36] audit: type=1400 audit(1786479657.920:18639): avc: denied { setopt } for pid=1543 comm="syz.1.345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.160040][ T36] audit: type=1400 audit(1786479657.940:18640): avc: denied { connect } for pid=1543 comm="syz.1.345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.170223][ T67] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 92.181240][ T36] audit: type=1400 audit(1786479657.940:18641): avc: denied { read } for pid=1543 comm="syz.1.345" path="socket:[15204]" dev="sockfs" ino=15204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.222504][ T36] audit: type=1400 audit(1786479658.010:18642): avc: denied { getopt } for pid=1543 comm="syz.1.345" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.349981][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 92.361048][ T67] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 92.371996][ T67] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 92.385068][ T67] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 92.394389][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.410305][ T67] usb 4-1: config 0 descriptor?? [ 92.830750][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.838145][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.846657][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.854206][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.862002][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.869519][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.877352][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.884887][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.892695][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.901642][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.909410][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.916957][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.924734][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.932277][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.940068][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.947604][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.955351][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.962888][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.971269][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.978627][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.986324][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 92.993730][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.001873][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.010023][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.025483][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.038378][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.056475][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.070060][ T36] audit: type=1400 audit(1786479658.850:18643): avc: denied { write } for pid=1547 comm="syz.1.346" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=15226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.074599][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.106108][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.113539][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.121262][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.128653][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.136327][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.140238][ T36] audit: type=1400 audit(1786479658.850:18644): avc: denied { add_name } for pid=1547 comm="syz.1.346" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.148063][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.172987][ T36] audit: type=1400 audit(1786479658.850:18645): avc: denied { create } for pid=1547 comm="syz.1.346" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 93.190145][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.201932][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.209310][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.216835][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.224417][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.232189][ T67] dragonrise 0003:0079:0011.000E: unknown main item tag 0x0 [ 93.248014][ T67] dragonrise 0003:0079:0011.000E: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 93.269577][ T67] usb 4-1: USB disconnect, device number 36 [ 93.304670][ T1549] fido_id[1549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 94.060924][ T1566] netlink: 'syz.3.352': attribute type 13 has an invalid length. [ 94.184782][ T1574] 9pnet_fd: Insufficient options for proto=fd [ 94.490006][ T31] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 94.651043][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 94.666473][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 94.677065][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.688543][ T31] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 94.708220][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.720522][ T31] usb 4-1: Product: syz [ 94.724780][ T31] usb 4-1: Manufacturer: syz [ 94.734595][ T31] usb 4-1: SerialNumber: syz [ 94.985308][ T31] usb 4-1: 0:1 : does not exist [ 94.990363][ T31] usb 4-1: unit 1 not found! [ 94.999717][ T31] usb 4-1: unit 12 not found! [ 95.017602][ T31] usb 4-1: USB disconnect, device number 37 [ 95.479329][ T36] audit: type=1400 audit(1786479661.260:18646): avc: denied { read } for pid=1630 comm="syz.3.362" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.890029][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 96.049991][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 96.056839][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.066794][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.075996][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.086462][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.095730][ T10] usb 4-1: config 1 has no interface number 1 [ 96.102124][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 96.115211][ T10] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.128358][ T10] usb 4-1: config 1 interface 2 has no altsetting 0 [ 96.137072][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.146528][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.154810][ T10] usb 4-1: Product: ᱻ雵ʕ邞휼ᯗ騁辬蹤錯שׁ糏〷㊧㨘㼵ୃ藕⅕㝹密␀欰曑㟋㘉ꗶ᪱䩿慌䋧괂𴰴宋⿘蟝ป旘㝪◣컁쩛⥲ҩꞕ椹噐씧둎蓮㷙탉ေ跑煦报퀫稜蘤ྦ芜焺⺎愥맗Αධ瞧䖣碲㣃墑㼆婽쵠銿徿£匛낃잳觮ξඡ뭳阣鐴堁⨌ [ 96.184145][ T10] usb 4-1: Manufacturer: М [ 96.188698][ T10] usb 4-1: SerialNumber: syz [ 96.429969][ T10] usb 4-1: USB disconnect, device number 38 [ 96.454319][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.713176][ T36] audit: type=1400 audit(1786479662.500:18647): avc: denied { setopt } for pid=1648 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.801817][ T1649] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 96.810950][ T36] audit: type=1400 audit(1786479662.600:18648): avc: denied { bind } for pid=1648 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.831005][ T1650] fuse: Unknown parameter 'broup_id' [ 96.968115][ T1656] 9pnet_fd: Insufficient options for proto=fd [ 97.240039][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 97.409995][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 97.419498][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.436716][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 97.456539][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.469998][ T31] usb 4-1: Product: syz [ 97.474231][ T31] usb 4-1: Manufacturer: syz [ 97.489950][ T31] usb 4-1: SerialNumber: syz [ 97.705552][ T31] usb 4-1: selecting invalid altsetting 1 [ 97.724336][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.738516][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.755801][ T31] usb 4-1: USB disconnect, device number 39 [ 98.010321][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 98.010342][ T36] audit: type=1400 audit(1786479663.800:18653): avc: denied { bind } for pid=1674 comm="syz.0.378" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.062988][ T36] audit: type=1400 audit(1786479663.800:18654): avc: denied { name_bind } for pid=1674 comm="syz.0.378" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 98.109959][ T36] audit: type=1400 audit(1786479663.800:18655): avc: denied { node_bind } for pid=1674 comm="syz.0.378" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 99.332233][ T1692] loop5: detected capacity change from 0 to 4095 [ 99.374054][ T317] buffer_io_error: 2 callbacks suppressed [ 99.374078][ T317] Buffer I/O error on dev loop5, logical block 511, async page read [ 99.390264][ T1692] loop5: detected capacity change from 4095 to 8191 [ 99.420808][ T317] Buffer I/O error on dev loop5, logical block 1023, async page read [ 100.100018][ T67] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 100.260167][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 100.269409][ T67] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 100.279316][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.287783][ T67] usb 4-1: Product: 倊 [ 100.292605][ T67] usb 4-1: Manufacturer: 㢯툘젛袚ﷻ휅 [ 100.298680][ T67] usb 4-1: SerialNumber: ℎ㤧䨂筼ው愉ꗍ⺲⼒⹚⃤쇧䘟넗䁦ȑ⟜吮繹⹟ꙅꀜ峋썫疆쿐굂⭉⇨ᤢ⒈漬嗈쏔칶꽋毄ޝ閥ֵጐ僨꫉☢贯阳䆁᭐樝靉Ŏ⁕㺩䳐钝稱껢뗶（독蛸폷馺䰭⯻줋ꘚﻚꍟ燓囗䤨뎳痧㰢阳Ⓚ꓆䮵跙ꄋ즰뼡ᕊᑽ涶舸訚׷톸婻嫒냽塃箸Ａ臅久 [ 100.557845][ T1698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.569806][ T1698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.675667][ T67] usb 4-1: Unsupported UAC3 BADD profile [ 100.700074][ T67] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.714388][ T67] usb 4-1: USB disconnect, device number 41 [ 100.742318][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.839146][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.846477][ T1703] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.853819][ T1703] bridge_slave_0: entered allmulticast mode [ 100.860754][ T1703] bridge_slave_0: entered promiscuous mode [ 100.868525][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.875737][ T1703] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.883083][ T1703] bridge_slave_1: entered allmulticast mode [ 100.889590][ T1703] bridge_slave_1: entered promiscuous mode [ 100.895904][ T802] bridge_slave_1: left allmulticast mode [ 100.901844][ T802] bridge_slave_1: left promiscuous mode [ 100.907973][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.916076][ T802] bridge_slave_0: left allmulticast mode [ 100.922103][ T802] bridge_slave_0: left promiscuous mode [ 100.927749][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.935412][ T430] usb 5-1: USB disconnect, device number 18 [ 101.083481][ T802] veth1_macvtap: left promiscuous mode [ 101.089076][ T802] veth0_vlan: left promiscuous mode [ 101.131562][ T1712] __nla_validate_parse: 57 callbacks suppressed [ 101.131589][ T1712] netlink: 148 bytes leftover after parsing attributes in process `syz.1.389'. [ 101.201890][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.209010][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.216453][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.223599][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.292543][ T1720] SELinux: Context system_u: is not valid (left unmapped). [ 101.302781][ T36] audit: type=1400 audit(1786479667.090:18656): avc: denied { relabelto } for pid=1719 comm="syz.1.393" name="123" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 101.342829][ T36] audit: type=1400 audit(1786479667.090:18657): avc: denied { associate } for pid=1719 comm="syz.1.393" name="123" dev="tmpfs" ino=671 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 101.368654][ T36] audit: type=1400 audit(1786479667.110:18658): avc: denied { write } for pid=1719 comm="syz.1.393" name="123" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 101.393291][ T36] audit: type=1400 audit(1786479667.110:18659): avc: denied { add_name } for pid=1719 comm="syz.1.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 101.416716][ T36] audit: type=1400 audit(1786479667.110:18660): avc: denied { create } for pid=1719 comm="syz.1.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 101.437865][ T36] audit: type=1400 audit(1786479667.110:18661): avc: denied { associate } for pid=1719 comm="syz.1.393" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.483436][ T1703] veth0_vlan: entered promiscuous mode [ 101.500416][ T1703] veth1_macvtap: entered promiscuous mode [ 101.551137][ T317] Buffer I/O error on dev loop5, logical block 1023, async page read [ 101.640104][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 101.702047][ T317] Buffer I/O error on dev loop5, logical block 1023, async page read [ 101.710375][ T36] audit: type=1400 audit(1786479667.490:18662): avc: denied { read } for pid=1728 comm="syz.5.394" path="socket:[17885]" dev="sockfs" ino=17885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.747600][ T317] Buffer I/O error on dev loop5, logical block 1023, async page read [ 101.790124][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 101.796744][ T1734] SELinux: failed to load policy [ 101.797639][ T10] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 101.812282][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.826402][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 101.836437][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.844546][ T10] usb 4-1: Product: syz [ 101.848714][ T10] usb 4-1: Manufacturer: syz [ 101.853805][ T10] usb 4-1: SerialNumber: syz [ 102.040456][ T31] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 102.067529][ T10] usb 4-1: unit 8 not found! [ 102.083727][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 102.095240][ T10] usb 4-1: USB disconnect, device number 42 [ 102.143925][ T1741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.398'. [ 102.156504][ T1741] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 102.211783][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.223925][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 102.235095][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 102.248517][ T31] usb 6-1: string descriptor 0 read error: -22 [ 102.254887][ T31] usb 6-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 102.265262][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.287768][ T31] usb 6-1: low speed audio streaming not supported [ 102.311175][ T31] usb 6-1: low speed audio streaming not supported [ 102.712750][ T1756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60705 sclass=netlink_xfrm_socket pid=1756 comm=syz.1.404 [ 103.369455][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 103.369478][ T36] audit: type=1400 audit(1786479669.150:18670): avc: denied { bind } for pid=1766 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.414267][ T1769] overlayfs: missing 'workdir' [ 103.622066][ T36] audit: type=1400 audit(1786479669.410:18671): avc: denied { getattr } for pid=1774 comm="syz.3.412" path="cgroup:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.684354][ T36] audit: type=1400 audit(1786479669.470:18672): avc: denied { map } for pid=1779 comm="syz.3.414" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.830371][ T1794] cgroup: fork rejected by pids controller in /syz3 [ 103.908926][ T1316] bridge_slave_1: left allmulticast mode [ 103.914905][ T1316] bridge_slave_1: left promiscuous mode [ 103.921410][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.060920][ T1316] veth1_macvtap: left promiscuous mode [ 104.066902][ T1316] veth0_vlan: left promiscuous mode [ 104.287804][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.295015][ T1804] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.302473][ T1804] bridge_slave_0: entered allmulticast mode [ 104.309031][ T1804] bridge_slave_0: entered promiscuous mode [ 104.316612][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.323726][ T1804] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.331182][ T1804] bridge_slave_1: entered allmulticast mode [ 104.337967][ T1804] bridge_slave_1: entered promiscuous mode [ 104.423978][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.431101][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.438415][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.445570][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.482159][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.489973][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.501624][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.508790][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.521769][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.528849][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.571029][ T1804] veth0_vlan: entered promiscuous mode [ 104.587395][ T1804] veth1_macvtap: entered promiscuous mode [ 104.763622][ T31] usb 6-1: USB disconnect, device number 2 [ 104.899780][ T36] audit: type=1400 audit(1786479670.680:18673): avc: denied { write } for pid=1816 comm="syz.5.425" name="usb_gadget" dev="configfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.924204][ T36] audit: type=1400 audit(1786479670.680:18674): avc: denied { add_name } for pid=1816 comm="syz.5.425" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.945043][ T36] audit: type=1400 audit(1786479670.680:18675): avc: denied { create } for pid=1816 comm="syz.5.425" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 104.965570][ T36] audit: type=1400 audit(1786479670.680:18676): avc: denied { read } for pid=1816 comm="syz.5.425" name="sub_compatible_id" dev="configfs" ino=18384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 104.989641][ T36] audit: type=1400 audit(1786479670.680:18677): avc: denied { open } for pid=1816 comm="syz.5.425" path="/3/config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id" dev="configfs" ino=18384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 105.150144][ T319] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 105.220780][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.304264][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.315645][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.326811][ T319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.340373][ T319] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.349537][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.360010][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.368613][ T319] usb 4-1: config 0 descriptor?? [ 105.613474][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.620015][ T319] usbhid 4-1:0.0: can't add hid device: -71 [ 105.635311][ T319] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 105.651627][ T319] usb 4-1: USB disconnect, device number 43 [ 105.722846][ T36] audit: type=1400 audit(1786479671.510:18678): avc: denied { create } for pid=1836 comm="syz.0.432" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.748438][ T36] audit: type=1400 audit(1786479671.520:18679): avc: denied { read write } for pid=1836 comm="syz.0.432" name="file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.777801][ T1833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 105.900228][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.030023][ T319] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 106.040164][ T31] usb 6-1: device descriptor read/64, error -71 [ 106.190879][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 106.198074][ T319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.211240][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 106.223929][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.232726][ T319] usb 4-1: Product: syz [ 106.237223][ T319] usb 4-1: Manufacturer: syz [ 106.242525][ T319] usb 4-1: SerialNumber: syz [ 106.248677][ T319] usb 4-1: config 0 descriptor?? [ 106.283761][ T31] usb 6-1: device descriptor read/64, error -71 [ 106.400355][ T31] usb usb6-port1: attempt power cycle [ 106.462097][ T1845] SELinux: failed to load policy [ 106.750234][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 106.771635][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.902205][ T31] usb 6-1: device descriptor read/8, error -71 [ 107.140544][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 107.164663][ T31] usb 6-1: device descriptor read/8, error -71 [ 107.302070][ T31] usb 6-1: device descriptor read/8, error -71 [ 107.410209][ T31] usb usb6-port1: unable to enumerate USB device [ 107.448193][ T1878] bridge0: port 3(syz_tun) entered blocking state [ 107.454822][ T1878] bridge0: port 3(syz_tun) entered disabled state [ 107.462030][ T1878] syz_tun: entered allmulticast mode [ 107.468206][ T1878] syz_tun: entered promiscuous mode [ 107.541329][ T1887] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 107.549161][ T1887] netlink: 944 bytes leftover after parsing attributes in process `syz.1.447'. [ 108.046886][ T1908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 108.046921][ T1908] rust_binder: Read failure Err(EFAULT) in pid:20 [ 108.056259][ T1908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 108.063225][ T1908] rust_binder: Read failure Err(EFAULT) in pid:20 [ 108.188912][ T1916] netlink: 'syz.5.457': attribute type 63 has an invalid length. [ 108.203306][ T1916] netlink: 5 bytes leftover after parsing attributes in process `syz.5.457'. [ 108.236330][ T1919] type: 8192 invalid [ 108.246941][ T1919] netlink: 'syz.5.458': attribute type 4 has an invalid length. [ 108.609625][ T1922] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 108.618180][ T1922] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 108.707737][ T319] usb 4-1: USB disconnect, device number 44 [ 108.735580][ T1927] bpf: Bad value for 'uid' [ 108.809232][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 108.809257][ T36] audit: type=1400 audit(1786479674.590:18684): avc: denied { create } for pid=1930 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 109.050309][ T1942] kvm: emulating exchange as write [ 109.163159][ T36] audit: type=1400 audit(1786479674.950:18685): avc: denied { mounton } for pid=1947 comm="syz.3.470" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.182471][ T1960] overlayfs: failed to resolve './bus': -2 [ 112.276569][ T36] audit: type=1400 audit(1786479678.060:18686): avc: denied { map } for pid=1980 comm="syz.3.483" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.304560][ T36] audit: type=1400 audit(1786479678.060:18687): avc: denied { execute } for pid=1980 comm="syz.3.483" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.341686][ T36] audit: type=1400 audit(1786479678.130:18688): avc: denied { write } for pid=1983 comm="syz.3.484" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.606162][ T1991] input: syz1 as /devices/virtual/input/input9 [ 112.641590][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.652844][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.664034][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.674038][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.855852][ T2002] syz.3.491 (2002): attempted to duplicate a private mapping with mremap. This is not supported. [ 113.902998][ T2004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2004 comm=syz.3.492 [ 113.916270][ T2004] overlayfs: missing 'lowerdir' [ 113.927957][ T36] audit: type=1400 audit(1786479679.703:18689): avc: denied { remount } for pid=2003 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.028904][ T36] audit: type=1400 audit(1786479679.803:18690): avc: denied { create } for pid=2013 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.064212][ T36] audit: type=1400 audit(1786479679.803:18691): avc: denied { write } for pid=2013 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.085056][ T36] audit: type=1400 audit(1786479679.803:18692): avc: denied { nlmsg_write } for pid=2013 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.350008][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 114.479998][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.740070][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.799991][ T36] audit: type=1400 audit(1786479680.573:18693): avc: denied { accept } for pid=2022 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.873537][ T36] audit: type=1400 audit(1786479680.653:18694): avc: denied { ioctl } for pid=2026 comm="syz.1.499" path="socket:[18956]" dev="sockfs" ino=18956 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.950046][ T36] audit: type=1400 audit(1786479680.693:18695): avc: denied { execmem } for pid=2030 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 114.990096][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 115.014995][ T2033] cgroup: noprefix used incorrectly [ 115.129987][ T10] usb 4-1: device descriptor read/64, error -71 [ 115.149397][ T2044] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 115.158149][ T2044] overlayfs: missing 'lowerdir' [ 115.275706][ T36] audit: type=1400 audit(1786479681.053:18696): avc: denied { associate } for pid=2045 comm="syz.1.506" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 115.297377][ T36] audit: type=1400 audit(1786479681.053:18697): avc: denied { execute } for pid=2045 comm="syz.1.506" path="/file1" dev="rootfs" ino=19015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 115.389968][ T10] usb 4-1: device descriptor read/64, error -71 [ 115.500236][ T10] usb usb4-port1: attempt power cycle 0[ 115.663031][ T54] Bluetooth: hci0: setting up ROME/QCA6390 H[ 115.676518][ T2060] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 115.697086][ T2060] netlink: 'syz.0.509': attribute type 5 has an invalid length. [ 115.707170][ T2060] netlink: 17 bytes leftover after parsing attributes in process `syz.0.509'. [ 115.839998][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 115.872003][ T10] usb 4-1: device descriptor read/8, error -71 [ 116.001233][ T10] usb 4-1: device descriptor read/8, error -71 [ 116.249980][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 116.281409][ T10] usb 4-1: device descriptor read/8, error -71 [ 116.298606][ T2082] overlayfs: failed to clone upperpath [ 116.411463][ T10] usb 4-1: device descriptor read/8, error -71 [ 116.520266][ T10] usb usb4-port1: unable to enumerate USB device [ 117.490074][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 117.641330][ T2100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 117.669969][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 117.677143][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.692995][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 117.710864][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.727320][ T10] usb 4-1: Product: syz [ 117.736530][ T10] usb 4-1: Manufacturer: syz [ 117.747136][ T10] usb 4-1: SerialNumber: syz [ 117.970173][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 117.987567][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.000638][ T10] usb 4-1: unable to issue vendor read request (ret = -71) [ 118.008297][ T2105] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.523'. [ 118.018046][ T10] usb 4-1: unable to issue vendor read request (ret = -71) [ 118.028091][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 118.028564][ T536] Bluetooth: hci0: command 0xfc00 tx timeout [ 118.043185][ T54] Bluetooth: hci0: Reading QCA version information failed (-110) [ 118.050968][ T10] usb 4-1: unable to issue vendor read request (ret = -71) [ 118.051493][ T10] usb 4-1: unable to issue vendor read request (ret = -71) [ 118.058499][ T54] Bluetooth: hci0: Retry BT power ON:0 H[ 118.093704][ T10] usb 4-1: USB disconnect, device number 49 [ 118.141379][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.335477][ T2115] syz_tun (unregistering): left allmulticast mode [ 118.370128][ T2115] syz_tun (unregistering): left promiscuous mode [ 118.387617][ T2115] bridge0: port 3(syz_tun) entered disabled state [ 118.678354][ T2125] sd 0:0:1:0: PR command failed: 1026 [ 118.690078][ T2125] sd 0:0:1:0: Sense Key : 0x5 [current] [ 118.697072][ T2125] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 118.731982][ T2125] 9pnet_fd: p9_fd_create_unix (2125): problem connecting socket: ./dev/sda: -111 [ 118.742456][ T36] audit: type=1400 audit(1786479684.513:18698): avc: denied { mounton } for pid=2124 comm="syz.3.530" path="/26/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 119.110014][ T1482] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 119.281376][ T1482] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.299955][ T1482] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.320258][ T1482] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 119.343785][ T1482] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 119.366719][ T1482] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.380428][ T1482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.398997][ T1482] usb 4-1: Product: syz [ 119.408894][ T1482] usb 4-1: Manufacturer: syz [ 119.419028][ T1482] usb 4-1: SerialNumber: syz [ 119.430991][ T2132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.453401][ T1482] cdc_mbim 4-1:1.0: skipping garbage [ 119.663901][ T2132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.690082][ T2132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.840975][ T2140] netlink: 'syz.1.536': attribute type 16 has an invalid length. [ 120.308552][ T2132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.318540][ T2132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.340131][ T1482] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 120.347704][ T1482] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 120.430038][ T536] Bluetooth: hci0: command 0xfc00 tx timeout [ 120.436301][ T54] Bluetooth: hci0: Reading QCA version information failed (-110) [ 120.444369][ T54] Bluetooth: hci0: Retry BT power ON:1 H[ 120.467375][ T36] audit: type=1400 audit(1786479686.243:18699): avc: denied { read } for pid=2141 comm="syz.1.537" path="socket:[19174]" dev="sockfs" ino=19174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.540938][ T1482] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 120.548273][ T1482] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 120.568542][ T1482] wwan wwan0: port wwan0mbim0 attached [ 120.581709][ T1482] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 96:a3:cf:63:b4:b4 [ 120.745828][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.770382][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.097961][ T150] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 121.792159][ T2171] 9pnet_fd: Insufficient options for proto=fd [ 121.954562][ T2177] netlink: 5 bytes leftover after parsing attributes in process `syz.0.544'. [ 121.990603][ T2177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.185434][ T10] usb 4-1: USB disconnect, device number 50 [ 122.191999][ T10] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 122.279996][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 122.337572][ T2193] overlayfs: failed to clone upperpath [ 122.351045][ T2193] overlayfs: failed to clone upperpath [ 122.382232][ T2189] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 122.670627][ T2212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 122.819962][ T536] Bluetooth: hci0: command 0xfc00 tx timeout [ 122.826264][ T54] Bluetooth: hci0: Reading QCA version information failed (-110) [ 122.834149][ T54] Bluetooth: hci0: Retry BT power ON:2 H[ 123.461987][ T2231] dummy_hcd dummy_hcd.0: remove, state 4 [ 123.467770][ T2231] usb usb1: USB disconnect, device number 1 [ 123.494689][ T2231] dummy_hcd dummy_hcd.0: stopped [ 123.499706][ T2231] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 123.743126][ T36] audit: type=1326 audit(1786479689.523:18700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.556" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0126b9e0d9 code=0x0 [ 123.933630][ T1316] bridge_slave_1: left allmulticast mode [ 123.950055][ T1316] bridge_slave_1: left promiscuous mode [ 123.958236][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.977325][ T1316] bridge_slave_0: left allmulticast mode [ 123.989922][ T1316] bridge_slave_0: left promiscuous mode [ 123.995672][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.196858][ T1316] veth1_macvtap: left promiscuous mode [ 124.205105][ T1316] veth0_vlan: left promiscuous mode [ 124.220164][ T36] audit: type=1400 audit(1786479690.003:18701): avc: denied { read } for pid=2249 comm="syz.3.558" dev="sockfs" ino=20119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.250349][ T2250] 9pnet_fd: Insufficient options for proto=fd [ 124.391036][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.398488][ T2243] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.408608][ T2243] bridge_slave_0: entered allmulticast mode [ 124.415999][ T2243] bridge_slave_0: entered promiscuous mode [ 124.444131][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.459543][ T2243] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.468922][ T2243] bridge_slave_1: entered allmulticast mode [ 124.476536][ T2243] bridge_slave_1: entered promiscuous mode [ 124.568271][ T2257] netlink: 393 bytes leftover after parsing attributes in process `syz.1.560'. [ 124.649372][ T2284] netlink: 180 bytes leftover after parsing attributes in process `syz.1.563'. [ 124.795509][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.802687][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.828077][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.835250][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.890427][ T2243] veth0_vlan: entered promiscuous mode [ 124.922246][ T2243] veth1_macvtap: entered promiscuous mode [ 124.949588][ T2180] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 124.962254][ T2180] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 124.970724][ T2180] CPU: 0 UID: 0 PID: 2180 Comm: syz.0.544 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 124.982255][ T2180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.992351][ T2180] RIP: 0010:set_link_state+0x2a/0x1240 [ 124.997881][ T2180] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 8d fb cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 e8 bf 26 fe 4d 8b 75 00 49 8d 95 93 [ 125.000146][ T319] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 125.017698][ T2180] RSP: 0018:ffffc9000128f718 EFLAGS: 00010046 [ 125.017734][ T2180] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888114e8b900 [ 125.017751][ T2180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.017766][ T2180] RBP: ffffc9000128f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 125.017782][ T2180] R10: dffffc0000000000 R11: fffff52000251ee0 R12: 0000000000000000 [ 125.017798][ T2180] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104ba4000 [ 125.017816][ T2180] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 125.017835][ T2180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.017851][ T2180] CR2: 00007f01279eaff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 125.017870][ T2180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 125.017884][ T2180] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.017898][ T2180] Call Trace: [ 125.017906][ T2180] [ 125.017917][ T2180] ? __kasan_check_write+0x18/0x20 [ 125.017948][ T2180] dummy_pullup+0xd1/0x130 [ 125.127014][ T2180] ? __cfi_dummy_pullup+0x10/0x10 [ 125.132105][ T2180] usb_gadget_disconnect_locked+0x14e/0x400 [ 125.138060][ T2180] gadget_unbind_driver+0xaf/0x3f0 [ 125.143224][ T2180] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 125.149003][ T2180] device_release_driver_internal+0x4ad/0x830 [ 125.155124][ T2180] driver_detach+0x1f5/0x2d0 [ 125.159778][ T2180] bus_remove_driver+0x254/0x2b0 [ 125.164758][ T2180] driver_unregister+0x79/0xb0 [ 125.169561][ T2180] usb_gadget_unregister_driver+0x52/0x80 [ 125.175330][ T2180] raw_release+0xdb/0x280 [ 125.179711][ T2180] ? __cfi_raw_release+0x10/0x10 [ 125.184694][ T2180] __fput+0x208/0xa30 [ 125.188739][ T2180] ____fput+0x20/0x30 [ 125.192768][ T2180] task_work_run+0x1e8/0x260 [ 125.197412][ T2180] ? __cfi_task_work_run+0x10/0x10 [ 125.202579][ T2180] ? __kasan_check_write+0x18/0x20 [ 125.207749][ T2180] do_exit+0xa46/0x2850 [ 125.211972][ T2180] ? __cfi_do_exit+0x10/0x10 [ 125.216895][ T2180] ? trace_event_raw_event_signal_deliver+0x29a/0x410 [ 125.223712][ T2180] ? __cfi_trace_event_raw_event_signal_deliver+0x10/0x10 [ 125.226540][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.230869][ T2180] ? _raw_spin_lock_irq+0x93/0x120 [ 125.230908][ T2180] do_group_exit+0x21f/0x2f0 [ 125.230940][ T2180] ? __kasan_check_write+0x18/0x20 [ 125.240023][ T319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.243745][ T2180] ? recalc_sigpending+0x184/0x1d0 [ 125.250177][ T319] usb 4-1: can't read configurations, error -71 [ 125.253488][ T2180] get_signal+0x134c/0x1490 [ 125.276926][ T2180] arch_do_signal_or_restart+0xbc/0x700 [ 125.282529][ T2180] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 125.288758][ T2180] ? syscall_exit_work+0x11f/0x150 [ 125.293917][ T2180] syscall_exit_to_user_mode+0x57/0xb0 [ 125.299425][ T2180] do_syscall_64+0x63/0xf0 [ 125.303913][ T2180] ? clear_bhb_loop+0x50/0xa0 [ 125.308683][ T2180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.314659][ T2180] RIP: 0033:0x7f6487d9dd6b [ 125.319113][ T2180] Code: Unable to access opcode bytes at 0x7f6487d9dd41. [ 125.326167][ T2180] RSP: 002b:00007f6488c4ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.334636][ T2180] RAX: fffffffffffffffc RBX: 0000000000000008 RCX: 00007f6487d9dd6b [ 125.342829][ T2180] RDX: 00007f6488c4ffd0 RSI: 0000000080085502 RDI: 0000000000000008 [ 125.350841][ T2180] RBP: 00007f6488c4ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 125.358855][ T2180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 125.366875][ T2180] R13: 0000000800000000 R14: 0000000000000003 R15: 00007f6487e53882 [ 125.374897][ T2180] [ 125.377950][ T2180] Modules linked in: [ 125.381890][ T2180] ---[ end trace 0000000000000000 ]--- [ 125.387382][ T2180] RIP: 0010:set_link_state+0x2a/0x1240 [ 125.392908][ T2180] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 8d fb cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 e8 bf 26 fe 4d 8b 75 00 49 8d 95 93 [ 125.412636][ T2180] RSP: 0018:ffffc9000128f718 EFLAGS: 00010046 [ 125.418750][ T2180] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888114e8b900 [ 125.420127][ T36] audit: type=1400 audit(1786479690.993:18702): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 125.426786][ T2180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.426815][ T2180] RBP: ffffc9000128f7a0 R08: 0000000000000003 R09: 0000000000000004 [ 125.426836][ T2180] R10: dffffc0000000000 R11: fffff52000251ee0 R12: 0000000000000000 [ 125.426853][ T2180] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104ba4000 [ 125.426872][ T2180] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 125.426893][ T2180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.460675][ T36] audit: type=1400 audit(1786479690.993:18703): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.464740][ T2180] CR2: 00007f01279eaff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 125.464766][ T2180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 125.464782][ T2180] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.492860][ T36] audit: type=1400 audit(1786479690.993:18704): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.496888][ T2180] Kernel panic - not syncing: Fatal exception [ 125.497486][ T2180] Kernel Offset: disabled