last executing test programs: 4m52.717313123s ago: executing program 32 (id=312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0xb, "94d7"}, @local=@item_012={0x1, 0x2, 0x0, "bf"}]}}, 0x0}, 0x0) 4m44.732076086s ago: executing program 2 (id=370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0x40}}}}}]}}]}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fchmod(r3, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "fe3da191"}]}}, 0x0}, 0x0) 4m42.328565555s ago: executing program 2 (id=378): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x480000, 0x8, 0x2, 0x6, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"34b30f02c5ccf6e3b71cda04b68b6891370cd0a442844b737a7254514f9ff20d0954650127067cd50d8f25db5fc9ccd4dbb2ecc29dc8dc51bcd2291a6a12912a3ce524ba851af6d1366d2b46f9f063dde6bea45fb0f4ab6a35088ea81c8a5ea6d0c3fbc6a89ae582119699a04f2be00b3aa3766c9f658af98e3122b00522a2ee14e3746ec2266e538c13710185ec5a7e4936e212c07483e1798957ffbb6311f2a13a7109d4293b216f78d59d41eb3af775e48d7a82a6c8f6476e2456a1a4288c672fbf1072ae9c51060f80707d1bc48eb1802a805df2ee990bcece5fe8b0ebba31c4d5efa47b3353aa02663aca26e817c88dc094d75330fbe2fea0037d4f92435d2eed5585bfaeddfdb50bb10bed6860313613f4a96d7d0b263cb0930f155ed09f2ff433f90d5065a376d43502ac8f17257c0fe5f448d9805a835286f2ff887e02e8a243902c124d3d52a1057f20a29ca1c012869a6d606e3440cc51cca66021bae0cf8c0a5af7a21c79481b1a31b98fe0c29fb5dfc5737442cdfad6421ec95345bd0165c6f6123e616873d97282e5098add56b95e805782aa67f237269b5b2b3e24edd1dc78f25130926496f5623ae306bc3d72d2b80f8939e60526330f873d00360441d906627f0183607151b1f03602050670984a3640871c2690496bbc8949fb63abd5033e508055dc0dd759913beba87e39e7af72170d622e2ecf9aeb4e479bbff8ad292a3a5bd70f8f433bc4b89be144ace57501f8f016868ed7dd8bab97f4f3feb242f4f620913c478058c036df363abbf7c239d340017c2de6b688e322c9b51c269aa110def3ad16337d197f3c452ac661bac7c0531c4d98618f99d750b0c3d8539051188a0f4583dd3538982e8a84121055cd721571ca98bb0c3ec3e446c4c7bc5c9b800367a859a00ef3a505327f9f2da247ce118a82deeb04ad22eeaf97dbd454518defd5adeb288a7842e9e2839ec587e3275abf3a812154080aa60182e60cb73b2020d2865551141ac1e077a3a3a764fff1b024346594f3a004197673c896069dc253f81dac7ca4e906bf2c0d241f59e4b8dad8549871e94b33755db2526223d1e290e300701a0a926033d515429f751f72a87f2eb0336cc72be75af2b75b82c70807718604aa9c6b3c2bc27551f1a0dcffc5eef025f86c13f1fbb426de372b15e4d6a63c4754cecd5071e25e8d6f5796830e7ef62b65c5c076ad2a9ab0850f97c5765ece5885caf0ca0d63a56c45d09c77553ba254983c05d7c722bd7e2061bb71e8e9a7cc444a24643ff32bb80f95ddf50455ed9b59288df68da87510cc3ff08521b39002fe8ea04ee30135324934c286cebc277a9189ac3322b96e8df8bd2a00a0a3da54b3dbe4e9cd46b762ac7f2c7ded1aa8c9741b675f7fe2dc699ab9a2615924fda6e879fc2ae27030d149ed88482945304447d8d027"}) mknodat$loop(r1, &(0x7f0000000080)='./file1\x00', 0xc000, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x7fff) 4m42.168100715s ago: executing program 2 (id=379): r0 = socket$inet6(0xa, 0x2, 0x0) setreuid(0x0, 0xee00) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4m41.886027871s ago: executing program 2 (id=382): r0 = syz_open_dev$loop(&(0x7f00000041c0), 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000004200)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa3000402100000fa0009058202400000000000004d30551ad1e4f4c3ecbfd5e133e7549e044767568bc9380071bf4999cb902ea0c83dfb7a71d800949199fbd72960f3781e91bdc1112457b7681a779d11aa326b45676640aa45e1175b9932d6d54d1898d013"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000770000/0x3000)=nil, 0x3000, 0x9) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x3) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x40, 0x17, 0x22, "014618437ab4994e820a595bc7c55217ec10c97ba929dec6561779b8cb627bb39c9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x2, 0xa, 0xffffff4a) bind$unix(r5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040001) 4m38.322153808s ago: executing program 2 (id=400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m34.420156094s ago: executing program 2 (id=404): unshare(0x60000600) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x20}], 0x1}, 0x0) 4m20.8618757s ago: executing program 33 (id=394): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xda00, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000280)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m16.027135751s ago: executing program 34 (id=403): syz_usb_connect(0x5, 0x12e, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xc1, 0x44, 0x31, 0x8, 0x5c6, 0x8000, 0x9f01, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x4, 0x3, 0x29, 0x42, 0xa4, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff, [@generic={0x8e, 0x23, "ddaf4e2453ca1906a51b19ca10b40b0dc9262ce76364fda86d1fbeaba1bab788f6d402d2b4b2b541f7e99637a1227cfc059d801ccefae153e879815e4cc4c6798c1a2f6944723e82e17286911dad3de68287192903c1ce98526ede63947fae7038e9cfc0dec5b90add6a84511b52706ddc13e8bcc2963e6a754edf9d0be924b6464a2ea5390c76f01fd4ca33"}, @generic={0x45, 0x4, "3ed176d63d9ac3e908a4f5afba94e7f840c44047cd5d7fae712ee3e06a24c0b44f772cc020eca90991831c519558ded9c647a66813184c00"/67}]}}, {{0x9, 0x5, 0xf, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}]}}]}}, 0x0) 4m6.819002455s ago: executing program 35 (id=404): unshare(0x60000600) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x20}], 0x1}, 0x0) 2m53.425277802s ago: executing program 0 (id=676): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f000000004098f586b91c24ef5f0001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') 2m52.956664199s ago: executing program 0 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000006000)=@attr_other={0x0, 0x5, 0x9, &(0x7f0000001780)=0x7fff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x150003, 0x0, {[0x5, 0x7, 0x3, 0xeee, 0x2, 0x4, 0x75b, 0x7]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0x9, 0x2, 0x2, 0x4, 0x10000, 0x6, 0x7, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@index_on}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x5, 0xfb, 0x9, 0x40, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0xb, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3, 0xa6}, {0xeeef0003, 0x80a0000, 0xe, 0x5, 0xff, 0x7, 0x0, 0x9, 0x1, 0x5, 0x5, 0x81}, {0x7000, 0x1, 0xd, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0xe}, {0xa000, 0x26000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0x9, 0xa3, 0xad, 0x8, 0x1, 0x9e, 0x8, 0xf, 0x2}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x4, 0xfd, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xa000, 0x30}, {0x100000, 0x107}, 0x80000031, 0x0, 0x5000, 0x2424, 0x3, 0x9d01, 0x8000c00, [0x6800000000000000, 0x4, 0x28000000000, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmmsg(r6, &(0x7f0000005d80)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/16, 0x10}], 0x7}, 0x80000001}, {{&(0x7f0000001700)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001780)}, 0x5}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/59, 0x3b}], 0x1, &(0x7f0000001840)=""/169, 0xa9}}, {{&(0x7f0000001900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001980)=""/103, 0x67}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/251, 0xfb}, {&(0x7f0000001c00)=""/250, 0xfa}], 0x5, &(0x7f0000001d80)=""/160, 0xa0}, 0x9}, {{&(0x7f0000001e40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/215, 0xd7}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002000)=""/203, 0xcb}, {&(0x7f0000002100)=""/133, 0x85}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/180, 0xb4}, {&(0x7f0000003280)=""/107, 0x6b}], 0x5}, 0x6a4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003380)=""/219, 0xdb}, {&(0x7f0000003480)=""/225, 0xe1}, {&(0x7f0000003580)=""/132, 0x84}, {&(0x7f0000003640)=""/58, 0x3a}], 0x4, &(0x7f00000036c0)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000046c0)=""/125, 0x7d}, {&(0x7f0000004740)=""/169, 0xa9}, {&(0x7f0000004800)=""/178, 0xb2}, {&(0x7f00000048c0)=""/107, 0x6b}], 0x4, &(0x7f0000004980)=""/11, 0xb}, 0xffff07a7}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f00000049c0)=""/133, 0x85}, {&(0x7f0000004a80)=""/131, 0x83}, {&(0x7f0000004b40)=""/102, 0x66}, {&(0x7f0000004bc0)=""/53, 0x35}, {&(0x7f0000004c00)=""/179, 0xb3}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000005d40)=""/59, 0x3b}, 0x200}], 0x9, 0x20, &(0x7f0000005fc0)={0x0, 0x3938700}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) 2m49.950765543s ago: executing program 0 (id=692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x81, @any, 0x0, 0x1}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x14, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x14, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) (async) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0x0) prlimit64(r2, 0xc, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000003400), 0x3, 0x8080) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2m49.941427584s ago: executing program 0 (id=693): r0 = socket$packet(0x11, 0x2, 0x300) (async) setuid(0xee01) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="fa00000000000000", 0x8, 0x0, 0x0, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000001400)=""/4046, 0xffd8) socket$inet(0x2, 0x3, 0x2) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) ptrace(0x10, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "3d80850c491b39314a25af1b69c4c66f1bada000e1ad5b16a5b00a2b28393ac1da6ad61255f3ce86ebcf6b0c7b168ae5325cfe6eb4ec0982c3e451ffbd03bb62", 0x1c}, 0x48, 0x0) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) (async) ptrace$setregs(0xf, r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040801}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000014c0)='K', 0x1}], 0x1, 0x0, 0x0, 0x40000}}], 0x2, 0x4000) (async) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) (async) fdatasync(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x2, 0xf, 0xd4, 0x446}, {0xafa4, 0x6, 0x3, 0x9}, {0xfff6, 0x9, 0x7, 0x2}]}) landlock_create_ruleset(0x0, 0x0, 0x2) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x15, 0x0, &(0x7f0000000080)) (async) sendmmsg$sock(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)=@hci={0x1f, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0xffffff49, 0x1, 0x25, 0x9}}], 0x18}}], 0x1, 0x20000810) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m49.884085187s ago: executing program 0 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.882693827s ago: executing program 0 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}]}}) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x13) 2m26.882571091s ago: executing program 36 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}]}}) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) (async) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x13) 2m3.126115579s ago: executing program 7 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1f4, r0, &(0x7f00000000c0)={0x10000001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="240000002800010023bd700000000000100000000c"], 0x24}], 0x1}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 2m3.10323199s ago: executing program 7 (id=929): r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0x200) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) r2 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0), &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@clone_children}]}) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r2}, &(0x7f00000002c0), &(0x7f00000000c0)) 2m2.886636373s ago: executing program 7 (id=932): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40100700240007055a7da32996"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m1.453563406s ago: executing program 7 (id=944): openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x1}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m1.451793036s ago: executing program 7 (id=946): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSBRK(r1, 0x5409, 0x80) write(r0, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x1}) 2m1.320590054s ago: executing program 7 (id=948): syz_open_dev$char_usb(0xc, 0xb4, 0x401) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x401) write$char_usb(r0, &(0x7f0000000280)="fe08cecc3ee81fc2afd60fb4bbb17fb2acbd25469cd6c1ce459c6de4fc5535c72224fcb472e7f751b4caf0619ceab9c9811db6aed60afe304c52a2c6acc919a4c49a46b9eb6672c3186c9f7132e041a47bffbfff2ecca6179891722381e3970a8a5134a49b24d8bbb8f7ec396dafa27732fc70336a96b9ce91e2efc0286294043740786220b87c3ff2f7e6bf9c622861e14f3486578d624a5f8ea709b5431c44012c0dec592a24c21b1944c9e52521d33febce0c55e91d69d87b16eeff8a3c411a71e95345b6ce2b80538f2eb17bf6bdc736deb2ef1c90fb54394872df69914a0697808efb8a646b", 0xe8) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}]}}) 1m46.303054815s ago: executing program 37 (id=948): syz_open_dev$char_usb(0xc, 0xb4, 0x401) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x401) write$char_usb(r0, &(0x7f0000000280)="fe08cecc3ee81fc2afd60fb4bbb17fb2acbd25469cd6c1ce459c6de4fc5535c72224fcb472e7f751b4caf0619ceab9c9811db6aed60afe304c52a2c6acc919a4c49a46b9eb6672c3186c9f7132e041a47bffbfff2ecca6179891722381e3970a8a5134a49b24d8bbb8f7ec396dafa27732fc70336a96b9ce91e2efc0286294043740786220b87c3ff2f7e6bf9c622861e14f3486578d624a5f8ea709b5431c44012c0dec592a24c21b1944c9e52521d33febce0c55e91d69d87b16eeff8a3c411a71e95345b6ce2b80538f2eb17bf6bdc736deb2ef1c90fb54394872df69914a0697808efb8a646b", 0xe8) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}]}}) 1m17.343016725s ago: executing program 9 (id=1293): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x1, 0x80, 0xd6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x7f, 0x3}, {0x6, 0x24, 0x1a, 0xfff, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0x90, 0x0, 0x44, 0x3}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x7f, 0xce}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x46, 0x6, 0x45}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0xf5, 0xc, 0xff, 0xff}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0xfffffffffffffece, 0x3, 0x1473}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x440a}}, {0x6e, &(0x7f00000002c0)=@string={0x6e, 0x3, "4b708b80e03a9adb3ac67705309e07b0c007deb2eca7ea222fe836536a7690b1be998f1dabc5b1257a57aea5f7a69657e1e4822a62ada71f63491a0d8a6146bad192111c6a9697c39a369b37ac63f16dd24c9b30b3ae15f3385207eaaf5c591b378b97d1c738aeb9f877d76a"}}, {0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "9696ee24f61aa8fe3922ad7c5d2ad70739c8b0800deb4f594bf5dd55a689748eade34a3fda6a8bb199ef12389d203656569493a63ea3c40523953c9a798b5042f71e27b51dabe5082cf5ffd7d19fa93305a0dc1a5eb5e6f757d02497975511725b05b15af12d336b8de81395703b7096f65409fd313bfc80352b1f3de6dff58ff7ba92a4299a8a81ce41baf5689d9b785d860fbe30350e7a362a1efa0844415cc33b2fb19760faaea24f42f39b01a2ab2717b08688766b53940df915a03c85d136e47458298902bd69d8407f49fbde520ea9a4559d41729cc60fcd0b7e6eb3f6e442"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xe0f3}}, {0x100, &(0x7f0000000740)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x416}}, {0x9d, &(0x7f00000005c0)=@string={0x9d, 0x3, "849d5d4f7cea7b4e0100791698b1634446ebab70f569e6487acf4beec3f20659e36f19d037f843688c0bf2c977e327c78ceb89050991f7be708d680c74f6bb2adc4c4ecd88dfba6bdb45488ed3c6345c68cad2382a2c667ade0aad6e32017f918105436afdbb8a3d8f0806d0b2a825e7cb38fc9fa725fce10c53fb7b9cec746cf8337a80fdc0e3547f35b1f21c581c97d00a090ee1a35883f97200"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022050000006e173217"], 0x0}, 0x0) 1m16.819878055s ago: executing program 9 (id=1301): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@subsystem='cpuset'}, {@none}]}) 1m16.687592163s ago: executing program 9 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x12c) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x15, 0xf3, &(0x7f0000000000)="19cb490ff2c8329992fae847a87465608c9ccc435d34b291f985881e4d030f30b0377f57d5340ffa9f84deb6f51eb08d1680e76777cd6be39d338f96bf295872c51dccf1faaa3035792ba87b63b19329076a50ea0732968cfdb2b17f518bfef976aa1d105ab139ee4ce5758279682c015c775cd346f0a943aded6fc6ba000f5654c9bf9f960bb2cddb2cccb7b22dba93870b66cb5443b1d0c3e9659680ec1380c938c2206b6556160a2912aa5ac3afb41ee2743b51282877d7e784182fdafa105f3568fe64ea398879264f0410e03b6ff1e3bd7fb2b1b01939ab8a7b63986bfeae355f3baec27e0b632f49e511e4c3b8a64537"}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f000000001020104000000000000000004000009640002"], 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 1m16.574613569s ago: executing program 9 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) setuid(r0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81000) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0xa, 0x2, {0x2}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0x16, 0x3, "87ab48"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x0, 0x7c, {0x7a, "994fef90fb0e29fac674b840fae937e7399e2524d3a85b7b3a749ec19581466675ad0d26f49c98a0a4377e4756f4ab7e863d895f7a51047bd4a32e7d8c8acd18bb5a30f6706ba3cbda2b62e9b55c4373113905a093182d703eae8d86d539b4894fb9b74b9a6e29ba741d8e4d6899dea0303de11028dc676a9223"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x9}}) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m15.85976361s ago: executing program 9 (id=1304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x150, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "00b45a9af75938f5795dc473f9ade9ee5248b03d"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 1m15.751389467s ago: executing program 9 (id=1307): write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) (async) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0xf6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) (async) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=""/4086, &(0x7f00000010c0)=0xffffffffffffffd0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=""/4086, &(0x7f00000010c0)=0xffffffffffffffd0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x583a, 0x4008, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0x4b85f8ea, 0x100000000, 0xffffffffffffffff, 0x40000000009, 0x8000000000001, 0x800040068], 0xdddd0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cpuinfo\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x8000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x39}, &(0x7f00000001c0)=""/174, 0xae, &(0x7f0000000280)=""/202, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r1, r2], 0x4, {r6}}, 0x58) 1m15.706415969s ago: executing program 38 (id=1307): write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) (async) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0xf6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) (async) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=""/4086, &(0x7f00000010c0)=0xffffffffffffffd0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=""/4086, &(0x7f00000010c0)=0xffffffffffffffd0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x583a, 0x4008, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0x4b85f8ea, 0x100000000, 0xffffffffffffffff, 0x40000000009, 0x8000000000001, 0x800040068], 0xdddd0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cpuinfo\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x8000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x39}, &(0x7f00000001c0)=""/174, 0xae, &(0x7f0000000280)=""/202, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, r1, r2], 0x4, {r6}}, 0x58) 55.625607064s ago: executing program 8 (id=1452): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d52c0061b7452b97e93b18c705007a67146cf7c5da5ab0d1f775ac43a66a9c9aef52140068ca9192afb3f881000000cd2e2ce783243d41cdf1b64a3a2abd65b9"]) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 55.564051948s ago: executing program 8 (id=1453): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x40, @remote}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000000)={r3, 0x69, 0x7}) 55.563683668s ago: executing program 8 (id=1454): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x80) (async) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x58ca2280, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket(0x10, 0x3, 0x5) sendmsg$nl_generic(r5, 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, 0x1, 0x2, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x30, 0x0, 0x0) (async) ioctl$TIOCCBRK(r0, 0x5428) 55.561847178s ago: executing program 8 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000a80)='./file0/file0\x00') 55.507615731s ago: executing program 8 (id=1458): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x80177, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x7fff, @private1, 0x3}, 0x1c) clock_gettime(0xa00, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x80000, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) 55.320487142s ago: executing program 8 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x1, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, @private0, 0x80, 0x0, 0x1, 0x2}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000076c0)={0x2020}, 0x2020) 55.276786345s ago: executing program 39 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x1, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, @private0, 0x80, 0x0, 0x1, 0x2}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000076c0)={0x2020}, 0x2020) 8.419722591s ago: executing program 6 (id=1903): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000080)="64be155d6951de7a0a49b947883d8d54625b0c29c0496e90", 0x0, 0x18) 8.419612022s ago: executing program 6 (id=1904): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16=r0], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7.24497359s ago: executing program 1 (id=1911): capget(&(0x7f0000002040)={0x19980330}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 7.175812134s ago: executing program 1 (id=1912): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x40008, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xf800, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="4805000015001992d88c5cce288e0d04b3e0f9578a61975a09ce0a55025820e2d38851cc1fb8fb9586d592e014cc204876975998a9f10f17a6689a38993c72b01176a06d7e37d018be23efd91888a18e6f7a931a514d000000", 0x59}], 0x1) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x28, 0x5, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 7.135124197s ago: executing program 1 (id=1913): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000001058040200000000000000090224000100006000090400000103000000092100100401220500090581030800020040"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e99428bd7000fcdbdf2546000000080001"], 0x50}}, 0xc000) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000a40)={{0x2, 0x4e23, @multicast1}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfa, {0x2, 0x4e20, @remote}, 'veth1_virt_wifi\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r4, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001640)=""/107, 0x6b}], 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x9, r3, 'id1\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r8], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xab, 0x27006648, 0x8, @local, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x10, 0x9, 0x4}}) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000200)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@local, @initdev, 0x0}, &(0x7f0000000480)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)={0x100, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "3523a906"}]}}, 0x0}, 0x0) 6.500550854s ago: executing program 3 (id=1921): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000140)={0xffff, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x2b829000) gettid() socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$inet(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='M', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="161dacad5073", 0x6}], 0x1}}], 0x4, 0x6081851) 6.350158362s ago: executing program 3 (id=1922): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050100008ddfb240490b4f06fdd4010203010902120001f38d00000904"], 0x0) 5.818601224s ago: executing program 3 (id=1925): r0 = socket$netlink(0x10, 0x3, 0x7) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x10000) write$tcp_congestion(r1, &(0x7f0000000040)='htcp\x00', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x228, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x214, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x180, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @mcast2, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04f32e825113959e155f180418e0c181e885cc91031505c7effd19812f8ed82f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private1, 0x10}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe56, @remote, 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @empty}}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2db}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc2ef99f97ca8a50d11fc56525f9519919739e75999826fbbeb2bb3d0ad4b7c6"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000010}, 0x800c001) (async) connect$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xa425, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000480)={r2, r0, 0x2, 0x3a, &(0x7f0000000440)="ba7a77433a63e9bc7831e23d77462830ec61a3814068b2bc522be0f37d50e8fbd7b170a880c97d3c90235bbe2badea90b6bb9eeb3ad493b54cfe", 0x6, 0x8, 0x5, 0x3, 0x6, 0x1, 0x0, 'syz1\x00'}) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000540)={0x6, 0x7ff, 0x400, 0xfff, 0x5, "286591b3dd46db4b317862963667149a0b0998"}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x304}, "df31eb695bb5cd77", "21c425ff97a76bfc3c8574f31457094837ab771816dabacfd6ec8d9338a05fda", "657bee14", "2a324b47c6a23378"}, 0x38) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000600)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000640)={0x2, 0xffffffff}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r6, 0x8004af7a, &(0x7f00000006c0)) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000700)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfff, 0x4, 0x3ff, 0x9, 0x80, "40aa7a7b1ebdf6a6cdba1ed4962fa628bada0c190ed263cfb40e9800c658c7f1b426625d85b2b3c211d2890d99573d694d93e954875097bdf636a4325f8cb373f7346000e56c3842078786146b62cc36e59dcd6615bf3846b00f52f4df2b65f6cfe3ac27e50a99a18e0846ad98d077dde44457e5bbf5cf4116f92f9d48c0e4b2"}) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file0', [], 0xa, "ec1e0ac517b44a539f340d1b65900601fc00561f64c4096e91c9c2804cd40d3d59fda66c176e995b9d24cc93ad47b71b823dd5bc406b6c349a63210adfd97fd93923cb3e1d2da99fee600a35b44b88b3122465aaf401e0d3"}, 0x63) (async) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000840)={{0x2, 0x4e23, @loopback}, {0x306}, 0x32, {0x2, 0x4e23, @multicast1}, 'syzkaller0\x00'}) inotify_init1(0x80800) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000008c0)={'veth1_vlan\x00', {0x2, 0x0, @multicast1}}) (async) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000900)=0x8) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xced}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000884}, 0x20000080) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000ac0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x0, 0x3, 0x8, 0x8, "c5f73085e15ce62ecf3d53d269d823d290187a7cde15a727b95d9be081a990314d0e375044f82e662f491111a600195238d0b92952b3cd564b8046176b6457b4bd320d359ab09036490d740ed09deda14cdb1ef3aea2ca9d9535bcc510ba5ffe1b25853f58fba4511092dac1e403e2be64103311d7b19cf831804957b5146f66"}) (async) read$FUSE(r9, &(0x7f0000000b80)={0x2020}, 0x2020) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000002bc0)={@id={0x2, 0x0, @b}}) 5.804583654s ago: executing program 3 (id=1926): ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xa04) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x11) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.738161478s ago: executing program 3 (id=1927): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) fstat(r2, &(0x7f0000000700)) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r3 = getpid() sendmsg$AUDIT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfe, {0x20, 0x0, 0x2, r3, 0x0, 0x6a, 0x7f, 0x98f, 0x0, 0x800, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48014) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) 5.615499295s ago: executing program 3 (id=1928): r0 = syz_open_dev$evdev(&(0x7f0000001a40), 0x2, 0xa040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0xa00000400, 0x4002004c4, 0x1003, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 5.596833396s ago: executing program 40 (id=1928): r0 = syz_open_dev$evdev(&(0x7f0000001a40), 0x2, 0xa040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0xa00000400, 0x4002004c4, 0x1003, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 5.411262607s ago: executing program 6 (id=1932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x1) close(r3) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280"], 0x50}}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, &(0x7f0000000080)=0x3, r7, &(0x7f0000000100)=0x3, 0x1, 0x8) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000e}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x28, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r9}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0) 5.219704999s ago: executing program 6 (id=1933): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000100000000000000000000000100"], 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x1, 0x0, 0x0, 0x800000000000000}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc5}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac71000030000000000000001ffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x13, "388b0d91"}, @global=@item_4={0x3, 0x1, 0x1, "2a5e391d"}, @main=@item_012={0x2, 0x0, 0xb, "4bbe"}, @global=@item_012={0x1, 0x1, 0x6, '9'}, @main=@item_012={0x1, 0x0, 0x8, "8a"}, @global=@item_4={0x3, 0x1, 0x4, "ec7ff6b1"}]}}, 0x0}, 0x0) 4.227535086s ago: executing program 4 (id=1935): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$setpipe(r0, 0x407, 0x28) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x180}}], 0x400000000000181, 0x9200000000000000) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x8000) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xd, 0x4, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0xe012bf6e245708ad, 0x4, 0xce, {0xce, 0xa, "a5af54de95c8dffcfe4ed133b997980528e244e5508f4fcdc69aac8de7ac0a6a28a08eb6ef16b9e0d68498ee6d23867b7182815723f9b98d5a6ae34fc40e0cbb1ca0b3f7941a0f189c64f77d00d7f4b05df2384b703cb43ddbf5f682a44366f85e1d3cbf0f34ab921fc2e8d8525c7a5a213246f80b0cbeff48850dca0f13ee4e5c5021b179a555beccf253395d8f9ac1502aeb156ea42347a9aec69764ea1911e81a5d01d5acbff5a89da2f5de1ac07f0c87f2e5a133b7ec502d51ee4faaee6629cf1db7b2bab8407699a490"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000480)={0x0, 0xf, 0xb2, {0x5, 0xf, 0xb2, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x7c, 0x2, 0xd, 0x4000, 0xb}, @generic={0x53, 0x10, 0x4, "1cbd7bac418464150484b3cf1b562a53cf7de42020c67e07c451a8f44eefb257fd6f76d8cf286f4ba9abebd54db119f7f7924a3706ba6d40cf606f67887d1625c5708198d0e341f09cd4e16f72cc0cf9"}, @ss_container_id={0x14, 0x10, 0x4, 0x66, "c45a4f9da4726495452855cd03bb7f66"}, @ss_cap={0xa, 0x10, 0x3, 0x66306cfcabc7a74d, 0x9, 0x80, 0x5, 0x3}, @generic={0x31, 0x10, 0xb, "d86ee6c40ab3a510197b80c5044e1c4160cc560f1db7d07c5f352d14d9f134cfb4f408af62b3b2b15259b3283b37"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x8, 0x3, 0x3, "45ba1721", "322a7e87"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd8, 0x0, 0x8, 0x3, 0x61, 0x2, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x40, 0xe, 0x26, "5b966d0814eab45e6730fa9933ce68df8fac205f983458916758dd2b1909f266afb0ddb02d8c"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x3e2, 0x40, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0xb, 0x2, '\f\a'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'W\x00'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xd82b}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0x10, 0x7, {0x7, 0x5, "5a7da32996"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x401070cd, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0x1a, 0x0, 0xb}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x80a0000, 0xfffffffffffffffd, 0x2, 0x2}) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000080)={0x2, 0x200, 0x4, 0x2, 0xf, 0x1}) 4.120354172s ago: executing program 1 (id=1936): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000200)=0xffff, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c, 0x0}}], 0x5a, 0x24000000) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x8000) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x49, 0x0, &(0x7f0000000000)) sendmsg$inet6(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x1}, 0x20008045) 3.908155754s ago: executing program 1 (id=1937): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0xc9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "d6"}, @main=@item_4={0x3, 0x0, 0xc, "83aaeb27"}]}}, 0x0}, 0x0) 3.664350628s ago: executing program 6 (id=1938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x7}}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xa7, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0xd, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "49f059922c50"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xedd, 0xd8, 0xfffd, 0x60}, {0x6, 0x24, 0x1a, 0xff8f, 0x21}, [@acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0xf1, 0xf, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x34, 0x1b, 0xe, 0xe2}, @obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x9, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0xb9f, 0x10, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x9f, 0x65}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x94, 0xb, 0xe}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xd, 0x1, 0x1, 0xff, 0x58}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xc, 0x1, 0x4a7}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3605}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0/../file0/../file0/file0\x00', &(0x7f0000000600)={0x200000, 0x84, 0x20}, 0x18) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000640)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) unshare(0x62040200) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0xff}]}) 2.500888805s ago: executing program 5 (id=1939): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16=r0], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.944127818s ago: executing program 5 (id=1940): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 1.940463418s ago: executing program 5 (id=1941): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendto$packet(r0, &(0x7f00000000c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r1, 0x1, 0xe0}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0xd8, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x84, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x40a, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x2c, {0x2c, 0x8, "098580c4fa2939ec32729d8a21ae9fcbe33b66ce754d4f30c3875c9281fc32fc0bf1a7755857d5ef81a0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.929330618s ago: executing program 6 (id=1942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000007c94ef56491ee54be34042074ed27c1c60477cef3e2", 0x1d) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e1e, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0xe2ab6000) 1.469817305s ago: executing program 5 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="39020000000000000000140000000c000780070002"], 0x20}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x6c, &(0x7f00000001c0)={[{0x65, 0x4e00, "f7bc1a46fae656bac5cb632cb51c2976385e652acd5456a2c9891dbe4c385f14a9f805c318a48225d6841554e797d2d786c4aaa637dbe1ef9d161b56aebe8f2146f00de8c9cd54333245fd2e106f5220721cd644c21affaf66998f69087bd360ccaf5b1da8"}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x20, 0x9, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0xffffffffffffff43) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001"], 0x310) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfd}, 0xc) 1.135903754s ago: executing program 4 (id=1944): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x19, r2, 0x1, 0x81, 0x6, @remote}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x447, 0x10100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x7f, 0x1, 0xfffffffd}) (async) dup3(r0, r4, 0x80000) (async, rerun: 64) sendmmsg$sock(r3, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xfa0}}], 0x18}}], 0x1, 0x20028050) (rerun: 64) 1.135067245s ago: executing program 4 (id=1945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001640)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0xb5d6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000480)=@ethtool_rxfh={0x1, 0x1, 0x1, 0x8, 0x2, "dcdff9", 0x6d2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000001bc0)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x1, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x0, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x44, 0x4, 'L?'}, @cipso={0x86, 0x46, 0x0, [{0x6, 0x4, "aefe"}, {0x7, 0xd, "cceaee079b8105bc77db94"}, {0x5, 0xb, "cbca0f98120a7e880b"}, {0x2, 0x12, "f22e3b46a58e941c405d535b0c1cb58b"}, {0x2, 0x12, "3cfa12162cde0e000000000000000000"}]}, @generic={0x44, 0x6, "6ac7423e"}, @ssrr={0x89, 0x7, 0xf5, [@multicast1]}]}}}}}) r5 = gettid() timer_create(0x7, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000018c0)={0x80000001}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001700)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000001680)={'syztnl2\x00', r4, 0x700, 0x8, 0x0, 0x9, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x64, 0x0, 0xc9, 0x4, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x17, 0x71, [@loopback, @multicast2, @multicast1, @rand_addr=0x64010102, @empty]}]}}}}}) sendmsg$inet(r3, &(0x7f0000001740)={&(0x7f0000000000)={0x2, 0x4e26, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="73c5bc40dbbbcc0e12939850bdd0c5dd0cdba74af2c9aecd6fe31585ab39d6d9c11c843bb97d207a4afc05748be4e795838de1ae15910e9c305d009e0f4c0cf20162cead8552c45d917398227b5ecbab7b6937955133126b443379b8e52b538a47592498530b04c48586d8c5e4a2eff77caeba220201e75c58cc8430a627bce3eb0175350631b89bc30c9182f8091438b51bb4dc73186f0f145a5a3f5819cf2fb56e55c71d3e940bc9f909174ebdf4", 0xaf}, {&(0x7f00000001c0)="b328ef53b1d9e4e7d354358c4e23f86966bcc82441f948e23a7652f0d327ace9b595fdeddfbef27062fa5ef6d5b4888525fb54b496d7b2f14bc3dd67f4ab6954d4d21e2ab702f01a3db1e82cd061cd45bd30d62adb3f46b7b9cf22e7ea498695a0899f7c85f0ce3558a9ed380465300acb7799d24de503c9df2607baf1dd9effab2c6230292e528e7a91a5f5125cb1dcce569384687a7dbfd1c0f3eeb126de4b74ee0936f84e1d8499018d85250ca89dd6eab4f83200443f8b93711ac5d2f3ee59692fd69fe3f6968c120eef4692930429dbebd04c5ee226d20d73e44e7aa0a3ec03c69a6acb35", 0xe7}, {&(0x7f00000002c0)="2e958145a0a6f3a041952c55b309166537021ff2759fb6c61f0695be31c22ffdebfaf2ab616bd225e2f76dfb4f4bd06e84afd9cb84bb42257714bbb9688cf03991cc6bc43b47da9e9b0762ed4878c5babca31d4cd2cd8bb3616d8d2cf1703ea79941f0f18120bcf024e50927657e7e2088d0b16e66e217042211ffcc1cbdbe5a1f2cdf9da7281f3c6e374ea2a0aa8469f21bbb9c0219b255f22884825473e8a65d6c289c7c57f603f3a19a85b46dc4ec36a1d5bdd083c4b48185d9b4fb1d3d1cb26c9e25ec9a8c50aad5450ae2b5d557d1526331e74fe8c9b463c6a2e459c436cd48f487ee772a12e74f50e9e0fc0b18f7f585", 0xf3}, {&(0x7f0000000040)="b23e6dfa6d7cbce3c4e2597fd74fdc6e5071568bf8fb3fcddd6352fa41fcaed83b44d4530070882dc2fb908b8d674c9a3709d124cb1b44098714a0dbf26f591b8ed526c954c6c8d37b77954193c5cdfaf148572fb07ec5f90ee942a50521e0ef234eb60b167648a2b81ed48cd3d3bb2895a8f2f679", 0x75}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000000640)="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", 0x1000}], 0x6, &(0x7f0000001a00)}, 0x4000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a3f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'team0\x00'}) write$tun(r9, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d000000006488ff7bd90000000100000000000000000000ff0200000000000000000000000000014e204e23006490"], 0x9e) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB="04000000f70c39c3e662d55a2920fcf955cd56a0bba70e5e2ec142dc266dd67b29fe735e14a9b920e25362d417d3b683c1a824ae7f0ccbcb76bb4131dca9cd3fbe2d514d57fb6221c98c2bce5d97e464fa91df2724f8a5e906908af6ec8c", @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x400000000000006, 0xfffffffd, 0x0, {0x4000000000000000, 0x8, 0x77, 0x1, 0xd, 0x80000002, 0x6, 0x20200, 0x4, 0x2000, 0x0, r11, r12, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000200, r11, &(0x7f0000001900)='./file0\x00') 949.050835ms ago: executing program 5 (id=1946): r0 = open(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0xa000000c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r5, 0x0, r2, 0x0, 0x800000000ff, 0x0) openat2(r2, 0x0, &(0x7f0000000100)={0x80600, 0x180, 0x4}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000680), 0x2228840, 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r8 = syz_clone(0xa0e400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000012680)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r10, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x2590f58a) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) unshare(0x6060600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x6083, 0x0) pwrite64(r11, 0x0, 0x0, 0x7) 928.727927ms ago: executing program 1 (id=1947): syz_usb_connect(0x3, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x89, 0x25, 0x63, 0x8, 0x56e, 0x5004, 0xdbd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x4, 0x3, 0x34, 0xe9, 0x5f, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x4, 0xb2, 0x63, 0x20, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) getsockname$packet(r5, 0x0, &(0x7f0000000480)) (async) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffff9, 0x7fffffff}) 234.322727ms ago: executing program 4 (id=1949): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) socket$inet(0x2, 0x1, 0x0) 203.113209ms ago: executing program 4 (id=1950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 114.942424ms ago: executing program 5 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x8a101, 0x112) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='devpts\x00', &(0x7f00000000c0)='./file1\x00', r1) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008ec0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x9, 0x8001}}, 0x50) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2d, 0x6, 0xc000088, 0x4a93, 0x1, 0x54add6ce, 0x6, 0x0, 0x0, 0x2, 0x8}}, 0x50) 0s ago: executing program 4 (id=1951): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r0, 0x401) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45, [0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r4, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'macvlan1\x00', {0x34}, 0x3}) kernel console output (not intermixed with test programs): h error -5 [ 302.441142][ T3428] usb 7-1: Found UVC 15.ff device syz (17dc:0202) [ 302.447622][ T3428] usb 7-1: No valid video chain found. [ 302.448314][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1378'. [ 302.462174][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1378'. [ 302.473753][ T3428] usb 7-1: USB disconnect, device number 80 [ 302.987529][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1384'. [ 303.174332][ T4646] validate_nla: 56 callbacks suppressed [ 303.174357][ T4646] netlink: 'syz.5.1385': attribute type 4 has an invalid length. [ 303.190147][ T4648] netlink: 'syz.5.1385': attribute type 4 has an invalid length. [ 303.204274][ T4649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4649 comm=syz.8.1384 [ 303.240430][ T66] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 303.390451][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 303.397081][ T66] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 303.405464][ T66] usb 7-1: config 0 has no interface number 0 [ 303.413390][ T66] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 303.422635][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.430681][ T66] usb 7-1: Product: syz [ 303.434935][ T66] usb 7-1: Manufacturer: syz [ 303.439534][ T66] usb 7-1: SerialNumber: syz [ 303.445029][ T66] usb 7-1: config 0 descriptor?? [ 303.450790][ T66] smsc95xx v2.0.0 [ 303.651759][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 303.662762][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 303.873034][ T66] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 303.885567][ T66] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 304.412436][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 304.780486][ T66] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 304.929643][ T9] usb 7-1: USB disconnect, device number 81 [ 304.937202][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.948610][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.959262][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.968591][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.979962][ T66] usb 4-1: config 0 descriptor?? [ 304.986399][ T66] hub 4-1:0.0: USB hub found [ 305.092844][ T4726] 9p: Unknown uid 00000000004294967295 [ 305.144506][ T4727] overlayfs: failed to clone upperpath [ 305.152002][ T4726] syz.5.1409: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 305.167481][ T4726] CPU: 1 UID: 0 PID: 4726 Comm: syz.5.1409 Not tainted syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 305.167517][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.167530][ T4726] Call Trace: [ 305.167537][ T4726] [ 305.167549][ T4726] __dump_stack+0x21/0x30 [ 305.167591][ T4726] dump_stack_lvl+0x140/0x1c0 [ 305.167614][ T4726] ? __cfi_dump_stack_lvl+0x10/0x10 [ 305.167633][ T4726] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 305.167657][ T4726] dump_stack+0x19/0x20 [ 305.167679][ T4726] warn_alloc+0x1e7/0x2c0 [ 305.167699][ T4726] ? stack_depot_save_flags+0x38/0x800 [ 305.167733][ T4726] ? __cfi_warn_alloc+0x10/0x10 [ 305.167753][ T4726] ? kasan_save_track+0x3e/0x80 [ 305.167777][ T4726] ? kasan_save_alloc_info+0x40/0x50 [ 305.167798][ T4726] ? xsk_init_queue+0xb2/0x120 [ 305.167821][ T4726] ? xsk_setsockopt+0x42c/0x760 [ 305.167845][ T4726] ? do_sock_setsockopt+0x27f/0x410 [ 305.167867][ T4726] ? __x64_sys_setsockopt+0x1b7/0x250 [ 305.167889][ T4726] ? x64_sys_call+0x2adc/0x2ee0 [ 305.167913][ T4726] ? do_syscall_64+0x57/0xf0 [ 305.167935][ T4726] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 305.167958][ T4726] __vmalloc_node_range_noprof+0x132/0x1480 [ 305.167982][ T4726] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 305.168003][ T4726] ? kasan_save_alloc_info+0x40/0x50 [ 305.168022][ T4726] ? __kasan_kmalloc+0x96/0xb0 [ 305.168046][ T4726] ? __kmalloc_cache_noprof+0x23c/0x470 [ 305.168070][ T4726] vmalloc_user_noprof+0x77/0x90 [ 305.168090][ T4726] ? xskq_create+0xdb/0x290 [ 305.168115][ T4726] xskq_create+0xdb/0x290 [ 305.168139][ T4726] xsk_init_queue+0xb2/0x120 [ 305.168162][ T4726] xsk_setsockopt+0x42c/0x760 [ 305.168182][ T4726] ? __cfi_xsk_setsockopt+0x10/0x10 [ 305.168201][ T4726] ? do_futex+0x32a/0x510 [ 305.168220][ T4726] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 305.168246][ T4726] ? security_socket_setsockopt+0x3d/0x100 [ 305.168274][ T4726] ? __cfi_xsk_setsockopt+0x10/0x10 [ 305.168298][ T4726] do_sock_setsockopt+0x27f/0x410 [ 305.168321][ T4726] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 305.168343][ T4726] __x64_sys_setsockopt+0x1b7/0x250 [ 305.168364][ T4726] x64_sys_call+0x2adc/0x2ee0 [ 305.168388][ T4726] do_syscall_64+0x57/0xf0 [ 305.168408][ T4726] ? clear_bhb_loop+0x50/0xa0 [ 305.168429][ T4726] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 305.168449][ T4726] RIP: 0033:0x7f9c5859aeb9 [ 305.168478][ T4726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.168495][ T4726] RSP: 002b:00007f9c5949e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.168516][ T4726] RAX: ffffffffffffffda RBX: 00007f9c58815fa0 RCX: 00007f9c5859aeb9 [ 305.168532][ T4726] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 305.168545][ T4726] RBP: 00007f9c58608c1f R08: 0000000000000004 R09: 0000000000000000 [ 305.168557][ T4726] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.168565][ T4726] R13: 00007f9c58816038 R14: 00007f9c58815fa0 R15: 00007fffda9b2958 [ 305.168575][ T4726] [ 305.168752][ T4726] Mem-Info: [ 305.473398][ T4726] active_anon:10660 inactive_anon:200 isolated_anon:0 [ 305.473398][ T4726] active_file:12250 inactive_file:12656 isolated_file:0 [ 305.473398][ T4726] unevictable:16439 dirty:73 writeback:0 [ 305.473398][ T4726] slab_reclaimable:5276 slab_unreclaimable:75178 [ 305.473398][ T4726] mapped:35997 shmem:3036 pagetables:1092 [ 305.473398][ T4726] sec_pagetables:0 bounce:0 [ 305.473398][ T4726] kernel_misc_reclaimable:0 [ 305.473398][ T4726] free:1381015 free_pcp:1726 free_cma:0 [ 305.473676][ T66] hub 4-1:0.0: 1 port detected [ 305.521268][ T4726] Node 0 active_anon:42640kB inactive_anon:800kB active_file:49000kB inactive_file:50624kB unevictable:65756kB isolated(anon):0kB isolated(file):0kB mapped:143988kB dirty:292kB writeback:0kB shmem:12144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6560kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no [ 305.556543][ T4726] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:68kB free_cma:0kB [ 305.586560][ T4726] lowmem_reserve[]: 0 3921 3921 [ 305.591501][ T4726] Normal free:2565896kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42640kB inactive_anon:800kB active_file:49000kB inactive_file:50624kB unevictable:65756kB writepending:292kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1704kB local_pcp:1172kB free_cma:0kB [ 305.624360][ T4726] lowmem_reserve[]: 0 0 0 [ 305.630901][ T4726] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 305.646741][ T4726] Normal: 108*4kB (UME) 167*8kB (UME) 156*16kB (UME) 361*32kB (UME) 451*64kB (UME) 81*128kB (UME) 46*256kB (UME) 13*512kB (UME) 20*1024kB (UME) 5*2048kB (UME) 601*4096kB (UM) = 2565896kB [ 305.665665][ T4726] 44647 total pagecache pages [ 305.670508][ T4726] 270 pages in swap cache [ 305.674857][ T4726] Free swap = 123456kB [ 305.679026][ T4726] Total swap = 124996kB [ 305.683235][ T4726] 2097051 pages RAM [ 305.687053][ T4726] 0 pages HighMem/MovableOnly [ 305.691940][ T4726] 352241 pages reserved [ 305.696136][ T4726] 0 pages cma reserved [ 305.701577][ T4726] Memory allocations: [ 305.705581][ T4726] 0 B 0 init/main.c:1477 func:do_initcalls [ 305.712812][ T4726] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 305.721130][ T4726] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 305.728790][ T4726] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 305.736772][ T4726] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 305.744780][ T4726] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 305.753958][ T4726] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 305.762162][ T4726] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 305.770545][ T4726] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 305.778701][ T4726] 0 B 0 init/initramfs.c:101 func:find_link [ 306.010487][ T9] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 306.033761][ T66] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 306.040922][ T66] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 306.051423][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 306.057400][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 306.075417][ T4742] KVM: debugfs: duplicate directory 4742-6 [ 306.092467][ T66] usb 4-1: USB disconnect, device number 43 [ 306.160431][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 306.167788][ T9] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 306.175849][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.184575][ T9] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.194712][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.203694][ T9] usb 7-1: config 1 has no interface number 1 [ 306.209914][ T9] usb 7-1: too many endpoints for config 1 interface 6 altsetting 127: 140, using maximum allowed: 30 [ 306.221677][ T9] usb 7-1: config 1 interface 6 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 306.234928][ T9] usb 7-1: config 1 interface 6 has no altsetting 0 [ 306.243526][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.252633][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.260694][ T9] usb 7-1: Product: ⓱ⷜ舠ﵹꈨᬿ魷豪壅朥æ’⠫觠⠸㛹뽾庹↩낞আᦷä°ïµ¥æ–䯬î¼è°·æ«ˆå”¢à¹…溆葒铧ê¾ãšâ®¶è–—â®ì§‡ï’·ë»î¾ëƒ™Ï¶èŒµáš¦ì½®ì¸§â§î—€é¬‹ë•·î˜”ä¿—ã‚ [ 306.279710][ T9] usb 7-1: Manufacturer: イ蜡軜싺䄀࿬牂ଂᱣᡒꢗè“弻瘺ᯱ齽姟섆㥾爩餶쓢佉챜窑掠ã†å·…橲ꛨ褣⨊઒è³ã§¢ã‚¥å§Ñ”쌴冀ä„Þœî¡ì©›ê¥»î±³î©¯è½çº©é²žæ¹„â隗霫졲㑇 [ 306.301267][ T9] usb 7-1: SerialNumber: syz [ 306.440419][ T66] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 306.570451][ T66] usb 4-1: device descriptor read/64, error -71 [ 306.710862][ T9] usb 7-1: 0:2 : does not exist [ 306.718830][ T9] usb 7-1: USB disconnect, device number 82 [ 306.727288][ T3046] udevd[3046]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.810456][ T66] usb 4-1: device descriptor read/64, error -71 [ 306.926795][ T4759] netlink: 'syz.8.1420': attribute type 2 has an invalid length. [ 306.935466][ T36] audit: type=1400 audit(1769662701.956:26461): avc: denied { setopt } for pid=4758 comm="syz.8.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.050472][ T66] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 307.170425][ T9] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 307.180428][ T66] usb 4-1: device descriptor read/64, error -71 [ 307.331135][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 307.345019][ T9] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 307.354849][ T9] usb 9-1: config 0 has no interface number 0 [ 307.361934][ T9] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 307.372412][ T9] usb 9-1: config 0 interface 196 has no altsetting 0 [ 307.380757][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 307.390396][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.398424][ T9] usb 9-1: Product: syz [ 307.403191][ T9] usb 9-1: Manufacturer: syz [ 307.410423][ T9] usb 9-1: SerialNumber: syz [ 307.429376][ T9] usb 9-1: config 0 descriptor?? [ 307.435184][ T4759] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 307.450561][ T66] usb 4-1: device descriptor read/64, error -71 [ 307.561277][ T66] usb usb4-port1: attempt power cycle [ 307.586317][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1428'. [ 307.596977][ T4781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4781 comm=syz.6.1428 [ 307.860441][ T3428] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 307.900490][ T66] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 307.921967][ T66] usb 4-1: device descriptor read/8, error -71 [ 308.020385][ T3428] usb 7-1: Using ep0 maxpacket: 8 [ 308.026789][ T3428] usb 7-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 308.036042][ T3428] usb 7-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 308.045702][ T3428] usb 7-1: config 73 interface 0 has no altsetting 0 [ 308.052579][ T3428] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 308.061491][ T66] usb 4-1: device descriptor read/8, error -71 [ 308.061784][ T3428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.278153][ T3428] usb 7-1: string descriptor 0 read error: -71 [ 308.285331][ T3428] usb 7-1: Found UVC 0.00 device (2833:0201) [ 308.292569][ T3428] usb 7-1: Failed to create links for entity 1 [ 308.298842][ T3428] usb 7-1: Failed to register entities (-22). [ 308.307008][ T3428] usb 7-1: USB disconnect, device number 83 [ 308.311169][ T66] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 308.341914][ T66] usb 4-1: device descriptor read/8, error -71 [ 308.409207][ T9] ipheth 9-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 308.421795][ T9] ipheth 9-1:0.196: Apple iPhone USB Ethernet device attached [ 308.471840][ T36] audit: type=1400 audit(1769662703.496:26462): avc: denied { ioctl } for pid=4741 comm="syz.3.1415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.472553][ T66] usb 4-1: device descriptor read/8, error -71 [ 308.564305][ C1] ipheth 9-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 308.611189][ T66] usb usb4-port1: unable to enumerate USB device [ 308.627245][ T36] audit: type=1400 audit(3539334111.237:26463): avc: denied { bind } for pid=4758 comm="syz.8.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.764876][ T31] usb 9-1: USB disconnect, device number 49 [ 308.816121][ T31] ipheth 9-1:0.196: Apple iPhone USB Ethernet now disconnected [ 308.833665][ T36] audit: type=1400 audit(3539334111.447:26464): avc: denied { read write } for pid=4816 comm="syz.6.1432" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.858242][ T36] audit: type=1400 audit(3539334111.447:26465): avc: denied { open } for pid=4816 comm="syz.6.1432" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.070433][ T66] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 309.210513][ T66] usb 7-1: device descriptor read/64, error -71 [ 309.237115][ T4828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1434'. [ 309.387404][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1442'. [ 309.450408][ T66] usb 7-1: device descriptor read/64, error -71 [ 309.540435][ T9] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 309.590515][ T3428] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 309.690499][ T66] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 309.691896][ T9] usb 9-1: config 0 has an invalid interface number: 46 but max is 0 [ 309.706506][ T9] usb 9-1: config 0 has no interface number 0 [ 309.712752][ T9] usb 9-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 309.725179][ T9] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 309.734522][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.742636][ T9] usb 9-1: Product: syz [ 309.746862][ T9] usb 9-1: Manufacturer: syz [ 309.751696][ T9] usb 9-1: SerialNumber: syz [ 309.756878][ T3428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.768112][ T9] usb 9-1: config 0 descriptor?? [ 309.773220][ T3428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.783090][ T3428] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.783259][ T4832] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 309.796028][ T3428] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.812683][ T9] ums-karma 9-1:0.46: USB Mass Storage device detected [ 309.819661][ T3428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.829413][ T3428] usb 4-1: config 0 descriptor?? [ 309.830456][ T66] usb 7-1: device descriptor read/64, error -71 [ 309.843156][ T9] ums-karma 9-1:0.46: probe with driver ums-karma failed with error -5 [ 309.973871][ T4871] netlink: 393 bytes leftover after parsing attributes in process `syz.5.1449'. [ 310.046741][ T4876] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1450'. [ 310.080729][ T66] usb 7-1: device descriptor read/64, error -71 [ 310.099421][ T4876] overlayfs: failed to clone upperpath [ 310.130892][ T4832] can0: slcan on ptm0. [ 310.172170][ T4831] can0 (unregistered): slcan off ptm0. [ 310.190510][ T66] usb usb7-port1: attempt power cycle [ 310.225823][ T9] usb 9-1: USB disconnect, device number 50 [ 310.245636][ T3428] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 310.257551][ T3428] plantronics 0003:047F:FFFF.0040: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 310.550499][ T66] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 310.571452][ T66] usb 7-1: device descriptor read/8, error -71 [ 310.701684][ T66] usb 7-1: device descriptor read/8, error -71 [ 310.749633][ T36] audit: type=1400 audit(3539334113.357:26466): avc: denied { map } for pid=4910 comm="syz.8.1451" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 310.782091][ T4913] fuse: Bad value for 'group_id' [ 310.787256][ T4913] fuse: Bad value for 'group_id' [ 310.824189][ T4918] netlink: 'syz.8.1454': attribute type 4 has an invalid length. [ 310.853044][ T36] audit: type=1400 audit(3539334113.467:26467): avc: denied { mounton } for pid=4926 comm="syz.8.1456" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 310.858726][ T4930] bpf: Bad value for 'mode' [ 310.950478][ T66] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 310.971851][ T66] usb 7-1: device descriptor read/8, error -71 [ 310.984169][ T12] bridge_slave_1: left allmulticast mode [ 310.990188][ T12] bridge_slave_1: left promiscuous mode [ 310.996005][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.004365][ T12] bridge_slave_0: left allmulticast mode [ 311.010269][ T12] bridge_slave_0: left promiscuous mode [ 311.016055][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.101517][ T66] usb 7-1: device descriptor read/8, error -71 [ 311.183833][ T12] veth1_macvtap: left promiscuous mode [ 311.189584][ T12] veth0_vlan: left promiscuous mode [ 311.212487][ T66] usb usb7-port1: unable to enumerate USB device [ 311.284321][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.291696][ T4936] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.298785][ T4936] bridge_slave_0: entered allmulticast mode [ 311.305451][ T4936] bridge_slave_0: entered promiscuous mode [ 311.312524][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.319908][ T4936] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.327032][ T4936] bridge_slave_1: entered allmulticast mode [ 311.333467][ T4936] bridge_slave_1: entered promiscuous mode [ 311.392217][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.399419][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.406760][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.413823][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.435506][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.443115][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.452780][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.459961][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.471453][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.478685][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.508819][ T4936] veth0_vlan: entered promiscuous mode [ 311.520861][ T4936] veth1_macvtap: entered promiscuous mode [ 311.543305][ T4947] overlayfs: failed to clone upperpath [ 311.550512][ C0] plantronics 0003:047F:FFFF.0040: usb_submit_urb(ctrl) failed: -1 [ 311.592225][ T4954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 311.602209][ T4954] kvm: pic: level sensitive irq not supported [ 311.602275][ T4954] kvm: pic: non byte read [ 311.613268][ T4954] kvm: pic: level sensitive irq not supported [ 311.613317][ T4954] kvm: pic: non byte read [ 311.624071][ T4954] kvm: pic: level sensitive irq not supported [ 311.624127][ T4954] kvm: pic: non byte read [ 311.770034][ T36] audit: type=1400 audit(3539334114.377:26468): avc: denied { bind } for pid=4957 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.838455][ T4962] rust_binder: Write failure EFAULT in pid:612 [ 312.001101][ T66] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 312.161615][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 312.172329][ T66] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 312.182367][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 312.193334][ T66] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 312.205596][ T66] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 312.215375][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.223543][ T66] usb 2-1: Product: syz [ 312.228211][ T66] usb 2-1: Manufacturer: syz [ 312.232892][ T66] usb 2-1: SerialNumber: syz [ 312.238054][ T66] usb 2-1: config 0 descriptor?? [ 312.244374][ T66] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 312.260488][ T9] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 312.390412][ T9] usb 7-1: device descriptor read/64, error -71 [ 312.400666][ T31] usb 4-1: USB disconnect, device number 48 [ 312.447702][ T66] scsi host1: usb-storage 2-1:0.0 [ 312.454958][ T66] usb 2-1: USB disconnect, device number 39 [ 312.540451][ T31] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 312.630570][ T9] usb 7-1: device descriptor read/64, error -71 [ 312.691987][ T31] usb 4-1: config index 0 descriptor too short (expected 235, got 227) [ 312.700398][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 312.708643][ T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 312.719340][ T31] usb 4-1: config 220 has no interface number 2 [ 312.725770][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 312.739125][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 312.746131][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 312.753087][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 312.761647][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 312.771323][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.779682][ T31] usb 4-1: Product: syz [ 312.784173][ T31] usb 4-1: Manufacturer: syz [ 312.788774][ T31] usb 4-1: SerialNumber: syz [ 312.870440][ T9] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 312.999831][ T31] usb 4-1: selecting invalid altsetting 0 [ 313.000403][ T9] usb 7-1: device descriptor read/64, error -71 [ 313.005852][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 313.018705][ T31] usb 4-1: No valid video chain found. [ 313.029200][ T31] usb 4-1: USB disconnect, device number 49 [ 313.071384][ T36] audit: type=1400 audit(3539334115.687:26469): avc: denied { setattr } for pid=5005 comm="syz.1.1479" name="" dev="pipefs" ino=33956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 313.251198][ T9] usb 7-1: device descriptor read/64, error -71 [ 313.360705][ T9] usb usb7-port1: attempt power cycle [ 313.512730][ T36] audit: type=1400 audit(3539334116.127:26470): avc: denied { connect } for pid=5020 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.540499][ T335] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 313.555275][ T36] audit: type=1400 audit(3539334116.167:26471): avc: denied { listen } for pid=5024 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 313.701613][ T335] usb 2-1: config 0 has no interfaces? [ 313.707138][ T335] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 313.716488][ T9] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 313.724380][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.733746][ T335] usb 2-1: config 0 descriptor?? [ 313.751827][ T9] usb 7-1: device descriptor read/8, error -71 [ 313.881653][ T9] usb 7-1: device descriptor read/8, error -71 [ 314.021353][ T335] usb 2-1: USB disconnect, device number 40 [ 314.120503][ T9] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 314.141850][ T9] usb 7-1: device descriptor read/8, error -71 [ 314.271751][ T9] usb 7-1: device descriptor read/8, error -71 [ 314.380548][ T9] usb usb7-port1: unable to enumerate USB device [ 314.558025][ T5052] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1496'. [ 314.665290][ T36] audit: type=1326 audit(3539334117.277:26472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5859aeb9 code=0x7fc00000 [ 314.708451][ T5073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5073 comm=syz.5.1503 [ 314.740402][ T356] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 314.820458][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 314.890425][ T356] usb 4-1: Using ep0 maxpacket: 8 [ 314.901107][ T356] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 314.909223][ T356] usb 4-1: config 0 has no interface number 0 [ 314.930253][ T356] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 314.939752][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.948759][ T356] usb 4-1: Product: syz [ 314.953691][ T356] usb 4-1: Manufacturer: syz [ 314.958453][ T356] usb 4-1: SerialNumber: syz [ 314.964032][ T356] usb 4-1: config 0 descriptor?? [ 314.972788][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.984062][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.994136][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.012172][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.021505][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.030264][ T31] usb 2-1: config 0 descriptor?? [ 315.176492][ T356] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 315.183193][ T356] usb 4-1: No streaming interface found for terminal 6. [ 315.190224][ T356] usb 4-1: Failed to create links for entity 5 [ 315.196539][ T356] usb 4-1: Failed to register entities (-22). [ 315.204288][ T356] usb 4-1: USB disconnect, device number 50 [ 315.330567][ T66] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 315.439067][ T31] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 315.448148][ T31] plantronics 0003:047F:FFFF.0041: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 315.481758][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.493524][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.503483][ T66] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 315.512694][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.521326][ T66] usb 7-1: config 0 descriptor?? [ 315.743106][ T5096] cgroup: Need name or subsystem set [ 315.800748][ T356] usb 2-1: USB disconnect, device number 41 [ 315.930412][ T66] lenovo 0003:17EF:6047.0042: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 315.970477][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 316.120424][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 316.126640][ T9] usb 4-1: config 162 has an invalid interface number: 26 but max is 0 [ 316.135122][ T9] usb 4-1: config 162 has no interface number 0 [ 316.137047][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.141680][ T9] usb 4-1: config 162 interface 26 has no altsetting 0 [ 316.151017][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.159585][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=fa33, bcdDevice=f1.2a [ 316.169409][ T356] usb 7-1: USB disconnect, device number 92 [ 316.174561][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.188485][ T9] usb 4-1: Product: syz [ 316.192741][ T9] usb 4-1: Manufacturer: syz [ 316.197346][ T9] usb 4-1: SerialNumber: syz [ 316.600459][ T3428] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 316.721517][ T5125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 316.731441][ T5125] FAULT_INJECTION: forcing a failure. [ 316.731441][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 316.744356][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.6.1521 Not tainted syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 316.744387][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.744397][ T5125] Call Trace: [ 316.744403][ T5125] [ 316.744410][ T5125] __dump_stack+0x21/0x30 [ 316.744436][ T5125] dump_stack_lvl+0x140/0x1c0 [ 316.744456][ T5125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 316.744481][ T5125] ? __cfi_avc_has_perm+0x10/0x10 [ 316.744499][ T5125] ? kasan_save_alloc_info+0x40/0x50 [ 316.744520][ T5125] dump_stack+0x19/0x20 [ 316.744537][ T5125] should_fail_ex+0x3d7/0x530 [ 316.744555][ T5125] should_failslab+0xac/0x100 [ 316.744575][ T5125] __kmalloc_cache_noprof+0x41/0x470 [ 316.744596][ T5125] ? vhost_task_create+0x12c/0x400 [ 316.744620][ T5125] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 316.744649][ T5125] vhost_task_create+0x12c/0x400 [ 316.744672][ T5125] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 316.744702][ T5125] ? __cfi_vhost_task_create+0x10/0x10 [ 316.744725][ T5125] ? __cfi_vhost_task_fn+0x10/0x10 [ 316.744747][ T5125] ? __kasan_check_write+0x18/0x20 [ 316.744767][ T5125] ? mutex_lock+0x97/0x1d0 [ 316.744794][ T5125] ? __cfi_mutex_lock+0x10/0x10 [ 316.744820][ T5125] ? kernel_text_address+0xa9/0xe0 [ 316.744853][ T5125] kvm_mmu_post_init_vm+0x161/0x300 [ 316.744868][ T5125] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 316.744882][ T5125] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 316.744894][ T5125] ? kstrtoull+0x13b/0x1e0 [ 316.744910][ T5125] ? kstrtouint+0x78/0xf0 [ 316.744930][ T5125] ? ioctl_has_perm+0x1bc/0x500 [ 316.744949][ T5125] ? __asan_memcpy+0x5a/0x80 [ 316.744972][ T5125] ? ioctl_has_perm+0x408/0x500 [ 316.744991][ T5125] ? has_cap_mac_admin+0xd0/0xd0 [ 316.745010][ T5125] ? __kasan_check_write+0x18/0x20 [ 316.745029][ T5125] ? mutex_lock_killable+0x97/0x1d0 [ 316.745039][ T5125] ? __cfi_mutex_lock_killable+0x10/0x10 [ 316.745048][ T5125] ? proc_fail_nth_write+0x184/0x220 [ 316.745060][ T5125] kvm_vcpu_ioctl+0xa48/0x1000 [ 316.745075][ T5125] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 316.745089][ T5125] ? __cfi_vfs_write+0x10/0x10 [ 316.745102][ T5125] ? __kasan_check_write+0x18/0x20 [ 316.745114][ T5125] ? mutex_unlock+0x90/0x240 [ 316.745137][ T5125] ? __cfi_mutex_unlock+0x10/0x10 [ 316.745163][ T5125] ? __fget_files+0x2c5/0x340 [ 316.745188][ T5125] ? __fget_files+0x2c5/0x340 [ 316.745213][ T5125] ? bpf_lsm_file_ioctl+0xd/0x20 [ 316.745227][ T5125] ? security_file_ioctl+0x3e/0x110 [ 316.745243][ T5125] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 316.745258][ T5125] __se_sys_ioctl+0x135/0x1b0 [ 316.745272][ T5125] __x64_sys_ioctl+0x7f/0xa0 [ 316.745286][ T5125] x64_sys_call+0x1878/0x2ee0 [ 316.745301][ T5125] do_syscall_64+0x57/0xf0 [ 316.745314][ T5125] ? clear_bhb_loop+0x50/0xa0 [ 316.745333][ T5125] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 316.745355][ T5125] RIP: 0033:0x7f6ad479aeb9 [ 316.745373][ T5125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.745443][ T5125] RSP: 002b:00007f6ad56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.745470][ T5125] RAX: ffffffffffffffda RBX: 00007f6ad4a15fa0 RCX: 00007f6ad479aeb9 [ 316.745479][ T5125] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 316.745486][ T5125] RBP: 00007f6ad56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.745493][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.745500][ T5125] R13: 00007f6ad4a16038 R14: 00007f6ad4a15fa0 R15: 00007ffe13f2e9c8 [ 316.745511][ T5125] [ 317.103045][ T3428] usb 2-1: Using ep0 maxpacket: 16 [ 317.109364][ T3428] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 317.125232][ T3428] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.135611][ T3428] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 317.146490][ T3428] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.165204][ T3428] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.174735][ T3428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.182773][ T3428] usb 2-1: Product: syz [ 317.186947][ T3428] usb 2-1: Manufacturer: syz [ 317.191591][ T3428] usb 2-1: SerialNumber: syz [ 317.202064][ T5128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 317.215713][ T5128] kvm: pic: non byte read [ 317.220688][ T5128] kvm: pic: level sensitive irq not supported [ 317.220866][ T5128] kvm: pic: non byte read [ 317.302588][ T5140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.311272][ T5140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.418322][ T3428] usb 2-1: USB disconnect, device number 42 [ 317.490480][ T356] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 317.640544][ T356] usb 7-1: Using ep0 maxpacket: 32 [ 317.647366][ T356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 317.656611][ T356] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.668857][ T356] usb 7-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 317.678165][ T356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.686412][ T356] usb 7-1: Product: syz [ 317.690734][ T356] usb 7-1: Manufacturer: syz [ 317.695446][ T356] usb 7-1: SerialNumber: syz [ 317.892214][ T36] audit: type=1326 audit(3539334120.507:26473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7174f9aeb9 code=0x0 [ 317.916441][ T36] audit: type=1400 audit(3539334120.517:26474): avc: denied { write } for pid=5137 comm="syz.6.1524" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 317.920135][ T356] usb 7-1: USB disconnect, device number 93 [ 317.941692][ T36] audit: type=1400 audit(3539334120.517:26475): avc: denied { map } for pid=5137 comm="syz.6.1524" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 317.974600][ T36] audit: type=1400 audit(3539334120.517:26476): avc: denied { execute } for pid=5137 comm="syz.6.1524" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.002642][ T36] audit: type=1400 audit(3539334120.587:26477): avc: denied { map } for pid=5149 comm="syz.5.1529" path="socket:[34332]" dev="sockfs" ino=34332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 318.026641][ T36] audit: type=1400 audit(3539334120.587:26478): avc: denied { accept } for pid=5149 comm="syz.5.1529" path="socket:[34332]" dev="sockfs" ino=34332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 318.161600][ T5161] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 318.172847][ T5161] kvm: pic: level sensitive irq not supported [ 318.172916][ T5161] kvm: pic: non byte read [ 318.260547][ T5170] loop4: detected capacity change from 0 to 7 [ 318.528741][ T5175] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1537'. [ 318.560478][ T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 318.660458][ T3428] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 318.711933][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 318.723019][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 318.736963][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.746707][ T31] usb 2-1: config 0 descriptor?? [ 318.752325][ T5170] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.812072][ T3428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.823190][ T3428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.833299][ T3428] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.846339][ T3428] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.855687][ T3428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.861931][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.865120][ T3428] usb 7-1: config 0 descriptor?? [ 318.875965][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.165086][ T31] sony 0003:054C:0268.0043: hiddev96,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 319.178034][ T31] sony 0003:054C:0268.0043: failed to claim input [ 319.280872][ T3428] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 319.289837][ T3428] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 319.365613][ T3428] usb 2-1: USB disconnect, device number 43 [ 319.452093][ T5193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.462085][ T5193] kvm: pic: level sensitive irq not supported [ 319.462183][ T5193] kvm: pic: non byte read [ 319.473574][ T5193] kvm: pic: level sensitive irq not supported [ 319.473631][ T5193] kvm: pic: non byte read [ 319.484354][ T5193] kvm: pic: level sensitive irq not supported [ 319.484431][ T5193] kvm: pic: non byte read [ 319.495287][ T5193] kvm: pic: level sensitive irq not supported [ 319.495400][ T5193] kvm: pic: non byte read [ 319.581500][ T5197] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.591438][ T5197] kvm: pic: level sensitive irq not supported [ 319.591500][ T5197] kvm: pic: non byte read [ 319.602861][ T5197] kvm: pic: level sensitive irq not supported [ 319.602906][ T5197] kvm: pic: non byte read [ 319.613956][ T5197] kvm: pic: level sensitive irq not supported [ 319.614019][ T5197] kvm: pic: non byte read [ 319.624929][ T5197] kvm: pic: level sensitive irq not supported [ 319.646192][ T3428] usb 7-1: USB disconnect, device number 94 [ 319.751230][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.760077][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.181314][ T5210] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 320.189956][ T5210] FAULT_INJECTION: forcing a failure. [ 320.189956][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 320.203099][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.6.1548 Not tainted syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 320.203129][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.203138][ T5210] Call Trace: [ 320.203145][ T5210] [ 320.203152][ T5210] __dump_stack+0x21/0x30 [ 320.203181][ T5210] dump_stack_lvl+0x140/0x1c0 [ 320.203203][ T5210] ? __cfi_dump_stack_lvl+0x10/0x10 [ 320.203230][ T5210] ? __kasan_check_write+0x18/0x20 [ 320.203245][ T5210] ? copy_mm+0x2d2/0x1cf0 [ 320.203259][ T5210] dump_stack+0x19/0x20 [ 320.203271][ T5210] should_fail_ex+0x3d7/0x530 [ 320.203284][ T5210] should_failslab+0xac/0x100 [ 320.203298][ T5210] kmem_cache_alloc_noprof+0x42/0x410 [ 320.203313][ T5210] ? alloc_pid+0xa5/0xba0 [ 320.203324][ T5210] ? __asan_memcpy+0x5a/0x80 [ 320.203337][ T5210] alloc_pid+0xa5/0xba0 [ 320.203347][ T5210] copy_process+0x1409/0x3220 [ 320.203361][ T5210] ? __cfi_copy_process+0x10/0x10 [ 320.203380][ T5210] ? __kmalloc_cache_noprof+0x23c/0x470 [ 320.203404][ T5210] ? __kasan_check_write+0x18/0x20 [ 320.203425][ T5210] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 320.203446][ T5210] vhost_task_create+0x1f7/0x400 [ 320.203462][ T5210] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 320.203488][ T5210] ? __cfi_vhost_task_create+0x10/0x10 [ 320.203504][ T5210] ? __cfi_vhost_task_fn+0x10/0x10 [ 320.203519][ T5210] ? __kasan_check_write+0x18/0x20 [ 320.203531][ T5210] ? mutex_lock+0x97/0x1d0 [ 320.203549][ T5210] ? __cfi_mutex_lock+0x10/0x10 [ 320.203566][ T5210] ? kernel_text_address+0xa9/0xe0 [ 320.203589][ T5210] kvm_mmu_post_init_vm+0x161/0x300 [ 320.203656][ T5210] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 320.203671][ T5210] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 320.203683][ T5210] ? kstrtoull+0x13b/0x1e0 [ 320.203701][ T5210] ? kstrtouint+0x78/0xf0 [ 320.203739][ T5210] ? ioctl_has_perm+0x1bc/0x500 [ 320.203752][ T5210] ? __asan_memcpy+0x5a/0x80 [ 320.203767][ T5210] ? ioctl_has_perm+0x408/0x500 [ 320.203784][ T5210] ? has_cap_mac_admin+0xd0/0xd0 [ 320.203801][ T5210] ? __kasan_check_write+0x18/0x20 [ 320.203823][ T5210] ? mutex_lock_killable+0x97/0x1d0 [ 320.203842][ T5210] ? __cfi_mutex_lock_killable+0x10/0x10 [ 320.203860][ T5210] ? proc_fail_nth_write+0x184/0x220 [ 320.203877][ T5210] kvm_vcpu_ioctl+0xa48/0x1000 [ 320.203894][ T5210] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 320.203908][ T5210] ? __cfi_vfs_write+0x10/0x10 [ 320.203922][ T5210] ? __kasan_check_write+0x18/0x20 [ 320.203934][ T5210] ? mutex_unlock+0x90/0x240 [ 320.203950][ T5210] ? __cfi_mutex_unlock+0x10/0x10 [ 320.203968][ T5210] ? __fget_files+0x2c5/0x340 [ 320.203994][ T5210] ? __fget_files+0x2c5/0x340 [ 320.204016][ T5210] ? bpf_lsm_file_ioctl+0xd/0x20 [ 320.204036][ T5210] ? security_file_ioctl+0x3e/0x110 [ 320.204065][ T5210] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 320.204084][ T5210] __se_sys_ioctl+0x135/0x1b0 [ 320.204100][ T5210] __x64_sys_ioctl+0x7f/0xa0 [ 320.204115][ T5210] x64_sys_call+0x1878/0x2ee0 [ 320.204129][ T5210] do_syscall_64+0x57/0xf0 [ 320.204144][ T5210] ? clear_bhb_loop+0x50/0xa0 [ 320.204158][ T5210] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 320.204179][ T5210] RIP: 0033:0x7f6ad479aeb9 [ 320.204197][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.204215][ T5210] RSP: 002b:00007f6ad56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.204239][ T5210] RAX: ffffffffffffffda RBX: 00007f6ad4a15fa0 RCX: 00007f6ad479aeb9 [ 320.204254][ T5210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 320.204261][ T5210] RBP: 00007f6ad56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.204268][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.204275][ T5210] R13: 00007f6ad4a16038 R14: 00007f6ad4a15fa0 R15: 00007ffe13f2e9c8 [ 320.204286][ T5210] [ 320.611513][ T5218] x_tables: unsorted underflow at hook 2 [ 320.618441][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.627358][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.890426][ T31] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 321.041780][ T31] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.053710][ T31] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 114, changing to 10 [ 321.065035][ T31] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 321.076714][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 321.085983][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.094959][ T5220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 321.216228][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 321.252053][ T9] ftdi_sio 4-1:162.26: FTDI USB Serial Device converter detected [ 321.260796][ T9] ftdi_sio ttyUSB0: unknown device type: 0xf12a [ 321.366149][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.374902][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.384417][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.393099][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.401801][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.410611][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.422213][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.431308][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.953886][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.962728][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.483133][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.491983][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.974454][ T5255] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 323.230435][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 323.382186][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.391859][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.400729][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.410854][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 323.425500][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.434692][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.442718][ T9] usb 2-1: Product: syz [ 323.447043][ T9] usb 2-1: Manufacturer: syz [ 323.451720][ T9] usb 2-1: SerialNumber: syz [ 323.659788][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 323.668105][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 323.676228][ T9] usb 2-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 323.683746][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 323.693236][ T9] usb 2-1: USB disconnect, device number 44 [ 323.705010][ T3046] udevd[3046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.755084][ T5275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.766880][ T5275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.776795][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 323.776813][ T36] audit: type=1400 audit(3539334126.387:26480): avc: denied { setattr } for pid=5274 comm="syz.3.1571" name="#26" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 323.808141][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.816807][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.835096][ T5280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5280 comm=syz.3.1572 [ 323.851044][ T5280] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 323.860847][ T5280] SELinux: failed to load policy [ 323.902448][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.911757][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.921796][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.930527][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.420496][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 324.456705][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.465357][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.570457][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 324.576737][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.587793][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.597588][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 324.606681][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.615676][ T9] usb 2-1: config 0 descriptor?? [ 324.711743][ T36] audit: type=1400 audit(3539334127.327:26481): avc: denied { map } for pid=5295 comm="syz.5.1579" path="socket:[34634]" dev="sockfs" ino=34634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.023709][ T9] apple 0003:05AC:0274.0045: item fetching failed at offset 2/5 [ 325.031668][ T9] apple 0003:05AC:0274.0045: parse failed [ 325.037557][ T9] apple 0003:05AC:0274.0045: probe with driver apple failed with error -22 [ 325.048519][ T5300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5300 comm=syz.3.1580 [ 325.061318][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 325.225135][ T9] usb 2-1: USB disconnect, device number 45 [ 325.228155][ T31] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 325.238617][ T31] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input43 [ 325.432746][ T3428] usb 7-1: USB disconnect, device number 95 [ 325.432746][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 325.737724][ T5320] 9pnet_fd: Insufficient options for proto=fd [ 325.821345][ T5326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=5326 comm=syz.1.1589 [ 325.845406][ T5326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5326 comm=syz.1.1589 [ 325.858235][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 325.893459][ T36] audit: type=1400 audit(3539334128.497:26482): avc: denied { nlmsg_read } for pid=5330 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 325.962507][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.971121][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.079802][ T5338] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 326.160402][ T3428] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 326.310400][ T3428] usb 2-1: Using ep0 maxpacket: 32 [ 326.316833][ T3428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.327777][ T3428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.337545][ T3428] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.347016][ T3428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.355466][ T3428] usb 2-1: config 0 descriptor?? [ 326.363995][ T3428] hub 2-1:0.0: USB hub found [ 326.453640][ T36] audit: type=1400 audit(3539334129.067:26483): avc: denied { associate } for pid=5385 comm="syz.5.1610" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 326.490855][ T5388] .N: renamed from veth0_to_bond (while UP) [ 326.528073][ T5393] batadv_slave_1: entered promiscuous mode [ 326.534717][ T5392] batadv_slave_1: left promiscuous mode [ 326.564306][ T3428] hub 2-1:0.0: 1 port detected [ 326.576600][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.585220][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.593875][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.602684][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.622058][ T5405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.630667][ T5405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.762121][ T3428] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 326.768623][ T3428] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 326.777653][ T3428] usbhid 2-1:0.0: can't add hid device: -71 [ 326.783733][ T3428] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 326.811142][ T3428] usb 2-1: USB disconnect, device number 46 [ 327.540387][ T3428] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 327.702376][ T3428] usb 2-1: config 9 has an invalid interface number: 194 but max is 1 [ 327.710713][ T3428] usb 2-1: config 9 has an invalid interface number: 86 but max is 1 [ 327.718959][ T3428] usb 2-1: config 9 has an invalid interface number: 14 but max is 1 [ 327.727958][ T3428] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 327.736694][ T3428] usb 2-1: config 9 has 3 interfaces, different from the descriptor's value: 2 [ 327.745742][ T3428] usb 2-1: config 9 has no interface number 0 [ 327.751836][ T3428] usb 2-1: config 9 has no interface number 1 [ 327.757892][ T3428] usb 2-1: config 9 has no interface number 2 [ 327.764792][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 327.776109][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 327.787688][ T3428] usb 2-1: config 9 interface 194 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 327.799060][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 327.813025][ T3428] usb 2-1: config 9 interface 194 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 327.824201][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 327.835361][ T3428] usb 2-1: config 9 interface 194 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 327.850384][ T3428] usb 2-1: config 9 interface 194 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 327.861534][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 327.873415][ T3428] usb 2-1: config 9 interface 194 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 327.885037][ T3428] usb 2-1: config 9 interface 194 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 327.895943][ T3428] usb 2-1: config 9 interface 86 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 327.909212][ T3428] usb 2-1: too many endpoints for config 9 interface 14 altsetting 40: 232, using maximum allowed: 30 [ 327.922426][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x5, skipping [ 327.933240][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0xC, skipping [ 327.945685][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x5, skipping [ 327.956493][ T3428] usb 2-1: config 9 interface 14 altsetting 40 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 327.968556][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x2, skipping [ 327.979987][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0xC, skipping [ 327.991090][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x5, skipping [ 328.001950][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 328.014889][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x85, skipping [ 328.025862][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has a duplicate endpoint with address 0x2, skipping [ 328.036744][ T3428] usb 2-1: config 9 interface 14 altsetting 40 bulk endpoint 0x3 has invalid maxpacket 1023 [ 328.046980][ T3428] usb 2-1: config 9 interface 14 altsetting 40 has 12 endpoint descriptors, different from the interface descriptor's value: 232 [ 328.060639][ T3428] usb 2-1: config 9 interface 194 has no altsetting 0 [ 328.067541][ T3428] usb 2-1: config 9 interface 86 has no altsetting 0 [ 328.075080][ T3428] usb 2-1: config 9 interface 14 has no altsetting 0 [ 328.083759][ T3428] usb 2-1: New USB device found, idVendor=185b, idProduct=1e80, bcdDevice=db.56 [ 328.092878][ T3428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.101102][ T3428] usb 2-1: Product: syz [ 328.105306][ T3428] usb 2-1: Manufacturer: Ƒ졘ꈸ⼭桚렻榆焹巼䋄앎᮶걱â¾í¼â—«çµ¸é‘枡ԡ籒漂厭Ҫ⚂햙暘徔á¨çŸçˆ›è†‰ë¼¿ä¦à¨ƒä†®ïŠ¸ì¿™Î…æ§°ï¹€å¡·ä ¨á¨µî¼¯åªŒæ‘ã¼Ëªã¿´å¨‰çŒ½æ¥“櫘ï‰å¿µå“–㱪㥗䀋幔ï®ç䦋廓ꉊ夀䂘Ẏ㹥ìµã¦¼ãŒå‰–䎨䷋紾ﶘᗫ訵䥘è¼á¾˜ê†‡ì†ºà¢¥ä¼©è‰¶ [ 328.132919][ T3428] usb 2-1: SerialNumber: syz [ 328.140108][ T5415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.355893][ T3428] usb 2-1: USB disconnect, device number 47 [ 328.655253][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.664094][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.840415][ T36] audit: type=1400 audit(3539334131.447:26484): avc: denied { mounton } for pid=5436 comm="syz.5.1630" path="/file0" dev="ramfs" ino=36878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 328.862916][ T36] audit: type=1400 audit(3539334131.457:26485): avc: denied { remount } for pid=5436 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 328.887439][ T5439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1631'. [ 328.896491][ T5439] tipc: Invalid UDP bearer configuration [ 328.896515][ T5439] tipc: Enabling of bearer rejected, failed to enable media [ 328.911245][ T5446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1631'. [ 328.920716][ T5446] tipc: Invalid UDP bearer configuration [ 328.920735][ T5446] tipc: Enabling of bearer rejected, failed to enable media [ 329.050494][ T9] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 329.195289][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 329.205593][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.219569][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.226116][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.228517][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.238233][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 329.254463][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.260567][ T66] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 329.266323][ T9] usb 7-1: config 0 descriptor?? [ 329.420440][ T66] usb 2-1: Invalid ep0 maxpacket: 64 [ 329.550444][ T66] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 329.679337][ T9] isku 0003:1E7D:319C.0046: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 329.700419][ T66] usb 2-1: Invalid ep0 maxpacket: 64 [ 329.705839][ T66] usb usb2-port1: attempt power cycle [ 329.783221][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.792435][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.050495][ T66] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 330.070913][ T66] usb 2-1: Invalid ep0 maxpacket: 64 [ 330.082031][ T45] usb 7-1: USB disconnect, device number 96 [ 330.200555][ T66] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 330.220973][ T66] usb 2-1: Invalid ep0 maxpacket: 64 [ 330.226493][ T66] usb usb2-port1: unable to enumerate USB device [ 330.319841][ T5611] SELinux: Context is not valid (left unmapped). [ 330.326937][ T36] audit: type=1400 audit(3539334132.947:26486): avc: denied { relabelto } for pid=5610 comm="syz.3.1648" name="blkio.bfq.io_serviced" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 330.328821][ T5611] Invalid ELF header len 1 [ 330.352080][ T36] audit: type=1400 audit(3539334132.947:26487): avc: denied { associate } for pid=5610 comm="syz.3.1648" name="blkio.bfq.io_serviced" dev="tmpfs" ino=487 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 330.380302][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.383421][ T36] audit: type=1400 audit(3539334132.947:26488): avc: denied { module_load } for pid=5610 comm="syz.3.1648" path="/86/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 330.391810][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.414423][ T36] audit: type=1400 audit(3539334132.967:26489): avc: denied { unlink } for pid=4337 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 331.090430][ T9] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 331.240636][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 331.246911][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.255247][ T9] usb 7-1: config 0 has no interface number 0 [ 331.262351][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.273573][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.283625][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 331.292893][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.303848][ T9] usb 7-1: config 0 descriptor?? [ 331.515260][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.527426][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.537277][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.547201][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.557026][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.565684][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.576127][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.585772][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.595717][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.605832][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.716561][ T9] input: HID 28bd:0094 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.0047/input/input44 [ 331.732866][ T9] uclogic 0003:28BD:0094.0047: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 331.809875][ T5643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1657'. [ 331.818964][ T5643] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1657'. [ 331.828059][ T5643] tipc: Invalid UDP bearer configuration [ 331.828084][ T5643] tipc: Enabling of bearer rejected, failed to enable media [ 331.869765][ T5654] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1660'. [ 331.917356][ T45] usb 7-1: USB disconnect, device number 97 [ 332.370432][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 332.390464][ T5658] overlayfs: failed to resolve './file0': -2 [ 332.521755][ T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.533450][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 114, changing to 10 [ 332.544744][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 332.556102][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 332.565169][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.574150][ T5656] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 332.936509][ T5669] incfs: Options parsing error. -22 [ 332.941896][ T5669] incfs: mount failed -22 [ 333.360423][ T45] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 333.460708][ T5689] netlink: 'syz.5.1675': attribute type 27 has an invalid length. [ 333.477042][ T5689] sit0: left promiscuous mode [ 333.490500][ T45] usb 7-1: device descriptor read/64, error -71 [ 333.502426][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.511317][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.520792][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.529374][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.541289][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.549677][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.550581][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.559924][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.574577][ T5691] overlay: Bad value for 'index' [ 333.740507][ T45] usb 7-1: device descriptor read/64, error -71 [ 333.870620][ T334] ip6_tunnel:  xmit: Local address not yet configured! [ 333.877700][ T334] ip6_tunnel:  xmit: Local address not yet configured! [ 333.900626][ T403] ip6_tunnel:  xmit: Local address not yet configured! [ 333.990434][ T45] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 334.091973][ T36] audit: type=1400 audit(3539334136.712:26490): avc: denied { connect } for pid=5697 comm="syz.3.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.122037][ T45] usb 7-1: device descriptor read/64, error -71 [ 334.170260][ T5703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 334.232983][ T5712] overlayfs: failed to clone upperpath [ 334.360463][ T45] usb 7-1: device descriptor read/64, error -71 [ 334.470524][ T45] usb usb7-port1: attempt power cycle [ 334.610476][ T403] ip6_tunnel:  xmit: Local address not yet configured! [ 334.617565][ T66] ip6_tunnel:  xmit: Local address not yet configured! [ 334.810404][ T45] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 334.831457][ T45] usb 7-1: device descriptor read/8, error -71 [ 334.961464][ T45] usb 7-1: device descriptor read/8, error -71 [ 335.042602][ T5746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=5746 comm=syz.5.1693 [ 335.194087][ T5755] netlink: 'syz.3.1697': attribute type 4 has an invalid length. [ 335.200518][ T45] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 335.222191][ T45] usb 7-1: device descriptor read/8, error -71 [ 335.271413][ T5759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.279928][ T5759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.351482][ T45] usb 7-1: device descriptor read/8, error -71 [ 335.460504][ T45] usb usb7-port1: unable to enumerate USB device [ 335.651805][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1703'. [ 335.799630][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.808249][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.817382][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.825909][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.836897][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.845643][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.203631][ T5788] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1709'. [ 336.274204][ T5794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.275335][ T5796] 9pnet_fd: Insufficient options for proto=fd [ 336.369185][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.378294][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.477478][ T36] audit: type=1400 audit(3539334139.092:26491): avc: denied { setopt } for pid=5805 comm="syz.6.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.697868][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 336.706653][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input45 [ 336.717938][ T9] usb 2-1: USB disconnect, device number 52 [ 336.720403][ T66] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 336.723922][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 336.753296][ T5810] netlink: 'syz.5.1717': attribute type 1 has an invalid length. [ 336.761501][ T36] audit: type=1400 audit(3539334139.382:26492): avc: denied { getopt } for pid=5809 comm="syz.5.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 336.890433][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 336.896708][ T66] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 336.905532][ T66] usb 7-1: config 0 has no interface number 0 [ 336.912601][ T66] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 336.915088][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.923031][ T66] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 336.933304][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.943258][ T66] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 336.958040][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.966075][ T66] usb 7-1: Product: syz [ 336.970264][ T66] usb 7-1: Manufacturer: syz [ 336.975325][ T66] usb 7-1: SerialNumber: syz [ 336.981021][ T66] usb 7-1: config 0 descriptor?? [ 336.986331][ T5806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.993706][ T5806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 337.008032][ T66] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fe:e8:a4:ff:0a:b3 [ 337.211949][ T335] usb 7-1: USB disconnect, device number 102 [ 337.218678][ T335] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 337.249411][ T5841] Invalid logical block size (74) [ 337.468322][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.477011][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.730453][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 337.967949][ T5883] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 337.977578][ T36] audit: type=1400 audit(3539334140.592:26493): avc: denied { relabelto } for pid=5882 comm="syz.5.1731" name="file0" dev="tmpfs" ino=2802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 338.004715][ T36] audit: type=1400 audit(3539334140.592:26494): avc: denied { associate } for pid=5882 comm="syz.5.1731" name="file0" dev="tmpfs" ino=2802 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 338.032408][ T36] audit: type=1400 audit(3539334140.612:26495): avc: denied { unlink } for pid=1570 comm="syz-executor" name="file0" dev="tmpfs" ino=2802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 338.073949][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.088188][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.097325][ T5894] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 338.350406][ T335] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 338.500438][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 338.506752][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.516992][ T403] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 338.524673][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.536242][ T335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.545329][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.553322][ T335] usb 2-1: Product: syz [ 338.557479][ T335] usb 2-1: Manufacturer: syz [ 338.562096][ T335] usb 2-1: SerialNumber: syz [ 338.681658][ T403] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 338.682735][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.693022][ T403] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 338.702205][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.710257][ T403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.726701][ T403] usb 7-1: config 0 descriptor?? [ 338.731962][ T5903] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 338.771580][ T335] usb 2-1: 0:2 : does not exist [ 338.779252][ T335] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 338.790495][ T335] usb 2-1: USB disconnect, device number 53 [ 338.800020][ T3046] udevd[3046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 339.144552][ T403] sony 0003:054C:0268.0048: hiddev96,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.6-1/input0 [ 339.156518][ T403] sony 0003:054C:0268.0048: failed to claim input [ 339.289963][ T5916] netlink: 'syz.1.1744': attribute type 58 has an invalid length. [ 339.348249][ T1340] usb 7-1: USB disconnect, device number 103 [ 339.376889][ T5924] kvm: pic: non byte write [ 339.385969][ T5924] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 339.511464][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.520022][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.560552][ T66] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 339.690381][ T66] usb 2-1: device descriptor read/64, error -71 [ 339.930395][ T66] usb 2-1: device descriptor read/64, error -71 [ 340.039954][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.048503][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.060966][ T5937] fuse: Unknown parameter '0x0000000000000003ÿÿÿÿ' [ 340.069173][ T5937] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1752'. [ 340.170426][ T66] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 340.300486][ T66] usb 2-1: device descriptor read/64, error -71 [ 340.540459][ T66] usb 2-1: device descriptor read/64, error -71 [ 340.579259][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 340.660417][ T66] usb usb2-port1: attempt power cycle [ 340.742541][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.752739][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.763742][ T36] audit: type=1326 audit(3539334143.382:26496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.3.1762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7174f9aeb9 code=0x7dff0000 [ 340.850371][ T335] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 341.000443][ T66] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 341.011670][ T335] usb 7-1: config 0 has an invalid interface number: 15 but max is 0 [ 341.019788][ T335] usb 7-1: config 0 has no interface number 0 [ 341.026358][ T335] usb 7-1: too many endpoints for config 0 interface 15 altsetting 118: 158, using maximum allowed: 30 [ 341.037641][ T66] usb 2-1: device descriptor read/8, error -71 [ 341.037703][ T335] usb 7-1: config 0 interface 15 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 341.057475][ T335] usb 7-1: config 0 interface 15 has no altsetting 0 [ 341.064385][ T335] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 341.073639][ T335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.083236][ T335] usb 7-1: config 0 descriptor?? [ 341.163388][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 341.181426][ T66] usb 2-1: device descriptor read/8, error -71 [ 341.294570][ T335] usb 7-1: USB disconnect, device number 104 [ 341.408107][ T6009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375 [ 341.423582][ T66] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 341.431916][ T6012] netlink: 'syz.3.1771': attribute type 5 has an invalid length. [ 341.452835][ T66] usb 2-1: device descriptor read/8, error -71 [ 341.591415][ T66] usb 2-1: device descriptor read/8, error -71 [ 341.702605][ T66] usb usb2-port1: unable to enumerate USB device [ 342.019582][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 342.031033][ T6027] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 342.045276][ T6027] overlayfs: overlapping lowerdir path [ 342.060824][ T335] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 342.062952][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.078369][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.089006][ T6029] netlink: 'syz.3.1778': attribute type 64 has an invalid length. [ 342.097236][ T6029] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1778'. [ 342.106224][ T6029] gretap0: entered allmulticast mode [ 342.111898][ T6029] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 342.222258][ T335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 342.230606][ T335] usb 7-1: not running at top speed; connect to a high speed hub [ 342.239104][ T335] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 342.252289][ T335] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.261500][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.269504][ T335] usb 7-1: Product: syz [ 342.273819][ T335] usb 7-1: Manufacturer: syz [ 342.278592][ T335] usb 7-1: SerialNumber: syz [ 342.347646][ T6031] overlayfs: conflicting lowerdir path [ 342.486984][ T335] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 342.497103][ T335] usb 7-1: USB disconnect, device number 105 [ 342.506622][ T3046] udevd[3046]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.660755][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.669379][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.740455][ T403] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 342.891597][ T403] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.903239][ T403] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 114, changing to 10 [ 342.914492][ T403] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.925740][ T403] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 342.934779][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.943640][ T6033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.071152][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1785'. [ 343.269960][ T6051] netlink: 'syz.3.1787': attribute type 5 has an invalid length. [ 343.287327][ T6051] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1787'. [ 343.544378][ T6058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6058 comm=syz.3.1789 [ 343.596659][ T6066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6066 comm=syz.3.1791 [ 343.691473][ T6070] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 343.753272][ T36] audit: type=1400 audit(3539334146.372:26497): avc: denied { unmount } for pid=4337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 343.774434][ T36] audit: type=1400 audit(3539334146.372:26498): avc: denied { read write } for pid=4337 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.799189][ T36] audit: type=1400 audit(3539334146.372:26499): avc: denied { open } for pid=4337 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.816924][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.823668][ T36] audit: type=1400 audit(3539334146.372:26500): avc: denied { ioctl } for pid=4337 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.832722][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.857929][ T36] audit: type=1400 audit(3539334146.392:26501): avc: denied { ioctl } for pid=6032 comm="syz.1.1780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.890441][ T36] audit: type=1400 audit(3539334146.412:26502): avc: denied { read write } for pid=6080 comm="syz.3.1796" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.901730][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.914946][ T36] audit: type=1400 audit(3539334146.412:26503): avc: denied { open } for pid=6080 comm="syz.3.1796" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.946531][ T36] audit: type=1400 audit(3539334146.412:26504): avc: denied { ioctl } for pid=6080 comm="syz.3.1796" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.946729][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.972231][ T36] audit: type=1400 audit(3539334146.412:26505): avc: denied { read write } for pid=6080 comm="syz.3.1796" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.280466][ T1340] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 344.410465][ T1340] usb 7-1: device descriptor read/64, error -71 [ 344.652212][ T1340] usb 7-1: device descriptor read/64, error -71 [ 344.666102][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.675153][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.900524][ T1340] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 345.030399][ T1340] usb 7-1: device descriptor read/64, error -71 [ 345.270404][ T1340] usb 7-1: device descriptor read/64, error -71 [ 345.380514][ T1340] usb usb7-port1: attempt power cycle [ 345.720443][ T1340] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 345.741559][ T1340] usb 7-1: device descriptor read/8, error -71 [ 345.802304][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 345.802322][ T36] audit: type=1400 audit(3539334148.422:26551): avc: denied { create } for pid=6139 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.871459][ T1340] usb 7-1: device descriptor read/8, error -71 [ 345.890500][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 346.110424][ T1340] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 346.136040][ T1340] usb 7-1: device descriptor read/8, error -71 [ 346.136212][ T6144] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1816'. [ 346.182908][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.191475][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.271676][ T1340] usb 7-1: device descriptor read/8, error -71 [ 346.351030][ T36] audit: type=1400 audit(3539334148.972:26552): avc: denied { ioctl } for pid=6145 comm="syz.5.1817" path="socket:[39592]" dev="sockfs" ino=39592 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.380566][ T1340] usb usb7-port1: unable to enumerate USB device [ 346.742357][ T36] audit: type=1400 audit(3539334149.362:26553): avc: denied { execmem } for pid=6150 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 346.841511][ T36] audit: type=1400 audit(3539334149.462:26554): avc: denied { mounton } for pid=6154 comm="syz.3.1820" path="/154/file0" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 346.944669][ T36] audit: type=1400 audit(3539334149.562:26555): avc: denied { ioctl } for pid=6160 comm="syz.3.1822" path="socket:[38862]" dev="sockfs" ino=38862 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.072416][ T403] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 347.088897][ T403] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input46 [ 347.099971][ T36] audit: type=1400 audit(3539334149.712:26556): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=1299 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.124371][ T403] usb 2-1: USB disconnect, device number 58 [ 347.130419][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 347.140184][ T36] audit: type=1400 audit(3539334149.712:26557): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1299 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.164777][ T36] audit: type=1400 audit(3539334149.712:26558): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1299 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.192674][ T36] audit: type=1400 audit(3539334149.712:26559): avc: denied { accept } for pid=6173 comm="syz.3.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.241826][ T36] audit: type=1400 audit(3539334149.862:26560): avc: denied { read append } for pid=6175 comm="syz.3.1827" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 347.480384][ T335] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 347.610590][ T335] usb 7-1: device descriptor read/64, error -71 [ 347.670434][ T403] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 347.800414][ T403] usb 2-1: device descriptor read/64, error -71 [ 347.850466][ T335] usb 7-1: device descriptor read/64, error -71 [ 348.040415][ T403] usb 2-1: device descriptor read/64, error -71 [ 348.090423][ T335] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 348.220430][ T335] usb 7-1: device descriptor read/64, error -71 [ 348.280390][ T403] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 348.410448][ T403] usb 2-1: device descriptor read/64, error -71 [ 348.460426][ T335] usb 7-1: device descriptor read/64, error -71 [ 348.570515][ T335] usb usb7-port1: attempt power cycle [ 348.650413][ T403] usb 2-1: device descriptor read/64, error -71 [ 348.760476][ T403] usb usb2-port1: attempt power cycle [ 348.910530][ T335] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 348.931640][ T335] usb 7-1: device descriptor read/8, error -71 [ 349.061795][ T335] usb 7-1: device descriptor read/8, error -71 [ 349.100418][ T403] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 349.121541][ T403] usb 2-1: device descriptor read/8, error -71 [ 349.251654][ T403] usb 2-1: device descriptor read/8, error -71 [ 349.300420][ T335] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 349.321611][ T335] usb 7-1: device descriptor read/8, error -71 [ 349.451602][ T335] usb 7-1: device descriptor read/8, error -71 [ 349.490392][ T403] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 349.511713][ T403] usb 2-1: device descriptor read/8, error -71 [ 349.560543][ T335] usb usb7-port1: unable to enumerate USB device [ 349.641574][ T403] usb 2-1: device descriptor read/8, error -71 [ 349.750472][ T403] usb usb2-port1: unable to enumerate USB device [ 350.298778][ T6209] netlink: 'syz.3.1839': attribute type 4 has an invalid length. [ 350.306596][ T6209] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1839'. [ 350.317118][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.325696][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.470449][ T66] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 350.620437][ T66] usb 7-1: Using ep0 maxpacket: 32 [ 350.626923][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.637893][ T66] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.647694][ T66] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 350.656787][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.665717][ T66] usb 7-1: config 0 descriptor?? [ 350.848740][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 350.848758][ T36] audit: type=1400 audit(3539334153.462:26580): avc: denied { write } for pid=6214 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 350.870906][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1843'. [ 350.874206][ T1340] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 350.884647][ T36] audit: type=1400 audit(3539334153.472:26581): avc: denied { create } for pid=6216 comm="syz.5.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.910432][ T36] audit: type=1400 audit(3539334153.472:26582): avc: denied { ioctl } for pid=6216 comm="syz.5.1843" path="socket:[39731]" dev="sockfs" ino=39731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.935226][ T36] audit: type=1400 audit(3539334153.472:26583): avc: denied { bind } for pid=6216 comm="syz.5.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.954557][ T36] audit: type=1400 audit(3539334153.472:26584): avc: denied { setopt } for pid=6216 comm="syz.5.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.974228][ T36] audit: type=1400 audit(3539334153.542:26585): avc: denied { getopt } for pid=6218 comm="syz.5.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.050399][ T1340] usb 2-1: Invalid ep0 maxpacket: 64 [ 351.092942][ T66] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 351.100194][ T66] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 351.107526][ T66] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 351.114712][ T66] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 351.121966][ T66] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 351.129742][ T66] koneplus 0003:1E7D:2D51.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 351.180421][ T1340] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 351.294463][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.303279][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.314761][ T66] koneplus 0003:1E7D:2D51.0049: couldn't init struct koneplus_device [ 351.322961][ T66] koneplus 0003:1E7D:2D51.0049: couldn't install mouse [ 351.330364][ T1340] usb 2-1: Invalid ep0 maxpacket: 64 [ 351.335817][ T66] koneplus 0003:1E7D:2D51.0049: probe with driver koneplus failed with error -71 [ 351.345040][ T1340] usb usb2-port1: attempt power cycle [ 351.351850][ T66] usb 7-1: USB disconnect, device number 114 [ 351.369414][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.378003][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.690506][ T1340] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 351.710768][ T1340] usb 2-1: Invalid ep0 maxpacket: 64 [ 351.828473][ T36] audit: type=1400 audit(3539334154.442:26586): avc: denied { create } for pid=6230 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.848130][ T1340] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 351.848165][ T36] audit: type=1400 audit(3539334154.442:26587): avc: denied { read } for pid=6230 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.870837][ T1340] usb 2-1: Invalid ep0 maxpacket: 64 [ 351.880821][ T1340] usb usb2-port1: unable to enumerate USB device [ 351.881558][ T36] audit: type=1400 audit(3539334154.502:26588): avc: denied { write } for pid=6230 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.909405][ T36] audit: type=1400 audit(3539334154.522:26589): avc: denied { create } for pid=6233 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 352.015390][ T6238] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 352.140503][ T335] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 352.207282][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.215990][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.225337][ T6240] EXT4-fs: Conflicting test_dummy_encryption options [ 352.290909][ T335] usb 7-1: Using ep0 maxpacket: 16 [ 352.297332][ T335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.308384][ T335] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 352.317498][ T335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.327172][ T335] usb 7-1: config 0 descriptor?? [ 352.825888][ T335] hkems 0003:2006:0118.004A: unbalanced delimiter at end of report description [ 352.835539][ T335] hkems 0003:2006:0118.004A: parse failed [ 352.841622][ T335] hkems 0003:2006:0118.004A: probe with driver hkems failed with error -22 [ 353.026545][ T1340] usb 7-1: USB disconnect, device number 115 [ 353.467096][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.475836][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.780392][ T403] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 353.850410][ T335] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 353.910412][ T403] usb 7-1: device descriptor read/64, error -71 [ 354.001645][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 354.012978][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 354.025913][ T335] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 354.035001][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.043107][ T335] usb 2-1: Product: syz [ 354.047336][ T335] usb 2-1: Manufacturer: syz [ 354.052599][ T335] usb 2-1: SerialNumber: syz [ 354.057761][ T335] usb 2-1: config 0 descriptor?? [ 354.063724][ T335] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 354.070070][ T335] usb 2-1: No valid video chain found. [ 354.150416][ T403] usb 7-1: device descriptor read/64, error -71 [ 354.301239][ T1340] usb 2-1: USB disconnect, device number 67 [ 354.390391][ T403] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 354.520419][ T403] usb 7-1: device descriptor read/64, error -71 [ 354.760397][ T403] usb 7-1: device descriptor read/64, error -71 [ 354.870512][ T403] usb usb7-port1: attempt power cycle [ 355.143175][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.151864][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.220442][ T403] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 355.241618][ T403] usb 7-1: device descriptor read/8, error -71 [ 355.250845][ T6284] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 355.260401][ T335] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 355.371635][ T403] usb 7-1: device descriptor read/8, error -71 [ 355.412462][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.420575][ T335] usb 2-1: not running at top speed; connect to a high speed hub [ 355.429263][ T335] usb 2-1: config 4 has an invalid interface number: 56 but max is 0 [ 355.437415][ T335] usb 2-1: config 4 has no interface number 0 [ 355.443553][ T335] usb 2-1: config 4 interface 56 has no altsetting 0 [ 355.453186][ T335] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 355.462581][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.470632][ T335] usb 2-1: Product: syz [ 355.474864][ T335] usb 2-1: Manufacturer: syz [ 355.479439][ T335] usb 2-1: SerialNumber: syz [ 355.610401][ T403] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 355.631764][ T403] usb 7-1: device descriptor read/8, error -71 [ 355.697560][ T335] snd-usb-audio 2-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 355.716136][ T335] usb 2-1: USB disconnect, device number 68 [ 355.724875][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.735985][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.761771][ T403] usb 7-1: device descriptor read/8, error -71 [ 355.870554][ T403] usb usb7-port1: unable to enumerate USB device [ 356.255649][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 356.255668][ T36] audit: type=1400 audit(3539334158.872:26620): avc: denied { write } for pid=6309 comm="syz.3.1877" path="socket:[40172]" dev="sockfs" ino=40172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.341365][ T36] audit: type=1400 audit(3539334158.962:26621): avc: denied { bind } for pid=6317 comm="syz.5.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.365903][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1880'. [ 356.557063][ T6338] netlink: 'syz.5.1886': attribute type 4 has an invalid length. [ 356.578312][ T36] audit: type=1400 audit(3539334159.192:26622): avc: denied { mounton } for pid=6339 comm="syz.6.1887" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 356.580199][ T6342] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1888'. [ 356.641677][ T6359] tipc: Enabling of bearer <èdp:syz2> rejected, media not registered [ 356.665247][ T6358] tipc: Enabling of bearer <èdp:syz2> rejected, media not registered [ 356.673726][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1889'. [ 356.900476][ T66] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 356.950452][ T1340] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 357.050459][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 357.057721][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.066321][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.076463][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.087573][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.096865][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.105093][ T66] usb 2-1: Product: syz [ 357.109569][ T66] usb 2-1: Manufacturer: syz [ 357.114335][ T66] usb 2-1: SerialNumber: syz [ 357.120366][ T1340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.131547][ T1340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.141797][ T1340] usb 7-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 357.151974][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.160747][ T1340] usb 7-1: config 0 descriptor?? [ 357.355207][ T66] usb 2-1: 0:2 : does not exist [ 357.362581][ T66] usb 2-1: USB disconnect, device number 69 [ 357.368711][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.377715][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.587750][ T1340] ntrig 0003:1B96:0012.004B: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.6-1/input0 [ 357.795336][ T1340] usb 7-1: USB disconnect, device number 120 [ 357.905688][ T6405] tmpfs: Unknown parameter 'no' [ 358.180450][ T66] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 358.210455][ T31] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 358.250630][ T6419] netlink: 'syz.5.1905': attribute type 13 has an invalid length. [ 358.258670][ T6419] erspan0: refused to change device tx_queue_len [ 358.330479][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 358.337183][ T66] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 358.347948][ T66] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.360974][ T31] usb 7-1: device descriptor read/64, error -71 [ 358.368555][ T66] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 358.378793][ T66] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.392724][ T66] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 358.403070][ T66] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.416049][ T66] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 358.425152][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.435133][ T66] hub 2-1:32.0: Invalid hub with more than one config or interface [ 358.443116][ T66] hub 2-1:32.0: probe with driver hub failed with error -22 [ 358.600461][ T31] usb 7-1: device descriptor read/64, error -71 [ 358.776766][ T36] audit: type=1400 audit(3539334161.392:26623): avc: denied { create } for pid=6420 comm="syz.5.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.802923][ T6426] veth1: entered allmulticast mode [ 358.813393][ T6428] veth1: left allmulticast mode [ 358.850389][ T31] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 358.980439][ T31] usb 7-1: device descriptor read/64, error -71 [ 359.144770][ T356] usb 2-1: USB disconnect, device number 70 [ 359.230402][ T31] usb 7-1: device descriptor read/64, error -71 [ 359.239231][ T36] audit: type=1400 audit(3539334161.852:26624): avc: denied { read write } for pid=6442 comm="syz.1.1912" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.263084][ T36] audit: type=1400 audit(3539334161.852:26625): avc: denied { open } for pid=6442 comm="syz.1.1912" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.350427][ T31] usb usb7-port1: attempt power cycle [ 359.580466][ T356] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 359.700421][ T31] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 359.711067][ T36] audit: type=1400 audit(3539334162.332:26626): avc: denied { mounton } for pid=6451 comm="syz.5.1916" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 359.721697][ T31] usb 7-1: device descriptor read/8, error -71 [ 359.733695][ T36] audit: type=1400 audit(3539334162.332:26627): avc: denied { unmount } for pid=6451 comm="syz.5.1916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 359.740016][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 359.765523][ T356] usb 2-1: no configurations [ 359.770238][ T356] usb 2-1: can't read configurations, error -22 [ 359.777671][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1917'. [ 359.891376][ T31] usb 7-1: device descriptor read/8, error -71 [ 359.900401][ T356] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 359.910428][ T36] audit: type=1400 audit(3539334162.522:26628): avc: denied { map } for pid=6465 comm="syz.3.1921" path="socket:[41269]" dev="sockfs" ino=41269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.935913][ T36] audit: type=1400 audit(3539334162.522:26629): avc: denied { read accept } for pid=6465 comm="syz.3.1921" path="socket:[41269]" dev="sockfs" ino=41269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.053065][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.062081][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.090410][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 360.095985][ T356] usb 2-1: no configurations [ 360.100867][ T356] usb 2-1: can't read configurations, error -22 [ 360.107367][ T356] usb usb2-port1: attempt power cycle [ 360.130480][ T31] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 360.151650][ T31] usb 7-1: device descriptor read/8, error -71 [ 360.281776][ T31] usb 7-1: device descriptor read/8, error -71 [ 360.390590][ T31] usb usb7-port1: unable to enumerate USB device [ 360.450431][ T356] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 360.470834][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 360.476413][ T356] usb 2-1: no configurations [ 360.481302][ T356] usb 2-1: can't read configurations, error -22 [ 360.601352][ T6479] incfs: iterate_incfs_dir / -22 [ 360.612915][ T356] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 360.640695][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 360.648959][ T356] usb 2-1: no configurations [ 360.653911][ T356] usb 2-1: can't read configurations, error -22 [ 360.654826][ T10] usb 4-1: USB disconnect, device number 51 [ 360.660742][ T356] usb usb2-port1: unable to enumerate USB device [ 360.670058][ T10] ftdi_sio 4-1:162.26: device disconnected [ 360.703118][ T46] bridge_slave_1: left allmulticast mode [ 360.708794][ T46] bridge_slave_1: left promiscuous mode [ 360.714516][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.722203][ T46] bridge_slave_0: left allmulticast mode [ 360.727871][ T46] bridge_slave_0: left promiscuous mode [ 360.733635][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.891207][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1931'. [ 360.926650][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.933968][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.941152][ T6482] bridge_slave_0: entered allmulticast mode [ 360.947662][ T6482] bridge_slave_0: entered promiscuous mode [ 360.954256][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.954285][ T6493] No source specified [ 360.961429][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.972438][ T6482] bridge_slave_1: entered allmulticast mode [ 360.978811][ T6482] bridge_slave_1: entered promiscuous mode [ 360.989779][ T46] veth1_macvtap: left promiscuous mode [ 360.995370][ T46] veth0_vlan: left promiscuous mode [ 361.072457][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.079688][ T6482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.087055][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.094113][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.118916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.126385][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.135729][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.142803][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.151870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.158933][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.189387][ T6482] veth0_vlan: entered promiscuous mode [ 361.200182][ T6482] veth1_macvtap: entered promiscuous mode [ 361.228802][ T6506] incfs: iterate_incfs_dir / -22 [ 361.430530][ T10] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 361.480431][ T66] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.581559][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.591390][ T10] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 361.600511][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.609569][ T10] usb 7-1: config 0 descriptor?? [ 361.640408][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 361.646933][ T66] usb 5-1: config 1 interface 0 has no altsetting 0 [ 361.655426][ T6508] futex_wake_op: syz.4.1934 tries to shift op by -1; fix this program [ 361.665383][ T66] usb 5-1: string descriptor 0 read error: -71 [ 361.671744][ T66] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 361.681113][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.690412][ T66] usb 5-1: can't set config #1, error -71 [ 361.697035][ T66] usb 5-1: USB disconnect, device number 10 [ 362.018596][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 362.018636][ T36] audit: type=1400 audit(3539334164.632:26654): avc: denied { name_bind } for pid=6503 comm="syz.6.1933" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 362.048181][ T10] nintendo 0003:057E:200E.004C: item fetching failed at offset 5/7 [ 362.056331][ T10] nintendo 0003:057E:200E.004C: HID parse failed [ 362.062858][ T10] nintendo 0003:057E:200E.004C: probe - fail = -22 [ 362.069482][ T10] nintendo 0003:057E:200E.004C: probe with driver nintendo failed with error -22 [ 362.226585][ T10] usb 7-1: USB disconnect, device number 125 [ 362.410403][ T335] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 362.530615][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 362.561958][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.573044][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 362.583980][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.596907][ T335] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 362.605975][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.614767][ T335] usb 5-1: config 0 descriptor?? [ 362.620012][ T6511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 362.690425][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 362.841654][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 362.855012][ T10] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 362.864136][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.872785][ T10] usb 2-1: config 0 descriptor?? [ 362.878805][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 362.980428][ T403] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 363.029826][ T335] apple 0003:05AC:029C.004D: item fetching failed at offset 3/7 [ 363.037696][ T335] apple 0003:05AC:029C.004D: parse failed [ 363.043700][ T335] apple 0003:05AC:029C.004D: probe with driver apple failed with error -22 [ 363.130434][ T403] usb 7-1: Using ep0 maxpacket: 32 [ 363.137136][ T403] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.150436][ T403] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.157155][ T403] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 363.166568][ T403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.175709][ T403] usb 7-1: config 0 descriptor?? [ 363.391361][ T6519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6519 comm=syz.6.1938 [ 363.417945][ T6519] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1938'. [ 363.428310][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.437319][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.583433][ T36] audit: type=1400 audit(3539334166.202:26655): avc: denied { open } for pid=6510 comm="syz.4.1935" path="/2/file2" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.606098][ T36] audit: type=1400 audit(3539334166.202:26656): avc: denied { ioctl } for pid=6510 comm="syz.4.1935" path="/2/file2" dev="tmpfs" ino=32 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.863846][ T6519] netlink: 'syz.6.1938': attribute type 4 has an invalid length. [ 363.871718][ T6519] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1938'. [ 363.881262][ T6519] netlink: 'syz.6.1938': attribute type 1 has an invalid length. [ 363.889051][ T6519] netlink: 'syz.6.1938': attribute type 2 has an invalid length. [ 363.963607][ T403] usbhid 7-1:0.0: can't add hid device: -71 [ 363.969673][ T403] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 363.978990][ T403] usb 7-1: USB disconnect, device number 126 [ 364.468893][ T36] audit: type=1400 audit(3539334167.082:26657): avc: denied { unmount } for pid=1572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.933407][ T6535] netlink: 'syz.5.1943': attribute type 2 has an invalid length. [ 364.942292][ T36] audit: type=1400 audit(3539334167.562:26658): avc: denied { setopt } for pid=6534 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.962606][ T36] audit: type=1400 audit(3539334167.562:26659): avc: denied { bind } for pid=6534 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.211140][ T356] usb 5-1: USB disconnect, device number 11 [ 365.225852][ T36] audit: type=1400 audit(3539334167.842:26660): avc: denied { bind } for pid=6536 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.462421][ T335] usb 2-1: USB disconnect, device number 75 [ 365.560753][ T36] audit: type=1400 audit(3539334168.182:26661): avc: denied { bind } for pid=6544 comm="syz.5.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.581136][ T36] audit: type=1400 audit(3539334168.182:26662): avc: denied { name_bind } for pid=6544 comm="syz.5.1946" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 365.602558][ T36] audit: type=1400 audit(3539334168.182:26663): avc: denied { node_bind } for pid=6544 comm="syz.5.1946" saddr=fc01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 365.795748][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.802980][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.802990][ T335] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 365.810139][ T6553] bridge_slave_0: entered allmulticast mode [ 365.824020][ T6553] bridge_slave_0: entered promiscuous mode [ 365.831350][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.838480][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.845723][ T6553] bridge_slave_1: entered allmulticast mode [ 365.852084][ T6553] bridge_slave_1: entered promiscuous mode [ 365.960524][ T335] usb 2-1: Using ep0 maxpacket: 8 [ 365.967786][ T335] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 365.976435][ T335] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 365.984968][ T335] usb 2-1: config 162 has no interface number 0 [ 365.987783][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.998376][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.001533][ T335] usb 2-1: config 162 has no interface number 1 [ 366.005709][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.019017][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.023046][ T335] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.043133][ T335] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 366.054491][ T46] veth0_vlan: left promiscuous mode [ 366.055893][ T335] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 366.071916][ T335] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 366.083702][ T335] usb 2-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 366.094534][ T335] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 366.108289][ T335] usb 2-1: config 162 interface 79 has no altsetting 0 [ 366.115222][ T335] usb 2-1: config 162 interface 183 has no altsetting 0 [ 366.131815][ T335] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 366.141265][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.149361][ T335] usb 2-1: Product: syz [ 366.153760][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.164107][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.170129][ T335] usb 2-1: Manufacturer: syz [ 366.180013][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.187138][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.189891][ T335] usb 2-1: SerialNumber: syz [ 366.206668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.213774][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.246433][ T6553] veth0_vlan: entered promiscuous mode [ 366.258229][ T6553] veth1_macvtap: entered promiscuous mode [ 366.370232][ T6573] IPv6: A: Disabled Multicast RS [ 366.412442][ T46] ------------[ cut here ]------------ [ 366.418085][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 366.428103][ T46] Modules linked in: [ 366.432092][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 366.443792][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.454014][ T46] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.458857][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 366.464924][ T46] Code: e8 61 cc db fc 4b 83 3c 3e 00 75 19 e8 95 05 84 fc 49 81 ff f8 07 00 00 74 1b e8 87 05 84 fc 49 83 c7 08 eb c9 e8 7c 05 84 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 366.484685][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 366.490817][ T46] RAX: ffffffff85039284 RBX: ffff888103f20000 RCX: ffff88810be6b900 [ 366.498828][ T46] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888105ed4000 [ 366.506992][ T46] RBP: ffffc900002ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 366.515038][ T46] R10: dffffc0000000000 R11: fffff5200005ff04 R12: dffffc0000000000 [ 366.523079][ T46] R13: dffffc0000000000 R14: ffff888105ed4000 R15: 0000000000000000 [ 366.531097][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 366.540147][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.546896][ T46] CR2: 00002000000001c0 CR3: 000000013f7d0000 CR4: 00000000003526b0 [ 366.554920][ T46] DR0: 31f1ae4693752000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.560378][ T66] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 366.562968][ T46] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 366.578517][ T46] Call Trace: [ 366.581870][ T46] [ 366.584923][ T46] cleanup_net+0x6c0/0xc90 [ 366.589402][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 366.594419][ T46] ? __schedule+0x1352/0x1dd0 [ 366.599307][ T46] ? kick_pool+0xb9/0x550 [ 366.603699][ T46] process_scheduled_works+0x7d1/0x1020 [ 366.609408][ T46] worker_thread+0xc70/0x10b0 [ 366.614499][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 366.619892][ T46] kthread+0x2c6/0x370 [ 366.624146][ T46] ? __cfi_worker_thread+0x10/0x10 [ 366.629378][ T46] ? __cfi_kthread+0x10/0x10 [ 366.634044][ T46] ret_from_fork+0x67/0xa0 [ 366.638500][ T46] ? __cfi_kthread+0x10/0x10 [ 366.643348][ T46] ret_from_fork_asm+0x1a/0x30 [ 366.648488][ T46] [ 366.652167][ T46] ---[ end trace 0000000000000000 ]--- [ 366.658295][ T46] ------------[ cut here ]------------ [ 366.664369][ T46] WARNING: CPU: 1 PID: 46 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 366.675265][ T46] Modules linked in: [ 366.679928][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 366.693393][ T46] Tainted: [W]=WARN [ 366.697222][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.709490][ T46] Workqueue: netns cleanup_net [ 366.714614][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 366.721311][ T46] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 40 05 84 fc 49 81 ff f8 07 00 00 74 1b e8 32 05 84 fc 49 83 c7 08 eb c5 e8 27 05 84 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 17 05 84 fc 5b 41 5c 41 5e 41 [ 366.745124][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 366.751902][ T46] RAX: ffffffff850392d9 RBX: ffff888105ed4800 RCX: ffff88810be6b900 [ 366.759994][ T46] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888105ed4808 [ 366.768619][ T46] RBP: ffffc900002ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 366.777537][ T46] R10: dffffc0000000000 R11: fffff5200005ff04 R12: dffffc0000000000 [ 366.786116][ T46] R13: dffffc0000000000 R14: ffff888105ed4000 R15: 0000000000000008 [ 366.795535][ T46] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 366.804791][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.811501][ T46] CR2: 000055957e7d5af8 CR3: 000000013f7d0000 CR4: 00000000003526b0 [ 366.819713][ T46] Call Trace: [ 366.823075][ T46] [ 366.826057][ T46] cleanup_net+0x6c0/0xc90 [ 366.830547][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 366.835996][ T46] ? __schedule+0x1352/0x1dd0 [ 366.842266][ T46] ? kick_pool+0xb9/0x550 [ 366.848548][ T46] process_scheduled_works+0x7d1/0x1020 [ 366.854534][ T46] worker_thread+0xc70/0x10b0 [ 366.859923][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 366.866072][ T46] kthread+0x2c6/0x370 [ 366.870712][ T46] ? __cfi_worker_thread+0x10/0x10 [ 366.876348][ T46] ? __cfi_kthread+0x10/0x10 [ 366.881545][ T46] ret_from_fork+0x67/0xa0 [ 366.886140][ T46] ? __cfi_kthread+0x10/0x10 [ 366.891148][ T46] ret_from_fork_asm+0x1a/0x30 [ 366.897611][ T46] [ 366.901321][ T46] ---[ end trace 0000000000000000 ]--- [ 366.952760][ T46] ------------[ cut here ]------------ [ 366.958284][ T46] WARNING: CPU: 0 PID: 46 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 [ 366.968006][ T46] Modules linked in: [ 366.971993][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 fb5d95c0c59ed9c9506888f7deb6b66e4fe9f746 [ 366.985275][ T46] Tainted: [W]=WARN [ 366.989278][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.999593][ T46] Workqueue: netns cleanup_net [ 367.004461][ T46] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 367.010108][ T46] Code: 3c 20 00 74 08 48 89 df e8 9f 95 f6 fc 48 8b 3b e8 37 d4 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c2 ce 9e fc <0f> 0b e9 b0 fd ff ff e8 b6 ce 9e fc 0f 0b e9 18 fe ff ff e8 aa ce [ 367.030663][ T46] RSP: 0018:ffffc900002ffb70 EFLAGS: 00010293 [ 367.036996][ T46] RAX: ffffffff84e8c93e RBX: ffff888103f20000 RCX: ffff88810be6b900 [ 367.045521][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810be6b900 [ 367.053678][ T46] RBP: ffffc900002ffb98 R08: ffffffff87d33547 R09: 1ffffffff0fa66a8 [ 367.061969][ T46] R10: dffffc0000000000 R11: fffffbfff0fa66a9 R12: 1ffffffff0fa63f8 [ 367.069968][ T46] R13: dffffc0000000000 R14: ffff888103f20c00 R15: dffffc0000000000 [ 367.078314][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 367.087442][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.094554][ T46] CR2: 00002000000001c0 CR3: 000000010b710000 CR4: 00000000003526b0 [ 367.104036][ T46] DR0: 31f1ae4693752000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.112831][ T46] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 367.122385][ T46] Call Trace: [ 367.125780][ T46] [ 367.128760][ T46] xfrm_net_exit+0x31/0x80 [ 367.133672][ T46] cleanup_net+0x6c0/0xc90 [ 367.139186][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 367.144507][ T46] ? __schedule+0x1352/0x1dd0 [ 367.149247][ T46] ? kick_pool+0xb9/0x550 [ 367.153976][ T46] process_scheduled_works+0x7d1/0x1020 [ 367.160137][ T46] worker_thread+0xc70/0x10b0 [ 367.165995][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 367.172477][ T46] kthread+0x2c6/0x370 [ 367.176834][ T46] ? __cfi_worker_thread+0x10/0x10 [ 367.182645][ T46] ? __cfi_kthread+0x10/0x10 [ 367.187356][ T46] ret_from_fork+0x67/0xa0 [ 367.192106][ T46] ? __cfi_kthread+0x10/0x10 [ 367.196832][ T46] ret_from_fork_asm+0x1a/0x30 [ 367.202138][ T46] [ 367.205487][ T46] ---[ end trace 0000000000000000 ]--- [ 367.351731][ T335] pl2303 2-1:162.79: required endpoints missing [ 367.360216][ T46] bridge_slave_1: left allmulticast mode [ 367.366424][ T46] bridge_slave_1: left promiscuous mode [ 367.372299][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.379840][ T335] pl2303 2-1:162.183: pl2303 converter detected [ 367.386442][ T46] bridge_slave_0: left allmulticast mode [ 367.386729][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 367.392171][ T46] bridge_slave_0: left promiscuous mode [ 367.401058][ T335] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 367.406769][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.422855][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 367.431818][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 367.432130][ T46] vlan1: left allmulticast mode [ 367.440401][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 367.446271][ T46] veth0_vlan: left allmulticast mode [ 367.454025][ T335] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 367.459230][ T46] vlan1: left promiscuous mode [ 367.468919][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 367.472772][ T46] bridge0: port 3(vlan1) entered disabled state [ 367.487655][ T46] bridge_slave_1: left allmulticast mode [ 367.488188][ T335] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 367.501707][ T46] bridge_slave_1: left promiscuous mode [ 367.501933][ T335] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 367.507368][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.516109][ T335] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 367.531457][ T46] bridge_slave_0: left allmulticast mode [ 367.531796][ T335] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 367.537121][ T46] bridge_slave_0: left promiscuous mode [ 367.546710][ T335] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 367.551573][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.565674][ T335] usb 2-1: USB disconnect, device number 76 [ 367.573850][ T46] bridge_slave_1: left allmulticast mode [ 367.575121][ T335] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 367.579518][ T46] bridge_slave_1: left promiscuous mode [ 367.589069][ T335] pl2303 2-1:162.183: device disconnected [ 367.593352][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.606529][ T46] bridge_slave_0: left allmulticast mode [ 367.612259][ T46] bridge_slave_0: left promiscuous mode [ 367.617897][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.915115][ T46] veth1_macvtap: left promiscuous mode [ 367.920704][ T46] veth0_vlan: left promiscuous mode [ 367.926207][ T46] veth1_macvtap: left promiscuous mode [ 367.931768][ T46] veth0_vlan: left promiscuous mode [ 367.937305][ T46] veth1_macvtap: left promiscuous mode [ 367.942854][ T46] veth0_vlan: left promiscuous mode [ 368.512743][ T46] bridge_slave_1: left allmulticast mode [ 368.518409][ T46] bridge_slave_1: left promiscuous mode [ 368.524237][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.531804][ T46] bridge_slave_0: left allmulticast mode [ 368.537429][ T46] bridge_slave_0: left promiscuous mode [ 368.543130][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.632802][ T46] veth1_macvtap: left promiscuous mode [ 368.638346][ T46] veth0_vlan: left promiscuous mode