last executing test programs: 2m40.452165587s ago: executing program 3 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x70000, 0x0, 0x29, 0xfb, 0xa, 0x40, 0x0, 0x0, 0x2e, 0x19}, {0x70000, 0x50000, 0xf, 0x0, 0x22, 0x5, 0x79, 0x1, 0x5, 0xb4, 0x6}, {0xeeef0003, 0x3000, 0x1, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0xa, 0x81}, {0x25000, 0x5000, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x50000, 0x7004, 0x9, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x18, 0x83}, {0x8000000, 0x0, 0xc, 0x6, 0xad, 0xe1, 0x6, 0x88, 0x8, 0x5, 0xff, 0x5}, {0x3000, 0x7000, 0x4, 0x7, 0xc, 0x5, 0xd, 0x5, 0x5, 0x80, 0xff, 0x6d}, {0x1, 0x1000, 0xa, 0x4, 0xb, 0x7, 0xd, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0xffffffff, 0x5}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x8000, 0x8000c00, [0x6800010000000800, 0x4, 0x3, 0x4]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2400000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x40080) 2m40.28819133s ago: executing program 3 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x0, 0x4e20, 0xfffc, 0x2, 0x20, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x7d, 0xad8, 0x7570e41c, 0x1, 0x80000000, 0x1, 0x3}, {0x4, 0x4, 0x5, 0x7}, 0x1, 0x6e6bb5, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private1, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3503, 0x0, 0x0, 0xfd, 0xa398baf, 0x6, 0xa2}}, 0xe8) 2m40.28746586s ago: executing program 3 (id=818): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) sync() syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x9, 0xfe, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x3, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x414}}]}) sync() syz_usb_connect$cdc_ecm(0x2, 0x11c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x1, 0x1, 0x4, 0x80, 0x40, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "ef1a10"}, {0x5, 0x24, 0x0, 0x2000}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x26a, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x5}, @mdlm_detail={0xb2, 0x24, 0x13, 0x9, "da755d6ec582314d10a0e0e809dc8f0b3837c1806fe3e7c5a35972fff669fc1c2f96e5c255cd7f1806dc9a5c2c2d7930b36f46668ae39b233485c01c505d94365592abf7a367432c57621aeb8cb3d8b4692f210cb2f79ef90b15b1d8fbe579207a41d9e103ab0cafb79d84618bb46581718afe509d6115b05af3b2eb5a0a0da90b4044244743d164e02aa0021ac99d981b83ecaf4f6ace7a0a37962b153aad5ada5ca2a9340af8b08d450c128713"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x3, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x6, 0x21}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x9, 0x80, 0x1, 0x8, 0x2}, 0x2e, &(0x7f0000000640)={0x5, 0xf, 0x2e, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3, 0xf000, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x2, 0xdc, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x4, 0x5, 0x9, 0x7}]}, 0x7, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x446}}, {0x31, &(0x7f00000006c0)=ANY=[@ANYBLOB="31033b817ee081449ec344e43aceb49f4d439ad27295dd9e02d28184ab47db7598f14911a9e49410dc39641423c08e3e66"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x140a}}, {0x100, &(0x7f00000007c0)=@string={0x100, 0x3, "48c2afe341cfb13610d58e280ca0e23f263761fb2cad6699bd90a800962e9b445fa14029ed62f45da981439366786ec16cbfdb3fa327be3291ef45ef2397f3a7b8e6e5aed7fb0a5006bc6ff89128360528b6c20c031fd8b5a1faab9661a9b5b60a2f57be302ef9c8d7932319dcbf09cb08997cdb84b672e62e7a1e0767b3ee36bbfc982b0faca0fcd79f8f7594812d6aa92a90b166d4df7bb5b88b02043a6b6641b515c64f804474029fd17900be1f172de3a9aa88e8fcd53e65d830d46f1d45e0e581588bc0cb16ef63f68b1fe0f6329e92762f3e45dc5eaa8e88bf19b566417f2c72849f74e573911cde056014b30e1b13cf902a5e6ee819c343d7d6ec"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2c0a}}]}) syz_usb_connect$midi(0x6, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x1, 0x9, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x9, [@midi_out_jack={0x1b, 0x24, 0x3, 0xec5bbcdcc75963df, 0x4, 0xa, [{0xe, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x8, 0x7}, {0xf, 0xa}, {0xff, 0xc0}, {0x6, 0x40}, {0x8, 0x38}, {0x80, 0x4}, {0x4b, 0x3}], 0xfa}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xb}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0xc7, 0x8, 0x7, {0xa, 0x25, 0x1, 0x6, "c18ae3633d30"}}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x0, 0x2c, {0x10, 0x25, 0x1, 0xc, "4db412503128d17135b8602e"}}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0x6, 0xcd, {0xd, 0x25, 0x1, 0x9, "83f0f4876f0e995c09"}}}, {{0x9, 0x5, 0x4, 0x6, 0x10, 0x2, 0x4, 0xc2, {0xb, 0x25, 0x1, 0x7, "317bfd4c5f70b4"}}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0x1, 0x2, {0xc, 0x25, 0x1, 0x8, "30ed55b8ecbb0ff8"}}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x6, 0x4, {0xf, 0x25, 0x1, 0xb, "47b383516380dce3765b66"}}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0xa, 0x6, 0x9, {0x12, 0x25, 0x1, 0xe, "867aec74bc8eae1993db89336212"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x6, 0x6, 0xff, 0x97, 0x1}, 0x47, &(0x7f0000000280)={0x5, 0xf, 0x47, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x1, 0xe}, @ssp_cap={0x10, 0x10, 0xa, 0x5c, 0x1, 0x7, 0x0, 0x40, [0xffc03f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x71, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x31, 0xfb}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c322cdf449d7b31169e0a3eab68f9ae8"}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) sync() (async) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x9, 0xfe, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x3, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x414}}]}) (async) sync() (async) syz_usb_connect$cdc_ecm(0x2, 0x11c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x1, 0x1, 0x4, 0x80, 0x40, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "ef1a10"}, {0x5, 0x24, 0x0, 0x2000}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x26a, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x5}, @mdlm_detail={0xb2, 0x24, 0x13, 0x9, "da755d6ec582314d10a0e0e809dc8f0b3837c1806fe3e7c5a35972fff669fc1c2f96e5c255cd7f1806dc9a5c2c2d7930b36f46668ae39b233485c01c505d94365592abf7a367432c57621aeb8cb3d8b4692f210cb2f79ef90b15b1d8fbe579207a41d9e103ab0cafb79d84618bb46581718afe509d6115b05af3b2eb5a0a0da90b4044244743d164e02aa0021ac99d981b83ecaf4f6ace7a0a37962b153aad5ada5ca2a9340af8b08d450c128713"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x3, 0x0, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x6, 0x21}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x9, 0x80, 0x1, 0x8, 0x2}, 0x2e, &(0x7f0000000640)={0x5, 0xf, 0x2e, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3, 0xf000, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x2, 0xdc, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x4, 0x5, 0x9, 0x7}]}, 0x7, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x446}}, {0x31, &(0x7f00000006c0)=ANY=[@ANYBLOB="31033b817ee081449ec344e43aceb49f4d439ad27295dd9e02d28184ab47db7598f14911a9e49410dc39641423c08e3e66"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x140a}}, {0x100, &(0x7f00000007c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2c0a}}]}) (async) syz_usb_connect$midi(0x6, 0xfe, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x1, 0x9, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x9, [@midi_out_jack={0x1b, 0x24, 0x3, 0xec5bbcdcc75963df, 0x4, 0xa, [{0xe, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x8, 0x7}, {0xf, 0xa}, {0xff, 0xc0}, {0x6, 0x40}, {0x8, 0x38}, {0x80, 0x4}, {0x4b, 0x3}], 0xfa}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xb}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x5}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0xc7, 0x8, 0x7, {0xa, 0x25, 0x1, 0x6, "c18ae3633d30"}}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x0, 0x2c, {0x10, 0x25, 0x1, 0xc, "4db412503128d17135b8602e"}}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0x6, 0xcd, {0xd, 0x25, 0x1, 0x9, "83f0f4876f0e995c09"}}}, {{0x9, 0x5, 0x4, 0x6, 0x10, 0x2, 0x4, 0xc2, {0xb, 0x25, 0x1, 0x7, "317bfd4c5f70b4"}}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0x1, 0x2, {0xc, 0x25, 0x1, 0x8, "30ed55b8ecbb0ff8"}}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x6, 0x4, {0xf, 0x25, 0x1, 0xb, "47b383516380dce3765b66"}}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0xa, 0x6, 0x9, {0x12, 0x25, 0x1, 0xe, "867aec74bc8eae1993db89336212"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x6, 0x6, 0xff, 0x97, 0x1}, 0x47, &(0x7f0000000280)={0x5, 0xf, 0x47, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x1, 0xe}, @ssp_cap={0x10, 0x10, 0xa, 0x5c, 0x1, 0x7, 0x0, 0x40, [0xffc03f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x71, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x31, 0xfb}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c322cdf449d7b31169e0a3eab68f9ae8"}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}]}) (async) 2m37.232093997s ago: executing program 3 (id=844): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x50}}], 0x1, 0x4040084) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="130526bd7000fbdbdf250d0000000a000000000006000800a3aa00000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="91f8a9848519def38491bbc4173c3c6f35aab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de2500000000000000000000000000000000008c5e76a066e0e9993d2d66a34c5268da0f1d2707609e2ecace621b6f330aaee48722068805a280a7da9d137a02b22cac2225aaa66c845dbbde9e29e20a4b598c85c6a82f59d39a311eee19c74f1dcd27dc8cfe96373d62aa97f05705a75b705cca38dfce67e0cdc5e1b47b4e5a1fc7be2bd16e8cea", 0xb6}, {&(0x7f0000000840)="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", 0x16e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d", 0x9c}, {&(0x7f0000000700)="223aa707c08a7eca577ac4e5fca75231526b9876be28f3dbb88da63d4e66b62cbc49eca97a5d5eb03c02208ffb60524cf64217e75311bb3ccc8750c92a1e4e", 0x3f}, {&(0x7f00000000c0)="0636d6933e35167fb835d02e111f30a88556284f5a1aea8b788c242e50b6ff7993193ba8a25b54", 0x27}, {&(0x7f0000000200)="c561348344520bddfb019fdfddecd0c5fd7dc7b891f2017e1c3b8b780532cbd21e3ff88646f03b22941a7bf414b7ffe266191993018333ecb7746d9e50319b9c9741bdb7ccd24ecb1d8d6dcdfe1e937d84cae59f709b7ec9c7d73bfbe680b0aa583228c9484e451be45194e9de83ce24", 0x70}, {&(0x7f00000009c0)="ac0a24fd1e2852a1fa622d676e2158494fe32976d363187e49d7f5135e0c9ca33fa75fa216a68aaa8b425fb406c64325e912a9c0aaf6c0839d72a2443bc53cc7a287fdf811bd5e8637c21471cf388ab35a69582c305a8e5d7855acf4abe6a97a017dc43b99682f251cca7eb52c99e71387bbfa36d2fa57e19ca49e72478f95246cbdf8f4d21ccb0f", 0x88}, {&(0x7f0000000340)="d74e4e3ffd71334d2b31200f552e2aab99b67b24c5fb4157edd218fdbc7759bce4439ebcf9dfa11d52b104408bc68c7932a231a9f7d3a297af62fc467d2b0ea88d824b18639a8793e00676b7d64ec1bf816ebdf21009f2bbf76a1e17df21bf66b8f83d36ebe74a42994676c997a6a4046601d09dafd4f640eaea05ec2e30fd61d14af6787af11ee14dc971b05ee0a2fe7e7f7a2536e2f1c4fbf391af671e63093416a5544c4827a6da5b0adef6", 0xad}], 0x6}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1000c080) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) 2m36.422142254s ago: executing program 3 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x7}) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x10000000, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000200)=0x1) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000010ac05320240000102030109022400000101308b28040005010301020209210100050122a546090581034000030c09eec662c1930c60209fea0d078f69769c1b31aa30ccf0b35064dc0c0996903dfe8ca8310352cf91f4bcebda5cdbd37c0f750714c3ba86facd65"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2m36.331033716s ago: executing program 3 (id=852): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r7) setns(r7, 0x20000000) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000080)={0x57, 0x5, 0xc, {0x7, 0x800}, {0x8000, 0x9}, @ramp={0x6, 0x1, {0x7, 0x6, 0x4, 0x4}}}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) timerfd_create(0x1, 0x0) (async) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r4, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r0, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) close(r7) (async) setns(r7, 0x20000000) (async) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000080)={0x57, 0x5, 0xc, {0x7, 0x800}, {0x8000, 0x9}, @ramp={0x6, 0x1, {0x7, 0x6, 0x4, 0x4}}}) (async) 2m36.310018167s ago: executing program 32 (id=852): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r7) setns(r7, 0x20000000) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000080)={0x57, 0x5, 0xc, {0x7, 0x800}, {0x8000, 0x9}, @ramp={0x6, 0x1, {0x7, 0x6, 0x4, 0x4}}}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) timerfd_create(0x1, 0x0) (async) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r4, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r0, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) close(r7) (async) setns(r7, 0x20000000) (async) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000080)={0x57, 0x5, 0xc, {0x7, 0x800}, {0x8000, 0x9}, @ramp={0x6, 0x1, {0x7, 0x6, 0x4, 0x4}}}) (async) 2m27.829408751s ago: executing program 1 (id=914): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0xb522f000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008001) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2d, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'poly1305-arm\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x42, r3}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m27.792281502s ago: executing program 1 (id=915): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_connect(0x4, 0x55b, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x1a, 0x8c, 0x7a, 0xff, 0x5050, 0x700, 0x5ec7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x549, 0x2, 0x9, 0x9, 0x30, 0x14, "", [{{0x9, 0x4, 0x98, 0xff, 0x5, 0x5d, 0xe, 0xfc, 0x9, [], [{{0x9, 0x5, 0x5, 0x8, 0x20, 0x8, 0x1, 0x9, [@generic={0x28, 0x0, "2b8dc039ca7e88a25fe0896fca6422d9d46d5c538a448e1f9a8b10be9e569c212423e8dac55b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x600, 0xfc, 0x7, 0x38, [@generic={0x8b, 0x10, "8bae59defd0dd172b9b17502b96e54b8d56a55682cc3cd9fd54adec8e1696b3ad1f8a38f750e65feaf03c27c014078d39182f41abdaf407189dfe4eadd5e49f9bff4af7ed5c72d65d726fee0d1f988b960e18df93ddafd4ac4d2cfa7adf837287e453111ccdeffc9e038139a89e3e5c6a566c50577d9e0bcc58565b8b2ee6fbe2a2d932a95187e2cb8"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x99, 0x7, 0x8, [@generic={0x79, 0x26, "794a91030aa99c0383f43ade8624e8cdb57250076d3bb493d027c31d4fb07c0362e2140f6bc892f88639c5a368161d6116e4a3c341908a7638b937dad66897392639acda41cb79fa626ac1b3aad8e77c81b04a0ba3b20d71d9e76b9f194b7733a0b9060188eafaf2c975b55acbbfe808d8c9ea2ff74e98"}, @generic={0x8c, 0x21, "77b9244c3d7c447c0c3f89df02a2183e14cf84bc7004bd7727eeed7aace0c58b6692f3e2f031d6e114b6ef2d27a2cf2f35783da11745aea1fe8080b46d4ac4d690551b75e59b155b86098c825a207e667a67263b9dfcee84f957a51f498e6ef4eea000ca28dd704f4e6909b40a950d9559e46561e6da562681ce475fa22d72f28b1588a0b57bf194fdac"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x5, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x1af, 0x16, 0x2, 0x4, [@generic={0x90, 0x1, "2e3f9dab20000583431f8cef37e0da1276dd502d95e67499f445878dace60edc22a7d2ada9cf0c28b54c80e1207e3abf8e68a84dec3653ec2ab0a3418ca60bc7747225f09ec4f661b60687b90d94c137610bf52c76c6aee58c9348a5a78aded4d6c7280f996007d7472cef2514739e4fb9e22eff50d8566e0082a1097ed186c6708ea375c7274ac57a8ffbc64847"}, @generic={0xa9, 0x11, "4c73180a34d70fd4dd33675a8bae67859eee7935adff257240448123fdfddd44228c1a733f2028dae9ed832faca7465c488da9af96c946360358c3a9ec236ce33d914b2d319f419ae3c17ae64ed7ca6effb4c2414b9005cba5ef9f7572f627704cee60857cac9dbc83821ac32ca3144740475699ccbaf75ad495e0f6d1953159c6a8eb593ded061b839d540768c7654f1d4f705dddc1b3e592e91eed21cc0f1391c0d38d33fc62"}]}}]}}, {{0x9, 0x4, 0xcb, 0x5, 0x9, 0xf1, 0x4, 0x9a, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, 'P^m'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x200, 0x5, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x57, 0x9, 0xff, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xd74}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x2c, 0x10, 0x2}]}], [{{0x9, 0x5, 0x80, 0x2, 0x8, 0x5, 0x4, 0x8, [@generic={0xf3, 0xb, "5483636c1b89682ec028a511caf47efa1150105223b745f0adab97e93319d06ef1b342dfbebd1fbcb4ca3a993c6b7b4b848cea120b769458ffc164767481f7f013855de845514740fe0b033ad03f0b56abeadae70ad1d709f724bb7147ab9eeefd82f7ae2527ddb7a2a844b580302303fc3c5ff04b6ce85dd59f795ebe11919dde1fecf253b3757d30dd7e50be7384969551da8b43bc0ba09569bbdb4ced0a8d18bf97bd71b96626706de9f5ce7edd38b34538f5887fa432a66da8f9c324c7ed045b4bf555f9418c822f58be77fbc5468c402a7db3f3089baea83928e91e370e7c23190b78f003cbc5ffbd4a765e672b32"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x509c48047d14406d, 0x1, 0x1, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x19b4}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x9, 0xcb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xfd, 0x2, 0x8}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x93, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6d, 0x81}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x4, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3, 0x6, 0xc2}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x0, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xfff7}, @generic={0x49, 0x30, "b8c35adb55cc20aad9d2d6d91b895ce4e1db05781d46554269d35997a22d00c3b43298c0f9c37ae876f7a2c3469c3cdc9149c9d7e4af97eba1c1bf1319d200fb137be98c1fa62a"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x110, 0x6, 0x5, 0x8, 0x8, 0x6}, 0x1c, &(0x7f0000001080)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5c, "1486a98b6e203b437fe7c2e0153bc317"}, @ptm_cap={0x3}]}, 0x4, [{0x94, &(0x7f00000010c0)=@string={0x94, 0x3, "cff6ed886fd2f9072681db9b352e8383ab3ef4b976ecfe7c60549c37027691e54fb0bab2e500e88df0038b3abf6ad852e07d01297a9996076c4ffb20ec7601bc3036bda71f3def1d8442a08b8aeaa460529d62a16135339873d791dda705941da1b91682466fd86c15bcd06be397c4dd404aeb3146ecba5009d05afbe0c3acf94a92a22841877a947ee0a0dfddb5c43c397e"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x81d}}, {0x62, &(0x7f00000011c0)=@string={0x62, 0x3, "31e42e9853b84e28bbba69c84b99fae1513178aaffe66e02c6962aa50de72f136e44faebaff5c156b60d81ba3bb5748c7619a1555151e26ed90f2f2b4717c458adbe72f3b6fb3c54459e1a5869a433f679177bddbad22168e57112b8d07e4545"}}, {0x97, &(0x7f0000001240)=@string={0x97, 0x3, "7009f5771129ec9287ab6a46e03290f9043a0040320c41d9e273ae1f451b6181d725de86630277ca53380920f9cdcc2e193dc994a755cfe40ec937f7b01bdab112aa7cdfdaee1fa5a7c207d167d8bcc652dc2ba833937bceb95b8a7700907980d092943dff1e79d08d1a64ff3c853f972d5c04adef6e0e5aadbb66fec3fca7743b04221bb29ca430f8ac36afef886bfc5be6d7d389"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0x22, 0xea, {0xea, 0x8, "c5cd37460e2e4dc85629d9fc5af5d3b29cff78af40358b05516b727ae403b3a4aec25da28633a044997218c0740216a1dce27529e2f472b431a0fa290cc519412d5ccc03b0fc3c08ad1f7781af8c1bc00361b55f67ad108d5588ab67f945b4135dffc75b4f58e4ac20464ac94fedf67c6583b6928592448754d0458675752444630dbfc84f421888dd1356ab96aeed806a917889ea426190fa3598fee0338e896e0b4c28fa615dd77a3c37e0d5636f98bb34c49cab8764b090c96adb2668d41cd4a779bc0a9a5dc37f87f6b3596bdd742cf1d568d0a1e9f9b143bc87c12669d861c20de4367ad108"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x20, 0x15, 0xc7, "dd4beda6f7439914f74382e4ee54347571c4c73a13c7671219caf1bbccb0a9252f2179388b61e38397f8e33d65754823db8e51c4db940c274c6123c30b3f5cd12d705561b73eaf89a151abf1233017860798a60f980d70fe47263e15b9cb2f33ca6617e18929b0a054e4c513b6675a8858a0e696cbc1f804dc1d59bc290964aee6c4237f3d8588f50ea4f93dfee50b029d9db8cee09f68e015cd49725d391a9b737024b8c688b55978feafb8051959360923eeeb8ce6fd8ea42924517366acb2cb78d85252b4c3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2c}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000600)={0x20, 0x0, 0x29, {0x27, "f5dc219cad17e55253f869ff0a6a307b4eb0775446e609aad0bf8bb3a78783736a56eb9bee1e0b"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0xa2}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x6, "e5bc653d24cf"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x14, 0xffffffffffffff10, "e6f138ce479799ca328d58"}, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m25.720159137s ago: executing program 1 (id=922): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x20, 0x22, 0x85, {0x85, 0x21, "fc3b6c6ec117e5814287529da989d81489b48f972de0c2d85a718cb4dc2a4e42ff908dbbef5c7789652606520cd857ec6bab4d9970ac18f9e1f99f0ad94a186ad78864249ac0b0cccb0efb9eba962e8e5f76cc29e5526c38aa37aaf4f7b66507bcba1b7e26dd8cd15317cbcf8b1c090edd8bcbf54e8666266116575bdee39d42af64f3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "be1a788f1fbe593de05e151dfaa8833b97aae47ab3f0a0ae8349dbe6e244699720424333acab75e64297e0274a72ad"}}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="000c020000000223ebc86ffe89659495f686349ca43421a27e1ca9d8ded4f5f961cfb36ef00fb927e72c657fc578683ee7d19cd356618771e6d5b74967c251f37cca762703935587fb91c9d370b5d601e85b75572a8b44efe3d7315f5d5931a4e55fb401f11a33ea9b175295354aa6f7558ae0cd9b29cf3b000000000000000000000000d9b8ae914db733077a2841e0a15324b66604f564bf1ea756c429b5fc5d565ca67eb2cefe6f5655aa8f97ee889801b363265786891872d0bf4f820e94916f461ee8cd12a38f8260ece4e7c821"], 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "c4"}, @local=@item_012={0x2, 0x2, 0x2, "4197"}]}}, 0x0}, 0x0) 2m24.167037671s ago: executing program 1 (id=943): r0 = syz_open_dev$loop(&(0x7f0000000200), 0xaa7, 0x2a2a02) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x1b, 0xb, 0x0, "aa38fc74f12a520aee5693a61e0aa72057f73cc7db1c4939e5560429517f36e61af8ac954572aec0e16b025a42c761970189a0be91d8a3c8acd2b58f1c8b2b29", "7c92db49358f5c2556e0e828ef2414557183035eb61b57e9a39c5c1302d0c4edaba5be91d56ad866e27778b346a3422655117949d3a7ca1698aa9a7da4fd9151", "3e07fbb74b0f791bd013354bbdd4936b294b602306d8b452e340e72533adc1f2", [0x8, 0x4]}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000086104724e00000000000109022400010000600009040002fe030001000921fdff070122280009058103"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@remote, 0x6}]}]}}}], 0x28}, 0x4000810) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x40, 0x5, 0xc, 0x7}, {0x9, 0x5, 0xe, 0x2, 0x20, 0x9, 0x2, 0x7}, {0x9, 0x5, 0xd, 0x3, 0x400, 0x8, 0x5, 0xff}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000dc0)={0x14, &(0x7f00000001c0)={0x20, 0x6, 0x33, {0x33, 0x6, "e105f0993bd58558dabcc51c2fe11d4049c91807fba8e831ac407ee8b889214a60ce61a14a0533477a2cfa19fe69fea587"}}, &(0x7f0000000d80)={0x0, 0x3, 0x16, @string={0x16, 0x3, "c047aa23abc7837e03a541ae93d21666f20274b4"}}}, &(0x7f0000001380)={0x1c, &(0x7f0000000e00)={0x0, 0x3, 0xce, "e0ebde3f17c6e77080cd5b71101835f43e762f735c8bc8408d59d4db8694bd1235d74d4b05b3256ea793a45cbd6994d76d7c15f29aeb160559902576d87ea3823cc25d75c2197e99bef984ab5765ec968a66e63c8aa0afdecc65d745b84bf76530210cf233ad08c58d9b7f412c8d72082efef89ee8028eb866ee4d02fdbc95cf4cacae785df3e0dd1dac5b284d31bfdcc1411fa2a5d5322487ef340d718d82b0dfa5dd3e43349cd0107068886663de7a9f9246bbb1324b963379c37ee9e78b84b54836b13d3b7a7f72d2120575f3"}, &(0x7f0000000f00)={0xa1, 0x1, 0x400, "f51a867e61e0098a921dd39cc4f9e01d816909291ef067dcc82e02232c10eef34cccf1a98a67dc8f3458409674301a6ac6e0302191288fe4be29e24e1b13ce386259ca27bbc5221e9be3bfda1955a48e49bc9c6461e27e92ed04bdb948381c0ebc300ddd73c834988560d2fe353bf9904706bdc7e471c44e69160462d1b5a371c48df262111bc4690b4996c4eaea77c32502b501d6530383ef72ce6bceff6b3defca5233eb6ba9bb19bde7485ce1952df1538b3e18ee4652b15ec265bed10b6d9e9695badaf757d9e1c183a9101bf6d67e61a9843e31a1e90893e285fd8e15b173fa77e12870bd2007936c3cc324d0569e7214fc958c00ce26b632e303eddcc8be29e2c9c04b478b895cc69611ba3661994c677f97fb857c55efc61f67903bd1612e8ced9e9237df9c0437548544e82cc037793cbc8a49e17fcd94151bcc0bd72fe20f123fd17158fcc5248b374dc00fb74a1153480526f17f3c2dc40d61cfd18863ba05630669d297527eea7990e33fb983b48be01809e32b577638f037afae10f37496ef5d4e2249bb1232bab2a181b0dc54dad292e920db1c61ccb82961a637828e7e4263acd75f75068b7e04d6b889f57d77a293fe4e17d7267c20ca5daa1f8b3ea144717e6cc88add65e7fa9368e360af135399f0dc843926703f9a82dc12090159620b97792fc1dfdaeb2daf21a3a7a780a6b60b3d613420df44f122c8f58775a3b5fb7a4ed12473c7b24f998a411b1cc2a7ddf7a2b4d68e8573d2fb55043f2199a41febb98ac77d49cf4736180fa46329beae03a067036715cf25d72ee77169c4d2ef040d6069b51f9ad11441886d1e8a92b1a4845e71b8e0997570b5293dc87234518fb90e53d8f1beee7e513b928dd8f6cbe332019a76abfb68832f0bab2d3ef3bda83e3b6cedea680aa1768e411506be7e410c4b2c092e4688eb03db7b030f9ff5b084039af77a215cb8aa63d3e6ef60c0f69adb1c2e4fc39a1392e996d2f13fd62b83aeead55cb7195aa5b0dd52221309c0e882ccecaf1b8b6b58f6d6c3c12f1803fc251bfd115ab75da7dec80ad7ad668f86ecfd2caed9566b9febf5da93eb507125fa497c7dc0d91f141b80c68d91fb4e2cac93893199bebd3821d7d6f7b9ffb6d864377f9ea06aa97ab6adc35fcb4608f44d6d4c7ad7e4f8a91287858c997cce0a33d43f2b3a9f7b76a1fc6dfe50d3be2bc4934cb90c769ad36b6a36ded5d93d2de12407ca9bcfd60a0190bc606eb9cee5a8d4724082f9c0e07fc7802b6b2daa803638effbefe394436685e7eac93c9f280ccf8208b774e1d1599d5354d730d73ed16fb7417b0697a24decce4c15c5e630c1305f05dcf02e400e1dd84af6ca928eec5a07a7e0a6dacd169d22b30a49b957da2422c59367c86b9825744280612b09a395ffa661bc0d1c344bb095541938df1887e7b53bbb5d94"}, &(0x7f0000001340)={0x21, 0x0, 0x2, ';Y'}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200428000000280483efb930f018425623"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0xfc, {0xfc, 0xf, "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"}}, &(0x7f00000003c0)={0x0, 0x3, 0x75, @string={0x75, 0x3, "ae356b329e98875312ed31538c6aa3a053f1c98f57d6e86faccd0437891bc1911b1f5fa8b095142dda2314337516508f55ceb29c59a8acb710998741ffc0f240f3ce99503d310da7ade91ffb9e7fba8bd0d9b78f4d1bea95f07ede88d5ba9d049987817937312e2ec16ad82336040478a1ff3f"}}, &(0x7f0000000540)={0x0, 0xf, 0x1ec, {0x5, 0xf, 0x1ec, 0x5, [@generic={0xe7, 0x10, 0xb, "ef7be2cdc82b4674b5ac6db55313234f774c09efdc1be5e582e4a764720de2882d6d93bcfc59bc039646766c4c175906ea0ac2eb1db9a8d66238ad826069733d3256694c706779f6720736b3aa6f733aeb62420d1a067f8c44864c0b90e1931835a862031e2ca8d49a16796ec2ff9946ef7fe94cf3a8bd876ef54a601a54476dad75d0d8afc691a56ae08110e1246b58d6e9af32ae27b73b438eacc065c8af467267d2c4fcee6996a019718f73ff672cae0455c00ae303d9763184985295a6436beb5f2ce1841445a8ca9cbe7ffa5d74e2159e5786cbadd32897593fed6965ca75adde80"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x13, 0x0, 0x10, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0f28cfc73defd32fb9fa49876ba68db4"}, @generic={0xdf, 0x10, 0xc, "b8163d99ae93bc94b7aa74856cdf5a313bb706783f2b1fe8152e5816375a65f1a691b877e767282259d34bc6f65d5e71f94a86afeb1951f3c3d03c6d3e31ffbcf482eb9e6c5aff749909d22e38702c7a90bedb6719a31f7b331039ffcd12a8e286973c14668529c3248084c4303cc1cc840e72f183f24d8c8b2a5ad8d0524e426ea5e6d46554bf0d88fb2d54a264f40f2149030530f9f82c05a59227c1fa10945dca0331a71cf962ad252fc0eb11c7ca25713dfe1156821cc3d3c2b869465b7ca9477040f6d06e1600d0494c8d922f19d2e29fbc2be59ee9a2e05af0"}, @ptm_cap={0x3}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x7, 0x1, "6acf872f", "534b87b8"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x2, 0x8, 0x6, 0xc92d, 0x9}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x0, 0x10, 0xc5, "852154d031603bd7e20bf022fe913aab0acc264d5ea9ff63665ae3a0eb2252c015a7216690ce2799c7933196628e32ceb7a2e6ddd5346d04ade26651c9e2d6304a5665e600af5198db930f95e8febaa343f7802f7de52b6e548f99a631da6414d99a4dff8779ec9bfc2111a627d5293d7b6e7de3489d4b2079e279f94e4faf30f05bf4781e4b9e5592c93b5cecc16655f148da0796a857e73f324e72fa7af3add5073c0f0f2087693740dafdbfb2e32eaba1a945e207e9d9eaf3a9adc35eca2867522bb075"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1000, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "8953"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, 'w6'}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2}, &(0x7f0000000c00)={0x40, 0x1c, 0x1}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x56}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x28, {0x28, 0x22, "b5743125cc6bad051a92108af7d5cb74010000009573718720ecabb4a919ff7f000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m22.473724307s ago: executing program 1 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x4000880) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x7}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00690b0000000b241b3f972e4846bb68dcaf11d3198aae11a26b34ff0f1d050000008a5e7137a99bbe69d4fe3810d9e8efcb21d5298ea51b6db60396cbd7f0f22ecd1ff8f29cbc2c69b7c8d38ebc981ef59a3f32d292231fe50b54875529a9b92d1fd247528af3917f3cd581bef0a974df95"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x700, 0x8000, 0x6, 0x1, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @remote, {[@noop]}}}}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x0, 0x70bd26, 0x25dfdbfe, {{{@in6=@loopback, @in=@private=0xa010100, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x21, r3, 0xee00}, {@in=@multicast1, 0x4d2, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, {0x10, 0x0, 0x80000001, 0x100000000, 0x1, 0x400, 0x5, 0xff38}, {0x0, 0xffffffffffffff4b, 0x4, 0xffffffffffffffb7}, {0xb09b, 0x3d43a556, 0x4}, 0x70bd25, 0x3506, 0x2, 0x1, 0x8, 0x89}, 0x6, 0x40}, [@replay_thresh={0x8, 0xb, 0x6}]}, 0x100}}, 0x24000800) 2m22.248926762s ago: executing program 1 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x88000, 0x140, 0x7}, 0x18) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8100) renameat2(r0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0xa0f03, 0x130) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540), 0x1000010, &(0x7f0000000700)={[{@memory_hugetlb_accounting}, {}, {}, {@subsystem='net_prio'}, {@memory_localevents}], [{@euid_eq={'euid', 0x3d, r4}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r5}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ']%@!'}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0)="36dbd904c5d56fcd94daa64d2500690cf874fb6584f35c4c25f7a03dd895fc9173b75d1e59e6abfb35db2e5dd4cdafb945df1bae0e0caeb75e832f9e308354a4a47f5cbbe3d3a6f316b6ee7614f031c5b19cbbfd1d7dc48d7f8f5bd1b73dc3c596cd403b90197457deb17ddc59f70056b4c572fb572ceecaae95aa32e475aead9c51718b1b194b30abf5b16a5dc6ab331b3c32895fade9249a7cc67bfe2ca6d906d36c1de927b1af7e4a90034b155e3c5f24caf67dcbaa9375615f9c4b7af355c513eb6b26806a4d0f3d9f5469b9b23bb4baa58e4a31122c9b", 0xd9, r3}, 0x68) getpeername(r3, &(0x7f00000000c0)=@hci, &(0x7f00000001c0)=0x80) 2m22.248516842s ago: executing program 33 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x88000, 0x140, 0x7}, 0x18) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8100) renameat2(r0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0xa0f03, 0x130) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540), 0x1000010, &(0x7f0000000700)={[{@memory_hugetlb_accounting}, {}, {}, {@subsystem='net_prio'}, {@memory_localevents}], [{@euid_eq={'euid', 0x3d, r4}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r5}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ']%@!'}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0)="36dbd904c5d56fcd94daa64d2500690cf874fb6584f35c4c25f7a03dd895fc9173b75d1e59e6abfb35db2e5dd4cdafb945df1bae0e0caeb75e832f9e308354a4a47f5cbbe3d3a6f316b6ee7614f031c5b19cbbfd1d7dc48d7f8f5bd1b73dc3c596cd403b90197457deb17ddc59f70056b4c572fb572ceecaae95aa32e475aead9c51718b1b194b30abf5b16a5dc6ab331b3c32895fade9249a7cc67bfe2ca6d906d36c1de927b1af7e4a90034b155e3c5f24caf67dcbaa9375615f9c4b7af355c513eb6b26806a4d0f3d9f5469b9b23bb4baa58e4a31122c9b", 0xd9, r3}, 0x68) getpeername(r3, &(0x7f00000000c0)=@hci, &(0x7f00000001c0)=0x80) 4.309271876s ago: executing program 0 (id=2229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000002940)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@icmpv6={0x9, 0x6, "16dbce", 0x1e1, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @dest_unreach={0x1, 0x4, 0x0, 0x9, '\x00', {0x4, 0x6, "9b16e8", 0xfffc, 0x89, 0x0, @private2, @private1, [@hopopts={0x1, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x4c37}, @jumbo={0xc2, 0x4, 0x7f96}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @remote}]}, @dstopts={0x67, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x6a7de4ae}, @pad1, @generic={0x10, 0x8a, "362391b25d4ded4cd93f567429a21e656704ade332d3b34b45833d1456828a055e969b93fc9a0a0f31c93ca320f62439d8345f06866550e329f23e28d06ebeb89e8adc5b0b7b1409239de5eb74d41042684b6cb1e41ed63661656fd91f567a3a6d237f5e00ea56edc408770847abb5ac2321e358a34206485f39cfeaf6616a9be7a6d5e2b7610453cdca"}]}, @hopopts={0x1d}, @fragment={0x1d, 0x0, 0xc, 0x1, 0x0, 0x9, 0x66}, @srh={0x6c, 0x6, 0x4, 0x3, 0x1b, 0x0, 0x101, [@rand_addr=' \x01\x00', @loopback, @empty]}], "6a6737d2040867174d3b1f7fb51ec53170ce2deaf618267e7670ebaa804ec00a716111e5a63c9229fe9560b3be256016cc110b0bccdeee7cd4e8d59c0f6efa9ed7177ada968e9f707ba3776e57b8b61f6748c88d558caad0ea1e1e07fa8a96b60c5f0ac14d216b2e45"}}}}}, 0x217) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) sendto$unix(r3, &(0x7f0000000040)="25c268e04ccda6e3960782ae2c15d3214afb580c5a82a12059c1", 0x1a, 0x4000, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000400)={[0xc45, 0x9, 0x6, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x1808c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5381}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_connect(0x2, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xe2, 0xa9, 0x14, 0x8, 0x557, 0x2021, 0x48db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x9, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0x2e, 0x11, 0x2, 0x92, 0xf, 0x70, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6b, 0x21}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x2, 0x2, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x1, '\aY'}]}], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.016076963s ago: executing program 0 (id=2233): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x80000c0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x42}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x94db4363ede5ca74}, 0x4000) (async) write$selinux_user(r1, &(0x7f0000000280)={'system_u:object_r:locale_t:s0', 0x20, 'system_u\x00'}, 0x27) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) sendmsg$NL80211_CMD_SET_PMKSA(r4, 0xfffffffffffffffd, 0x4004000) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000440), 0x5, 0x2081) read(r6, &(0x7f0000000480)=""/166, 0xa6) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}]}, 0x44}}, 0xc8d0) (async) r7 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r7, 0x3, 0xdc, &(0x7f00000006c0)="a9a3ad81e0aa7b741b872c3c2b5242584a83d5df8cd8f3fed4e8f54450b37e793ae6d673bf3f3bb75f507c0bb38cb9ce8257884cc554b8d1defa828fad05b2b9abe76f14f5c83dd6905bb4d14fd3e5d67968a34cce19b86277e8c782eefa598ecaeac2f6f364a70754488492fb2e355c8e6121f18eeb871e06549149c797c09a6d84b19dc9b860c93029edf81199396ee9701ccd87dfa86671a3c493b35e16280eb8aef6286bc2e201fb7b2a7cad2b616d9b6822092cc441fae8cccadfce8ba3570a44db67f01b93627de18e8b48a06cce258b18774b764ab2ebce6b") (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r3) (async) clock_getres(0x1, &(0x7f0000000800)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r1) (async) syz_usb_connect$cdc_ncm(0x5, 0x94, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x8, 0xc0, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "5483d641a9d0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x46be, 0x80, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x7, 0x0, 0x10, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x4, 0x0, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x9, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x8, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x89, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0xc}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x1, 0x81, 0x8, 0xff, 0x20}, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0x2, [{0xf, &(0x7f00000009c0)=@string={0xf, 0x3, "13bfe446689d93d77c20f8a543"}}, {0x2b, &(0x7f0000000a00)=@string={0x2b, 0x3, "93e25331deae8b9bda071caf9ab76b75b916f708e10c16297ccc99f742026dee056aa7fe3e0668f21d"}}]}) syz_usb_disconnect(r7) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000000}, 0x40000042) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r9, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) (async) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000d00)={0x0, "cdd0be2a22e2bf5673a67a617d7d4689"}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001d00)={0x2, 0x5, @start={r10, 0x0, "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", "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"}, [0x37, 0xffffffffffff0001, 0x4, 0x0, 0x4, 0x424, 0xa, 0x5, 0x1, 0xfffffffffffffffb, 0x0, 0x5, 0x1a0000000, 0x400, 0x2, 0xb, 0x1, 0x6, 0xb, 0x8000, 0x2, 0x2, 0x2b, 0xe1, 0x3, 0x1, 0x4, 0x0, 0x7f, 0x124d657d, 0x8, 0x3, 0x6, 0x5, 0x4, 0x1, 0x1ff, 0x4838000000000000, 0x8000000000000000, 0x3, 0x2c3, 0xffffffff, 0x966a, 0x800, 0xcaf1, 0x6, 0x6, 0xfffffffffffffff7, 0x1000, 0x3, 0x1ff, 0x3, 0x7, 0x2, 0x7a, 0x4, 0x3, 0x2, 0x9, 0x8, 0xfff, 0xa16, 0xffffffff, 0xa1a]}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000002740)={0xfffb, "dbbc7e"}, 0x6) (async, rerun: 64) timer_create(0x1, &(0x7f0000002780)={0x0, 0x22, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000027c0)=0x0) (rerun: 64) timer_settime(r11, 0x1, &(0x7f0000002840)={{0x0, 0x989680}}, &(0x7f0000002880)) 2.644794432s ago: executing program 0 (id=2237): r0 = socket$inet6(0x10, 0x2, 0x4) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0xfe, 0xffeffffe}, {0x16}]}, 0x10) (rerun: 64) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x5b, 0x4000010, 0x0, 0x0) 2.584923083s ago: executing program 0 (id=2239): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x1, 0x700, 0x9, 0x75, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@end, @generic={0x7, 0xa, "6ee691ae7d549338"}, @rr={0x7, 0x17, 0x50, [@rand_addr=0x64010101, @multicast2, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)={0x2b, 0xd, '\x00', [@generic={0x81, 0x49, "a2ddaa29da976468c93507e5f6fd2e5f0d86166ba25bcfaab1a552bea18b1b9aa42bab21c9076cce40e5b01511bb9cc89bdcb81a1792e74abdcfe2a3d9bc492065659d6dbcbbc8eab6"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x6, [0x7ff, 0x1ff]}}]}, 0x78) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) (async) r4 = gettid() (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000900)=0xe8) (async) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000a00)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000b40)=0xe8) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000c40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000dc0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000ec0)=0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000f00)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001000)=0xe8) (async) getresgid(&(0x7f0000001040), &(0x7f0000001080)=0x0, &(0x7f00000010c0)) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x105002, 0x0) sendmsg$unix(r3, &(0x7f0000001240)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)="53787d5def1c93ac92d1b38b96e1a29aaacc0cb48ed1cbd234c8deb63d2f42b65630aa358624ae6d4103d356a1093800d5f8d7872d3571227c1c2d25dcc091eada4f85fa1a75170f0b2de08aa6ae166582afb9c6e0aaed3b054fe2acc963dda0645c69a4cad14dae9773d165a671b6bb15c873df3d1526d58bfc21bfbebfac12a0fff55dc7b7e0ed7e79d96336599b3f6365a57d3b6e440ad6b3dfb20b4f567a7d1f077e1ba3cc22a54fce893edd0bbd88fdcd17817b759d217efbc5c870e14b1107993413a5dfde4f361ee2aba0cb6f45dbb395124cb9b3d24923d8ca4d8f197d4a424609133eb6957da2", 0xeb}, {&(0x7f0000000440)="7fe5f0f8a96252abe17d94d0a61aa5e079bfaed58bebf547fad74f3dd033d316ab0d0cd2a862e4ad7760ffb0b1283a969167434faa896fd9c177bc21afd0bf12900cd18b2506ad3dbfc0fbf297e1a05d12e61c7ce0a98983a3718bd986d6005f9dfea9d8d64718325484b07dea814c17b58adc6119755744e300cb25fea463c4be95ba3fae081acc8dce1eb7842e58c77248a5fe331ce9c32d0a800485f8f8a92e92a34f7d49f100e89a48dd5aabee3e9530482ee7e6b42465b2abbe7c86ab80aedbe627df3de1b5508fe35edf7ae70c32e9d510aabca743bbe6d4c1d725306c332aeeefb2c30eab0947", 0xea}, {&(0x7f0000000540)="03d8a8ce2a7ccbf11e386d1c6365789ce179566929bea8f6631011800cf77a2db8caf4864780cdb1c379e5932b3a64b24af4612999251473f9a8b10fe4", 0x3d}, {&(0x7f0000000580)="9df80235411b2b518e296f1421eab8a9861205e5bf66d24d0e5c8177cdee8a87babe0445198560045feed187137f0ce7d0220980434b406ed1b79ca7ad509eacead3744af0762636c663abdee75563088162efb15f56e916a746221618c8a9db3cd4a67a14c66474352dc939cfd1f20e263791c848407d8660525be5a927ad2a62b9899309e2294997bf080ff3c82868015a05a318e001f4c891a1606a018d6a45e9882113384fcba90e2f63e802b4c386eb9dc747b149efe7d2ce1846e2f58096e4dc7ed32ae34d7a7aef9887", 0xcd}, {&(0x7f0000000680)="735c73e8319022492d8d7c78f317442ba731d0d0e648c5261106dc33265cc6046b95d5b10e454de4323fee83b4aa36297bbbd5ad3ba1bf48879e878f5f1aac54783ec4727a1dcec164dbe223e76a0e9073d3a11e620aa91957229a380d4a9143c1a43de936112fc3570bd04f1ce425278db09bc92f18d72c6318b174f6ea21d280007f8157c21f881a74db0cde97068b4317f456f4af01728681089ad23a77799a4e65b34ba0eb6b2172ec8935c168d4ae834978e5c420270fe4f5cc7083ad832ac157873de1b87061ca138cc071b2a9b4180f8f807af9764b0d75a12b900032ce09a71ddb52e658", 0xe8}], 0x5, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r16, 0xffffffffffffffff, r1, r2, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xd8, 0x24008055}, 0x40004) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000001280)) (async) socket$inet6(0xa, 0x0, 0x1) (async) r17 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000012c0)={0x5, 0x5}) ioctl$BTRFS_IOC_SCRUB(r17, 0xc400941b, &(0x7f0000001300)={0x0, 0x0, 0x5, 0x1}) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='blkio.bfq.io_merged\x00', 0x0, 0x0) read$FUSE(r18, &(0x7f0000001740)={0x2020}, 0x2020) (async) ioctl$BLKGETZONESZ(r18, 0x80041284, &(0x7f0000003780)=0x9) (async) ioctl$KDDISABIO(r18, 0x4b37) 2.584643833s ago: executing program 0 (id=2240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock2(&(0x7f0000346000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) futex_waitv(&(0x7f0000001480)=[{0x800, 0x0, 0x56f77dbfbcc63790}], 0x1, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000001480)=[{0x800, 0x0, 0x56f77dbfbcc63790}], 0x1, 0x0, 0x0, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/165, 0xa5, 0x400000000200) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000640)=0x50, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syslog(0x2, &(0x7f0000000200), 0x0) (async) syslog(0x2, &(0x7f0000000200), 0x0) sendmmsg$inet6(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000801) (async) sendmmsg$inet6(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r8, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0xffff, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a4}, {@initdev={0xac, 0x1e, 0x3d, 0x0}, 0xf}, {@loopback, 0x9}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0xffff, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a4}, {@initdev={0xac, 0x1e, 0x3d, 0x0}, 0xf}, {@loopback, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r3, @ANYBLOB="02002bbd7000fedbdf250000000008000100", @ANYRES32=r9, @ANYBLOB="8800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000000000b6e3b0000080007080300000008000100", @ANYRES32=r10, @ANYRESDEC=r7], 0x16c}, 0x1, 0x0, 0x0, 0x34004045}, 0x4c090) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x490, 0x0, 0xfffffffffffffffb}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r11, 0x29, 0xd0, 0x0, 0x0) (async) getsockopt$inet6_int(r11, 0x29, 0xd0, 0x0, 0x0) 2.453735136s ago: executing program 0 (id=2244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) syz_usb_connect$uac3(0x0, 0xce, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x1, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0x14}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2c, 0x30}, [@multiply_unit={0xb, 0x24, 0xd, 0xf7, 0xbd, 0x5d759ceb, 0x5}, @multiply_unit={0xb, 0x24, 0xd, 0x10, 0x2, 0x6, 0x1}, @source_unit={0xc, 0x24, 0xb, 0x3, 0x2, 0x3ff, 0x7, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0xff, 0x0, 0x3, 0xfc, 0x6, 0xf, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x4, 0xb, {0xa, 0x25, 0x25, 0x80000000, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0xfff, 0x6, "8d8d086ef380"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf7, 0x5, 0x8, {0xa, 0x25, 0x25, 0x9, 0xff, 0x4}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x0, 0x98, 0x5, 0x4, 0x0, 0x8}, 0xf, &(0x7f00000007c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0xf, 0x9}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x380a}}, {0x42, &(0x7f0000000840)=@string={0x42, 0x3, "d35e8ce48d6490c603c9bb7ec9b6b39ea8d0a43fb5a0cc997fe42d2289e6ba9574b85864cd55d363c74eccbb72ec208133b9e3833c959d22f0adcb6ddce4f8cf"}}, {0x9f, &(0x7f00000008c0)=@string={0x9f, 0x3, "814f54fb8e0939778ecfc54772b3c4df95efd85f2166c391b789a2d4063f09a5063b66603fec4bbeffba9d37ff1467ac1ecb066eb15c6f73efd8e05c374d6bac35d094205862379b195b792c00e54ab641273f2d75c6a84690991a6a880e0bb543550c155024293b20bb78405f2117ac38b7baa82774380e356a7cced642c278104245b7a8afb8a7ba46a97c8b04b06051b0c03f34d11492f2ac42ebed"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x43f}}, {0xac, &(0x7f00000009c0)=@string={0xac, 0x3, "0f1086a13a3980e3044ae3ec8a93db1fa715593fc3a92c4deb9346e83ec0e47ee467cb616bb6c42ed9eaabbd148172fc9ad96a03a7854b95ce5771100815b1fde7745a04dc6c9049acc24b9fb4a11dbe13e605114d172e38755a2d2aa65235c417032bd92f60149404673a70f0080528ba61ed5c8932faa5744bf7beb51476b07cda1b1bec295ff3eccd943d48bf668d5edd15b5a0c0c7d185bb2410292b2f1c6bf83cd90819afc622e1"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x401}}, {0x3d, &(0x7f0000000b00)=@string={0x3d, 0x3, "1398e12e3e5992447ef2ee0b1621f0baa8a514040d1dbe7da9d01947cb786a5bc7ddf1a60e440de0c7454017bf0ba3c6d307d6d49f75cda02980e7"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x437}}]}) write$selinux_load(r1, &(0x7f00000018c0)=ANY=[], 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x85, 0x3, "9f3fd7"}}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000003c0)) syz_usb_connect$cdc_ecm(0x5, 0x85, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x20, 0xa9, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "5b742094054d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x5}, [@mdlm_detail={0x29, 0x24, 0x13, 0x6, "6c49f9129e60af12f233f48ed88ac2e479502ebf8faa043c30916b6bfa54aeb325f4569612"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x1, 0xcd}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfb, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0x1, 0x0, 0x10, 0x9b}, 0xd0, &(0x7f0000000200)={0x5, 0xf, 0xd0, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x9, 0x7, 0x89d5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x2}, @generic={0xba, 0x10, 0x1, "a03640515c25ef958746052227cfd232ea35e32cb57b7274fc04f3d817f48168f1092a019958235dba73be543b0dc8b8d2c4168c589835368f1feb5d5a30af8706b0c4ff809cbce25cc06251a8a5d80ce632076d8bfb85c6f53da5fd5f4f3a40acc0416630114c522936740a7c94c5d29eea45c8446806bc29dc34a62a86a6bf845dd082cf94e8a441ce7f6d83724d4c624e26206065334a3f6c0d9b27768151a4f1dbf1cccbce711414cb1ccf0df904c208ab6af76ea9"}]}, 0x3, [{0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r2]}, {0x1d, &(0x7f0000000340)=@string={0x1d, 0x3, "5784c2ff92d054e32d467247e10b8ed6b85792d8a9e43cea29ad31"}}, {0xec, &(0x7f0000000540)=@string={0xec, 0x3, "175404d3aa29dec543f60931ed67134aaf7d3d445a33c4391f064f5904b4b987da7cb6e544f8b42b82cdd9111ef21ddf9e894fbac45bd4b20dfcf658ea04c9dd48cc95d6cdaa5126df4ba935e81c01f5f5d2f171dee0555eca197ce233485353c1b262114bd70f47c8764e1ff5de4f7c9c9e079371d6005816cf4763ddafe2e99258254ff38fd25adb81400a2ffab3d94fbcfa1fd6ba993ee3d6f1f8173a3b0d4f3aaabd02a984c101f54260d2008dd4d3e76ef475ab18a665475a0b24bfa050988919fde95bdcfb059cc1c27d7ab6203f2305ea615f35624fec72d8e32bdd4570d6a4072068482361b6"}}]}) (async) r4 = syz_usb_connect$cdc_ecm(0x5, 0x85, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x20, 0xa9, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "5b742094054d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x5}, [@mdlm_detail={0x29, 0x24, 0x13, 0x6, "6c49f9129e60af12f233f48ed88ac2e479502ebf8faa043c30916b6bfa54aeb325f4569612"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x1, 0xcd}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfb, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0x1, 0x0, 0x10, 0x9b}, 0xd0, &(0x7f0000000200)={0x5, 0xf, 0xd0, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x9, 0x7, 0x89d5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x2}, @generic={0xba, 0x10, 0x1, "a03640515c25ef958746052227cfd232ea35e32cb57b7274fc04f3d817f48168f1092a019958235dba73be543b0dc8b8d2c4168c589835368f1feb5d5a30af8706b0c4ff809cbce25cc06251a8a5d80ce632076d8bfb85c6f53da5fd5f4f3a40acc0416630114c522936740a7c94c5d29eea45c8446806bc29dc34a62a86a6bf845dd082cf94e8a441ce7f6d83724d4c624e26206065334a3f6c0d9b27768151a4f1dbf1cccbce711414cb1ccf0df904c208ab6af76ea9"}]}, 0x3, [{0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r2]}, {0x1d, &(0x7f0000000340)=@string={0x1d, 0x3, "5784c2ff92d054e32d467247e10b8ed6b85792d8a9e43cea29ad31"}}, {0xec, &(0x7f0000000540)=@string={0xec, 0x3, "175404d3aa29dec543f60931ed67134aaf7d3d445a33c4391f064f5904b4b987da7cb6e544f8b42b82cdd9111ef21ddf9e894fbac45bd4b20dfcf658ea04c9dd48cc95d6cdaa5126df4ba935e81c01f5f5d2f171dee0555eca197ce233485353c1b262114bd70f47c8764e1ff5de4f7c9c9e079371d6005816cf4763ddafe2e99258254ff38fd25adb81400a2ffab3d94fbcfa1fd6ba993ee3d6f1f8173a3b0d4f3aaabd02a984c101f54260d2008dd4d3e76ef475ab18a665475a0b24bfa050988919fde95bdcfb059cc1c27d7ab6203f2305ea615f35624fec72d8e32bdd4570d6a4072068482361b6"}}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f07080000002a900683"], 0x0}, 0x0) 2.350260378s ago: executing program 2 (id=2245): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'geneve1\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0xafe, 0xd, "147a1de719846325e6016565c2"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x11, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x2000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) fdatasync(r0) 2.28303949s ago: executing program 4 (id=2247): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40a40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4105, 0x1009}], 0x1) 1.479978107s ago: executing program 2 (id=2249): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x86, 0xb3, 0x92, 0x20, 0x7ab, 0xfc01, 0x6496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0xda, 0x6, 0x0, 0x49, 0x5e, 0xe3, 0xe5}}]}}]}}, 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xb403d926, 0x81800) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xe) 1.427665308s ago: executing program 5 (id=2251): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400a506af5f9fdb41c0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c04000000ca258175"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.410825699s ago: executing program 4 (id=2252): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000001380)={0x1c, 0x0, &(0x7f0000000f00)={0xa1, 0x1, 0x400, "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"}, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 946.146999ms ago: executing program 5 (id=2253): socket(0x10, 0x800, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25010000000000000001410000002000170000001000004e3469623a76"], 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x40010) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x4, 0xfffffff5, 0x5}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000200180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) madvise(&(0x7f00006c9000/0x2000)=nil, 0x2000, 0x0) 890.69773ms ago: executing program 4 (id=2254): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)) open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000200)) inotify_init1(0x80000) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 824.924802ms ago: executing program 4 (id=2255): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0x80000002, 0xf, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) unshare(0x22020400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000040)=0x3928daf, 0x4) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) vmsplice(r3, 0x0, 0x0, 0x1) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x14, 0x21, 0x1, 0x0, 0x0, "", [@generic="07b9f9cd"]}, 0x14}], 0x1}, 0x48040) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x2) 823.895542ms ago: executing program 5 (id=2256): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x20b, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001980)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000980)="97201f948e9602dd21ba00c21f83c3e3e5083b456e33bbf620a4b8ccc05e3308484383b24e97521e6f19dafab259e981c615c15b7ebefeeed3ed63d09df2035fec8c2c7a9e40b0d25faa8e2bbf268c07"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000100013070300000000000000ff01000000000000000000000000000100000000000000000000000000000001000000000000ffff0000000000000048", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000027bd7000001000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017"], 0x164}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 823.024531ms ago: executing program 5 (id=2257): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac000000000001090208000100009000099d1a3d0400080903f6ffff082103000c0122280909058103200000ff00"], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) unshare(0x26020480) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2009470000004719cf000000000000000458a8873d6fd7dbcbd3f634f94de3c55cd990295d741e7562ab9eb7e85868a3d51a7670170a6ba4471b66db973248c6fab33f479ec5a3ccb11cdbc7bd"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)}, 0x80) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="010000e10000000bd80000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0009000003"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002100010000000000008000000a000000000000010162000008b5ad7e28dd1c38104945c5d59305c19f5af051ed583f272a8222634aa84c7535d082e147698d124a67aff8249bdb"], 0x24}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1e030812dd5c9801288563a20dad201406"], 0xffdd) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) 325.136172ms ago: executing program 2 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000180)=@vmx={0x1, 0x0, 0x466, {0x10000, 0xffff1000, {}, 0x0, 0x20000020000009a6}, {"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", "d07ee59115bfee5345dc58b23cffc5c643e81123cf65a8d185a9e53e7f9d20a2020cabd00e6cd5420c61efbb8012fec281c1550aa7087060b41a484b5b682068eca9d6936960d6477a239fe120e7433936c058ffa20f15e2ed6c32ae4bd9de18fd5fe31f20ab85f2fb01b792873e66a5cf610bb34322c830d921ca201a82c1557b5a2d7ba0c22555f03c65cc8d2df42064f60eef20d09c493c84c11857ffa5eb8130764e6e21b41a0fb263aedfc3c9be3390087ef0222481b049f72a52ad49e908223a367b40d567a52fde9fc9cc245e733edfdd1b4442a55ed7fe18226e3f7fd28b8d5fd88907fca2350c968c2918f0fe093c91cba0b87bb954b3280a000023025602d77ef2605b9d2720c269744d29ef36a79f700c0eab33eec64c5b8341d3143cc0d382133e6961216b5802820929b94a7bcb1f581110df1b4c52293b478694f8d147476bb3bc5e5a5018481950c395d42b423899a7c4e06b6befa46e2a67a70194a2d2e80234385db03c4ba693c61b84ff80571643f204ae1c7d42f5461f209f7b559bbb5a0c45d5ead100f30f615dbbccb6139a4afe8fa59496b1aaed900299f1c335ab35ee56a333fa22455c05b1ebb1b9bc3b0ca1e02abe0732b24a4ef6f9310db4dcaf37382f4a69e02829eb46bcf9a8132906f7e5c46afbac699a9618130cb39489d3ae793d8fcc43213198bc2cbe8a0fcffd1b69450d61e9c8e9ce80c19218335c48788ddde3d97c694611c783125d96392ad0295bd9600076978c64ec511106f9422e019b08041a43ef0b8abaec4cef8b8041b773f57068a38690056837008cfe86c143b821ddd9e4d517a2f6ca2e21bbbc3b1f0ea5f6d855c37f8814f15a00df3031328c804e360ca966287cce40b4d57e533e575263d48759428ca6df4154f4699d8f41b8c8e076aa225e0c1c0f278e21463a205bfc0a334f3516eae2c5222f87b57ef5e424505b9993d24a8d225b89517ed3015d5a64950bd265412d07a397bd454698571ab002ac752f7d0c8959025065eba27ea44574379a6a387ef7344a90f828a08afe8c27032c8431d30f323b56e7cbe9edb3c9327a2cabc3ea0dceccf4ec25b2861d5f8940823b57def9c184083586c6534f3402ba8d9d6ba1cfff07fba22d24d40bca43c96c56489ea10500b32b7359c2c296181ac4d5f7872377c40a819a8093859a42fa02a0a4f4b2ce4f44d87cabdb2433dcbc530a03516856417d25b06c38952c80f5348c96bf2549c72c8bb4735f958bf7e02c7a67e530611f2d80d547810bae4f52799a9eb6be5da14693d9d7c84dc0b2bef18e11c87a6977a669608ae4f1d1367687cfbeaec2308d1f2b24a95d8b25e4fe6c7cd47fc5800cc59c2467c778de641662e9a83431b5c014ff3a8cb777b92b5847318a8a525e44d45058fb03db60112a4b35b4370e9cc8e142a216308d987eea38d7b91f29b26535792c28ee9e9f7beb3668b765ca388cd3269f6f017d169196f55eea8f16280ceee95eafb1990b2eaacdb6a36386936a02a70cc8baed1ed7f75df629f618de95ccf62ca5f27fef54a22a94d313f1688526f34a834f14472c5a2d5fe91d828fb228c142c3bda3a7463a528d34d37ac32fa27e9b47fc9d817d91fb2dcec4c5c051cc46cfa47ee94f7843cfb8faa99da3569095245cd88674e5503ff2921852bde363894bfab4a13195c960e75940ea3625b3c6780580bc4694b5fe9bc118afa261bf51b8a5f79397cf4b27e84a15339bfe5f04f477ca9b0038a6a309c9ea89261e5da441f35598ee644eb7544d99b1e07f8a0e71b4f70e0faf47413518795a3d247e5f37863a80e83111bc8265dc7ab304e3097a8a825334ab4e507895be0862f5d219bff68ab180c307c6726b74e9197972da8bdc53f70e43c91406349b97d124622b4896c7471421047c8eca382953347c98df1959bcb269814ded7ee1e1bd5d724ba5d0a1af9d87ae96853de2de0798e7ae879513f2a561d3d7be2e04d382bfd2d0a27052c3e14aeae844cb6fcac2737d3f9f916715026a3d19c7401d2162add82a16b8e172c96ee8f0e4e645e7a201bcdf34271ee87eede9d36439c1962bb44b6433b19bad3c3bc841955be66176ceec74c5173a838a77fcc58ece7a7653c87f344c758278eb53b24142bf87472a6cb1367b0940154aac55dcc81dc8032987e9ea9856a5c844853616ffe3daaae85d50a20994126065e79e8e91022a5c8678a10870410361b74a0e37f9acc773c876f50da6776d43dcd80b3850fcbdd22d03cacad58fb8b408388efec93d42385fb266044178235fc5fe59dc35aef3eb8e89ada9c0ceb8f9379d9fe9045248196e918411bba64eb740337c0c8015540bebf581465d382f1e214f2f8a7b21b4983d8567de985d5e709ad9a8e0113be44e5f8f6aa9e592115669a494d1eddb3186a688a122ad66cc289e249c47d90168d499cac3fea3f2cac52eb840760837b485c6ce32e6ab2c4e1d2bce37f5105a1da6b34215bc19440189fbce47b4bf386c1ecde35ea39024fcf75e3b92a4d45a12452b8df5fd302faa71ab130d3d350907ff28dc4d62f01912eb5cfa84d2d818937d0ba7af08470128a92fb10e86d8a636c65be67c967f3bdd039a5eed1700e335ed92261b3600fb0f5ba72a8f5f86eaad9d51b8fc3c7fcc9ec7645079c4164398805cde129e8b7bf90c91d7bbdc411228a7f072920f40ab43074558ce7b48f9ef77f5fe6e845dcf0d23b12f3d61ea6435bf16b886bc9fb0af755fa472929f5536aa4a643783dc2749c33e4ec3c0ebf1824fcebceee319d346f34f1569b04dba2284bbe06f6c81794a94b6e470260c204e1f0c0a3645989ed557feef306815b67bc18025df1a3182b44d805903f438e70ff4dd59cecca60e755b7297c665462c768a1942b447e76d2a244e17295e94e77176f79f32b4734081138cc64f27243c1a2ebe7a094bf81b74208184b3212b769d55531d898eda1ac80c02b4c9564c9f2fd7882b605a445c963f40115908fd07587c4feed6253ba295922495e24d9a6779a8f1ed80ddac801b329ddb5ff32f654cde6c6faf1f917a036937a5d936b2bde8c547362322044d51ba758834a786814aec35c72c5c4f28a49cdb663876f0e82e73024f183823a4f12898bf6a71ec7bbe599e36f2c03186e8187b37856060d4f5d598e72b80672b8eed4206569c2d593b37d9c6cb64eec7d783c3d506c0568c0b205aa548bcac773732b56f8a0910f6c8b6a5cf846e84db67465ed7c3a88909d5ea256300566dc8bcdb279a36eb028e0577f3eedc7f0ae6111cef1445e29f0bf0a92b7c6601e75aecad62a9f21e5e1a4d744b652d4c60b434b9220b7f8169df36d5c172ea6ded7eabed08f91305e9f0748ae9cd56ed50418dc6eab2bc6d153a3d61834f16b3739d93afa510f2ddd26d3f913b6ef9278cb4c81c5b470b1002b63ef31432ca969c27fa3f463b3f3824cabeccfb35c8493d3b4d4dcad1305f37e607359ad219e4598ba7713aa3ca89f0b4ff710b83acf64ac1306d21a450422cc8bc9d0e4526655359ba2c3967dc0b4f7853b83043f66b2bab33d34510829e951cd13036474b2934fbea89b30137f0258b4c22d9e061e76c5cec96d72801295e47a1121bdd526196ce9ea6942197ae990c59a3a71447192ab4bc0bf0904b83a52413c157625a5df9547bc7015f3b48729eb1fcb462c1fe9fbcb2ea9d921107d5dadbce9a2a7f5fce1502b5132500b86978d4132e903f907c62d91d85cf5f5a315f7b8dcd9e143e5b7a66dcdd1411515586b13401b6038af4f4b01f76f438171aec9bfd0b45baf14301d54aa00e6936869f0c92109ec1a509000000000000008f0da6d47a8e5e24d92e678f63572371f85486ee1dcc071df165f0695df15f8b60587765f4cd49819880a779a7290cbd65b8df57c3f2d1139e8fc8383d9aee5466fbb97d66a85c7ab7091fe00806f862a39a51d998c6efec7727d953fe4e72f218858c5e848456429aeda5e92c40480d9e84e87ee61ade1a82f8838fe1f28bd294af45b9a2fe12462c78dde15bec8723c74825d0d83e9d071f91d57ebe0ba2fc1e6e75d6ef6859289b22fe9d90819d1e99043a365c608dd6ce89c23f62f9772fe6ad59383e01b8bbba61e836d66e7ba91e1e246c9755f023f6b05c452fdcb167b7ebe5e0a113c8681397316761e66239911ba677baf7552090d316bd75cd05fb0caf235c523cf607157b7d4cde8b144d49df4f339a65411a92ee68a4f1c2ddf9fbc3910d6a60673836990d3f82501554919b37e66cbb5bd75401dfda96092d114bc259860438cfb79ea33607ca30798ddaefef2715a3d91946fc26f94bd269ba7567dcd9c50ad11ee96347bccba629a784c7b662873a866f73f1dda2aa2082ba26d270d6471236823dc05b788de80f94e5c294af129128d34cfb44105a8b40d4f8441c21a098eb04e48bca616dc6915b52fa6a9fb0ab5eef802fd3d8dcf182258567951be20a0ebf49116216432e91033f6085fbf72ed1d60717739f3499b52b6b684e0d42e33f736657a898cb3fa5da70e8710d35fb11e2996031a82cce1d55d8fa4bead1a35e458b8811fd7ad70c566146daf8d9ac29288ca45ab50f7779526be7741ad9f39daac4195fa13914b7151115b06d2d07dd1a4af6efe38a225f7f8b183a43797d5a1d7c046613d78b19bf9d2316fbcdfc935fc54477b095295553bb417e527e3814d165cdeb43c552f05b1f66d13aca2496327760c93b8a1427c2272c405d8b94f8eb275249a0947c332049ee0bad7136669c7df63dc120ea62c79d04a39db50af4d76e9dd5dcd74a77b8fcd1981b6f138a048970e94fe6c4082b49f7e397e0f9b9fc7368aebaf3ba0c051d08f6770e6ddca26f8eca0415552bbe7b1c41e1e87f52981f2de74bded1a1d5bc41e60d19e4e05de1db2e9700256741fd6e86028fd21aaae7d3978d09baa4ebdf9a39aee448d344f2e5c050fe3293c6c74a7cb16755554747b010f10bff9b6f02c82da4f78b5b5596aafa01b5027ccaad437c125390416f36f1df42ef52a1d5af117e7866cc9f61b950ce922e3a1a6ff586e14add3e14781116d643e74124e570392572393c56e78906a24cec1ef196ccd22a7e492084a04b8ca069b95d5e12ad19e76b4ced072ce0bff78d7fe3a3750fe541ed053fb3fe08f29a773cb68d2cb8418f1b3bd4949720ae4104ed20d9aa5d2541317367d02db5f60f6b8df2ff596bd166692cee510b59da757532d88ddf3e8944f01a63ca0657ed24ea5b8110cb53731c539e94633e41d71fa59919d96287a505e8c4e9ac3d9b5e9180b93b670e37aeeec29bdabaac747f8bdf2a5275b61cb8f2081c5655fb047e9036d2273d4674e0382c5d5ebb50448ac02b07d851d66f8836fec1ac3e42c5405adcecb31f50b20e6573dad067999b78f7351bea9e8ca6536fc304eede9cdb905c24f475141349a1b00ad68198ca88898f29afcfb63ebf63d7d037529cf8219dbdb85d01cf5fc3d4b045c9400f672a6deb1ff4d197a28b2a7304e751541a046bc4812ba2fa9e430c79a0b34ab764933148ed337d34dfabf055608109bfd85c739f9c2353f1137582bc73a8d4310cb8ca1dd192b9335ce4ffca52907f37f29f0e96be21e33b5074f0e16d11a08b274150eb876024ae815e67f3c13c6a3f158c4fd7a26bb2f5d19a2f097235d2fc235f67bdc9b11ffeef3168eb360388749f2f8b91fc3249edc58a959577aa205a105af400"}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x4, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x4, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 308.616832ms ago: executing program 4 (id=2259): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x15) ioctl$FIONREAD(r0, 0x541b, 0x0) tkill(0x0, 0x17) tgkill(0x0, 0x0, 0x22) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x1, 0x8001, 0x7, r1}) 248.123934ms ago: executing program 4 (id=2260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001100)={'veth1_macvtap\x00', {0x2, 0x0, @empty}}) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r5, r9, &(0x7f0000000380)={0x0, 0x1460, 0x800, 0x3, 0x3bc}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x0, 0x80000003, 0x3ad, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2000, 0x1, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8c1, 0x10, 0x3, 0x400218, 0x0, r5}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r9, &(0x7f0000000140)={0x0, 0x6a35, 0x80, 0x3, 0x248, 0x0, r3}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x479a, 0x1, 0x1, 0x2aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x580b, 0x8, 0x3, 0x3c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7c8, 0x20, 0x0, 0xa8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7634, 0x40, 0x0, 0x4a, 0x0, r1}}], 0x4, &(0x7f0000003680)={0x2e, 0x6, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x655b}, 0x0, 0x0, '\x00', {0x2, 0x8d4, 0x0, &(0x7f0000002680)=@buf_max_buf="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"}}, &(0x7f0000003700)) futex(&(0x7f0000000080)=0x1, 0xc, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) fcntl$setpipe(r4, 0x407, 0xffffffff80000000) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 164.501925ms ago: executing program 5 (id=2261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004411fffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x4, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xc, 0x5, 0x4, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0x8, 0x61, 0x200002000001, 0x5, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x7, 0x400000000, 0x6, 0xf739], 0x8000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 113.298047ms ago: executing program 5 (id=2262): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x5, 0xdc, {0xdc, 0x21, "f619bec153c4732df725b342114b678afae097412998cb6009f4d200a45009a81e127f6185a0cc73e641a32ed13b3bfa5081c13a41b127311895da992b0c5a9583615a4ac967008a06b943b0285e414862f4dccf6de6fa03e1166e19d715aac36a698bf8575b4c690b2ebd7e6d69949e65d225a53191dc328be1a5cd7cc85d61003138d4b5ac284e967074422ccba990a6154f10cf468a56e765950a372a5c31e9110e440f8e0ab04e0e53070a7c6c08075f3e1984b8c321d69fd6d1c867ad672acfffb6740217ffe665f1594d874f6d94cd350e21992dd4e702"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x11, 0x79, "cd01fe2a3564c93a442db349dc01f0199378aa9486dce322bbfb22f458a1778c9fe7df6ca9657dc0e7cdc02dfbe1fcf20ea88c101ea2907063d93e26eb881df1bd9eba402856162dc2dec9d3308a70222db716cc8f9f5ce090f5cb1b3d8ef45d915b61f97e3be28a1025e04804937666dfe8b4aa0a480beb57"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xfffe, 0x5, 0x4790, 0x8bbf, 0x8000, 0x6, 0x40, 0x6, 0x4, 0x3, 0x7, 0xec4f}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0xbb66}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 88.784537ms ago: executing program 2 (id=2263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)}, 0x84) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)}, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000440)={0x1020, 0x15, 0x400, 0x70bd26, 0x25dfdbff, {0x9}, [@nested={0x100c, 0xde, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@multicast2}, @generic="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"]}]}, 0x1020}, 0x1, 0x0, 0x0, 0x24018000}, 0x4004014) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) 1.18194ms ago: executing program 2 (id=2264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x20000041) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000280)=0x5, 0x4) sendto(r1, &(0x7f00000002c0)="312092ac2d2df5dcb7ac298e83644ee79bf0456de10f1c2a1d5e54caf72fa78753e9e13478a7181317dc7011eb37776a118cd826e186a11b327e13983edf7a245f4bd0bfa0dcd6e35485d91215e3869c74a87b00e7783fc43b7e6c857aef8940f3a50a4eb542bba86e1dd862921cf9184d3bfafc1e418ab3e2dbb11aba5031172c53fffc3d13751fe8ca053e105bc9902b0c381dfbdd8cf83ff6c898fe5225f512a0b90e2e852e9468e4d6700685ee8045e38f022a9547f48b5cf44e4acac419e2a4cf", 0xc3, 0x9000, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x4, @random="d60461ecb42e", 'veth0_virt_wifi\x00'}}, 0x80) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040401) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040008) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) fcntl$setflags(r1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x20000080) r9 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xac, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x5, 0x8, '-'}, @NFTA_OBJ_USERDATA={0x63, 0x8, "948ddf1688a2f9f3efcfc692e4d84e28b056696a4c1a8b3d61c665a784b9a3fff0a6ca78e7b2fa8eae985ef26e62d8254ee22d7a6590d94a72a6034358e34c758a60d868420d85dac5990fa53bb3d01893b4698524438b902e0de627f9a9de"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x40011}, 0x40084) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x25, 0xa, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x1) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000d40)=0x1, 0x4) write$binfmt_elf32(r9, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x8, 0x8, 0xa, 0x2, 0x6, 0xfffffff8, 0x357, 0x38, 0x3c0, 0x4, 0x2, 0x20, 0x3, 0x12, 0xeea, 0x7}, [{0x5, 0x0, 0x7d, 0xa, 0x1, 0x912, 0x8000, 0x8}, {0x3, 0x7, 0x8, 0x80000001, 0x58, 0xadec, 0x3, 0x3b}, {0x6474e551, 0x3cbfe8b0, 0x1, 0x8, 0x6, 0x3, 0x0, 0x7fff}], "4ba04eff562d051c5ab7d390fa6e7b9225ec790ece5fba5825be15bec7ae8b1a69f2fa9263fe4b3b410477486479b31437b1b0499d00533b27c910974a08386636fe087a3c9abd8778b4718c8d58fe56dd735f05ccf44249bad185a9d059ccbd6252a319ccde22a2b9b929e3825b6741e9bd5cd119355be5002a9bf6f35a4d4d5be42d7b551127e8a312565e4df622d7defd804561afe24a650a11641335eb30330923eddd114964f5397c39734ad6d58081a7258c173d8f13fbc4b3a7afc1ad0b8a3c32625f693101e824a5bf3d6bbdf2fe60ad68b3c391f132b1a67512d7135f18492a5981", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa7e) ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000001800)='syz0\x00') r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001840), 0x82a00, 0x0) readlinkat(r10, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r9, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x14, 0x20, 0x70bd29, 0x25dfdbfb, {0x6, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x28, 0x1, "3814f109dd11069b3540e339045b23343aafa55e45b68263a2962efb01e4c0a3a31e1c28"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 0s ago: executing program 2 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_DESTROY(r3, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xc4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x800, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdb1f48f2fca30005005dfb3114bb00100008000200000000000c00098008000100d5c4d20bbe5f3a903eb72fe594f0be83f6f05578348f2d8963cf11137f71c8d496ae280e914ee0186c2563234cc1ed8b0458b335571bb90f48f4ae9aaf6e4d2f7936ea6ec7c0a9ee7ddf09d2f6", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) kernel console output (not intermixed with test programs): r dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 225.241189][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x0 [ 225.248265][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x1 [ 225.255204][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x0 [ 225.262287][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x0 [ 225.269272][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x3 [ 225.276232][ T45] lenovo 0003:17EF:60A3.002D: unknown main item tag 0x6 [ 225.283761][ T45] lenovo 0003:17EF:60A3.002D: hidraw0: USB HID v0.09 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 225.652963][ T311] usb 1-1: USB disconnect, device number 2 [ 225.786505][ T45] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 225.937479][ T45] usb 3-1: config 6 has an invalid interface number: 118 but max is 1 [ 225.945730][ T45] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 225.954642][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 225.962134][ T45] usb 3-1: config 6 has no interface number 0 [ 225.968230][ T45] usb 3-1: config 6 interface 118 has no altsetting 0 [ 225.976590][ T45] usb 3-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=27.48 [ 225.985726][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.993753][ T45] usb 3-1: Product: syz [ 225.997926][ T45] usb 3-1: Manufacturer: syz [ 226.002494][ T45] usb 3-1: SerialNumber: syz [ 226.037005][ T393] usb 5-1: USB disconnect, device number 54 [ 226.043795][ T393] usblp0: removed [ 226.116472][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 226.122647][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.129298][ T311] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 226.138359][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.147311][ T311] usb 1-1: config 0 descriptor?? [ 226.176477][ T393] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 226.211301][ T45] ax88179_178a 3-1:6.118: probe with driver ax88179_178a failed with error -22 [ 226.225904][ T45] usb 3-1: USB disconnect, device number 43 [ 226.329175][ T393] usb 5-1: Using ep0 maxpacket: 8 [ 226.335534][ T393] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 226.344101][ T393] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 226.352612][ T393] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 226.361680][ T393] usb 5-1: config 250 has no interface number 0 [ 226.367979][ T393] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 226.379558][ T393] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 226.390066][ T393] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.400448][ T393] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.410974][ T393] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 226.424489][ T393] usb 5-1: config 250 interface 228 has no altsetting 0 [ 226.432478][ T393] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.441557][ T393] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.449814][ T393] usb 5-1: Product: syz [ 226.453959][ T393] usb 5-1: SerialNumber: syz [ 226.461026][ T393] hub 5-1:250.228: bad descriptor, ignoring hub [ 226.467334][ T393] hub 5-1:250.228: probe with driver hub failed with error -5 [ 226.554560][ T311] hid (null): invalid report_count 2060905014 [ 226.562292][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x2 [ 226.569236][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x6 [ 226.576110][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.582997][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.589912][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.596808][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.603680][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.610576][ T311] wacom 0003:056A:00BB.002E: unknown main item tag 0x0 [ 226.617484][ T311] wacom 0003:056A:00BB.002E: invalid report_count 2060905014 [ 226.624855][ T311] wacom 0003:056A:00BB.002E: item 0 4 1 9 parsing failed [ 226.632064][ T311] wacom 0003:056A:00BB.002E: parse failed [ 226.637840][ T311] wacom 0003:056A:00BB.002E: probe with driver wacom failed with error -22 [ 226.663487][ T36] audit: type=1400 audit(1783086844.830:643): avc: denied { create } for pid=5486 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 226.728766][ T36] audit: type=1400 audit(1783086844.900:644): avc: denied { associate } for pid=5520 comm="syz.2.1572" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 226.759420][ T322] usb 1-1: USB disconnect, device number 3 [ 226.793207][ T5532] veth0_macvtap: entered promiscuous mode [ 226.838913][ T5534] : renamed from bond_slave_0 [ 226.845039][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 226.855025][ T5534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5534 comm=syz.2.1576 [ 227.196490][ T11] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 227.235503][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.244091][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.261379][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.270062][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.270582][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.287240][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.356496][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 227.363286][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.373664][ T11] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.382728][ T11] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 227.393688][ T36] audit: type=1400 audit(1783086845.550:645): avc: denied { checkpoint_restore } for pid=5567 comm="syz.5.1588" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.415478][ T11] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 227.434299][ T11] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.445344][ T11] usb 3-1: config 1 interface 1 has no altsetting 0 [ 227.453578][ T11] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 227.462763][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.470797][ T11] usb 3-1: Product: syz [ 227.474977][ T11] usb 3-1: Manufacturer: syz [ 227.479615][ T11] usb 3-1: SerialNumber: syz [ 227.576486][ T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 227.697372][ T11] usb 3-1: selecting invalid altsetting 0 [ 227.727466][ T45] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 227.737371][ T45] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 227.747345][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 227.755877][ T45] usb 1-1: string descriptor 0 read error: -22 [ 227.762098][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 227.771178][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.780138][ T5564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.787378][ T5564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.889002][ T5583] overlayfs: conflicting options: userxattr,redirect_dir=on [ 227.897165][ T11] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 227.930581][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.939192][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.996182][ T322] usb 1-1: USB disconnect, device number 4 [ 228.105288][ T11] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 228.115406][ T11] usb 3-1: USB disconnect, device number 44 [ 228.125445][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.467096][ T5590] overlay: ./file0 is not a directory [ 228.856478][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 229.017540][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.028643][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.043984][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 229.057502][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.067612][ T45] usb 3-1: config 0 descriptor?? [ 229.078311][ T36] audit: type=1400 audit(1783086847.250:646): avc: denied { map } for pid=5604 comm="syz.0.1600" path="socket:[40112]" dev="sockfs" ino=40112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 229.346467][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.478393][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.485238][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.492100][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.498945][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.505731][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.512573][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.519400][ T45] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 229.527175][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.534978][ T45] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 229.546387][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.556583][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 229.567513][ T310] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.581778][ T310] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 229.590867][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.598885][ T310] usb 1-1: Product: syz [ 229.603056][ T310] usb 1-1: Manufacturer: syz [ 229.607681][ T310] usb 1-1: SerialNumber: syz [ 229.816786][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 229.827191][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 229.840164][ T310] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 229.850093][ T310] usb 1-1: USB disconnect, device number 5 [ 229.860490][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.881905][ T45] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 229.889357][ T45] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 229.898177][ T45] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -71 [ 229.907803][ T45] usb 3-1: USB disconnect, device number 45 [ 230.165642][ T5616] netlink: 'syz.5.1604': attribute type 27 has an invalid length. [ 230.182286][ T5616] sit0: left promiscuous mode [ 230.204639][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.211897][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.306772][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 230.606478][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.686470][ T5625] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 230.776473][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 230.782602][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 230.793873][ T45] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 230.802983][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.811012][ T45] usb 1-1: Product: syz [ 230.815216][ T45] usb 1-1: Manufacturer: syz [ 230.819886][ T45] usb 1-1: SerialNumber: syz [ 230.825670][ T5634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.836452][ T5625] usb 3-1: device descriptor read/64, error -71 [ 230.914531][ T5674] netlink: 'syz.4.1619': attribute type 16 has an invalid length. [ 230.922427][ T5674] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1619'. [ 231.048718][ T36] audit: type=1400 audit(1783086849.220:647): avc: denied { load_policy } for pid=5633 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 231.048750][ T5634] SELinux: policydb string does not match my string SE Linux [ 231.069717][ T5679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.077060][ T5625] usb 3-1: device descriptor read/64, error -71 [ 231.085523][ T5679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.091619][ T5634] SELinux: failed to load policy [ 231.170476][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 231.180602][ T45] usb 1-1: USB disconnect, device number 6 [ 231.194122][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.336916][ T5625] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 231.466514][ T5625] usb 3-1: device descriptor read/64, error -71 [ 231.497311][ T393] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 55 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 231.574973][ T5684] incfs: Backing dir is not set, filesystem can't be mounted. [ 231.582571][ T5684] incfs: mount failed -2 [ 231.681124][ T5689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1623'. [ 231.706517][ T5625] usb 3-1: device descriptor read/64, error -71 [ 231.718195][ T5689] netlink: 'syz.0.1623': attribute type 10 has an invalid length. [ 231.775370][ T610] tipc: Subscription rejected, illegal request [ 231.817056][ T5625] usb usb3-port1: attempt power cycle [ 232.156475][ T5625] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 232.177539][ T5625] usb 3-1: device descriptor read/8, error -71 [ 232.317847][ T5625] usb 3-1: device descriptor read/8, error -71 [ 232.427923][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 232.443630][ T5697] rust_binder: 401: no such ref 0 [ 232.556491][ T5625] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 232.577390][ T5625] usb 3-1: device descriptor read/8, error -71 [ 232.707477][ T5625] usb 3-1: device descriptor read/8, error -71 [ 232.756382][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.764919][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.774523][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.783815][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.791905][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.800961][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.818278][ T5625] usb usb3-port1: unable to enumerate USB device [ 232.826142][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.834693][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.946491][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 233.106492][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 233.112704][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.123619][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.133468][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.146283][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.155410][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.164078][ T45] usb 1-1: config 0 descriptor?? [ 233.450047][ T36] audit: type=1400 audit(1783086851.620:648): avc: denied { read } for pid=5726 comm="syz.2.1634" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.479702][ T36] audit: type=1400 audit(1783086851.640:649): avc: denied { open } for pid=5726 comm="syz.2.1634" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.502952][ T36] audit: type=1400 audit(1783086851.640:650): avc: denied { map } for pid=5726 comm="syz.2.1634" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.526103][ T36] audit: type=1400 audit(1783086851.640:651): avc: denied { execute } for pid=5726 comm="syz.2.1634" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.572364][ T45] microsoft 0003:045E:07DA.0030: No inputs registered, leaving [ 233.582760][ T45] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 233.594826][ T45] microsoft 0003:045E:07DA.0030: no inputs found [ 233.604231][ T45] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 233.846474][ T5620] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 233.996469][ T5620] usb 3-1: Using ep0 maxpacket: 32 [ 234.003280][ T5620] usb 3-1: config 233 has an invalid interface number: 2 but max is 0 [ 234.011505][ T5620] usb 3-1: config 233 has no interface number 0 [ 234.017780][ T5620] usb 3-1: config 233 interface 2 has no altsetting 0 [ 234.025785][ T5620] usb 3-1: New USB device found, idVendor=2304, idProduct=0227, bcdDevice= 5.00 [ 234.034897][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.042913][ T5620] usb 3-1: Product: syz [ 234.047075][ T5620] usb 3-1: Manufacturer: syz [ 234.051661][ T5620] usb 3-1: SerialNumber: syz [ 234.247905][ T5734] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 234.256293][ T5734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 234.274235][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.279899][ T393] usb 1-1: USB disconnect, device number 7 [ 234.284635][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.306549][ T5620] usb 3-1: USB disconnect, device number 50 [ 234.347360][ T36] audit: type=1400 audit(1783086852.520:652): avc: denied { mount } for pid=5739 comm="syz.5.1638" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 234.551774][ T5746] 2N: renamed from vcan0 [ 234.666471][ T393] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.796472][ T393] usb 1-1: device descriptor read/64, error -71 [ 235.036468][ T393] usb 1-1: device descriptor read/64, error -71 [ 235.140016][ T5756] can: request_module (can-proto-6) failed. [ 235.215270][ T5761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.223858][ T5761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.286504][ T393] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 235.416499][ T393] usb 1-1: device descriptor read/64, error -71 [ 235.448105][ T5776] kvm: kvm [5775]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x77f2 [ 235.456872][ T5776] kvm: kvm [5775]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb78a [ 235.656605][ T393] usb 1-1: device descriptor read/64, error -71 [ 235.766610][ T393] usb usb1-port1: attempt power cycle [ 235.819250][ T5792] rust_binder: 5791:5792 transaction to 0 failed: ENOENT [ 235.820363][ T5792] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1654'. [ 235.955892][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 236.107847][ T393] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 236.127378][ T393] usb 1-1: device descriptor read/8, error -71 [ 236.257454][ T393] usb 1-1: device descriptor read/8, error -71 [ 236.436495][ T5625] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 236.496475][ T393] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 236.517420][ T393] usb 1-1: device descriptor read/8, error -71 [ 236.586460][ T5625] usb 3-1: Using ep0 maxpacket: 32 [ 236.592631][ T5625] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 236.604011][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.610741][ T5625] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 236.620105][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.628897][ T5625] usb 3-1: config 0 descriptor?? [ 236.634090][ T5808] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 236.647417][ T393] usb 1-1: device descriptor read/8, error -71 [ 236.756566][ T393] usb usb1-port1: unable to enumerate USB device [ 237.045465][ T5625] waltop 0003:172F:0502.0031: ignoring exceeding usage max [ 237.053420][ T5625] waltop 0003:172F:0502.0031: unknown main item tag 0x3 [ 237.060430][ T5625] waltop 0003:172F:0502.0031: unknown main item tag 0x1 [ 237.067440][ T5625] waltop 0003:172F:0502.0031: unknown main item tag 0x2 [ 237.074427][ T5625] waltop 0003:172F:0502.0031: item fetching failed at offset 40/42 [ 237.082524][ T5625] waltop 0003:172F:0502.0031: probe with driver waltop failed with error -22 [ 237.246022][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.254549][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.263274][ T5620] usb 3-1: USB disconnect, device number 51 [ 237.726513][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.876478][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 237.883893][ T45] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 237.893141][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.901231][ T45] usb 1-1: Product: syz [ 237.905404][ T45] usb 1-1: Manufacturer: syz [ 237.910022][ T45] usb 1-1: SerialNumber: syz [ 238.117262][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.125813][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.136714][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 238.146402][ T45] usb 1-1: USB disconnect, device number 12 [ 238.156766][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.586471][ T5625] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 238.736460][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 238.742845][ T5625] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.750587][ T5625] usb 3-1: can't read configurations, error -61 [ 238.876484][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.886571][ T5625] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 239.026501][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 239.032698][ T45] usb 1-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 239.041789][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.046467][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 239.053348][ T45] usb 1-1: config 0 descriptor?? [ 239.056275][ T5625] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.067385][ T5625] usb 3-1: can't read configurations, error -61 [ 239.073782][ T5625] usb usb3-port1: attempt power cycle [ 239.262429][ T5620] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 239.270520][ T5620] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.416478][ T5625] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 239.436868][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 239.443257][ T5625] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.450884][ T5625] usb 3-1: can't read configurations, error -61 [ 239.534058][ T45] holtek_mouse 0003:04D9:A0C2.0033: unknown main item tag 0x4 [ 239.541596][ T45] holtek_mouse 0003:04D9:A0C2.0033: unknown main item tag 0xd [ 239.549255][ T45] holtek_mouse 0003:04D9:A0C2.0033: unknown main item tag 0x0 [ 239.557722][ T45] holtek_mouse 0003:04D9:A0C2.0033: unknown main item tag 0x0 [ 239.565208][ T45] holtek_mouse 0003:04D9:A0C2.0033: unknown main item tag 0x0 [ 239.572704][ T45] holtek_mouse 0003:04D9:A0C2.0033: item fetching failed at offset 17/40 [ 239.581284][ T45] holtek_mouse 0003:04D9:A0C2.0033: hid parse failed: -22 [ 239.588443][ T45] holtek_mouse 0003:04D9:A0C2.0033: probe with driver holtek_mouse failed with error -22 [ 239.596474][ T5625] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 239.616804][ T5625] usb 3-1: Using ep0 maxpacket: 8 [ 239.623176][ T5625] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.630974][ T5625] usb 3-1: can't read configurations, error -61 [ 239.637376][ T5625] usb usb3-port1: unable to enumerate USB device [ 239.797083][ T45] usb 1-1: USB disconnect, device number 13 [ 240.159812][ T5840] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1670'. [ 240.556476][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.681224][ T5844] overlayfs: failed to clone upperpath [ 240.702390][ T5848] overlayfs: failed to clone upperpath [ 240.706478][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 240.714096][ T5848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1674'. [ 240.715404][ T45] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 240.732402][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.740441][ T45] usb 1-1: Product: syz [ 240.744608][ T45] usb 1-1: Manufacturer: syz [ 240.749237][ T45] usb 1-1: SerialNumber: syz [ 241.159761][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 241.166875][ T45] usb 1-1: unit 5 not found! [ 241.175799][ T45] usb 1-1: USB disconnect, device number 14 [ 241.756729][ T36] audit: type=1326 audit(1783086859.930:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.0.1684" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ac7b9de59 code=0x0 [ 241.781518][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 241.948491][ T45] usb 3-1: config 0 has an invalid interface number: 61 but max is 0 [ 241.956648][ T45] usb 3-1: config 0 has no interface number 0 [ 241.962756][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 241.972012][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.981364][ T45] usb 3-1: config 0 descriptor?? [ 242.266468][ T5625] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 242.417428][ T5625] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 242.425720][ T5625] usb 1-1: config 127 has no interface number 0 [ 242.432028][ T5625] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 242.444372][ T5625] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 242.453436][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.461487][ T5625] usb 1-1: Product: syz [ 242.465793][ T5625] usb 1-1: Manufacturer: syz [ 242.470419][ T5625] usb 1-1: SerialNumber: syz [ 242.476964][ T5886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.885318][ T5886] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.510241][ T5625] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 243.520597][ T5625] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 243.686656][ T5625] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 243.696985][ T5625] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 243.867790][ T5625] asix 1-1:127.57 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, 0a:d2:bc:34:c6:02 [ 243.880558][ T5625] usb 1-1: USB disconnect, device number 15 [ 243.886967][ T5625] asix 1-1:127.57 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 244.018081][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.040244][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.056231][ T36] audit: type=1400 audit(1783086862.220:654): avc: denied { write } for pid=5925 comm="syz.4.1694" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.082100][ T36] audit: type=1400 audit(1783086862.250:655): avc: denied { ioctl } for pid=5925 comm="syz.4.1694" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.366487][ T5625] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 244.389471][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 244.399016][ T5939] overlayfs: failed to resolve './file1': -2 [ 244.422034][ T45] usb 3-1: USB disconnect, device number 56 [ 244.517818][ T5625] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.525846][ T5625] usb 1-1: not running at top speed; connect to a high speed hub [ 244.535564][ T5625] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 244.544786][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.552795][ T5625] usb 1-1: Product: syz [ 244.556978][ T5625] usb 1-1: Manufacturer: syz [ 244.561573][ T5625] usb 1-1: SerialNumber: syz [ 244.592826][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.601366][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.609869][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.618629][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.627548][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.636335][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.716525][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 244.773156][ T5625] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 244.783768][ T5625] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.794386][ T5625] usb 1-1: USB disconnect, device number 16 [ 244.800628][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.866475][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 244.872601][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.883621][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.893483][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.906289][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.915331][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.923923][ T45] usb 3-1: config 0 descriptor?? [ 245.106475][ T5625] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.256661][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 245.269678][ T5625] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 245.280651][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.288728][ T5625] usb 1-1: Product: syz [ 245.292943][ T5625] usb 1-1: Manufacturer: syz [ 245.297727][ T5625] usb 1-1: SerialNumber: syz [ 245.332324][ T45] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 245.367605][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.376113][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.510813][ T5625] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 245.524773][ T5625] usb 1-1: USB disconnect, device number 17 [ 245.534593][ T45] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 245.543414][ T45] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 245.554960][ T45] microsoft 0003:045E:07DA.0034: no inputs found [ 245.561438][ T45] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 245.571834][ T45] usb 3-1: USB disconnect, device number 57 [ 245.586167][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.595749][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.601382][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 246.113688][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.122901][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.185491][ T5995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.192733][ T5995] IPv6: NLM_F_CREATE should be set when creating new route [ 246.200021][ T5995] IPv6: NLM_F_CREATE should be set when creating new route [ 246.286477][ T5625] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 246.436464][ T5625] usb 3-1: Using ep0 maxpacket: 32 [ 246.442549][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 246.453738][ T5625] usb 3-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 246.462785][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.471342][ T5625] usb 3-1: config 0 descriptor?? [ 246.616542][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 246.688901][ T5625] usbhid 3-1:0.0: can't add hid device: -71 [ 246.707669][ T5625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 246.726790][ T5625] usb 3-1: USB disconnect, device number 58 [ 246.746473][ T45] usb 1-1: device descriptor read/64, error -71 [ 246.952966][ T6032] overlayfs: failed to clone lowerpath [ 246.962818][ T6032] overlayfs: failed to clone lowerpath [ 246.992917][ T45] usb 1-1: device descriptor read/64, error -71 [ 247.153815][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.162487][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.166233][ T5625] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 247.246472][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 247.327420][ T5625] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 247.335693][ T5625] usb 3-1: config 127 has no interface number 0 [ 247.341987][ T5625] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 247.354332][ T5625] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 247.363396][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.371389][ T5625] usb 3-1: Product: syz [ 247.375526][ T5625] usb 3-1: Manufacturer: syz [ 247.380121][ T5625] usb 3-1: SerialNumber: syz [ 247.385758][ T6010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.396615][ T45] usb 1-1: device descriptor read/64, error -71 [ 247.636474][ T45] usb 1-1: device descriptor read/64, error -71 [ 247.748454][ T45] usb usb1-port1: attempt power cycle [ 247.751308][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.762426][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.794127][ T6010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.086474][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 248.107414][ T45] usb 1-1: device descriptor read/8, error -71 [ 248.237478][ T45] usb 1-1: device descriptor read/8, error -71 [ 248.421976][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.426465][ T5625] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 248.432084][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.440679][ T5625] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 248.449931][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.467080][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.476477][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 248.497429][ T45] usb 1-1: device descriptor read/8, error -71 [ 248.606678][ T5625] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 248.617007][ T5625] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 248.637429][ T45] usb 1-1: device descriptor read/8, error -71 [ 248.746566][ T45] usb usb1-port1: unable to enumerate USB device [ 248.787857][ T5625] asix 3-1:127.57 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 0a:d2:bc:34:c6:02 [ 248.801681][ T5625] usb 3-1: USB disconnect, device number 59 [ 248.810180][ T5625] asix 3-1:127.57 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 248.995688][ T36] audit: type=1400 audit(1783086867.160:656): avc: denied { unmount } for pid=3161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 249.024005][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.040206][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.066397][ T6111] netlink: 'syz.2.1734': attribute type 9 has an invalid length. [ 249.076728][ T6112] netlink: 'syz.2.1734': attribute type 9 has an invalid length. [ 249.094485][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.103790][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.326489][ T45] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 249.476479][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 249.482670][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 249.491809][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.500533][ T45] usb 3-1: config 0 descriptor?? [ 249.563634][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.572206][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.748137][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 249.755861][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.764710][ T45] usb 3-1: USB disconnect, device number 60 [ 249.786490][ T5620] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 249.936466][ T5620] usb 1-1: Using ep0 maxpacket: 16 [ 249.942636][ T5620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.952797][ T5620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.962355][ T5620] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 249.971445][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.979458][ T5620] usb 1-1: SerialNumber: syz [ 249.985846][ T5620] usb 1-1: 0:2 : does not exist [ 250.321059][ T6148] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1745'. [ 250.576490][ T5625] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 250.661735][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1747'. [ 250.671906][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1747'. [ 250.681336][ T6152] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 250.700284][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1749'. [ 250.818401][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.826839][ T5625] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.838566][ T5625] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 250.847747][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.855743][ T5625] usb 3-1: Product: 蚤좱㚸錳ṣ᫄︯鑱텿꺌ꓗ荐狓䉃킎牔ਹꁎ삓䙙휿꜏ỏ誜坥롃䙬᧎棂Ꝓ캏䂩㌙邷ࠈᆘĥ誷蕩櫎稄ᄌ꿅밴⿨ꔬ䳡ﱒླྀ壤逕窒箨鰋킽 [ 250.874530][ T5625] usb 3-1: SerialNumber: syz [ 251.043440][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.051984][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.087668][ T6150] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 251.097211][ T6150] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 251.350631][ T6167] netlink: 'syz.5.1754': attribute type 4 has an invalid length. [ 251.368332][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6172 comm=syz.5.1755 [ 251.390443][ T6174] syz.5.1756 (6174): attempted to duplicate a private mapping with mremap. This is not supported. [ 251.401975][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1756'. [ 251.411699][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1756'. [ 251.600594][ T36] audit: type=1400 audit(1783086869.770:657): avc: denied { connect } for pid=6185 comm="syz.4.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.635728][ T6191] incfs_lookup_dentry err:-13 [ 251.669088][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.677613][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.190456][ T5620] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 252.401710][ T5620] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 252.421509][ T5620] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 252.430970][ T5620] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 252.440586][ T5620] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 252.450449][ T5620] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 252.462758][ T5620] usb 1-1: USB disconnect, device number 22 [ 252.464898][ T5625] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 252.491512][ T5625] usb 3-1: USB disconnect, device number 61 [ 252.528575][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 252.796520][ T5620] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 252.946479][ T5620] usb 1-1: Using ep0 maxpacket: 16 [ 252.952658][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.963658][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.973410][ T5620] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.986287][ T5620] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 252.995341][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.004128][ T5620] usb 1-1: config 0 descriptor?? [ 253.213947][ T6232] syzkaller1: entered promiscuous mode [ 253.219508][ T6232] syzkaller1: entered allmulticast mode [ 253.386468][ T45] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 253.427721][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.434993][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.442301][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.449568][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.456881][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.464095][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.471414][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.478662][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.485857][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.493090][ T5620] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 253.503550][ T5620] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0035/input/input49 [ 253.516360][ T5620] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 253.547487][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.554134][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 253.563327][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.571981][ T45] usb 3-1: config 0 descriptor?? [ 253.668198][ T5620] usb 1-1: USB disconnect, device number 23 [ 253.981236][ T6242] netlink: 'syz.2.1775': attribute type 3 has an invalid length. [ 253.990161][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 253.997806][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.004501][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.011215][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.017919][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.024602][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.031337][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.038216][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.044946][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.051696][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.058415][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.065099][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.071830][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.078536][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.085207][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.091913][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.098639][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.105359][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.112105][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.118969][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.125661][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.132423][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.139157][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.145833][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.152561][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.159351][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.161769][ T6258] overlayfs: failed to clone upperpath [ 254.166064][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.178284][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.185079][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.193214][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.200159][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.217212][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.223972][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.246517][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.253257][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.267912][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.274649][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.281400][ T45] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 254.289017][ T45] kye 0003:0458:0138.0036: hidraw0: USB HID v0.18 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 254.313621][ T45] usb 3-1: USB disconnect, device number 62 [ 254.332567][ T6264] fido_id[6264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 254.570311][ T6271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1784'. [ 254.579441][ T6270] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1784'. [ 254.647183][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.655772][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.724110][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 254.862427][ T6290] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1792'. [ 254.950970][ T6317] overlayfs: failed to resolve './cgroup': -2 [ 254.976491][ T5625] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 255.184207][ T36] audit: type=1400 audit(1783086873.330:658): avc: granted { setsecparam } for pid=6334 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 255.307460][ T5625] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 255.315622][ T5625] usb 3-1: config 0 has no interface number 0 [ 255.321759][ T5625] usb 3-1: config 0 interface 41 has no altsetting 0 [ 255.329842][ T5625] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 255.339168][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.347203][ T5625] usb 3-1: Product: syz [ 255.351384][ T5625] usb 3-1: Manufacturer: syz [ 255.355994][ T5625] usb 3-1: SerialNumber: syz [ 255.361338][ T5625] usb 3-1: config 0 descriptor?? [ 255.426472][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 255.556492][ T45] usb 1-1: device descriptor read/64, error -71 [ 255.796481][ T45] usb 1-1: device descriptor read/64, error -71 [ 255.969784][ T5625] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 256.046470][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 256.176473][ T45] usb 1-1: device descriptor read/64, error -71 [ 256.416481][ T45] usb 1-1: device descriptor read/64, error -71 [ 256.526567][ T45] usb usb1-port1: attempt power cycle [ 256.866479][ T45] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 256.887446][ T45] usb 1-1: device descriptor read/8, error -71 [ 257.017515][ T45] usb 1-1: device descriptor read/8, error -71 [ 257.256486][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 257.277470][ T45] usb 1-1: device descriptor read/8, error -71 [ 257.407509][ T45] usb 1-1: device descriptor read/8, error -71 [ 257.526610][ T45] usb usb1-port1: unable to enumerate USB device [ 257.657928][ T6347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=276 sclass=netlink_route_socket pid=6347 comm=syz.4.1807 [ 257.753573][ T45] usb 3-1: USB disconnect, device number 63 [ 257.777251][ T6356] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 257.824962][ T36] audit: type=1400 audit(1783086875.990:659): avc: denied { create } for pid=6363 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 257.827293][ T6364] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 257.851415][ T6364] overlayfs: failed to set xattr on upper [ 257.857153][ T6364] overlayfs: ...falling back to redirect_dir=nofollow. [ 257.864058][ T6364] overlayfs: ...falling back to uuid=null. [ 257.870029][ T6364] overlayfs: ...falling back to xino=off. [ 258.308898][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.317391][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.466465][ T45] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 258.576466][ T5621] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 258.616472][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 258.622540][ T45] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 258.630864][ T45] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 258.638958][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 258.647928][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 258.658876][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 258.670029][ T45] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 258.679115][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.687244][ T45] usb 3-1: Product: syz [ 258.691400][ T45] usb 3-1: Manufacturer: syz [ 258.695992][ T45] usb 3-1: SerialNumber: syz [ 258.701188][ T45] usb 3-1: config 0 descriptor?? [ 258.706815][ T45] hub 3-1:0.0: bad descriptor, ignoring hub [ 258.712716][ T45] hub 3-1:0.0: probe with driver hub failed with error -5 [ 258.720536][ T45] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 258.736512][ T5621] usb 1-1: Using ep0 maxpacket: 16 [ 258.744413][ T5621] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 258.753513][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.762108][ T5621] usb 1-1: config 0 descriptor?? [ 258.767986][ T5621] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 258.911524][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.920705][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.934747][ T36] audit: type=1400 audit(1783086877.100:660): avc: denied { accept } for pid=6391 comm="syz.4.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.957392][ T36] audit: type=1400 audit(1783086877.120:661): avc: denied { read } for pid=6376 comm="syz.2.1818" path="socket:[45128]" dev="sockfs" ino=45128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.975185][ T6398] overlay: Unknown parameter 'dont_appraise' [ 259.006192][ T6401] __nla_validate_parse: 1 callbacks suppressed [ 259.006211][ T6401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1818'. [ 259.025124][ T45] usb 3-1: USB disconnect, device number 64 [ 259.232957][ T5621] usb 1-1: Detected FT232A [ 259.237960][ T5621] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.247098][ T5621] usb 1-1: USB disconnect, device number 28 [ 259.253708][ T5621] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.263348][ T5621] ftdi_sio 1-1:0.0: device disconnected [ 259.579529][ T36] audit: type=1400 audit(1783086877.750:662): avc: denied { read } for pid=6414 comm="syz.4.1831" path="socket:[44783]" dev="sockfs" ino=44783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.634804][ T6415] kvm: kvm [6414]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 259.643609][ T6415] kvm: kvm [6414]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 259.726447][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1833'. [ 259.786600][ T5621] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 259.936458][ T5621] usb 3-1: Using ep0 maxpacket: 32 [ 259.943968][ T5621] usb 3-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 259.953053][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.961064][ T5621] usb 3-1: Product: syz [ 259.965214][ T5621] usb 3-1: Manufacturer: syz [ 259.969830][ T5621] usb 3-1: SerialNumber: syz [ 260.177944][ T5621] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 260.184843][ T5621] usb 3-1: unit 5 not found! [ 260.191956][ T5621] usb 3-1: USB disconnect, device number 65 [ 260.200913][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.499631][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.508214][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.517344][ T6461] netlink: 556 bytes leftover after parsing attributes in process `syz.4.1845'. [ 260.606467][ T5621] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 260.738712][ T6466] vcan0: MTU too low for tipc bearer [ 260.744090][ T6466] tipc: Enabling of bearer rejected, failed to enable media [ 260.760596][ T5621] usb 1-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 260.771584][ T5621] usb 1-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 260.784455][ T5621] usb 1-1: config 0 interface 0 has no altsetting 0 [ 260.791110][ T5621] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 260.800156][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.808616][ T5621] usb 1-1: config 0 descriptor?? [ 260.813836][ T6457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.996481][ T5624] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 261.038842][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.047484][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.126464][ T5624] usb 3-1: device descriptor read/64, error -71 [ 261.366464][ T5624] usb 3-1: device descriptor read/64, error -71 [ 261.527805][ T5621] usbhid 1-1:0.0: can't add hid device: -71 [ 261.533796][ T5621] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 261.549741][ T5621] usb 1-1: USB disconnect, device number 29 [ 261.572994][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.584265][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.598083][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.606473][ T5624] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 261.617817][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.735810][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 261.746521][ T5624] usb 3-1: device descriptor read/64, error -71 [ 261.986488][ T5624] usb 3-1: device descriptor read/64, error -71 [ 262.096576][ T5624] usb usb3-port1: attempt power cycle [ 262.265441][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.275607][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.306475][ T5621] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 262.436491][ T5624] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 262.457699][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.469428][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.469465][ T5624] usb 3-1: device descriptor read/8, error -71 [ 262.486797][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.498207][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.511103][ T5621] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.520170][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.531623][ T5621] usb 1-1: config 0 descriptor?? [ 262.536921][ T6515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.597492][ T5624] usb 3-1: device descriptor read/8, error -71 [ 262.846484][ T5624] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 262.877456][ T5624] usb 3-1: device descriptor read/8, error -71 [ 262.938025][ T36] audit: type=1400 audit(1783086881.110:663): avc: denied { setattr } for pid=6536 comm="syz.4.1867" name="NETLINK" dev="sockfs" ino=45604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.968279][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.970994][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 262.977154][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.984613][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 262.999281][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.006695][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.007615][ T5624] usb 3-1: device descriptor read/8, error -71 [ 263.014180][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.027837][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.035221][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.042645][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.050070][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.057506][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.064908][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.072345][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.077965][ T6546] netlink: 'syz.5.1871': attribute type 12 has an invalid length. [ 263.079766][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.094943][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.102412][ T5621] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 263.103577][ T6546] overlay: Unknown parameter 'smackfshat' [ 263.110029][ T5621] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 263.125368][ T5621] plantronics 0003:047F:FFFF.0037: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 263.146951][ T5624] usb usb3-port1: unable to enumerate USB device [ 263.503644][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.511348][ T6551] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 263.519369][ T6551] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1873'. [ 263.548373][ T36] audit: type=1400 audit(1783086881.720:664): avc: denied { watch watch_reads } for pid=6553 comm="syz.4.1874" path="/196/file0" dev="incremental-fs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.639800][ T6561] can0: slcan on ptm1. [ 263.693879][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 263.759289][ T6560] can0 (unregistered): slcan off ptm1. [ 263.950119][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.958636][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.013693][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1884'. [ 264.024237][ T6618] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1884'. [ 264.123680][ T6625] can0: slcan on ttyS3. [ 264.158871][ T6625] can0 (unregistered): slcan off ttyS3. [ 264.176501][ T5624] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 264.201586][ T6636] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 264.270238][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.282697][ T6656] overlayfs: failed to resolve 'redirect_dir=nofollow': -2 [ 264.290056][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.302852][ T6656] overlayfs: failed to clone lowerpath [ 264.328231][ T5624] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.339748][ T5624] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.349693][ T5624] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.356729][ T5624] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 264.365950][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.378426][ T5624] usb 3-1: config 0 descriptor?? [ 264.787368][ T5624] hid-steam 0003:28DE:1102.0038: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 264.832066][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.840602][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.988354][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.996932][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.005124][ T5624] usb 3-1: USB disconnect, device number 70 [ 265.400607][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.409202][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.417419][ T5625] usb 1-1: USB disconnect, device number 30 [ 265.470680][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.479193][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.517700][ T36] audit: type=1400 audit(1783086883.690:665): avc: denied { mount } for pid=6701 comm="syz.2.1904" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 265.540344][ T36] audit: type=1400 audit(1783086883.690:666): avc: denied { unmount } for pid=6701 comm="syz.2.1904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 265.656949][ T6709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6709 comm=syz.0.1907 [ 265.876470][ T5625] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 265.916470][ T5621] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 266.027447][ T5625] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.038413][ T5625] usb 3-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 266.047622][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.055873][ T5625] usb 3-1: Product: syz [ 266.057984][ T5621] usb 1-1: device descriptor read/64, error -71 [ 266.060278][ T5625] usb 3-1: Manufacturer: syz [ 266.071076][ T5625] usb 3-1: SerialNumber: syz [ 266.084943][ T6721] random: crng reseeded on system resumption [ 266.086476][ T36] audit: type=1400 audit(1783086884.250:667): avc: denied { ioctl } for pid=6718 comm="syz.4.1911" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 266.280993][ T5625] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 266.287953][ T5625] usb 3-1: unit 4 not found! [ 266.292551][ T5625] usb 3-1: unit 8 not found! [ 266.296475][ T5621] usb 1-1: device descriptor read/64, error -71 [ 266.301348][ T5625] usb 3-1: USB disconnect, device number 71 [ 266.556472][ T5621] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 266.686484][ T5621] usb 1-1: device descriptor read/64, error -71 [ 266.926493][ T5621] usb 1-1: device descriptor read/64, error -71 [ 267.026275][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.034809][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.036587][ T5621] usb usb1-port1: attempt power cycle [ 267.049331][ T1838] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.176490][ T45] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 267.326477][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 267.332633][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.345598][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 267.354672][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.363493][ T45] usb 3-1: config 0 descriptor?? [ 267.386474][ T5621] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 267.407380][ T5621] usb 1-1: device descriptor read/8, error -71 [ 267.537427][ T5621] usb 1-1: device descriptor read/8, error -71 [ 267.770761][ T45] wacom 0003:056A:0309.0039: unknown main item tag 0x4 [ 267.777728][ T5621] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 267.785337][ T45] wacom 0003:056A:0309.0039: unknown main item tag 0xd [ 267.793344][ T45] wacom 0003:056A:0309.0039: hidraw0: USB HID v0.81 Device [HID 056a:0309] on usb-dummy_hcd.2-1/input0 [ 267.807497][ T5621] usb 1-1: device descriptor read/8, error -71 [ 267.937426][ T5621] usb 1-1: device descriptor read/8, error -71 [ 267.971533][ T5625] usb 3-1: USB disconnect, device number 72 [ 268.046562][ T5621] usb usb1-port1: unable to enumerate USB device [ 268.702106][ T36] audit: type=1400 audit(1783086886.870:668): avc: denied { bind } for pid=6800 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.716484][ T5625] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 268.818803][ T36] audit: type=1400 audit(1783086886.990:669): avc: denied { create } for pid=6802 comm="syz.5.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 268.886471][ T5625] usb 3-1: Using ep0 maxpacket: 16 [ 268.892720][ T5625] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.900849][ T5625] usb 3-1: config 0 has no interface number 0 [ 268.907075][ T5625] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.916910][ T5625] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.926833][ T5625] usb 3-1: config 0 interface 41 has no altsetting 0 [ 268.934817][ T5625] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 268.943941][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.952303][ T5625] usb 3-1: Product: syz [ 268.956507][ T5625] usb 3-1: Manufacturer: syz [ 268.961091][ T5625] usb 3-1: SerialNumber: syz [ 268.966210][ T5625] usb 3-1: config 0 descriptor?? [ 268.971504][ T6797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.978754][ T6797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.086485][ T5621] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 269.096474][ T2301] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.188091][ T6797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.195332][ T6797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.216470][ T5621] usb 1-1: device descriptor read/64, error -71 [ 269.456478][ T5621] usb 1-1: device descriptor read/64, error -71 [ 269.603589][ T5625] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 269.614533][ T5625] usb 3-1: USB disconnect, device number 73 [ 269.629445][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.638075][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.696475][ T5621] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 269.826473][ T5621] usb 1-1: device descriptor read/64, error -71 [ 270.066470][ T5621] usb 1-1: device descriptor read/64, error -71 [ 270.108265][ T36] audit: type=1400 audit(1783086888.280:670): avc: denied { accept } for pid=6811 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.177033][ T5621] usb usb1-port1: attempt power cycle [ 270.376476][ T5625] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 270.516465][ T5621] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 270.526475][ T5625] usb 3-1: Using ep0 maxpacket: 32 [ 270.534119][ T5625] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 270.550944][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.551662][ T5621] usb 1-1: device descriptor read/8, error -71 [ 270.559299][ T5625] usb 3-1: Product: syz [ 270.569385][ T5625] usb 3-1: Manufacturer: syz [ 270.574005][ T5625] usb 3-1: SerialNumber: syz [ 270.687762][ T5621] usb 1-1: device descriptor read/8, error -71 [ 270.759702][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.768272][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.849617][ T5625] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 270.858307][ T5625] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 270.867964][ T5625] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 270.876157][ T5625] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 270.885801][ T5625] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 270.895880][ T5625] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 270.906256][ T5625] usb 3-1: USB disconnect, device number 74 [ 270.913646][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.936477][ T5621] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 270.957391][ T5621] usb 1-1: device descriptor read/8, error -71 [ 271.087459][ T5621] usb 1-1: device descriptor read/8, error -71 [ 271.196555][ T5621] usb usb1-port1: unable to enumerate USB device [ 271.359486][ T6858] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=281 sclass=netlink_xfrm_socket pid=6858 comm=syz.2.1956 [ 271.383809][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.392971][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.403384][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.411908][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.413079][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.428246][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.502067][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1960'. [ 271.626541][ T5625] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 271.778971][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.787525][ T5625] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 271.798704][ T5625] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 271.811938][ T5625] usb 3-1: string descriptor 0 read error: -22 [ 271.818233][ T5625] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 271.827365][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.839990][ T5625] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 272.038117][ T5625] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 272.047680][ T5625] usb 3-1: USB disconnect, device number 75 [ 272.086467][ T45] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 272.127760][ T36] audit: type=1400 audit(1783086890.300:671): avc: denied { create } for pid=6907 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.236466][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 272.244378][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice= 0.40 [ 272.253577][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.261665][ T45] usb 1-1: Product: syz [ 272.265811][ T45] usb 1-1: Manufacturer: syz [ 272.270402][ T45] usb 1-1: SerialNumber: syz [ 272.480036][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 272.489639][ T45] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 272.500404][ T45] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 272.511173][ T45] usb 1-1: USB disconnect, device number 39 [ 272.519788][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.680921][ T36] audit: type=1400 audit(1783086890.850:672): avc: denied { module_load } for pid=6925 comm="syz.5.1973" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 273.040816][ T6941] syzkaller1: entered promiscuous mode [ 273.046509][ T6941] syzkaller1: entered allmulticast mode [ 273.105099][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.113785][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.154779][ T36] audit: type=1400 audit(1783086891.320:673): avc: denied { map } for pid=6947 comm="syz.0.1979" path="socket:[47687]" dev="sockfs" ino=47687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.199852][ T36] audit: type=1400 audit(1783086891.350:674): avc: denied { getopt } for pid=6947 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.252412][ T6946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6946 comm=syz.4.1978 [ 273.800313][ T1844] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.886472][ T45] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 274.046452][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 274.059377][ T45] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 274.076550][ T45] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 274.089777][ T45] usb 3-1: config 0 has no interface number 0 [ 274.095994][ T45] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 274.105999][ T45] usb 3-1: config 0 interface 200 has no altsetting 0 [ 274.114408][ T45] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 274.126465][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.134465][ T45] usb 3-1: Product: syz [ 274.152557][ T45] usb 3-1: Manufacturer: syz [ 274.157222][ T45] usb 3-1: SerialNumber: syz [ 274.159434][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.167081][ T45] usb 3-1: config 0 descriptor?? [ 274.170408][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.183186][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.191665][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.199792][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.208293][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.216277][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.224913][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.233055][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.241528][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.379378][ T45] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input54 [ 274.392161][ T45] usb 3-1: USB disconnect, device number 76 [ 274.396484][ T5625] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 274.557471][ T5625] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 274.568594][ T5625] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 274.581258][ T5625] usb 1-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 274.590325][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.598321][ T5625] usb 1-1: Product: syz [ 274.602475][ T5625] usb 1-1: Manufacturer: syz [ 274.607078][ T5625] usb 1-1: SerialNumber: syz [ 274.817534][ T5625] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 274.827000][ T5625] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.837631][ T5625] usb 1-1: USB disconnect, device number 40 [ 274.845309][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 275.004827][ T7010] incfs: Options parsing error. -22 [ 275.010107][ T7010] incfs: mount failed -22 [ 275.335180][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2009'. [ 275.347050][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.359784][ T7037] bridge_slave_0 (unregistering): left allmulticast mode [ 275.366925][ T7037] bridge_slave_0 (unregistering): left promiscuous mode [ 275.368243][ T5625] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 275.373917][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.501448][ T7052] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 275.501469][ T7052] rust_binder: Read failure Err(EFAULT) in pid:1067 [ 275.537421][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.555020][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.565265][ T5625] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 275.574350][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.582926][ T5625] usb 3-1: config 0 descriptor?? [ 275.816476][ T2301] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.816478][ T2390] Bluetooth: hci0: command 0x1003 tx timeout [ 275.874103][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.883104][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.916544][ T5624] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 275.962214][ T7066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2019'. [ 276.068147][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.079000][ T5624] usb 1-1: not running at top speed; connect to a high speed hub [ 276.087706][ T5624] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 276.098560][ T5624] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.100764][ T7076] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 276.109381][ T5624] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 276.116787][ T7076] overlayfs: overlapping lowerdir path [ 276.125776][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.139043][ T5624] usb 1-1: Product: syz [ 276.143241][ T5624] usb 1-1: Manufacturer: syz [ 276.144315][ T7076] overlayfs: overlapping lowerdir path [ 276.147865][ T5624] usb 1-1: SerialNumber: syz [ 276.171422][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.179972][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.191063][ T5625] usbhid 3-1:0.0: can't add hid device: -71 [ 276.197141][ T5625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.206165][ T5625] usb 3-1: USB disconnect, device number 77 [ 276.277181][ T7082] overlayfs: failed to resolve './file2': -2 [ 276.363374][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.371892][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.382168][ T5624] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 276.390334][ T5624] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 276.399749][ T5624] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 276.407850][ T5624] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 276.417200][ T5624] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 276.426541][ T5624] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 276.434709][ T5624] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 276.442963][ T5624] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 276.454907][ T5624] usb 1-1: USB disconnect, device number 41 [ 276.703012][ T7086] overlayfs: upper fs does not support file handles, falling back to index=off. [ 276.707802][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 276.712273][ T7086] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 276.721163][ T7088] bridge_slave_1: left allmulticast mode [ 276.735632][ T7088] bridge_slave_1: left promiscuous mode [ 276.741323][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.749040][ T7088] bridge_slave_0: left allmulticast mode [ 276.754696][ T7088] bridge_slave_0: left promiscuous mode [ 276.760492][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.764443][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.776956][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.876867][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.885342][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.987166][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.995737][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.010230][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.018797][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.106491][ T5624] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 277.196469][ T5625] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 277.256504][ T5624] usb 3-1: Using ep0 maxpacket: 32 [ 277.262721][ T5624] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 277.271072][ T5624] usb 3-1: config 0 has no interface number 0 [ 277.277300][ T5624] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 277.287299][ T5624] usb 3-1: config 0 interface 196 has no altsetting 0 [ 277.295350][ T5624] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 277.304412][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.312580][ T5624] usb 3-1: Product: syz [ 277.315836][ T7107] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 277.316939][ T5624] usb 3-1: Manufacturer: syz [ 277.330904][ T5624] usb 3-1: SerialNumber: syz [ 277.335964][ T5624] usb 3-1: config 0 descriptor?? [ 277.341238][ T7097] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 277.351405][ T7107] tmpfs: Unknown parameter 'indo64' [ 277.356678][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 277.364181][ T5625] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 277.373275][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.381322][ T5625] usb 1-1: Product: syz [ 277.385670][ T5625] usb 1-1: Manufacturer: syz [ 277.390312][ T5625] usb 1-1: SerialNumber: syz [ 277.395716][ T5625] usb 1-1: config 0 descriptor?? [ 277.403579][ T5625] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 277.412163][ T5625] usb 1-1: Detected FT-X [ 277.549720][ T5624] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 277.557257][ T5624] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 277.566899][ T5624] usb 3-1: USB disconnect, device number 78 [ 277.603733][ T5625] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 277.621604][ T7114] overlayfs: failed to resolve './file2': -2 [ 277.812996][ T7105] syzkaller1: entered promiscuous mode [ 277.818588][ T7105] syzkaller1: entered allmulticast mode [ 278.027768][ T5625] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.156752][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.165344][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.187552][ T7118] kvm: emulating exchange as write [ 278.231191][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.242774][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.307626][ T5621] usb 1-1: USB disconnect, device number 42 [ 278.315997][ T5621] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.325681][ T5621] ftdi_sio 1-1:0.0: device disconnected [ 278.356110][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.364576][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.855362][ T7145] input: syz1 as /devices/virtual/input/input55 [ 278.926346][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.934932][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.951188][ T36] audit: type=1400 audit(1783086897.120:675): avc: denied { shutdown } for pid=7153 comm="syz.2.2050" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 279.016216][ T7159] kvm: kvm [7158]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xa7 [ 279.056550][ T5625] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 279.206498][ T5625] usb 1-1: Using ep0 maxpacket: 32 [ 279.212716][ T5625] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.220846][ T5625] usb 1-1: config 0 has no interface number 0 [ 279.228228][ T5625] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.237293][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.245309][ T5625] usb 1-1: Product: syz [ 279.249504][ T5625] usb 1-1: Manufacturer: syz [ 279.254089][ T5625] usb 1-1: SerialNumber: syz [ 279.259319][ T5625] usb 1-1: config 0 descriptor?? [ 279.264942][ T5625] smsc95xx v2.0.0 [ 279.276463][ T5621] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 279.342398][ T7166] overlayfs: failed to clone upperpath [ 279.427532][ T5621] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 279.437846][ T5621] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 2 [ 279.448280][ T5621] usb 3-1: New USB device found, idVendor=04b4, idProduct=2610, bcdDevice=27.48 [ 279.457396][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.475811][ T5621] usb 3-1: Product: syz [ 279.481716][ T5625] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 279.482425][ T5621] usb 3-1: Manufacturer: syz [ 279.501029][ T5621] usb 3-1: SerialNumber: syz [ 279.505638][ T5625] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.516625][ T5625] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 279.527484][ T5625] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 279.541273][ T5625] usb 1-1: USB disconnect, device number 43 [ 279.705034][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.713695][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.723364][ T5621] usb 3-1: USB disconnect, device number 79 [ 279.730580][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.740068][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.749501][ T7186] syzkaller1: entered promiscuous mode [ 279.755002][ T7186] syzkaller1: entered allmulticast mode [ 279.762118][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.770639][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.196281][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2068'. [ 280.276476][ T5625] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 280.356907][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.365406][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.397296][ T36] audit: type=1326 audit(1783086898.570:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.5.2072" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ab59de59 code=0x0 [ 280.437397][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.448307][ T5625] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.458054][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.467426][ T5625] usb 1-1: config 0 descriptor?? [ 280.675175][ T5625] usbhid 1-1:0.0: can't add hid device: -71 [ 280.681157][ T5625] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.689775][ T5625] usb 1-1: USB disconnect, device number 44 [ 280.726477][ T5624] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 280.877757][ T5624] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.891921][ T5624] usb 3-1: not running at top speed; connect to a high speed hub [ 280.900555][ T5624] usb 3-1: config 74 has an invalid interface number: 193 but max is 0 [ 280.908882][ T5624] usb 3-1: config 74 has an invalid interface number: 244 but max is 0 [ 280.917230][ T5624] usb 3-1: config 74 has 2 interfaces, different from the descriptor's value: 1 [ 280.926251][ T5624] usb 3-1: config 74 has no interface number 0 [ 280.932641][ T5624] usb 3-1: config 74 has no interface number 1 [ 280.939149][ T5624] usb 3-1: config 74 interface 193 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 280.950231][ T5624] usb 3-1: config 74 interface 193 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 280.961197][ T5624] usb 3-1: config 74 interface 193 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 280.974323][ T5624] usb 3-1: too many endpoints for config 74 interface 244 altsetting 55: 72, using maximum allowed: 30 [ 280.985464][ T5624] usb 3-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 280.996666][ T5624] usb 3-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 281.007718][ T5624] usb 3-1: config 74 interface 244 altsetting 55 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 281.018872][ T5624] usb 3-1: config 74 interface 244 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 72 [ 281.032164][ T5624] usb 3-1: config 74 interface 193 has no altsetting 0 [ 281.039038][ T5624] usb 3-1: config 74 interface 244 has no altsetting 0 [ 281.047133][ T5624] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=d3.89 [ 281.056148][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.064160][ T5624] usb 3-1: Product: syz [ 281.068509][ T5624] usb 3-1: Manufacturer: syz [ 281.073114][ T5624] usb 3-1: SerialNumber: syz [ 281.078643][ T5624] usb 3-1: Interface #244 referenced by multiple IADs [ 281.085684][ T7212] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 281.126462][ T5625] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 281.277437][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.288370][ T5625] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 281.297584][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.298578][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 281.309669][ T5625] usb 1-1: config 0 descriptor?? [ 281.322656][ T5624] rndis_host 3-1:74.193: skipping garbage [ 281.330176][ T5624] usb 3-1: bad CDC descriptors [ 281.335074][ T5624] cdc_acm 3-1:74.193: skipping garbage [ 281.342927][ T5624] usb 3-1: USB disconnect, device number 80 [ 281.538939][ T7230] 9pnet_fd: Insufficient options for proto=fd [ 281.546055][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.554714][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.666470][ T5624] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 281.816463][ T5624] usb 3-1: Using ep0 maxpacket: 32 [ 281.822612][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.833683][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.843533][ T5624] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.852588][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.861035][ T5624] usb 3-1: config 0 descriptor?? [ 281.867198][ T5624] hub 3-1:0.0: USB hub found [ 281.922202][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.930754][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.067037][ T5624] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 282.090660][ T7241] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2079'. [ 282.099761][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2079'. [ 282.128010][ T5625] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 282.129753][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.143890][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.145371][ T5625] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 282.163936][ T5625] usb 1-1: USB disconnect, device number 45 [ 282.169887][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 282.274352][ T5624] usbhid 3-1:0.0: can't add hid device: -71 [ 282.280418][ T5624] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 282.306904][ T5624] usb 3-1: USB disconnect, device number 81 [ 282.466510][ T5625] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 282.617727][ T5625] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.626066][ T5625] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.636221][ T5625] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 282.646454][ T5625] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 282.655509][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.663789][ T5625] usb 1-1: Product: syz [ 282.670767][ T5625] usb 1-1: Manufacturer: syz [ 282.675452][ T5625] usb 1-1: SerialNumber: syz [ 282.688274][ T7256] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2084'. [ 282.869897][ T7262] x_tables: unsorted underflow at hook 2 [ 282.876542][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.886610][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.894496][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.903118][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.907212][ T5625] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 282.921253][ T5625] usb 1-1: USB disconnect, device number 46 [ 282.928609][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.356466][ T5625] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 283.508139][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.516141][ T5625] usb 3-1: not running at top speed; connect to a high speed hub [ 283.524558][ T5625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.534671][ T5625] usb 3-1: config 0 has no interfaces? [ 283.541456][ T5625] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 283.550528][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.558528][ T5625] usb 3-1: Product: syz [ 283.562696][ T5625] usb 3-1: Manufacturer: syz [ 283.567326][ T5625] usb 3-1: SerialNumber: syz [ 283.572441][ T5625] usb 3-1: config 0 descriptor?? [ 283.798421][ T7265] kvm: pic: level sensitive irq not supported [ 283.798558][ T7265] kvm: pic: single mode not supported [ 283.805468][ T7265] kvm: pic: level sensitive irq not supported [ 283.811030][ T7265] kvm: pic: single mode not supported [ 283.817525][ T7265] kvm: pic: single mode not supported [ 283.867075][ T5621] usb 3-1: USB disconnect, device number 82 [ 283.996651][ T36] audit: type=1400 audit(1783086902.170:677): avc: denied { create } for pid=7281 comm="syz.0.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.029676][ T36] audit: type=1400 audit(1783086902.200:678): avc: denied { lock } for pid=7285 comm="syz.0.2095" path="socket:[51442]" dev="sockfs" ino=51442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.053481][ T36] audit: type=1400 audit(1783086902.200:679): avc: denied { getopt } for pid=7285 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.271872][ T36] audit: type=1400 audit(1783086902.440:680): avc: denied { append } for pid=7300 comm="syz.4.2100" name="ublkc0" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.346856][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.355374][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.376843][ T5625] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 284.402929][ T7310] input: syz1 as /devices/virtual/input/input57 [ 284.410203][ T7310] input: failed to attach handler leds to device input57, error: -6 [ 284.464157][ T7316] input: syz1 as /devices/virtual/input/input58 [ 284.470482][ T7316] input: failed to attach handler leds to device input58, error: -6 [ 284.526495][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 284.532258][ T7318] fuse: Unknown parameter '00000000000000000003' [ 284.539310][ T5625] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 284.549491][ T5625] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.560392][ T5625] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.570142][ T5625] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.582952][ T5625] usb 1-1: config 7 interface 0 has no altsetting 0 [ 284.589576][ T5625] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 284.598632][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.866494][ T45] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 284.913088][ T7329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2111'. [ 284.969960][ T7332] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 284.977608][ T7332] SELinux: failed to load policy [ 285.016498][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 285.022731][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 285.036470][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.047285][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.059782][ T45] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 285.068942][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.084806][ T45] usb 3-1: Product: syz [ 285.090283][ T45] usb 3-1: Manufacturer: syz [ 285.094898][ T45] usb 3-1: SerialNumber: syz [ 285.103388][ T45] usb 3-1: config 0 descriptor?? [ 285.157949][ T7351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7351 comm=syz.4.2115 [ 285.220024][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.228577][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.312686][ T45] usb 3-1: USB disconnect, device number 83 [ 285.715815][ T5625] usbhid 1-1:7.0: can't add hid device: -71 [ 285.721898][ T5625] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 285.733558][ T5625] usb 1-1: USB disconnect, device number 47 [ 285.854683][ T7394] fuseblk: Bad value for 'source' [ 285.909202][ T7396] ip6gretap0: entered promiscuous mode [ 285.914755][ T7396] ip6gretap0: entered allmulticast mode [ 286.010573][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.019499][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.076500][ T5625] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 286.100649][ T36] audit: type=1400 audit(1783086904.270:681): avc: denied { mount } for pid=7429 comm="syz.5.2140" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 286.236500][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 286.242892][ T5625] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 286.253930][ T5625] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 286.267071][ T5625] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.273660][ T5625] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 286.282705][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.291430][ T5625] usb 1-1: config 0 descriptor?? [ 286.574077][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.582646][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.699049][ T5625] hid (null): global environment stack underflow [ 286.710058][ T5625] uclogic 0003:5543:0042.003A: collection stack underflow [ 286.717450][ T5625] uclogic 0003:5543:0042.003A: item 0 2 0 12 parsing failed [ 286.725365][ T5625] uclogic 0003:5543:0042.003A: parse failed [ 286.731528][ T5625] uclogic 0003:5543:0042.003A: probe with driver uclogic failed with error -22 [ 286.901916][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.910474][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.921027][ T5621] usb 1-1: USB disconnect, device number 48 [ 286.936530][ T5624] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 287.066479][ T5624] usb 3-1: device descriptor read/64, error -71 [ 287.265034][ T36] audit: type=1400 audit(1783086905.430:682): avc: denied { read } for pid=7475 comm="syz.5.2153" path="socket:[52403]" dev="sockfs" ino=52403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.288827][ T5621] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 287.306473][ T5624] usb 3-1: device descriptor read/64, error -71 [ 287.447511][ T5621] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.456320][ T5621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.466492][ T5621] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.475439][ T5621] usb 1-1: config 1 has no interface number 1 [ 287.481705][ T5621] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 287.494567][ T5621] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.509278][ T5621] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.518519][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.526561][ T5621] usb 1-1: Product: syz [ 287.530783][ T5621] usb 1-1: Manufacturer: syz [ 287.535430][ T5621] usb 1-1: SerialNumber: syz [ 287.566482][ T5624] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 287.696464][ T5624] usb 3-1: device descriptor read/64, error -71 [ 287.775976][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.785371][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.798342][ T5621] usb 1-1: MIDIStreaming interface descriptor not found [ 287.824171][ T5621] usb 1-1: USB disconnect, device number 49 [ 287.936472][ T5624] usb 3-1: device descriptor read/64, error -71 [ 288.057099][ T5624] usb usb3-port1: attempt power cycle [ 288.068295][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.076854][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.085466][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.094023][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.426473][ T5624] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 288.457565][ T5624] usb 3-1: device descriptor read/8, error -71 [ 288.587482][ T5624] usb 3-1: device descriptor read/8, error -71 [ 288.836491][ T5624] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 288.857509][ T5624] usb 3-1: device descriptor read/8, error -71 [ 288.876639][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2167'. [ 288.885592][ T7527] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2167'. [ 288.894658][ T7527] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2167'. [ 288.916236][ T7533] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 288.956477][ T5621] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 289.008429][ T5624] usb 3-1: device descriptor read/8, error -71 [ 289.106468][ T5621] usb 1-1: Using ep0 maxpacket: 32 [ 289.112578][ T5621] usb 1-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 289.122950][ T5621] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.126573][ T5624] usb usb3-port1: unable to enumerate USB device [ 289.133274][ T5621] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.147385][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.155367][ T5621] usb 1-1: Product: syz [ 289.159638][ T5621] usb 1-1: Manufacturer: syz [ 289.164228][ T5621] usb 1-1: SerialNumber: syz [ 289.169349][ T5621] usb 1-1: config 0 descriptor?? [ 289.425343][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.433955][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.485512][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.494100][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.706561][ T36] audit: type=1400 audit(1783086907.880:683): avc: denied { map } for pid=7549 comm="syz.2.2175" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 289.735816][ T5625] usb 1-1: USB disconnect, device number 50 [ 290.076481][ T5625] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 290.103297][ T36] audit: type=1400 audit(1783086908.270:684): avc: denied { accept } for pid=7567 comm="syz.4.2180" path="socket:[53889]" dev="sockfs" ino=53889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.216517][ T5624] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 290.237450][ T5625] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 290.248223][ T5625] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.261561][ T5625] usb 1-1: config 1 interface 0 has no altsetting 0 [ 290.272096][ T5625] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 290.281314][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.289770][ T5625] usb 1-1: Product: ᠌ [ 290.299167][ T5625] usb 1-1: Manufacturer: 蟜ݶ뾊༸ᨙ⥌쨴ᆯࢠ㌍妡啡钓㵖澯⅕ﻻ뉟蜦싃뵪͘륀줟軗¨컀꼢띬뵳鼸品 [ 290.312964][ T5625] usb 1-1: SerialNumber: syz [ 290.319279][ T7559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.326897][ T7559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.376453][ T5624] usb 3-1: Using ep0 maxpacket: 8 [ 290.382517][ T5624] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.391026][ T5624] usb 3-1: config 179 has no interface number 0 [ 290.397487][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 290.408706][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 290.421832][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.433248][ T5624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 290.444912][ T5624] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 290.458358][ T5624] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 290.467576][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.476470][ T7561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.543546][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.552059][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.563779][ T5625] usb 1-1: USB disconnect, device number 51 [ 290.684079][ T45] usb 3-1: USB disconnect, device number 88 [ 290.684094][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 290.684123][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.072787][ T36] audit: type=1400 audit(1783086909.240:685): avc: denied { create } for pid=7592 comm="syz.0.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 291.274940][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.283452][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.466465][ T5625] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 291.617739][ T5625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.626111][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 291.637101][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.646761][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 291.657148][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 291.666945][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 291.678542][ T5625] usb 3-1: string descriptor 0 read error: -22 [ 291.684729][ T5625] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 291.693763][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.702268][ T5625] usb 3-1: config 0 descriptor?? [ 291.707567][ T7599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.726594][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 291.729072][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.833362][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.841920][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.917008][ T5625] usb 3-1: USB disconnect, device number 89 [ 292.250299][ T36] audit: type=1326 audit(1783086910.420:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.5.2199" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69ab59de59 code=0x0 [ 292.334211][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2205'. [ 292.343697][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2205'. [ 292.387043][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 292.497754][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.506243][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.514402][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.522908][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.676498][ T5624] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 292.716470][ T5621] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 292.806466][ T5624] usb 3-1: device descriptor read/64, error -71 [ 292.866480][ T5621] usb 1-1: Using ep0 maxpacket: 16 [ 292.872732][ T5621] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 292.883055][ T5621] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.894043][ T5621] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.903875][ T5621] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.916679][ T5621] usb 1-1: config 7 interface 0 has no altsetting 0 [ 292.923298][ T5621] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 292.932590][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.007891][ T7669] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 293.045673][ T7677] 9pnet_fd: Insufficient options for proto=fd [ 293.056475][ T5624] usb 3-1: device descriptor read/64, error -71 [ 293.163471][ T5621] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.003B/input/input59 [ 293.183977][ T5621] kye 0003:0458:5010.003B: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 293.198710][ T5621] usb 1-1: USB disconnect, device number 52 [ 293.212702][ T7705] fido_id[7705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 293.316546][ T5624] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 293.456511][ T5624] usb 3-1: device descriptor read/64, error -71 [ 293.676481][ T5621] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 293.696470][ T5624] usb 3-1: device descriptor read/64, error -71 [ 293.806560][ T5624] usb usb3-port1: attempt power cycle [ 293.837751][ T5621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.845786][ T5621] usb 1-1: not running at top speed; connect to a high speed hub [ 293.854207][ T5621] usb 1-1: config 9 has an invalid interface number: 46 but max is 0 [ 293.862381][ T5621] usb 1-1: config 9 has no interface number 0 [ 293.868482][ T5621] usb 1-1: config 9 interface 46 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 293.880145][ T5621] usb 1-1: config 9 interface 46 has no altsetting 0 [ 293.888079][ T5621] usb 1-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=48.db [ 293.897258][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.905245][ T5621] usb 1-1: Product: syz [ 293.909463][ T5621] usb 1-1: Manufacturer: syz [ 293.914050][ T5621] usb 1-1: SerialNumber: syz [ 294.124141][ T5621] pl2303 1-1:9.46: required interrupt-in endpoint missing [ 294.132746][ T5621] usb 1-1: USB disconnect, device number 53 [ 294.146508][ T5624] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 294.167535][ T5624] usb 3-1: device descriptor read/8, error -71 [ 294.297415][ T5624] usb 3-1: device descriptor read/8, error -71 [ 294.536478][ T5624] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 294.557425][ T5624] usb 3-1: device descriptor read/8, error -71 [ 294.687421][ T5624] usb 3-1: device descriptor read/8, error -71 [ 294.796537][ T5624] usb usb3-port1: unable to enumerate USB device [ 294.966469][ T5621] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 295.125819][ T5621] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 295.139620][ T5621] usb 1-1: can't read configurations, error -71 [ 295.215873][ T7764] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2241'. [ 295.276461][ T7769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7769 comm=syz.5.2243 [ 295.475378][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.484041][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.766470][ T5621] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 295.906468][ T5621] usb 1-1: device descriptor read/64, error -71 [ 296.166506][ T5621] usb 1-1: device descriptor read/64, error -71 [ 296.276549][ T5621] usb usb1-port1: attempt power cycle [ 296.376901][ T7797] overlay: Unknown parameter '/file0' [ 296.536579][ T393] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 296.616463][ T5621] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 296.637400][ T5621] usb 1-1: device descriptor read/8, error -71 [ 296.686456][ T393] usb 3-1: Using ep0 maxpacket: 32 [ 296.692558][ T393] usb 3-1: config 2 has an invalid interface number: 218 but max is 0 [ 296.700771][ T393] usb 3-1: config 2 has no interface number 0 [ 296.706866][ T393] usb 3-1: config 2 interface 218 has no altsetting 0 [ 296.714822][ T393] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.96 [ 296.723880][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.731881][ T393] usb 3-1: Product: syz [ 296.736027][ T393] usb 3-1: Manufacturer: syz [ 296.740617][ T393] usb 3-1: SerialNumber: syz [ 296.767438][ T5621] usb 1-1: device descriptor read/8, error -71 [ 296.840509][ T7799] tipc: Enabling of bearer rejected, media not registered [ 296.921056][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.930099][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.949402][ T393] ums-freecom 3-1:2.218: USB Mass Storage device detected [ 296.999093][ T393] usb 3-1: USB disconnect, device number 94 [ 297.003191][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2257'. [ 297.013941][ T5621] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 297.037408][ T5621] usb 1-1: device descriptor read/8, error -71 [ 297.177532][ T5621] usb 1-1: device descriptor read/8, error -71 [ 297.286555][ T5621] usb usb1-port1: unable to enumerate USB device [ 297.481202][ T7829] binder: Bad value for 'max' [ 297.750158][ T7846] ------------[ cut here ]------------ [ 297.755684][ T7846] WARNING: CPU: 0 PID: 7846 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 297.765377][ T7846] Modules linked in: [ 297.769486][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.2.2265 Not tainted syzkaller #0 991092e6aacd45c89fe3e25b50ff7d10cec51463 [ 297.781218][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.791491][ T7846] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 297.797560][ T7846] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 dc 0b 06 00 0f 85 c2 00 00 00 c6 05 55 dc 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 297.817293][ T7846] RSP: 0018:ffffc90001b0f520 EFLAGS: 00010246 [ 297.823375][ T7846] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 297.831395][ T7846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90001b0f5d8 [ 297.839396][ T7846] RBP: ffffc90001b0f660 R08: ffffc90001b0f5d7 R09: 0000000000000000 [ 297.847399][ T7846] R10: ffffc90001b0f5c0 R11: fffff52000361ebb R12: ffffc90001b0f560 [ 297.855374][ T7846] R13: dffffc0000000000 R14: 1ffff92000361ea8 R15: 0000000000000000 [ 297.863381][ T7846] FS: 00007f0f519d06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 297.872416][ T7846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.879086][ T7846] CR2: 00007f0f50b88cc0 CR3: 0000000117082000 CR4: 00000000003526b0 [ 297.887106][ T7846] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 297.895086][ T7846] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 297.903103][ T7846] Call Trace: [ 297.906389][ T7846] [ 297.909341][ T7846] ? vfs_write+0x3c1/0xfd0 [ 297.913875][ T7846] ? ksys_write+0x145/0x260 [ 297.918421][ T7846] ? x64_sys_call+0x271c/0x2ee0 [ 297.923340][ T7846] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 297.929108][ T7846] ? hashtab_init+0xd6/0x1f0 [ 297.933877][ T7846] ___kmalloc_large_node+0x81/0x220 [ 297.939181][ T7846] ? hashtab_init+0xd6/0x1f0 [ 297.943797][ T7846] __kmalloc_large_node_noprof+0x1e/0xd0 [ 297.949466][ T7846] ? hashtab_init+0xd6/0x1f0 [ 297.954077][ T7846] __kmalloc_noprof+0x326/0x510 [ 297.958966][ T7846] ? kasan_save_alloc_info+0x3a/0x50 [ 297.964370][ T7846] hashtab_init+0xd6/0x1f0 [ 297.968814][ T7846] ? class_read+0x17f/0x8a0 [ 297.973335][ T7846] symtab_init+0x44/0x70 [ 297.977617][ T7846] class_read+0x208/0x8a0 [ 297.981963][ T7846] ? __kmalloc_large_node_noprof+0x1e/0xd0 [ 297.987797][ T7846] ? __cfi_class_read+0x10/0x10 [ 297.992658][ T7846] ? hashtab_init+0x100/0x1f0 [ 297.997363][ T7846] policydb_read+0xa86/0x2860 [ 298.002049][ T7846] ? __kasan_kmalloc+0x96/0xb0 [ 298.006837][ T7846] ? __cfi_policydb_read+0x10/0x10 [ 298.011962][ T7846] ? security_load_policy+0x130/0x12d0 [ 298.017535][ T7846] security_load_policy+0x16a/0x12d0 [ 298.022840][ T7846] ? avc_has_perm_noaudit+0x289/0x360 [ 298.028350][ T7846] ? _raw_spin_unlock+0x45/0x60 [ 298.033308][ T7846] ? __kasan_check_write+0x18/0x20 [ 298.038459][ T7846] ? mutex_lock+0x97/0x1d0 [ 298.043013][ T7846] ? __cfi_security_load_policy+0x10/0x10 [ 298.048775][ T7846] ? __kasan_check_write+0x18/0x20 [ 298.053900][ T7846] sel_write_load+0x258/0x600 [ 298.058655][ T7846] ? __cfi_sel_write_load+0x10/0x10 [ 298.063866][ T7846] ? bpf_lsm_file_permission+0xd/0x20 [ 298.069403][ T7846] ? __cfi_sel_write_load+0x10/0x10 [ 298.074611][ T7846] vfs_write+0x3c1/0xfd0 [ 298.078904][ T7846] ? __cfi_vfs_write+0x10/0x10 [ 298.083683][ T7846] ? __kasan_check_write+0x18/0x20 [ 298.088838][ T7846] ? mutex_lock+0x97/0x1d0 [ 298.093274][ T7846] ? __cfi_mutex_lock+0x10/0x10 [ 298.098182][ T7846] ksys_write+0x145/0x260 [ 298.102537][ T7846] ? __cfi_ksys_write+0x10/0x10 [ 298.107438][ T7846] ? __kasan_check_write+0x18/0x20 [ 298.112577][ T7846] ? fpregs_restore_userregs+0x11c/0x260 [ 298.118743][ T7846] __x64_sys_write+0x7f/0x90 [ 298.123348][ T7846] x64_sys_call+0x271c/0x2ee0 [ 298.128160][ T7846] do_syscall_64+0x57/0xf0 [ 298.132678][ T7846] ? clear_bhb_loop+0x50/0xa0 [ 298.137514][ T7846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 298.143422][ T7846] RIP: 0033:0x7f0f50b9de59 [ 298.147895][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.167580][ T7846] RSP: 002b:00007f0f519d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.176012][ T7846] RAX: ffffffffffffffda RBX: 00007f0f50e25fa0 RCX: 00007f0f50b9de59 [ 298.184032][ T7846] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 298.192033][ T7846] RBP: 00007f0f50c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.200042][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.208032][ T7846] R13: 00007f0f50e26038 R14: 00007f0f50e25fa0 R15: 00007fffefa9d1b8 [ 298.216016][ T7846] [ 298.219102][ T7846] ---[ end trace 0000000000000000 ]--- [ 298.225472][ T7846] SELinux: failed to load policy