last executing test programs: 1m17.32464364s ago: executing program 3 (id=190): r0 = socket$inet6(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r2, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000070009001d000000", 0x24) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r4, &(0x7f0000000100)=[{&(0x7f00000003c0)="000600000000000055e8372497920be864fcce22b2ff68c9caa4e30f75db916c631b99b6832a0178c8c46b2438ba7eaf", 0x30}], 0x1) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x60, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x14f882, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r6) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0019", 0x2}, {&(0x7f0000000180)="6ee39f9f36150e1f4b3e34d6bdaad1e26c82aa2441a611a6bccf4140f08b63b39f090a3fb41cd2ab7c450ad4afaedace0f742fbfc79a3e4b4d16edf7e37c614e39d36645785a7d87fd6dd010a83889e97c456fd701b77969aa2d1556e819ff59ed5131ede0e90883fec674fa6b4200e37963d86459857a6971c531aa45f567056c38d78fcbf4970c7e7f21983c198abab10f58f499a0603ba02ef450c87764727f58c2aa5b82114e7adc20f733a04c", 0xaf}, {&(0x7f0000000240)="c42721763c08ab28e21e663f8ff60a907b90ec8df4b191a9582068098a7a8c7f47f629c0b557d46f08e27ec45a8d72ef8be4990f0ae154251b556b027c33037532cb80df3b4aaa78888d2f942ac16c80", 0x50}], 0x3) r7 = socket$inet6(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m15.934557802s ago: executing program 3 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580100001000130428bd700000e10000e0000001000000000000000000000000ac1e01010000000000000000000000004e2400004e2400010200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000140000040320000000a0101000000000000000000000000000400000000000000070000000000000003000000000000000400000000004000ffffffffffffffffffffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f600000000000000000000000000000002000000020001fe000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}}, 0x20000814) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x6800, &(0x7f0000000000)={[{@stats}, {}]}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) 1m15.881370302s ago: executing program 3 (id=211): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 32) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r1) (async, rerun: 64) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={0x0}) (async, rerun: 64) rt_sigqueueinfo(r1, 0x2e, &(0x7f0000000040)={0x32, 0x3a, 0x4df8}) r2 = syz_io_uring_complete(0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (rerun: 64) write$binfmt_aout(r3, 0x0, 0xfdef) (async) sendto$inet6(r3, &(0x7f0000000540)="c66a73ebcca96c4283ae924458b7898a7e", 0x11, 0x8040, 0x0, 0xfffffffffffffcdb) (async, rerun: 32) write$binfmt_elf64(r3, 0x0, 0xfdd6) (async, rerun: 32) recvmmsg$unix(r2, &(0x7f0000005980)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/187, 0xbb}], 0x4, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000001480)=""/137, 0x89}, {&(0x7f0000001540)=""/7, 0x7}, {&(0x7f0000003f80)=""/78, 0x4e}], 0x3, &(0x7f0000005bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001680), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/4, 0x4}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/109, 0x6d}], 0x4, &(0x7f0000001a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000001b00)=""/212, 0xd4}, {&(0x7f0000001c00)=""/206, 0xce}, {&(0x7f0000001d00)=""/242, 0xf2}, {&(0x7f0000001e00)=""/103, 0x67}, {&(0x7f0000001e80)=""/240, 0xf0}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000001340)=""/54, 0x36}, {&(0x7f0000001380)=""/14, 0xe}], 0x9, &(0x7f00000040c0)}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1, &(0x7f00000051c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000005240)=@abs, 0x6e, &(0x7f0000005800)=[{&(0x7f00000052c0)=""/174, 0xae}, {&(0x7f0000005380)}, {&(0x7f00000053c0)=""/9, 0x9}, {&(0x7f0000005400)=""/184, 0xb8}, {&(0x7f00000054c0)=""/71, 0x47}, {&(0x7f0000005540)=""/189, 0xbd}, {&(0x7f0000005600)=""/8, 0x8}, {&(0x7f0000005640)=""/162, 0xa2}, {&(0x7f0000005700)=""/197, 0xc5}], 0x9, &(0x7f00000058c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x6, 0x162, &(0x7f0000005b00)={0x0, 0x989680}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) dup3(r0, r0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (rerun: 64) 1m15.805629979s ago: executing program 3 (id=213): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4100, 0x40) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4100, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x1e0ff, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x4c}}, 0x4000800) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x4c}}, 0x4000800) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010100}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peek(0x2, r8, &(0x7f0000000180)) sched_getscheduler(r8) 1m15.552599643s ago: executing program 3 (id=214): r0 = socket$inet6(0xa, 0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 1m15.492101433s ago: executing program 3 (id=215): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000880}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@flushsa={0x14, 0x1c, 0x400, 0x70bd2a, 0x25dfdbff, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x1, 0x5, 0x4, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x1d, 0x7fffffff}}) add_key$user(0x0, 0x0, &(0x7f0000000080)='YC', 0x2, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r2 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40406300, 0x2}], 0x0, 0x0, 0x0}) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000001c0)) ptrace$cont(0x20, r2, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x1, 0x40, 0xf4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5de4ef0b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3d7, 0x1, 0x401, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0x6, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfb}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x81}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xd4, 0x4, 0x81, 0x8, 0x9}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x3, [{0x14, &(0x7f0000000180)=@string={0x14, 0x3, "283e93939ed6774e575122923f0944c73918"}}, {0x90, &(0x7f0000000200)=@string={0x90, 0x3, "cf7982184450169156a80d9c8067d72ac0a70bc0dbfe5088f45850d26d562d97eef9991f496a827d42af19caac2132490cf8dc56a75a8061dfcff6c3733c53d8aa2533a5ae5afb1b0fea07341f6be0a67058715b3cde7ef1be06830ed26ae2f2674cf6a6608e0cffb3faedf8a5196e5617de7e644dfd00d2f82ad44cb31d1f225f22368e14d95083000000000000"}}, {0xa3, &(0x7f00000002c0)=@string={0xa3, 0x3, "05d5de41f66abe2ab940950cab4d8b705863bab9c9a3f77c0798c8fa2b46fa904e7552fe9f6e2070684ee4eaef1fbdfe9626bbba10f9230c615639592260ce7ab8f9c3fdbad29aaa8cc9322eb2b94aa885b20ecb57025cdac18f35e99a77d2d5464043689556d940dfa87b612fab529787a6fdfea3250b74297c05649fb62bda485583f0630faded607b26dcbd9d60e234dc8172e44eae05901c99be7eacafd437"}}]}) 1m15.444824084s ago: executing program 32 (id=215): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000880}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@flushsa={0x14, 0x1c, 0x400, 0x70bd2a, 0x25dfdbff, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x1, 0x5, 0x4, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x1, 0x1d, 0x7fffffff}}) add_key$user(0x0, 0x0, &(0x7f0000000080)='YC', 0x2, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r2 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40406300, 0x2}], 0x0, 0x0, 0x0}) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000001c0)) ptrace$cont(0x20, r2, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x1, 0x40, 0xf4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5de4ef0b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3d7, 0x1, 0x401, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0x6, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfb}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x81}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xd4, 0x4, 0x81, 0x8, 0x9}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x3, [{0x14, &(0x7f0000000180)=@string={0x14, 0x3, "283e93939ed6774e575122923f0944c73918"}}, {0x90, &(0x7f0000000200)=@string={0x90, 0x3, "cf7982184450169156a80d9c8067d72ac0a70bc0dbfe5088f45850d26d562d97eef9991f496a827d42af19caac2132490cf8dc56a75a8061dfcff6c3733c53d8aa2533a5ae5afb1b0fea07341f6be0a67058715b3cde7ef1be06830ed26ae2f2674cf6a6608e0cffb3faedf8a5196e5617de7e644dfd00d2f82ad44cb31d1f225f22368e14d95083000000000000"}}, {0xa3, &(0x7f00000002c0)=@string={0xa3, 0x3, "05d5de41f66abe2ab940950cab4d8b705863bab9c9a3f77c0798c8fa2b46fa904e7552fe9f6e2070684ee4eaef1fbdfe9626bbba10f9230c615639592260ce7ab8f9c3fdbad29aaa8cc9322eb2b94aa885b20ecb57025cdac18f35e99a77d2d5464043689556d940dfa87b612fab529787a6fdfea3250b74297c05649fb62bda485583f0630faded607b26dcbd9d60e234dc8172e44eae05901c99be7eacafd437"}}]}) 39.895966025s ago: executing program 2 (id=715): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000400)=0x19) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4ffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4000006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x804, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 39.330530344s ago: executing program 1 (id=723): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (fail_nth: 2) 39.324887483s ago: executing program 4 (id=724): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x139c, 0x14, 0x100, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x137c, 0x8, 0x0, 0x1, [@nested={0x1378, 0x147, 0x0, 0x1, [@nested={0x1308, 0x98, 0x0, 0x1, [@nested={0x24c, 0xe6, 0x0, 0x1, [@generic="64f64415f89603cb02fb334e464c049e351bd2a47fec0d5410fca2ae32420459e4302a96830bc5fae2a555eca128a1862d8ff77d4ba0557c770ea23b6cae9488a6a74983464ff783f476f82325bb32a6abcf9de35406565824ca93609297f54c60482c952a79d78c784b7a9e70aa5ed54828630b42d6eef5b3764b64edfd8b74a9f87c0258780255ea52101e82f4b9c12aa2bd136933c0af98f6924cf38a3d8e5e544a91bc8b8b836fc3479452f398e940d69c66ddbe79819550773abbd5341dc0a2e1f9ac1dbb7be9fcd5bb2370b2e1a77a8231f7e0efe71ce1454a401031c3df927d6e0f9a94692300ac91690a0ea368557e", @generic="0479b9edc868afba185f879fdc1a0c91e9d7c95463e81d1c07249934ccbd764910c2b2159b3ed93f53c6b15a36d0efa3ec87fd8adc2f0c61b90c6ea68e70c084c3cfdd017d78f2edaa23373d7e84bf7aaf8ce6d0cf4b4a8fe45f98", @generic="6a310dba13c3ecfc2d6b022b8b16cba2b6061a65d0f4125e482cfa862c59056895641b5564d2358155ecd6d5681cb6cc3ab8c2e1c657e88b9e4848232ea168626f93959dafd8be0a04a1967cec9b3aca83ebd08a41adcafd0bf0f2a860b074c6bd56af13e1885d648461d1b9d4e3b16ce74fa8b27d616e5d255a87d6e0621a6670571f880fb3077b49703a68ebc43f0a0f5fe3c3be2b", @generic="f670d98dee6297fe37a32cd9bcc9456586eaedcca84ba68aec6b75cf42e7965e28829736089dcb9d5296812d0a7e27f40a77ca8ad183abf5bb115d247b03af69d062ea7b68f713f5", @nested={0x4, 0x139}, @nested={0x4, 0x3b}, @typed={0x14, 0x133, 0x0, 0x0, @ipv6=@private0}]}, @typed={0x8, 0xb9, 0x0, 0x0, @pid}, @nested={0x8, 0x11a, 0x0, 0x1, [@nested={0x4, 0x99}]}, @nested={0x108e, 0x66, 0x0, 0x1, [@generic="6918ee9154be834955dcefab2d6efd10b647123248310a37465eba4a8ec35b2a6173a245a04c85dfb657ef89735a5efefababfd7a9f67203645f9a026d903539f06892543932d0efcb7725aeb166178a14a8fce3c63647414c8a7f8ed1d944f555d50e5c95003d53f08d469f3f94e3275e5c26cd0ee33719e237eef343d5445c29c8c55b5bb1cf30cf5d6572df73ad09db20d28a700231650ba8d7a93ecf0f7cba5078478ea840173496648c9c019b02b19ae1805984969d3193a302080424db9ccd2a885bfdbe5f5a92b1011958d3773ebe72de578cae568f1bf0b34961143108477d3c84d1dee1b35b7b11ad62ddccae8565e769cad64cda7832d323cb6adea515259d7e30175500502e9b205bf73568cd000bae5be31c7e229965f53d31b0265286ec729bf8bb927d2eaaee7b4b58b53ea2afa65959f48545c8b00d372a3cff7732b1c4541aaa41e2e4597c1d1c1b0abfb4dde41e9169c97e0e90e0bf212a4e00a4294fc961d358172c3595eb3e14ea673356898f8769acf6f5db035be947fa93de7cb9e5b89f36980429ac05b70bb4115364a3a4d4fdd237bfd40574115de29a2bd62b077f1d0046735b940f5a5029844e83378051a0c7a95c21e34b147d8b0eff66e12a3d6a81e2ff8a51b1b7a13c0a2b4fe3e3d49ec274f8225838e1e32a463abb4f92f4991bce25ff132d25d25c5c4ce8ee3db22ab4836cf22941503019dcea5193c625cc8800c3bd756917c0ce729aef3e1de7c90d554dcbf3ae9de0ec23b4dad85d707bdb3a8a0b930a6432e322c6260774bdd6c99590fb1f9628252c339d5ee289df532cb30c8fa132ee76f8ec3b4a6a92b58ebed0715579e8318634f851089b6767e745b9293bfeded0d8726033ed5a5901a8311262baf9f016a0878dadd4a30f6e3dc09c7f68366259e302b96b87722ce81cffd09a71b9e13fa77446668d9674939f75f7e6713b1cff2505de7df20c7349cca77fd44434d904af2638e1e38474d3422d0e489cb5c67373dab2db0e4918441fa270d6425f960ee06902668701b213a4fb28e6d8960542bd04fdd1aabe80f70041f27764cf22a9df23d5a3da902e54e6c0190f08f3c54301cbfb5c43d52964565f2b02cbc19a44b38ef8faf6edfc7d415bbf566624c626db9e5e020b6687b40096cbedd46da83b6d7a605f4af8e656703145a73d5dfd62d7aa921a0728b8d6bacc5f86305a0c10938c1e8ab97a82e7b6dfed6c91b1701d99533404ff647e84e609df1f1f782f8ff62af84ca5895215932560bc50354549ccdf2a3c532efc03f483894c8d9f609e585b356b2fdc8cd629ffe32a168fd6fd496728234aac27dd5d1d8387c6305d474d26a908cdbb6e47a1e3d4b56a3073edef175a8e6a720bde803822e94bf89e0e6e07b82e95f302b87ab8a699824816a2c2f2bd66092bd5b0e6dbbbfdec4da76225572fd3fdb13d9ef746b54d0c732973d3637159db5be1cf1c8f1d3af2540842cf0fca613d6e1394e5395fb5547d783b80bdb948ded9c19b40b554e2af9f06aa5122d91a519e5b20cfcfbccb0002927b98c9c6484e87aa100bf39e37d17ead2d7cb395e3aece4d855eba8f1cfc9971cddf05270dc8d7624bf50c2cb85f404e510abc070fdd5dd5f95f2094eab329dd627218f01f531a4629de28b55bdbe75e6a75ff7d881edd0d5030a88f18eec08ed79645967fd5c1921b94fa7139a4fec05c3142b831beb1140f231747be86a50035baad59976326bc1679b3468eae5a4614757cc42e327ae1499f1cb88b1fad518210287240a1c1dc1eb74b5218526487be1709584bfc7ebf7526ddc12c38094ccc6804d522e070fa0946771bf982e578d8990c4555dd4f2f23fc2ad7baefb9c87b1d81ebd8ab56b23336560fa215eb8b59a58223404991ed6697699c2c78b5e2c3ae4ef384d8d2955c62c247209a23ac719f6d6ca1d87cdb90d12403a62a96c2aff8770fd9b8d732a4e48abd5bde96dd255bd8001dfac555a3a7b46293dd26662af068bf13766411d5902b0d69585b644adcd3773b173970b65a23cff3b9d84a3515071984b1d7b3c71c8f2ec072fad12263b4cf50fa58a848fa816602ea151c59b06646b8953d36fa1802376637b634f75fb2f9ff20b63b4f3cd97096c4f3a312f39fb8185c2f7dd6cc2868462a804baadd4593a11c2d98051e9b7669a72961d0263f2da2f7245c1d93a965885d955199f2120ca2dd4eb89ced1a2c8529f6d367eff39ab0c8e92eb05c1f1322b28ec73683d5b081ccad0f2debdcef92ea2b8d4e4b63e82d6c1f42d341526689791f18071ade21f03616718da217105493c3967fd511c748fdba4cf720ef5ef6fb32d992bec3d94d47cc6c18dd434012d857d25ee21420dff6bc609559fb971132e3d0b74cc98310b1d184e1a54df60e6bead7fc13a31bc5c2c24a7caaf85aa0726706c6e8aaeac752ff5c1282acab2a59e4c7b0278ac297275ca49e54273ac54239662616b87524156b37961aadedea8f1518a70f50d24d1966df1978f2344c7e235e19117128d7f56a7fad7e5c405606b957e2f074c46963ae492c008fd41a6867869313df71ec540b337f34db68eb2e5ecb0b464ca96fc89a65314f33a9dbe0700a49e3b322cd2aa932cdcc14aa33d00411d75ef5155143a8ccc7793ef542f671eaa457a3aee5ac2b9568b1037f9f92c5ec800bef0001613120b705bd11933a0c9b308c1b66a5972ddd4821f7a94eafc4aef614aa9b85a3f9ffa26eede555fd64b077e006556a70e422f8fff5280fc714a67e053f4d5ce3472de7a4ec6e9032175c766a8044f4429e531ba0ad9f85363516ff3ef884a39f85a3409d3f0789c13609228828a7bc5d7dff4b53b7ba18eba963568fd6ccec882740c8c128164546f45ff57a878be9868a1d3a3d47e5ee25c85973202bf5d9aea9329c3cac1cb351d8dbbb97bfc4bec10bf744ae6691bf3085c136f95a9707298a054c826c41a0a163552abe404bc92604eaa20ac0ca6ece8482fee99ccb7ffca880fff5355bd5b41bafee1df297327fdbaeea62efa89c6b584210e48446a60908482811168bdc35e45fdf921892de5019cd0ed231433a890e738b2426cb2e8ec6dd3a68351a5cdd76fa31cbc42b6833b327ea7f5d7fd0818bb3fbdac933c189b3b8644a657fa22fdf1cc15d272f837254d4d0feb4410253c897328731c841af8e96730bffa49bb810c7d4c21845cb6f0b9d8184dd51dfe09395ec37a9089e79bd135847eac9edfbbc60af1f13e67dbe0d09e615b837812f1df17399964d4eacd106c73398e858552b8e421e0bf348d90abcb448e8d77597198802455957ec1a66aa4b6be92cd4f896abd8ee6f7ead72602020f96f57d1b5ba0a657b918d6530051e62943f0d48922d9d94701173c1e97b56fe5b368b628e0bfd9f62e25bfae0c808ae7a370a1004f1eb55f056719ab23d887d037a02ba3a00f0a62b3c885a78b64a1d427c0d23aa9457563e46f4f6d8c193a94e1269ea60ee4e5927e1156e10ff7aa02974a076416c300a9f89afe0ec1f1b6967ca0412681b5f27b15d2890b4930cd98e10487b0eeff8234dedd6606f8cd7b76ab44e545f6606db7e5e9de9c56fae0b6e6a334f44910b76f28c1379839cb6124e6ff99002a23a66ee6d6fcac5ecf4add3844869998c935bf3dd8a90ecffeda775d31d1f8d6b2bcc3aa2af93cd7d4b59f44f7199aca13c112bed16b5691ab1fd032601177d5bec3baeba5b06d4b328e2480fb49dc514b084ed067b14f04d3f5baa7a2e3210eba0bec065eb216b1b1893ab77e9dd3a69c7955f26a01d06d70cb6150cf63a95c628e4af875d9a25b78a0aea451aa41d902bafe67705ae5e625855dd0cebdca72d9341f30ac5f09f58c088deaae81d060fdd6b4bbe139549beeadc8fd1110bce847d158fe530b9e835472d80f3a63af6c7fbf23f433c79aa81a1df0bd14ad289827a1d4a191c65264cc63fed85102ccb5a98d2a0aac6d09dec592d69ee3ab4daf78ce63f264d9d2c3b000077cd11286f1f63988d1ef0e21f99bcf36214869c3131be1a8dbc1f391f8272f8a61a6ed62f5540ede5806e1f9e6afed037462f522c418d73ba338c90727d73f8e7cc14fdd3de0a0c4e95381914dd993e9a7f91e3bbb787491a3a5427e5f61572f392d3835e9f2dbfcab3aec52c28d0607b83ed80f6c26c0deeb713bb83b02378a041e0eed0419e16542e34d0fa45d784794117cf5f27f5a64074dd36b37cc4ed95ea557d0944c2035366ccaf6cf5571bbe6a0c762904ae3f4da7b8f45d516c651399e215fdbad96d6b007fe2f670b24ba783ade13ae76d262ec79db42ff59ee35b18f4f566e1d9b9633e10f426baf61552566f711b19b3bfb3b518d6d0178d82a109647c200b022c70ee063abc47a467ca7ce07a44cf4614f5b6afa4752b734a03aa90958c2a550c08641d8ec6f63addadf56ece3d3631bf4c826a348e4d766d3b6a9574e337b77f00ceac0f2c288fc267e05c17a00e44f979bd5ffd05088a6cc3e2e82b704f137b27a5ca4126d29e8b4511b260ee896c686279467b427882c5b0ed1c992233d498fa056c7cd635ad269fa2595e4abd7d4cd1b0350983232820932ddedde310ace2acbb88cd84f3d86e68c31d6668aa0382693e8837cb84880293a84846e0f0990d66eec5becc6a0882710ad477db259f89f5c99ba59a817b9c90c127ca726596549e3476fc16884a7cf047f59b23fa22ccc4292faf4de642d4bf3b747580f885ff7dc74a6195bbf41c54b31533009d209211a0a8ef6f0475255a71b6d6413fc1865831305a26160b7f1c4e7c1a1706479f2624c944da8d362762be223928d508d16913530721e87ae05b761f706b701ef7a64e6cd94b2c2907907909cc3604a6d2186a9f7e97c2fcec81497f1a5c2f69a03847dfeac399cb45a5b4e7e1b62e7751e9d199e5e64149b90bdf3f49dbafa78fcb8795dff94a2d94f3b3a02d3d55cacbe20ac949e61c62c29f25119a946b5ac71d01e26ec39966cc013b467b069669cd351804b5609ce4038580293e094cfd87c579aa496fefe3a9c352f9a5b9793cf3b72a9996ea7105f4dea79187f2670cd6c87b6a2a79db75df6745c4fee0e5fe753290d99ba4a402013fccb19d7a2f38d3a736bba8b3022008b636c813edda0a8c9391829f60224f1ca80853f1bdaf66f04ef5e65f4fc5fa67981043e3fbf0c0abde3619f0fed1a3897ed22f3d53dc95bc8681ea231fae6b1ce9c0f23f7b6e9c8ee6ac882920ef93f48370f34d9b7c199c89c80f15aa0b0dff9711df0b45b13b720556d5a6e0fd76783a13832417e7edc4d4530528325dae8423a1532281932fa75d7897c107890c95754fca403b824e43894208cf52718925a5885081e9a7e7816de84209416225acdeb39c350572fecc477c94462de26195f0a21a4b72dde4f88d31f6817e1c16824b1cb1436336c60ea3ec331db912929922bd8574979e4ab9915149ee1d514adea384ac2da8e46768b4bbc8a41f2da795a98712928e133d9fc26cf58713bc8491128baea3388c6300552e361c20dbbfe0ded0d2c55754030524c5f2fce89941eaae8dac66dd1ebc84d50ee666d741a563c4f348b036d8dc1383d1e37fde13cbbfcffff3f3dd9c01ae2e8e9cf82d9615ee663a47358d5d0371ceb922352cb68b294e132bf7128c516297cf9ab0341725d9375c4dacfa20b857d7275b2710ad3d0afa4312bf939f8bd5f6ca51e2ed31909d0f7f1c0044e25567ad29c1a0924e5e0a6f24a2adb053481fc94cd206a20ca7ca60c59552647dc4", @generic="88779b6d7430ebf6fa196cb0802210f0cbabb10936eb49ee982d02a9186d361a391cd531be335719e0f26568ba74bf0c88841e4b19ea00b2c312b19d80b970284004302d16d2c61bde8b9b02196cb56477f66547e30b30671d757f1b2aefc5218e25d09d886f57c42d632acc808eef6bd85e79a930728b8d4cdc", @generic="aea98a0bd943e52f7690c2df6eab84493e7a"]}, @typed={0x8, 0x128, 0x0, 0x0, @u32=0x7}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x6, 0x13e, 0x0, 0x0, @str='\xb8\x00'}]}, @typed={0x4, 0x10a}]}, @typed={0x69, 0x7a, 0x0, 0x0, @binary="7e8359e8f8711759b2010b3c11cbb1e6f9d445a4570d3e7f1797da273b6597f416d07865a25f11bb41298da13b9a27bee05f2a2fde5c001e772108e76f8c4f55385a1681ce4e9852f26a2237c99c0947464274b04f5d1c104f27ca2af3bc3e2b90e5cdf3a9"}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x139c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4044000) setresuid(r1, r1, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba000000002b00", "2809e8dbe108598948224b084afbc11d87313c5240f4debb7990fdcd2baa8dd4192c61ac00000010000000000000000000000000000000000000005a00", "91be4ab3060000000000400000000000000100008000", [0x1, 0x9]}}) (async, rerun: 32) setresuid(r1, r0, r1) (async, rerun: 32) r5 = inotify_init() r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) ftruncate(r4, 0x7) (async, rerun: 32) r7 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) (async) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) (async) finit_module(r8, 0x0, 0x1) (async) cachestat(r5, &(0x7f0000000300)={0x8, 0x5}, 0x0, 0x0) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 39.294177508s ago: executing program 1 (id=725): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="04000000000000000a001e220000000cff"], 0x110) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001010000000000000000180000000c"], 0x28}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x3, {{0xa, 0x4e23, 0x65e, @mcast1}}, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6}}}, 0x108) 39.213848034s ago: executing program 1 (id=726): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clock_adjtime(0x6, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYRES16], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6(0xa, 0x2, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 39.038693992s ago: executing program 2 (id=727): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r2}, 0x2, &(0x7f0000000040)=[0x4, 0x7], 0x7, 0x8}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x8001}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x3, 0xc13c, 0x10, 0xe4, 0x8, 0x40, 0x4, 0x1, 0x45fe, 0xb, 0x2, 0xec8b, 0x6, 0x8b, 0x5], 0x50000, 0x8c0}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0xffff1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x6, 0x9, 0x3, 0x1, 0x4, 0x94, 0xf8, 0x6, 0x81, 0x3, 0x4, 0x3}, {0x3, 0x7, 0x1, 0x2, 0xb, 0x1e, 0x2, 0xfe, 0x4, 0x8, 0x9, 0x8, 0x7}, {0x8, 0x1, 0x5, 0x8, 0x9, 0x80, 0xc, 0x9, 0x4b, 0x8e, 0xfc, 0x40, 0x6}], 0x8001}) recvfrom$inet6(r0, &(0x7f0000000300)=""/23, 0x17, 0x40012023, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000340)=0x5300) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000380)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000003c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000400)) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000440), &(0x7f0000000480)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f00000025c0)={0x130, 0x0, r4, {0x8, 0x1, 0x0, '\x00', {0x4000, 0x1, 0xa, 0x5, r8, 0xffffffffffffffff, 0x8000, '\x00', 0x9e0, 0x3789, 0x7, 0x81, {0x4, 0x100}, {0x0, 0x4}, {0x2213, 0x1}, {0x0, 0x6}, 0x2c7, 0x3, 0x7, 0x3}}}, 0x130) io_setup(0x8, &(0x7f0000002700)=0x0) io_submit(r10, 0x4, &(0x7f0000002ac0)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, &(0x7f0000002740)="f88efc6804026c2ea655d757ce41dc8351b79b021b93db29baafb032af209a30c69785b39ec136b258c33d7346ac0411693f35dc3505552eca511b576272b82e2224a17795e69b9e04462c074e634653a0bd28b02622664b6b9697ff9637aea3d00302d250cf45", 0x67, 0x7, 0x0, 0x3, r1}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0xf000, r2, &(0x7f0000002800)="7d97a7d38f827da7826426c543f2c30e4231", 0x12, 0xd074, 0x0, 0x3, r1}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000002880)="ded2b6eb8259fa7320f3f14d0cb2c3205ae41587722952e9753cc5e101c9b656ea492c9664b9fb8eac3a139fbf16d56cf87c5616b99cb789418c1d9d945d174c77fb30ec569b292341beb50c469082b47f1361678a4a7199be5938b0f02fcfed61ae40086c0847ac79af2c7c14020e2f6f647b1328811464fe5efa22d3103070b91886ec190f808857e186eeb4693822cb3f3ed4dd85fdc808d4e444071b9762a67816e1aae17191cdee58d2b426b6cd346e6f86c280c6a0164f36f21d0baa161d01802b4536f69f885d6803e8b87119606905b54e8a8c5f111f42a650fcd302b37d43f5125dd663b1166b193597d6", 0xef, 0x9, 0x0, 0x0, r0}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f00000029c0)="0f4a0cabc3488917afc6d206758826751a029c5796889faca2904f4943171680580591065c1547b25ffedc2451d386495671bac4a4a72fcf46ddd649950d30cbc386b2a9c9196b0f1b891a83ba7af2ff9c9948115372e6962f2ff61f7977955ee024a1c8b48d761822b4ffd64872bfdcdfe8e30cb77e7d6800ca29c929e8883efaf4093dd1ab83a4ebbdb0a8631a6ad1ebda6e9b750bb066c90b979dcb580ba8527c", 0xa2, 0xa, 0x0, 0x7, r0}]) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r11, 0x8008af73, &(0x7f0000002b40)={0x0, 0x1000, ""/4096}) sendmsg$unix(r1, &(0x7f0000003d00)={&(0x7f0000003b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003c00)="1d699a3d1ab42226be1a90", 0xb}], 0x1, &(0x7f0000003c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r9}}}], 0x70, 0x80}, 0x20040004) r12 = syz_io_uring_complete(0x0) close_range(r11, r12, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000003d40)={0x101ff, 0x2, 0x25000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000003dc0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003d80)={0x10, 0x7fff}}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000003e40)=@attr_other={0x0, 0x4, 0xfff, &(0x7f0000003e00)=0xfffffffffffffff0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003ec0)={'nicvf0\x00', &(0x7f0000003e80)=@ethtool_sset_info={0x37, 0x55f0, 0x6, [0xff, 0x6, 0x1]}}) 38.876476644s ago: executing program 2 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) 38.821628293s ago: executing program 2 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x100, 0x70bd2b, 0x25dfdbfd, 0xff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004094}, 0x4000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'wlan1\x00', {'veth1_to_batadv\x00'}, 0x7}) r1 = syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x17cc, 0xbaff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x1, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xee27, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x3, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb8, 0x1, 0x80, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x9c, 0xba, {0x7, 0x25, 0x1, 0x4, 0xff, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x6, "f19a", "d6"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0xe, 0xf6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc7, 0x1, 0x3, 0x66}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x8f, 0x5a, {0x7, 0x25, 0x1, 0x8, 0x3, 0x2}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x6, 0x6, 0xf1, 0xff, 0xf8}, 0x13, &(0x7f0000000240)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x68, 0x5, 0x3, 0xfb40, 0x6}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0x26, 0xb0, {0xb0, 0x22, "4cbbbb6047e260bfb0efa7f1fe8b47910ac4450c2bd8d75bc8b3a78c9f54ba89d21e0f39f52579db9a0fde47ea0546b95a5518a1631953e68a8c4b9ff2f9e75d74d71ea5dbb38922630de593d1d00d529d559921d41bb00687f239ddc6ae3bf0a3ecb3c3912d6e7ac881081064b9893adf89f9c9320980344c01eab7b1c642afb8b0808a21d3bf5c138fad311a9d99ad5a2b44e16ac11c8ac36a14daed52bc85d06efbc3ff8744dafc345179bb54"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0x30, 0x50, "8d4ffc53bb5b49c3619ad50b63b48c2714605a08a67dfc3d4ad90020ef056e3ece9bec721805eff9d0bb0fa3402d4a2ed720d7253cb4a0493deb701a072be8a89a080d64aa171d94f0a05c83afe9ff76"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xb6}, &(0x7f0000000580)={0x20, 0x81, 0x2, 'Bh'}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "df"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "4aea"}, &(0x7f0000000640)={0x20, 0x84, 0x1, 'S'}, &(0x7f0000000680)={0x20, 0x85, 0x3, '>bg'}}) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x10000, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x0, 0x24, 0x8e, {0x8e, 0xc, "e4ae7bbcf0c6cae9d2d5cd4dbc0f7342180fb74ada31a5f5433c680319fff7c76506ada66053ae8003b911227ab1cdfceaf358156ef80ab4480ffc921b5a1db0cdac554f919d247d1c63d732b7da77d1d1746d083b1db5dc12f58b28004329af50c204efd052223cb7136a3596dd7c961b6fefd8ddd93675bedf37b2fd3f4a7f2303f3732c1960a8ac56c668"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x20, 0xc, 0x32, "92e70e9e89390e8061e05ba2f1ed554306caafa5c17e30306dfb93140c55bb8851266c945a456ae317d3e40b6fd17aa3af64"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "50945b"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "23df"}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "a48798"}, &(0x7f0000000b00)={0x20, 0x84, 0x4, "e702ed30"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "6e1ed3"}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'syztnl0\x00', r3, 0x20, 0x7800, 0x1e81f480, 0x8, {{0x15, 0x4, 0x1, 0x24, 0x54, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x3c, 0xad, 0x1, 0x0, [{@empty, 0x37f}, {@multicast1, 0x5}, {@empty, 0x80000001}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x6969}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xc0, 0xdb, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x6b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x9, 0x33}}]}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x2, 0xf, 0x4, 0x20, 0x8}, 0x65, &(0x7f0000000d40)={0x5, 0xf, 0x65, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0xf000, 0xb4f, [0xf0, 0x3f30, 0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x32, "44c4d88107da3abfd48c1e720522f37f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0xa8, 0xd, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0fd8c989e845b0cfd58306204696d5b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x3, 0x5c, 0xff, 0x4}]}, 0x6, [{0xd2, &(0x7f0000000dc0)=@string={0xd2, 0x3, "a86c261c2dafaebc8ac3af260aa34d582417e55fb80bf7d2d670de16c6d5f2c4f91e334f24105e3e18d2722eddf1a063f23caa8b820b0ac696f256c78a44afe5eec6dc4cb788c6e672f419b41dcd5fc7ca835b28ecb9b97c480c9ae3b0817949034a606d8f5047cd14c47d10250ab599b1f1b0d148809d338f343462e847d28d58654cd8f9f052a2bb343ed300c094b5b43c3a2ef7b2f4e9e335975020c7bf7f4f48a80e261b9809410359fb5870bb3ef45fe2dae64a50f5ff33f8c7ea3f55ba56eb06f9d7b3e494bf431ed1bc1ba069"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x413}}]}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000001080)={0x2, 0x2, 0x101, 0x0, 0xfff, 0x401}) r7 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000001240)={0x14, &(0x7f0000001100)={0x0, 0x21, 0xde, {0xde, 0x19d8c5cc3d41c076, "c2e882185b9a511c471dd779f4573fc937800066ead086da90a7e27898b147f16a8c11083eed9f970876ae9edf37ccd49061537f3b8ef4c55f06e1e51fcbb6a28e9ca1d53256ab060b2075b8b3e96802fcfc2f1881211d392c9763a80cab6590ffdd73f04a3329edebac112baeb4121a28977125c2ff07ee399569808e2ab1285897c526acf7db74f69027769b1886b381b8f1fdcb5198d1c3da921cdc4e4dfeb9b5b6d260dcb2655e8eb6930dbe0b7ed7459b9fbd2671d1ba36a0984fc095d44ab7ff6f0af933f172da4ce4c3a46946cd7575d182c15c6d60ed01a8"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000001400)={0x2c, &(0x7f0000001280)={0x20, 0xd, 0x71, "869610a35dd9a8664b523bd728ff283ef15caebe6a39f87e9003d22a227b482abff9710f8cbca9f276332d7c8f85eb2a15391596c63bdc957ff8c4f70788f7ef5fc4dcbbeffadf5191d4b30131a9eafd63c6e728ddc3ea74e38b3c52996ee5b12897a750bfa2911d7589674962716c66b0"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001380)={0xc0, 0x5, 0x3, "ffccda"}, &(0x7f00000013c0)}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000001440)={0x6, 'vlan1\x00', {0xfffffff9}, 0x9}) getpeername(r5, &(0x7f0000001480)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000001500)=0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001540)={'macvlan0\x00', {0x2, 0x4e21, @empty}}) r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000001600)=0x6e, 0x0) sendfile(r8, r5, &(0x7f0000001640)=0x5, 0x80) getpeername(r6, &(0x7f0000001680)=@in={0x2, 0x0, @dev}, &(0x7f0000001700)=0x80) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000001740)={0x1}) syz_usb_connect$midi(0x5, 0x57, &(0x7f0000001780)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x40, 0x1c0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7291cae650dbd446, 0x7f, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x1, 0x5, [{0x7, 0x40}, {0x8, 0xe}, {0x7, 0x7f}, {0x7, 0x8}, {0x3, 0x9}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x71, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x53}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7ff, 0x7}]}}}}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x250, 0xf2, 0x41, 0x4, 0x20}, 0x2a, &(0x7f0000001840)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x6, 0xc000}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "cdb0ccaf7fdef72102f9094b20b330e1"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xe, 0xb5}]}, 0x2, [{0xe6, &(0x7f0000001880)=@string={0xe6, 0x3, "f7cf8f15a5bec66c24ad06e885c4fe704c643b84f31ca28434326215e520a67d554d6be1920ef16629e4c670b3c7d538a545a0cdc0c06d8e95939e09c0c256800bd82a6b8853bee4488fdce65f2c7fa0205c45e628b9ceda72df4e1b035abd0f2d3908d01ffa885ade6e42a19444f7cb859e02478985700d49dc175ad6590ffefa0e47e8a3d33118623992c83a9c7e6364124854a0ca89b19f6f6ab84556a2767560f6d08af5eb827e8cdaf997cf91f451d2ba62bb26a40faa910914c4e9d46da3817b9d10bd1da88c423d2ef548378be457a74c2f9b8da641c4605764e9650261a07356"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x2c09}}]}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a00)={0x20, 0x23, 0x84, {0x84, 0xb8c11f8301c03c3, "db26c2760c6e5ae4ab7a579e4fde62e2d55da1ef47c4b1addbb65b6f2a11bfc5ce431109f54e2df8d465e27b9780664ba17d376631a5d67d8e536035c4071704db9e9a310038420c150c73b0910ea8eb5a99cbae8f23144d8ec01ec15c86979792e49875dd31c39182b1956a16d266c6beffaf8a0c58b6d823cb74b6b1f3be08bc19"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000001b00)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x87, 0x9, "d46e9806", "ec17bc73"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x18, 0x4, 0x80, 0x2, 0x4, 0xe}}}, &(0x7f0000002000)={0x84, &(0x7f0000001c00)={0x20, 0x17, 0xf, "77d26d9319271191186f183272dc48"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0xed}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0xe0, 0x80}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001d80)={0x40, 0x9, 0x1, 0xae}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, '3o'}, &(0x7f0000001e00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001e40)={0x40, 0x13, 0x6, @random="febceaa77a07"}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "80dc"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001f40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001f80)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0x7}}) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000020c0), &(0x7f0000002100)=0x4) sendmsg$tipc(r5, &(0x7f0000002440)={&(0x7f0000002140)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3, 0x3}}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002180)="4fde64e5c30bc0cf9ac6df2521942ca3a79537a82bce597dd04f7bcebb3a12cefb22f9a00f56b7a2d76b937a5f51849e0e8a6f07155f33a6955e5ea67b54763ca98aff0ff097879f69e5d11bc5d5300e2cd4685174186d1ba41ffd7fb8dd480ba5d9b4a1a96c34a1bd694be5da3622ecdf2575d94fb6b59bfe996d8e10ae650e601ede98cf72ec9e36699b0e9735649ad1ce271be80e9f316b6571b29258bb4d3d0b384731aeac1caf12377405f6a398ed44ec4a11ec9cccc19d13388b32323d", 0xc0}, {0xfffffffffffffffd}, {&(0x7f0000002240)="29240f19e8ac8a4b2d17a050cccb945e4707aaf2d7a25fb3d307623a61ba4db850e4a8424f039441420a590e2f6459ea877492d68bc6fc96abbe3adac2d95b6fc963b093b18039fca40ce9e3642bf2a5e2cc1d55315e7109ba0a09d46a27b959c138704f37163ace6ac51e26b2fa1c6b840c689596744f930748f705039e80925570fc005a347476b6344758b137aff9652150847fbf7ea4954bade39b6c6e7055", 0xa1}, {&(0x7f0000002300)="6092e3f1bc50b865d57d5213f5a129bed6d2ccde83592bdd5a60da7526bb1fa7d25a5f4926b3e063dd04615b850763ccd0b3d3", 0x33}, {&(0x7f0000002340)="9076e0051193ba7b334a937602cb0270eec019544e17e8061306f47917e8eee5ffb8a8821cc366194890e3d4a7fb7a4ee6a99fd0eeae9a2c174cd783538c377de259191d1e", 0x45}], 0x5, 0x0, 0x0, 0x4000084}, 0x4000080) 38.397991418s ago: executing program 1 (id=731): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100810004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x211, 0xa08, 0x0, 0xb, 0x441, 0x5, 0x80, 0xfffffe01, 0x200, 0x10, 0x8, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 38.342500568s ago: executing program 4 (id=732): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@private2}, &(0x7f0000000040)=0x14) syz_usb_connect(0x3, 0x2f, &(0x7f0000001980)={{0x12, 0x1, 0x200, 0x65, 0x10, 0x6e, 0x8, 0x1b3d, 0x176, 0x9a73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x40, 0x3, 0x40, 0x2f, "", [{{0x9, 0x4, 0xb, 0xa, 0x1, 0xff, 0x4, 0x19, 0x0, [], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x6, 0x2, 0x8, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0) 38.143606462s ago: executing program 0 (id=733): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000001440)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784fd024f453df2d7e9f7ba6440da1de8ac20000a8e1da8150f1a103000000006eee7086f09a92a65bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000", 0x9c}, {&(0x7f00000004c0)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dcf1407525b5637629b3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fca7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87c9be0814365f3f1962ee9db85d8ba8968bfee00e27db96abc49c734aefd019fc756e8d14e1f0f3ce6d6e0163d7367f0672c0b07dc28d33ff4b44398a67156def6bd3ab5f7b33dc0d79dae55f626904ce60a091126aeee0265c1c0f1888c9b68006673ee9b9110c21c972a93d55528c6132eceea1717c994a6b584c570246a1dd3f7cd448a82c0f7794058a47b76433d1e71e86e9e483cbeb50e13a5b54b046a8b16d80a8146784", 0x19f}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93", 0xd8}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001240)="4171f8", 0x3}, {&(0x7f0000000c00)="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", 0x13f}], 0x2, &(0x7f0000001cc0)=ANY=[], 0xd8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000880)="52b96c50caa66db1b870c79d4b2e02d5e953ddc91a660441290d085f2448bc534ee83bbee1f984984cb22bf04d0846026d36614a739a0366a46279281b9fa86bb79e1f3f22136d3a3478b6a942add335153e6b0781e03b1444daa1ebc665709847ff0453845146f17a5f707409e0eea7926aae09276f6badc1ab935455aa67de8115c73a2ed945f9b626abf178a315eaa470316216e4c90052b5e3", 0x9b}, {&(0x7f0000000680)="bea9987c5871b00e8443", 0xa}], 0x2, &(0x7f00000009c0)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x5e, [@dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010102]}, @generic={0x82, 0x7, "364e3833de"}, @ssrr={0x89, 0xb, 0x9, [@loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@private=0xa010100, 0xd99}]}, @timestamp_prespec={0x44, 0x14, 0x5d, 0x3, 0x9, [{@multicast2, 0x8}, {@remote, 0x2}]}, @timestamp={0x44, 0xc, 0x17, 0x0, 0x8, [0xc, 0x8]}, @timestamp={0x44, 0x2c, 0x22, 0x0, 0x7, [0x0, 0xb7c, 0x4, 0x10000, 0xc54, 0x1000, 0x1, 0x6, 0x8, 0x4]}, @timestamp_addr={0x44, 0x14, 0x27, 0x1, 0xd, [{@multicast2, 0x4}, {@private=0xa010100, 0xfffffffe}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x4, "2b1c"}, {0x7, 0x5, "a5e3b0"}]}, @timestamp={0x44, 0x8, 0x41, 0x0, 0x3, [0xfc21]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x110}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001bc0)="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", 0x8d9}], 0x1}}], 0x5, 0x2404c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="034a4a", 0x3}], 0x1) 38.113831477s ago: executing program 0 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) pivot_root(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file0\x00') r1 = socket$inet(0x2, 0x1, 0x8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@verity_require}], [{@hash}, {@subj_user={'subj_user', 0x3d, '\'+,'}}, {@subj_type={'subj_type', 0x3d, '/'}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_lt={'fowner<', r2}}]}) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000100)=ANY=[@ANYBLOB="7569643df9a850"]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, 'upperdir'}, {0x20, 'redirect_dir=nofollow'}, {0x20, '{'}, {0x20, 'bpf\x00'}], 0xa, "bbdfd30a24ea9811f4af4b0d82b266fa21a63b0fc9ab8cf12c5798ef84281c5bb6b288e248839fe52c3f1a9ffa60c8c591491a6d086e97a2dfe231a91d8271c05d933891986c4422224d24b94e4bbbcc7e9ccc643a6c4c35991ad752d94ee916b6d72327fa1abdc210884367d72ee7380da18cebc9df4c508093477224305c1cb384f99efe92edfe687588a1bfc0097778d1bcd8e981e214"}, 0xca) 38.0225175s ago: executing program 0 (id=735): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 38.02205421s ago: executing program 0 (id=736): readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000200)="dcf001c104a594c494b32a2c212c06839efca3f5c0146d10d858aea2369600d9e5b00d5961ed21f78bd709d34ac883ca94634ca090388dacab401fa9c61ec57cac5183994eabd7138ea645a96aed993a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x8, 0x0, &(0x7f00000005c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000080)="fe58b11e138cb1d0e790c8d44c03a7692906854629646b2491da7dfa73bcf0c613c6bd8dd1a480987c9be245b89b341e49d2fc5d0284caf181a98978a161e50e1b7b06c5f74827254a28181d9624df30"}) syz_clone3(&(0x7f00000002c0)={0x80040080, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x10}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000000240)=""/115, &(0x7f00000001c0)=[0x0, 0x0], 0x2}, 0x58) fcntl$setown(r0, 0x8, r1) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12cfc127bb90cbec}, 0x8, 0x3000000000002}, 0x400c801) 37.933712035s ago: executing program 0 (id=737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xc5000900) close(r1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202, r5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRES64=r7, @ANYBLOB="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", @ANYBLOB="90a0449414c45db82cda28afe82224bec5d54a2148c8fcbf7d02467fe856db251ff2"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x241) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000000040)='.\x00', 0x0) r11 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000100)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0xefff, 0xa}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0006}, {0x5, 0x34, 0x2, 0x61c79926}]}) close_range(r9, r0, 0x2) 37.870271294s ago: executing program 4 (id=738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000d50d95fe43c3c9b74a88298f18dcd5d550864b42878bbcb9dc99a829bd01feac1d3f3ddafbec1262a2d069b9c5d385c85927ca66325f41fea8b055ee1ed99a5655f5e884127c62abd058e73ea690bd894825536830772b89c9aafd0b01f567572f", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf252500000005002b000100000005002a000b00000008000200", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 37.810561583s ago: executing program 4 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) 37.809930323s ago: executing program 4 (id=740): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000006c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003a00)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/197, 0x0, 0x70000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x8, 0x0, &(0x7f00000000c0)) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @remote}}]}, 0x590) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), 0x4) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) listen(r6, 0xa4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x8000000000000000, 0x40000000000}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf0, 0x5, 0xfc, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x8080000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0x9, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x6, 0x4}) socket(0x10, 0x803, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x3) 37.647913393s ago: executing program 2 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x247}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000080)}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) r4 = syz_create_resource$binfmt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) 37.603728896s ago: executing program 1 (id=742): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendfile(r4, r3, 0x0, 0x17) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/233, 0xe9}], 0x2) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x4, 0x917, 0x5, 0x10001, 0x19, "ff4ccada2a98ac04d0fdf8733344dac5c6746b"}) 33.863610298s ago: executing program 4 (id=743): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000000)=0x10001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"]) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 33.004575255s ago: executing program 1 (id=744): ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x1000, 0x1, 0x1, 0x3, 0x2, [0x2, 0x4, 0x400, 0x80536000]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x402, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000100)=@random={'btrfs.', '-\x00'}, &(0x7f0000000140)=""/70, 0x46) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0xffffd000) 32.19533495s ago: executing program 0 (id=745): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x4000, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 25.729844615s ago: executing program 2 (id=746): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000100)=0xfffffff7, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000009c0)=[@nested_load_code={0x12e, 0x77, {0x3, "66baf80cb8203fe486ef66bafc0cb815ffffffefc4a1a9ec5414e3400f7983000000000f20c035010000000f22c036400f01cb440f01c30f20c035000000200f22c00fc7b6f96f00002666430f3a0d1600b9800000c00f3235002000000f30"}}, @cpuid={0x64, 0x18, {0x5, 0xc0}}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2b, 0x0, 0x9, 0x2}}, @out_dx={0x6a, 0x28, {0x14d, 0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xd43f, 0xb, 0x1}}, @in_dx={0x69, 0x20, {0xb68d}}, @wrmsr={0x65, 0x20, {0x347}}, @code={0xa, 0x81, {"0f013e48b808000000000000000f23c80f21f835080030000f23f8430f01f8470f704a6aec48b87d678d26000000000f23d80f21f835400000800f23f826362ef041fe410bf30f01f80fe329c74424000d000000c744240200400000c7442406000000000f011c2444d1b4de08000000"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x29b6, 0xb, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5b}}, @code={0xa, 0x67, {"c441f1f2190f20c035010000000f22c00f20d835080000000f22d8b9320200000f3248b8f4000000000000000f23d00f21f835100000090f23f8410f0666f3f336440fb39b64a69fb40f2acab8010000000f01c14190"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x92, 0x7, 0x80000001}}, @uexit={0x0, 0x18, 0x8000000000000001}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfffffffffffffffd, 0x7ff, 0x1}}, @code={0xa, 0x81, {"c744240094000000c7442402ad000000c7442406000000000f01142466baf80cb886083b88ef66bafc0cb021eef3440f5cb9005800002e6667d97af5b8010000000f01d9c422f1bda1de63000066b81a008ec8470f16b56effffffb9800000c00f3235001000000f3036f30f016c5506"}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x4d8}) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000ec0)={{r2}, "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"}) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000680)=""/248, 0xf8}], 0x1) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x2, 0x404c851) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 16.592922744s ago: executing program 33 (id=743): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000000)=0x10001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"]) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.03418934s ago: executing program 34 (id=745): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='tracefs\x00', 0x22008fc, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010364005a0c893afe1f1399c4"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x4000, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 0s ago: executing program 35 (id=744): ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x1000, 0x1, 0x1, 0x3, 0x2, [0x2, 0x4, 0x400, 0x80536000]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x402, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000100)=@random={'btrfs.', '-\x00'}, &(0x7f0000000140)=""/70, 0x46) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0xffffd000) kernel console output (not intermixed with test programs): ed forwarding state [ 21.513262][ T290] veth1_macvtap: entered promiscuous mode [ 21.528530][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.535611][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.547787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.554859][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.585130][ T296] veth0_vlan: entered promiscuous mode [ 21.599062][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.604169][ T296] veth1_macvtap: entered promiscuous mode [ 21.627825][ T295] veth0_vlan: entered promiscuous mode [ 21.660549][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.680657][ T294] veth0_vlan: entered promiscuous mode [ 21.698217][ T294] veth1_macvtap: entered promiscuous mode [ 21.720158][ T295] veth1_macvtap: entered promiscuous mode [ 21.792978][ T340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=340 comm=syz.2.5 [ 21.821374][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 21.842249][ T340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=340 comm=syz.2.5 [ 21.912995][ T341] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 22.256578][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 22.310873][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.445640][ T376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=376 comm=syz.0.13 [ 22.497871][ T376] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13'. [ 22.513722][ T375] Zero length message leads to an empty skb [ 22.571094][ T9] usb 4-1: device descriptor read/64, error -71 [ 22.612862][ T386] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 22.636036][ T391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 22.820934][ T9] usb 4-1: device descriptor read/64, error -71 [ 22.827261][ T237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.980920][ T237] usb 1-1: Using ep0 maxpacket: 16 [ 22.988628][ T237] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 22.997843][ T237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.006024][ T237] usb 1-1: Product: syz [ 23.010332][ T237] usb 1-1: Manufacturer: syz [ 23.015142][ T237] usb 1-1: SerialNumber: syz [ 23.060903][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 23.190886][ T9] usb 4-1: device descriptor read/64, error -71 [ 23.223466][ T237] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 23.229251][ T237] usb 1-1: unit 2 not found! [ 23.234119][ T237] usb 1-1: unit 1: unexpected type 0x03 [ 23.239699][ T237] usb 1-1: unit 4 not found! [ 23.244342][ T237] usb 1-1: unit 9 not found! [ 23.253747][ T237] usb 1-1: USB disconnect, device number 2 [ 23.285095][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.430873][ T9] usb 4-1: device descriptor read/64, error -71 [ 23.540982][ T9] usb usb4-port1: attempt power cycle [ 23.624853][ T414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.689151][ T417] syzkaller1: entered promiscuous mode [ 23.695526][ T417] syzkaller1: entered allmulticast mode [ 23.701983][ T331] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 23.730900][ T237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.881008][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 23.901651][ T237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.912576][ T237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.931585][ T9] usb 4-1: device descriptor read/8, error -71 [ 23.940894][ T237] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.957688][ T237] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.966975][ T237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.976025][ T237] usb 3-1: config 0 descriptor?? [ 24.080862][ T399] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.089486][ T9] usb 4-1: device descriptor read/8, error -71 [ 24.231960][ T399] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 24.240613][ T399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.250718][ T399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 24.259775][ T399] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.273951][ T399] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 24.283018][ T399] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 24.291057][ T399] usb 2-1: Product: syz [ 24.295304][ T399] usb 2-1: Manufacturer: syz [ 24.306923][ T399] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 24.330852][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 24.351955][ T9] usb 4-1: device descriptor read/8, error -71 [ 24.385887][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.393355][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.400743][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.408155][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.415637][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.423247][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.430622][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.438031][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.445470][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.452881][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.460261][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.467875][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.475285][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 24.475299][ T36] audit: type=1400 audit(1772861351.930:143): avc: denied { create } for pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.481561][ T428] netlink: 112 bytes leftover after parsing attributes in process `syz.0.30'. [ 24.501649][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.517958][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.525404][ T36] audit: type=1400 audit(1772861351.930:144): avc: denied { write } for pid=427 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.545736][ T237] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 24.558570][ T9] usb 4-1: device descriptor read/8, error -71 [ 24.565330][ T237] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 24.575020][ T237] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 24.600525][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.602974][ T36] audit: type=1400 audit(1772861352.060:145): avc: denied { execute } for pid=403 comm="syz.2.22" path=2F6D656D66643A76A6F56C6A362C72AFE8102FEC67EDE36880B821793677DADDB90A52E84099B98A0F5A09908B701084DCE286748ABAC6FBD20CEF26ADA84DE808B023AC29811E8A0C1144E36C875C1548647E5C1195F8E6A7C3BC182B92924E07A77F4E9B4CF8EB517302F9AD698F0FFF026E9D85EA1A2A1B49D81CE89B5953251D1086A00BEAD989DAA75764A445758C736DA12ED1B2491AB2FD419816CA8379F91AE706680776A8D8CEC81CAF8EA1EF61B12FEE313DBF4DEA770CA2871C281A2DEBFB56EB34D4435DC77B74F9D560495A0348D986E1324E1FD87BF57A40E0202864656C6574656429 dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 24.609674][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.678831][ T9] usb usb4-port1: unable to enumerate USB device [ 24.688196][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.697170][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.741384][ T9] usb 3-1: USB disconnect, device number 2 [ 24.762837][ T45] usb 2-1: USB disconnect, device number 2 [ 24.910606][ T441] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 25.110844][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.170832][ T36] audit: type=1400 audit(1772861352.620:146): avc: denied { name_bind } for pid=448 comm="syz.0.35" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.192686][ T36] audit: type=1400 audit(1772861352.630:147): avc: denied { node_bind } for pid=448 comm="syz.0.35" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.260855][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 25.267418][ T36] audit: type=1400 audit(1772861352.720:148): avc: denied { read } for pid=450 comm="syz.2.36" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.291577][ T36] audit: type=1400 audit(1772861352.720:149): avc: denied { open } for pid=450 comm="syz.2.36" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.301461][ T454] tipc: Started in network mode [ 25.316968][ T45] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 25.320260][ T454] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 25.331176][ T36] audit: type=1400 audit(1772861352.730:150): avc: denied { read write } for pid=450 comm="syz.2.36" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.337026][ T454] tipc: Enabled bearer , priority 10 [ 25.359612][ T36] audit: type=1400 audit(1772861352.730:151): avc: denied { open } for pid=450 comm="syz.2.36" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.388043][ T45] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 188 [ 25.389447][ T36] audit: type=1400 audit(1772861352.730:152): avc: denied { ioctl } for pid=450 comm="syz.2.36" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.421217][ T45] usb 2-1: can't read configurations, error -22 [ 25.421227][ T9] usb 4-1: device descriptor read/64, error -71 [ 25.438971][ T457] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.524816][ T460] can0: slcan on ptm1. [ 25.561234][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.592009][ T459] can0 (unregistered): slcan off ptm1. [ 25.621974][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.660851][ T9] usb 4-1: device descriptor read/64, error -71 [ 25.711521][ T45] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 25.720208][ T45] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 188 [ 25.728898][ T45] usb 2-1: can't read configurations, error -22 [ 25.735446][ T45] usb usb2-port1: attempt power cycle [ 25.900872][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 26.030989][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.080900][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.101536][ T45] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 26.109944][ T45] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 188 [ 26.118812][ T45] usb 2-1: can't read configurations, error -22 [ 26.250914][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 26.271980][ T45] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 26.280612][ T45] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 188 [ 26.280874][ T9] usb 4-1: device descriptor read/64, error -71 [ 26.289309][ T45] usb 2-1: can't read configurations, error -22 [ 26.302182][ T45] usb usb2-port1: unable to enumerate USB device [ 26.400967][ T9] usb usb4-port1: attempt power cycle [ 26.450880][ T237] tipc: Node number set to 4269801492 [ 26.740910][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 26.761918][ T9] usb 4-1: device descriptor read/8, error -71 [ 26.891953][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.130873][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 27.152385][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.281996][ T9] usb 4-1: device descriptor read/8, error -71 [ 27.391083][ T9] usb usb4-port1: unable to enumerate USB device [ 27.402027][ T501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 27.415049][ T501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 27.427377][ T501] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 27.631012][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.631011][ T479] Bluetooth: hci0: command 0x1003 tx timeout [ 27.890881][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.040744][ T512] overlayfs: missing 'lowerdir' [ 28.050859][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 28.057736][ T9] usb 3-1: config 2 has an invalid interface number: 48 but max is 1 [ 28.066266][ T9] usb 3-1: config 2 has an invalid interface number: 210 but max is 1 [ 28.076776][ T9] usb 3-1: config 2 has no interface number 0 [ 28.083798][ T9] usb 3-1: config 2 has no interface number 1 [ 28.090075][ T9] usb 3-1: config 2 interface 48 altsetting 6 has an endpoint descriptor with address 0x1D, changing to 0xD [ 28.101787][ T9] usb 3-1: config 2 interface 48 altsetting 6 endpoint 0xD has invalid maxpacket 25574, setting to 1024 [ 28.113165][ T9] usb 3-1: config 2 interface 48 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 28.124429][ T9] usb 3-1: config 2 interface 48 altsetting 6 bulk endpoint 0xC has invalid maxpacket 1023 [ 28.137201][ T9] usb 3-1: config 2 interface 48 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 28.148078][ T9] usb 3-1: config 2 interface 48 altsetting 6 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 28.159976][ T9] usb 3-1: config 2 interface 48 altsetting 6 has a duplicate endpoint with address 0x89, skipping [ 28.170710][ T9] usb 3-1: config 2 interface 48 altsetting 6 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 28.183814][ T9] usb 3-1: config 2 interface 210 altsetting 201 bulk endpoint 0x4 has invalid maxpacket 16 [ 28.193930][ T9] usb 3-1: config 2 interface 48 has no altsetting 0 [ 28.200680][ T9] usb 3-1: config 2 interface 210 has no altsetting 0 [ 28.209477][ T9] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice=72.ac [ 28.219171][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.220844][ T45] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 28.227202][ T9] usb 3-1: Product: 軈୽詒曬⡎䯓槃䧋꒾䎽è§ë»€ï‘­ç¹”䨰ã¦ëº‰î¿§è¹‚앾授ొà¥ï¡î•©ãŸ©ï‹žá¿¹æ¥ä…‰â§í¥ã¦«í“éŽå¸¼åºâ“»é£°é„¶î¦„紉뜨ꇮëœâµ±éœ…ಶ姾⌢ꭜ첢녞 [ 28.253005][ T9] usb 3-1: Manufacturer: ≠[ 28.257608][ T9] usb 3-1: SerialNumber: 稕ấ២壗ë¯è¶§ì«åŠ®áŽ¨æ–®ïŸá…¶êˆ…ㇿ飊ᔸ賟㱆壷îšè®ˆí•½â¥®ä£„⺉濵㹄볖ᴗœ⩹áƒã¥œâ‹¨é†¡ä§—㸱輵霗랮䧅♛㟽糾鵮那핖ᇫ裣ᑟ긎춒æ…ﰄ粹㰹á´á©¥ã¯•ï¦å²‚䢬忰ᯇé²êƒ¯î¢é§ší¾à§‹ê‡›èª¹çŸ•狀ꔉﶒäµíŠ¥æ¨é•æ„⤈믙냜ჟ๖륷괌拳轎ä¶á»áƒ ä§½ç”¢î…¹îˆœé°…çºí‚Û픣쨦쟑腮룖ꠀ⎸蔘蛰湯 [ 28.294039][ T9] usb 3-1: Interface #210 referenced by multiple IADs [ 28.301179][ T506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.308422][ T506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.392358][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.400458][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 28.410553][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 28.419643][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.427657][ T45] usb 2-1: Product: syz [ 28.431837][ T45] usb 2-1: Manufacturer: syz [ 28.436428][ T45] usb 2-1: SerialNumber: syz [ 28.517309][ T506] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 28.534421][ T9] usb 3-1: USB disconnect, device number 3 [ 28.646691][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.653678][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.663427][ T45] usb 2-1: USB disconnect, device number 7 [ 28.675449][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.863624][ T521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 29.240860][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 29.390881][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 29.397972][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 29.410303][ T9] usb 4-1: string descriptor 0 read error: -22 [ 29.416515][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 29.425606][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.470888][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.620897][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 29.627144][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 29.627160][ T36] audit: type=1400 audit(1772861357.080:183): avc: denied { read } for pid=548 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.635450][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.661939][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.674440][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 29.684333][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 29.694278][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 29.704134][ T9] usb 4-1: USB disconnect, device number 10 [ 29.762296][ T36] audit: type=1400 audit(1772861357.220:184): avc: denied { setopt } for pid=552 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.872023][ T36] audit: type=1400 audit(1772861357.330:185): avc: denied { mount } for pid=556 comm="syz.1.62" name="/" dev="ramfs" ino=4819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 29.898595][ T36] audit: type=1400 audit(1772861357.330:186): avc: denied { map } for pid=556 comm="syz.1.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.922470][ T36] audit: type=1400 audit(1772861357.330:187): avc: denied { read write } for pid=556 comm="syz.1.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.130870][ T442] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 30.282366][ T442] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.290358][ T442] usb 2-1: not running at top speed; connect to a high speed hub [ 30.300370][ T442] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 30.309464][ T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.317478][ T442] usb 2-1: Product: syz [ 30.321671][ T442] usb 2-1: Manufacturer: syz [ 30.326268][ T442] usb 2-1: SerialNumber: syz [ 30.742160][ T36] audit: type=1400 audit(1772861358.200:188): avc: denied { create } for pid=562 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 30.743347][ T563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.975024][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.983981][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.290845][ T446] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 31.420846][ T446] usb 4-1: device descriptor read/64, error -71 [ 31.508883][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.517461][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.526654][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.535282][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.544037][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.553393][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.562514][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.571135][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.580133][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.588794][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.670845][ T446] usb 4-1: device descriptor read/64, error -71 [ 31.910868][ T446] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 32.040833][ T446] usb 4-1: device descriptor read/64, error -71 [ 32.110030][ T576] netlink: 328 bytes leftover after parsing attributes in process `syz.1.67'. [ 32.147106][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.156125][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.181862][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.190140][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 32.198962][ T45] usb 3-1: can't read configurations, error -71 [ 32.259928][ T36] audit: type=1400 audit(1772861359.710:189): avc: denied { ioctl } for pid=582 comm="syz.2.70" path="socket:[5566]" dev="sockfs" ino=5566 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.285435][ T446] usb 4-1: device descriptor read/64, error -71 [ 32.291738][ T36] audit: type=1400 audit(1772861359.710:190): avc: denied { ioctl } for pid=582 comm="syz.2.70" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.305736][ T585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 32.316294][ T36] audit: type=1400 audit(1772861359.720:191): avc: denied { getopt } for pid=582 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.345138][ T36] audit: type=1400 audit(1772861359.750:192): avc: denied { read } for pid=584 comm="syz.2.71" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.421016][ T446] usb usb4-port1: attempt power cycle [ 32.758100][ T595] tipc: Started in network mode [ 32.760974][ T446] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 32.763059][ T595] tipc: Node identity 426f8a94d05d, cluster identity 4711 [ 32.777790][ T595] tipc: Enabled bearer , priority 0 [ 32.791879][ T446] usb 4-1: device descriptor read/8, error -71 [ 32.797975][ T595] syzkaller0: entered promiscuous mode [ 32.803569][ T595] syzkaller0: entered allmulticast mode [ 32.809340][ T595] tipc: Resetting bearer [ 32.819726][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.828261][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.860862][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.921821][ T446] usb 4-1: device descriptor read/8, error -71 [ 33.011927][ T45] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 33.020293][ T45] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 33.029195][ T45] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 33.039543][ T45] usb 3-1: config 220 has no interface number 2 [ 33.046001][ T45] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 33.059134][ T45] usb 3-1: config 220 interface 0 has no altsetting 0 [ 33.065917][ T45] usb 3-1: config 220 interface 76 has no altsetting 0 [ 33.072978][ T45] usb 3-1: config 220 interface 1 has no altsetting 0 [ 33.081307][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 33.090343][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.098357][ T45] usb 3-1: Product: syz [ 33.102537][ T45] usb 3-1: Manufacturer: syz [ 33.107117][ T45] usb 3-1: SerialNumber: syz [ 33.170869][ T446] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 33.191889][ T446] usb 4-1: device descriptor read/8, error -71 [ 33.201485][ T330] tipc: Resetting bearer [ 33.318681][ T45] usb 3-1: selecting invalid altsetting 0 [ 33.324579][ T45] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 33.331039][ T45] usb 3-1: No valid video chain found. [ 33.337167][ T446] usb 4-1: device descriptor read/8, error -71 [ 33.353217][ T45] usb 3-1: USB disconnect, device number 5 [ 33.360419][ T596] tipc: Resetting bearer [ 33.372891][ T599] ======================================================= [ 33.372891][ T599] WARNING: The mand mount option has been deprecated and [ 33.372891][ T599] and is ignored by this kernel. Remove the mand [ 33.372891][ T599] option from the mount to silence this warning. [ 33.372891][ T599] ======================================================= [ 33.377750][ T596] tipc: Disabling bearer [ 33.426150][ T601] capability: warning: `syz.1.77' uses deprecated v2 capabilities in a way that may be insecure [ 33.452135][ T446] usb usb4-port1: unable to enumerate USB device [ 34.033180][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.042144][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.182137][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.631363][ T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.640163][ T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.649749][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 34.649765][ T36] audit: type=1400 audit(1772861362.100:213): avc: denied { setopt } for pid=636 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.676472][ T36] audit: type=1400 audit(1772861362.130:214): avc: denied { ioctl } for pid=636 comm="syz.1.88" path="socket:[6201]" dev="sockfs" ino=6201 ioctlcmd=0xae8f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.700629][ T36] audit: type=1400 audit(1772861362.130:215): avc: denied { create } for pid=636 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.230816][ T36] audit: type=1400 audit(1772861362.680:216): avc: denied { map } for pid=640 comm="syz.1.90" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.253583][ T36] audit: type=1400 audit(1772861362.690:217): avc: denied { execute } for pid=640 comm="syz.1.90" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.349677][ T36] audit: type=1400 audit(1772861362.800:218): avc: denied { unlink } for pid=642 comm="syz.2.91" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.403386][ T36] audit: type=1400 audit(1772861362.860:219): avc: denied { write } for pid=645 comm="syz.2.92" name="protocols" dev="proc" ino=4026532443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.439498][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 35.449778][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 35.529044][ T36] audit: type=1400 audit(1772861362.980:220): avc: denied { bind } for pid=655 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.559665][ T36] audit: type=1400 audit(1772861363.010:221): avc: denied { append } for pid=658 comm="syz.1.98" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.636727][ T36] audit: type=1400 audit(1772861363.090:222): avc: denied { mounton } for pid=658 comm="syz.1.98" path="/proc/99/task" dev="proc" ino=5835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.720847][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.772082][ T666] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.796329][ T669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 35.796346][ T442] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.808496][ T669] rust_binder: Failed to allocate buffer. len:5144, is_oneway:true [ 35.812192][ T669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.813223][ T442] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.820424][ T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:109 [ 35.847425][ T669] netlink: 64 bytes leftover after parsing attributes in process `syz.1.101'. [ 35.865523][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.887284][ T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.895850][ T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.039333][ T674] netlink: 'syz.0.103': attribute type 28 has an invalid length. [ 36.110854][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.190919][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.300845][ T442] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 36.350901][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.422472][ T706] overlay: Unknown parameter 'smackfsfloor' [ 36.441100][ T442] usb 1-1: device descriptor read/64, error -71 [ 36.442624][ T709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.456259][ T709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.490922][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.690901][ T442] usb 1-1: device descriptor read/64, error -71 [ 36.730880][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.840938][ T10] usb usb3-port1: attempt power cycle [ 36.890868][ T564] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 36.930877][ T442] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 37.020869][ T564] usb 4-1: device descriptor read/64, error -71 [ 37.062911][ T442] usb 1-1: device descriptor read/64, error -71 [ 37.096859][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.106197][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.190841][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 37.211795][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.260857][ T564] usb 4-1: device descriptor read/64, error -71 [ 37.320878][ T442] usb 1-1: device descriptor read/64, error -71 [ 37.342030][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.430952][ T442] usb usb1-port1: attempt power cycle [ 37.500851][ T564] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 37.580907][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.601865][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.630856][ T564] usb 4-1: device descriptor read/64, error -71 [ 37.741918][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.770883][ T442] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 37.791898][ T442] usb 1-1: device descriptor read/8, error -71 [ 37.850978][ T10] usb usb3-port1: unable to enumerate USB device [ 37.870879][ T564] usb 4-1: device descriptor read/64, error -71 [ 37.894977][ T753] 9pnet_virtio: no channels available for device ./file0 [ 37.931896][ T442] usb 1-1: device descriptor read/8, error -71 [ 37.952235][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.960716][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.970465][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.979014][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.980939][ T564] usb usb4-port1: attempt power cycle [ 38.170901][ T442] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 38.191971][ T442] usb 1-1: device descriptor read/8, error -71 [ 38.322071][ T442] usb 1-1: device descriptor read/8, error -71 [ 38.330898][ T564] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 38.351920][ T564] usb 4-1: device descriptor read/8, error -71 [ 38.431716][ T442] usb usb1-port1: unable to enumerate USB device [ 38.482132][ T564] usb 4-1: device descriptor read/8, error -71 [ 38.567667][ T770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.576253][ T770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.730891][ T564] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 38.751940][ T564] usb 4-1: device descriptor read/8, error -71 [ 38.880857][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 38.881905][ T564] usb 4-1: device descriptor read/8, error -71 [ 39.000933][ T564] usb usb4-port1: unable to enumerate USB device [ 39.030844][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 39.037108][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.048195][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.058040][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 39.071104][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 39.077938][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 39.087541][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.101699][ T10] usb 3-1: config 0 descriptor?? [ 39.132632][ T774] netlink: 5 bytes leftover after parsing attributes in process `syz.0.141'. [ 39.440882][ T564] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.590863][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 39.597486][ T564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.606031][ T564] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.616334][ T564] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 39.627313][ T564] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 39.638401][ T564] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25246, setting to 1024 [ 39.649658][ T564] usb 1-1: config 1 interface 2 has no altsetting 0 [ 39.658114][ T564] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 39.667262][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.675316][ T564] usb 1-1: Product: syz [ 39.679233][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 39.679313][ T36] audit: type=1400 audit(1772861367.130:256): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.679478][ T564] usb 1-1: Manufacturer: syz [ 39.679496][ T564] usb 1-1: SerialNumber: syz [ 39.715257][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.724193][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.728778][ T805] 9pnet_fd: p9_fd_create_tcp (805): problem connecting socket to 127.0.0.1 [ 39.742750][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 39.754894][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.767888][ T10] usb 3-1: USB disconnect, device number 10 [ 39.925448][ T824] input: syz0 as /devices/virtual/input/input4 [ 39.941634][ T36] audit: type=1400 audit(1772861367.380:257): avc: denied { write } for pid=822 comm="syz.3.156" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.947517][ T564] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.971534][ T36] audit: type=1400 audit(1772861367.380:258): avc: denied { ioctl } for pid=822 comm="syz.3.156" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.973780][ T564] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.008090][ T564] usb 1-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 40.016551][ T564] usb 1-1: found format II with max.bitrate = 65535, frame size=9 [ 40.026244][ T564] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 40.034153][ T564] usb 1-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 40.042880][ T564] usb 1-1: found format II with max.bitrate = 65535, frame size=9 [ 40.051160][ T564] usb 1-1: selecting invalid altsetting 0 [ 40.076095][ T564] usb 1-1: selecting invalid altsetting 0 [ 40.089856][ T564] usb 1-1: USB disconnect, device number 7 [ 40.115110][ T519] udevd[519]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 40.239258][ T36] audit: type=1400 audit(1772861367.690:259): avc: denied { ioctl } for pid=837 comm="syz.3.160" path="socket:[7506]" dev="sockfs" ino=7506 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.302079][ T36] audit: type=1400 audit(1772861367.760:260): avc: denied { write } for pid=840 comm="syz.3.161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.360828][ T36] audit: type=1400 audit(1772861367.760:261): avc: denied { open } for pid=840 comm="syz.3.161" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.378988][ T842] netlink: 'syz.3.161': attribute type 4 has an invalid length. [ 40.407807][ T842] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.161'. [ 40.670998][ T564] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 40.710835][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.749038][ T442] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.769465][ T36] audit: type=1400 audit(1772861368.220:262): avc: denied { lock } for pid=854 comm="syz.1.166" path="socket:[6931]" dev="sockfs" ino=6931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.830854][ T564] usb 4-1: Using ep0 maxpacket: 16 [ 40.837169][ T564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.847601][ T564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.857997][ T564] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.867123][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 40.873641][ T564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.881781][ T564] usb 4-1: Product: syz [ 40.886074][ T564] usb 4-1: Manufacturer: syz [ 40.895455][ T564] usb 4-1: SerialNumber: syz [ 40.900146][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.900413][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.911894][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.928122][ T45] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 40.928231][ T442] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.951163][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.960223][ T45] usb 3-1: config 0 descriptor?? [ 40.966724][ T442] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 40.975979][ T442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 40.984101][ T442] usb 1-1: Product: syz [ 40.988312][ T442] usb 1-1: Manufacturer: syz [ 40.992958][ T442] usb 1-1: SerialNumber: syz [ 41.137266][ T36] audit: type=1400 audit(1772861368.590:263): avc: denied { getopt } for pid=840 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.199621][ T442] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 41.367624][ T45] hid (null): invalid report_size 1211891633 [ 41.375912][ T45] nintendo 0003:057E:200E.0002: invalid report_size 1211891633 [ 41.383536][ T45] nintendo 0003:057E:200E.0002: item 0 4 1 7 parsing failed [ 41.391048][ T45] nintendo 0003:057E:200E.0002: HID parse failed [ 41.397545][ T45] nintendo 0003:057E:200E.0002: probe - fail = -22 [ 41.404128][ T45] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -22 [ 41.549393][ T36] audit: type=1400 audit(1772861369.000:265): avc: denied { read write } for pid=845 comm="syz.0.163" name="lp0" dev="devtmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 41.552117][ T846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 41.573835][ T36] audit: type=1400 audit(1772861369.000:264): avc: denied { read write } for pid=845 comm="syz.0.163" name="lp0" dev="devtmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 41.634654][ T846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.643223][ T846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.206932][ T874] process 'syz.2.172' launched '/dev/fd/4' with NULL argv: empty string added [ 42.220854][ T873] process 'memfd:£Ÿn´dRi5¬Îáˆ[@8×Î 9I“=µç\'LæÒ޼)JtTDqϺå1õ È>É\…L¿Ï‘ßMó^T*' started with executable stack [ 42.910852][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.910865][ T479] Bluetooth: hci0: command 0x1003 tx timeout [ 43.224553][ T921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.233677][ T921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.264734][ T923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.273304][ T923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.282382][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 43.291898][ T923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.300395][ T923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.308970][ T564] usb 4-1: 0:2 : does not exist [ 43.315849][ T564] usb 4-1: USB disconnect, device number 19 [ 43.334484][ T925] 9pnet_fd: Insufficient options for proto=fd [ 43.335412][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 43.356367][ T923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.366023][ T923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.783071][ T564] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 43.852036][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.860617][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.894087][ T939] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 43.905696][ T939] overlayfs: missing 'lowerdir' [ 43.922923][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 43.940835][ T564] usb 4-1: Using ep0 maxpacket: 8 [ 43.947322][ T564] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.957791][ T564] usb 4-1: config 179 has no interface number 0 [ 43.965358][ T564] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.976695][ T564] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.989365][ T564] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.000594][ T564] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 44.012052][ T564] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.025315][ T564] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 44.035485][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.044603][ T930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.262284][ T442] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.270527][ T442] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.336245][ T399] usb 4-1: USB disconnect, device number 20 [ 44.336326][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.350813][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 44.474489][ T965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=965 comm=syz.1.203 [ 44.628547][ T977] tipc: Can't bind to reserved service type 1 [ 44.636935][ T977] syzkaller0: entered promiscuous mode [ 44.642440][ T977] syzkaller0: entered allmulticast mode [ 44.884098][ T985] overlayfs: upper fs does not support tmpfile. [ 44.955815][ T1009] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 44.963872][ T1009] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 44.985610][ T1009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.998412][ T1009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.005147][ T1025] overlayfs: conflicting lowerdir path [ 45.014429][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 45.014443][ T36] audit: type=1400 audit(1772861372.470:277): avc: denied { read } for pid=1024 comm="syz.3.213" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.014656][ T1025] incfs_lookup_dentry err:-13 [ 45.020569][ T36] audit: type=1400 audit(1772861372.470:278): avc: denied { open } for pid=1024 comm="syz.3.213" path="/42/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.020593][ T36] audit: type=1400 audit(1772861372.470:279): avc: denied { ioctl } for pid=1024 comm="syz.3.213" path="/42/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.200256][ T36] audit: type=1400 audit(1772861372.650:280): avc: denied { write } for pid=295 comm="syz-executor" name="/" dev="incremental-fs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.223086][ T36] audit: type=1400 audit(1772861372.650:281): avc: denied { remove_name } for pid=295 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.247460][ T36] audit: type=1400 audit(1772861372.650:282): avc: denied { unlink } for pid=295 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.305616][ T330] bridge_slave_1: left allmulticast mode [ 45.311305][ T330] bridge_slave_1: left promiscuous mode [ 45.316978][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.325134][ T330] bridge_slave_0: left allmulticast mode [ 45.330778][ T330] bridge_slave_0: left promiscuous mode [ 45.336693][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.412350][ T36] audit: type=1400 audit(1772861372.870:283): avc: denied { mounton } for pid=1029 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.450166][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.457290][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.464502][ T1029] bridge_slave_0: entered allmulticast mode [ 45.470862][ T1029] bridge_slave_0: entered promiscuous mode [ 45.477734][ T330] veth1_macvtap: left promiscuous mode [ 45.510234][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.517323][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.524444][ T1029] bridge_slave_1: entered allmulticast mode [ 45.531494][ T1029] bridge_slave_1: entered promiscuous mode [ 45.614314][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.621402][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.630441][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.637511][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.662177][ T1029] veth0_vlan: entered promiscuous mode [ 45.673084][ T1029] veth1_macvtap: entered promiscuous mode [ 45.697455][ T36] audit: type=1400 audit(1772861373.150:284): avc: denied { mounton } for pid=1029 comm="syz-executor" path="/root/syzkaller.7GpMsA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.729320][ T36] audit: type=1400 audit(1772861373.150:285): avc: denied { unmount } for pid=1029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.751383][ T36] audit: type=1400 audit(1772861373.180:286): avc: denied { mount } for pid=1045 comm="syz.2.219" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.810670][ T1056] netlink: 'syz.2.220': attribute type 27 has an invalid length. [ 46.199755][ T1082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.208337][ T1082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.216507][ T399] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.225507][ T1082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.236100][ T1082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.370888][ T399] usb 5-1: Using ep0 maxpacket: 8 [ 46.376948][ T399] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 46.389111][ T399] usb 5-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 46.398232][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.406259][ T399] usb 5-1: Product: syz [ 46.410447][ T399] usb 5-1: Manufacturer: syz [ 46.415081][ T399] usb 5-1: SerialNumber: syz [ 46.875262][ T1091] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.891490][ T1092] overlay: filesystem on ./bus not supported as upperdir [ 47.023235][ T399] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 47.033440][ T399] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.051117][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 47.233609][ T564] usb 5-1: USB disconnect, device number 2 [ 47.276984][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.285546][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.603974][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.613152][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.923007][ T1147] netlink: 'syz.2.247': attribute type 3 has an invalid length. [ 47.945182][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.954283][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.111070][ T399] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.197737][ T10] usb 1-1: USB disconnect, device number 8 [ 48.207751][ T10] usblp0: removed [ 48.274063][ T399] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.296838][ T399] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.306501][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.315467][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.323813][ T399] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.332949][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.341086][ T399] usb 5-1: SerialNumber: syz [ 48.540858][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.548120][ T1133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.556876][ T1133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.568020][ T399] usb 5-1: 0:2 : does not exist [ 48.575533][ T399] usb 5-1: USB disconnect, device number 3 [ 48.586535][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 48.690875][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 48.697015][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.708048][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.717830][ T10] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 48.726976][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.735445][ T10] usb 1-1: config 0 descriptor?? [ 48.943421][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.951971][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.142465][ T10] cherry 0003:046A:0027.0004: report_id 4302 is invalid [ 49.149408][ T10] cherry 0003:046A:0027.0004: item 0 2 1 8 parsing failed [ 49.157208][ T10] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22 [ 49.320840][ T399] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.343523][ T10] usb 1-1: USB disconnect, device number 9 [ 49.450847][ T399] usb 5-1: device descriptor read/64, error -71 [ 49.480413][ T1179] input: syz0 as /devices/virtual/input/input7 [ 49.489765][ T1179] loop7: detected capacity change from 0 to 16384 [ 49.624565][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.633115][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.690857][ T399] usb 5-1: device descriptor read/64, error -71 [ 49.879105][ T1185] input: syz0 as /devices/virtual/input/input8 [ 49.921686][ T1185] bridge0: port 3(syz_tun) entered blocking state [ 49.928131][ T1185] bridge0: port 3(syz_tun) entered disabled state [ 49.934614][ T399] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.942204][ T1185] syz_tun: entered allmulticast mode [ 49.947789][ T1185] syz_tun: entered promiscuous mode [ 49.953211][ T1185] bridge0: port 3(syz_tun) entered blocking state [ 49.959635][ T1185] bridge0: port 3(syz_tun) entered forwarding state [ 50.090876][ T399] usb 5-1: device descriptor read/64, error -71 [ 50.188239][ T1191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.197249][ T1191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.240853][ T564] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 50.330869][ T399] usb 5-1: device descriptor read/64, error -71 [ 50.370870][ T564] usb 1-1: device descriptor read/64, error -71 [ 50.440935][ T399] usb usb5-port1: attempt power cycle [ 50.610871][ T564] usb 1-1: device descriptor read/64, error -71 [ 50.780886][ T399] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.811910][ T399] usb 5-1: device descriptor read/8, error -71 [ 50.850886][ T564] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 50.943601][ T399] usb 5-1: device descriptor read/8, error -71 [ 50.964513][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 50.964529][ T36] audit: type=1400 audit(1772861378.420:309): avc: denied { read } for pid=1202 comm="syz.2.270" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.015092][ T1204] raw_sendmsg: syz.2.270 forgot to set AF_INET. Fix it! [ 51.140849][ T564] usb 1-1: device descriptor read/64, error -71 [ 51.190838][ T399] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 51.228282][ T36] audit: type=1400 audit(1772861378.680:310): avc: denied { create } for pid=1206 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.229329][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.249546][ T399] usb 5-1: device descriptor read/8, error -71 [ 51.256682][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.392372][ T399] usb 5-1: device descriptor read/8, error -71 [ 51.400853][ T564] usb 1-1: device descriptor read/64, error -71 [ 51.500931][ T399] usb usb5-port1: unable to enumerate USB device [ 51.511012][ T564] usb usb1-port1: attempt power cycle [ 51.782814][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.791580][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.811118][ T36] audit: type=1400 audit(1772861635.261:311): avc: denied { search } for pid=1211 comm="syz.2.273" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.833496][ T36] audit: type=1400 audit(1772861635.281:312): avc: denied { read } for pid=1211 comm="syz.2.273" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.855404][ T36] audit: type=1400 audit(1772861635.281:313): avc: denied { open } for pid=1211 comm="syz.2.273" path="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.877288][ T564] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 51.891003][ T1214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.899448][ T1214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.902275][ T564] usb 1-1: device descriptor read/8, error -71 [ 52.042415][ T564] usb 1-1: device descriptor read/8, error -71 [ 52.280903][ T564] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 52.301958][ T564] usb 1-1: device descriptor read/8, error -71 [ 52.324042][ T36] audit: type=1400 audit(1772861635.771:314): avc: denied { remount } for pid=1221 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.343738][ T36] audit: type=1400 audit(1772861635.771:315): avc: denied { mount } for pid=1221 comm="syz.1.278" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 52.365780][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.365892][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.382280][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.390713][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.398763][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.407305][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.415351][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.423817][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.431997][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.440577][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.448596][ T564] usb 1-1: device descriptor read/8, error -71 [ 52.448958][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.464337][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.500858][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.561007][ T564] usb usb1-port1: unable to enumerate USB device [ 52.660008][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 52.666384][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 52.675021][ T10] usb 5-1: config 0 has no interface number 0 [ 52.681174][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 52.689318][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 52.698407][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.706644][ T10] usb 5-1: Product: syz [ 52.710819][ T10] usb 5-1: Manufacturer: syz [ 52.715427][ T10] usb 5-1: SerialNumber: syz [ 52.720659][ T10] usb 5-1: config 0 descriptor?? [ 52.726881][ T10] smsc75xx v1.0.0 [ 53.015129][ T36] audit: type=1400 audit(1772861636.464:316): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 53.050281][ T1238] kvm_intel: kvm [1237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1006 [ 53.061102][ T1238] kvm: kvm [1237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x3501 [ 53.128722][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 53.139905][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.152235][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 53.163068][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 53.172723][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 53.184222][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 53.193716][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 53.205145][ T10] usb 5-1: USB disconnect, device number 8 [ 53.453843][ T399] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.472016][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.480576][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.552186][ T1266] netlink: 'syz.1.291': attribute type 4 has an invalid length. [ 53.559926][ T1266] netlink: 'syz.1.291': attribute type 5 has an invalid length. [ 53.567617][ T1266] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.291'. [ 53.579565][ T36] audit: type=1400 audit(1772861637.039:317): avc: denied { nlmsg_tty_audit } for pid=1265 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.622517][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 53.630945][ T399] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 53.632106][ T36] audit: type=1400 audit(1772861637.089:318): avc: denied { map } for pid=1265 comm="syz.1.291" path="pipe:[10260]" dev="pipefs" ino=10260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.650840][ T399] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.672923][ T399] usb 1-1: config 0 has no interface number 0 [ 53.679037][ T399] usb 1-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 53.690146][ T399] usb 1-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 53.703341][ T399] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 53.712395][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.721252][ T399] usb 1-1: config 0 descriptor?? [ 53.737025][ T399] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 53.829939][ T1280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.838512][ T1280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.084224][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.092757][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.398489][ T1289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.406976][ T1289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.724062][ T399] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 54.825031][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.833565][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.884012][ T399] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.894215][ T399] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.903934][ T399] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.913004][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.921014][ T399] usb 5-1: SerialNumber: syz [ 55.385679][ T1326] cgroup: fork rejected by pids controller in /syz2 [ 56.075373][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 56.075391][ T36] audit: type=1400 audit(1772861639.558:323): avc: denied { setattr } for pid=1473 comm="syz.2.318" name="" dev="pipefs" ino=10754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.153996][ T1485] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 56.202112][ T1253] overlayfs: statfs failed on './file0' [ 56.213889][ T564] usb 1-1: USB disconnect, device number 14 [ 56.401915][ T1495] fuseblk: Bad value for 'source' [ 56.407625][ T1495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.416280][ T1495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.424805][ T1495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.433352][ T1495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.560287][ T564] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 56.689332][ T564] usb 1-1: device descriptor read/64, error -71 [ 56.927576][ T564] usb 1-1: device descriptor read/64, error -71 [ 56.947101][ T1497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.955630][ T1497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.165850][ T564] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 57.294875][ T564] usb 1-1: device descriptor read/64, error -71 [ 57.533131][ T564] usb 1-1: device descriptor read/64, error -71 [ 57.642488][ T564] usb usb1-port1: attempt power cycle [ 57.979906][ T564] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 58.000822][ T564] usb 1-1: device descriptor read/8, error -71 [ 58.017937][ T36] audit: type=1400 audit(1772861641.502:324): avc: denied { write } for pid=1521 comm="syz.1.337" name="unix" dev="proc" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.052768][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.061655][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.129939][ T564] usb 1-1: device descriptor read/8, error -71 [ 58.367118][ T564] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 58.388213][ T564] usb 1-1: device descriptor read/8, error -71 [ 58.403467][ T1528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.412016][ T1528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.517082][ T564] usb 1-1: device descriptor read/8, error -71 [ 58.612905][ T1533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.623212][ T1532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.625430][ T1533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.632220][ T1532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.639346][ T564] usb usb1-port1: unable to enumerate USB device [ 58.647777][ T1528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.662340][ T1528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.679877][ T1538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.688416][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.239543][ T36] audit: type=1400 audit(1772861642.731:325): avc: denied { create } for pid=1544 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.260387][ T1547] syzkaller0: entered promiscuous mode [ 59.265903][ T1547] syzkaller0: entered allmulticast mode [ 59.284648][ T1550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.291486][ T36] audit: type=1400 audit(1772861642.751:326): avc: denied { name_bind } for pid=1544 comm="syz.0.346" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.310574][ T1550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.321257][ T36] audit: type=1400 audit(1772861642.771:327): avc: denied { mount } for pid=1542 comm="syz.1.345" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.402105][ T1567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 59.452456][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.460954][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.470455][ T36] audit: type=1400 audit(1772861642.972:328): avc: denied { create } for pid=1572 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.490357][ T36] audit: type=1400 audit(1772861642.993:329): avc: denied { sys_admin } for pid=1572 comm="syz.1.354" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 59.512101][ T1573] mmap: syz.1.354 (1573) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.677808][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 59.826758][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 59.833141][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 59.845820][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 59.854899][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.862929][ T10] usb 1-1: Product: syz [ 59.867110][ T10] usb 1-1: Manufacturer: syz [ 59.871744][ T10] usb 1-1: SerialNumber: syz [ 59.897661][ T399] usb 5-1: 0:2 : does not exist [ 59.967140][ T237] usb 5-1: USB disconnect, device number 9 [ 60.068636][ T1596] overlayfs: conflicting options: userxattr,verity=on [ 60.079297][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 60.091482][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 60.111820][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 60.123745][ T10] usb 1-1: USB disconnect, device number 19 [ 60.134317][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 60.392938][ T237] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.519202][ T36] audit: type=1400 audit(1772861644.020:330): avc: denied { create } for pid=1604 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.561637][ T237] usb 5-1: Using ep0 maxpacket: 32 [ 60.567879][ T237] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.576284][ T237] usb 5-1: config 0 has no interface number 0 [ 60.583465][ T237] usb 5-1: config 0 interface 184 has no altsetting 0 [ 60.591585][ T1608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1608 comm=syz.2.369 [ 60.593904][ T237] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.604128][ T1608] netlink: 'syz.2.369': attribute type 16 has an invalid length. [ 60.615400][ T237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.631125][ T237] usb 5-1: Product: syz [ 60.635306][ T237] usb 5-1: Manufacturer: syz [ 60.653729][ T36] audit: type=1400 audit(1772861644.161:331): avc: denied { create } for pid=1616 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 60.656985][ T237] usb 5-1: SerialNumber: syz [ 60.685173][ T1617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1617 comm=syz.1.373 [ 60.687010][ T237] usb 5-1: config 0 descriptor?? [ 60.697967][ T1617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1617 comm=syz.1.373 [ 60.703038][ T36] audit: type=1400 audit(1772861644.191:332): avc: denied { watch watch_reads } for pid=1616 comm="syz.1.373" path="/131" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.748576][ T237] smsc75xx v1.0.0 [ 60.780836][ T1630] overlayfs: failed to resolve './file1': -2 [ 61.062014][ T36] audit: type=1400 audit(1772861644.573:333): avc: denied { write } for pid=1645 comm="syz.0.382" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.088308][ T36] audit: type=1400 audit(1772861644.604:334): avc: denied { load_policy } for pid=1645 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.089317][ T1647] SELinux: failed to load policy [ 61.116628][ T36] audit: type=1400 audit(1772861644.624:335): avc: denied { write } for pid=1645 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.488413][ T1666] syzkaller1: entered promiscuous mode [ 61.493993][ T1666] syzkaller1: entered allmulticast mode [ 61.618257][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.626800][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.733764][ T237] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 62.091235][ T564] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 62.132052][ T237] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 62.143465][ T237] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 62.153150][ T237] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 62.163430][ T237] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 62.172873][ T237] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 62.183367][ T237] usb 5-1: USB disconnect, device number 10 [ 62.198704][ T1678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.207230][ T1678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.240337][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 62.246826][ T564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.255465][ T564] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 62.263688][ T564] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 62.272420][ T564] usb 1-1: config 4 has no interface number 0 [ 62.279863][ T564] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 62.288908][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.296953][ T564] usb 1-1: Product: syz [ 62.301162][ T564] usb 1-1: Manufacturer: syz [ 62.305733][ T564] usb 1-1: SerialNumber: syz [ 62.517503][ T564] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 62.525585][ T564] usb 1-1: No valid video chain found. [ 62.533380][ T564] usb 1-1: USB disconnect, device number 20 [ 62.547813][ T1682] fuse: Bad value for 'fd' [ 62.731056][ T36] audit: type=1400 audit(1772861646.255:336): avc: denied { create } for pid=1703 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.924189][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.934692][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.021065][ T36] audit: type=1400 audit(1772861646.547:337): avc: denied { create } for pid=1725 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 63.223046][ T36] audit: type=1326 audit(1772861646.748:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38e459c799 code=0x0 [ 63.296319][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 63.322952][ T564] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 63.330530][ T36] audit: type=1400 audit(1772861646.859:339): avc: denied { bind } for pid=1741 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.349948][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 63.472470][ T564] usb 1-1: Using ep0 maxpacket: 32 [ 63.478651][ T564] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.486884][ T564] usb 1-1: config 0 has no interface number 0 [ 63.494475][ T564] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.503613][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.511655][ T564] usb 1-1: Product: syz [ 63.515820][ T564] usb 1-1: Manufacturer: syz [ 63.520409][ T564] usb 1-1: SerialNumber: syz [ 63.525623][ T564] usb 1-1: config 0 descriptor?? [ 63.531284][ T564] smsc95xx v2.0.0 [ 63.872768][ T1756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.881357][ T1756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.095084][ T1760] ªªªªªª: renamed from lo (while UP) [ 64.127670][ T1764] netlink: 'syz.1.424': attribute type 11 has an invalid length. [ 64.135502][ T1764] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 64.143226][ T1764] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.424'. [ 64.167153][ T1766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 64.177515][ T36] audit: type=1400 audit(1772861647.714:340): avc: denied { accept } for pid=1765 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.460519][ T36] audit: type=1400 audit(1772861647.996:341): avc: denied { map } for pid=1779 comm="syz.2.429" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.499270][ T36] audit: type=1400 audit(1772861648.037:342): avc: denied { mounton } for pid=1787 comm="syz.2.432" path="/168/file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.639079][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.647611][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.711638][ T1800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1800 comm=syz.1.437 [ 64.939701][ T564] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 64.950556][ T564] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.959838][ T564] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 64.970733][ T564] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 64.981880][ T564] usb 1-1: USB disconnect, device number 21 [ 64.990916][ T1807] netlink: 'syz.4.440': attribute type 11 has an invalid length. [ 64.999939][ T1807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=1807 comm=syz.4.440 [ 65.012812][ T1807] netlink: 'syz.4.440': attribute type 3 has an invalid length. [ 65.020434][ T1807] netlink: 944 bytes leftover after parsing attributes in process `syz.4.440'. [ 65.108084][ T1823] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.447'. [ 65.125744][ T1826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 65.137032][ T1826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.448'. [ 65.169794][ T1834] fuse: Bad value for 'fd' [ 65.796775][ T237] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 65.831939][ T1889] netlink: 'syz.4.470': attribute type 12 has an invalid length. [ 65.945829][ T237] usb 1-1: Using ep0 maxpacket: 8 [ 65.952401][ T237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.961001][ T237] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 65.969317][ T237] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 65.978171][ T237] usb 1-1: config 4 has no interface number 0 [ 65.985861][ T237] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 65.995012][ T237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.003063][ T237] usb 1-1: Product: syz [ 66.007327][ T237] usb 1-1: Manufacturer: syz [ 66.011932][ T237] usb 1-1: SerialNumber: syz [ 66.220953][ T237] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 66.227497][ T237] usb 1-1: No valid video chain found. [ 66.233809][ T237] usb 1-1: USB disconnect, device number 22 [ 66.252145][ T1898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.474'. [ 66.261124][ T1898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 66.270639][ T1898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.279165][ T1898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.287853][ T1898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.296420][ T1898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.305874][ T1898] netlink: 84 bytes leftover after parsing attributes in process `syz.2.474'. [ 66.807665][ T1907] overlayfs: failed to clone lowerpath [ 66.816564][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 66.816582][ T36] audit: type=1400 audit(1772861650.371:347): avc: denied { relabelfrom } for pid=1905 comm="syz.4.478" name="" dev="pipefs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 66.880676][ T1911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.893422][ T1911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.913150][ T36] audit: type=1400 audit(1772861650.462:348): avc: denied { connect } for pid=1921 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.939931][ T36] audit: type=1400 audit(1772861650.492:349): avc: denied { create } for pid=1921 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 67.168192][ T564] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 67.317200][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 67.324375][ T564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 67.333569][ T564] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 67.341180][ T564] usb 1-1: can't read configurations, error -71 [ 67.515721][ T1935] fuse: Bad value for 'user_id' [ 67.517586][ T1936] SELinux: policydb version -1335553715 does not match my version range 15-33 [ 67.520648][ T1935] fuse: Bad value for 'user_id' [ 67.529791][ T1936] SELinux: failed to load policy [ 67.682373][ T1948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.494'. [ 67.746702][ T1956] syz.1.497 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.963583][ T1966] netlink: 25 bytes leftover after parsing attributes in process `syz.0.501'. [ 68.004635][ T36] audit: type=1400 audit(1772861651.569:350): avc: denied { setopt } for pid=1967 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.380705][ T564] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 68.530995][ T564] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 68.539247][ T564] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 68.547398][ T564] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 68.556298][ T564] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 68.567165][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 68.578180][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 8 [ 68.588901][ T564] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 68.604059][ T564] usb 1-1: string descriptor 0 read error: -22 [ 68.610334][ T564] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 68.613997][ T1995] 9pnet_fd: p9_fd_create_unix (1995): problem connecting socket: ./file0: -2 [ 68.619396][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.636496][ T564] usb 1-1: config 0 descriptor?? [ 68.646652][ T1970] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.655733][ T564] hub 1-1:0.0: bad descriptor, ignoring hub [ 68.661710][ T564] hub 1-1:0.0: probe with driver hub failed with error -5 [ 68.674965][ T564] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 68.883221][ T564] usb 1-1: USB disconnect, device number 24 [ 68.902532][ T36] audit: type=1400 audit(1772861652.464:351): avc: denied { write } for pid=2026 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.921926][ T2027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.524'. [ 68.989582][ T2040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.998095][ T2040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.438896][ T2062] netlink: 'syz.0.536': attribute type 12 has an invalid length. [ 69.447358][ T2062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=2062 comm=syz.0.536 [ 69.462034][ T2062] bridge0: port 4(veth1_to_bridge) entered blocking state [ 69.469197][ T2062] bridge0: port 4(veth1_to_bridge) entered disabled state [ 69.476491][ T36] audit: type=1400 audit(1772861653.038:352): avc: denied { read } for pid=2065 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.495714][ T2062] veth1_to_bridge: entered allmulticast mode [ 69.502032][ T2062] veth1_to_bridge: entered promiscuous mode [ 69.508112][ T2062] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 69.520539][ T2062] bridge0: port 4(veth1_to_bridge) entered blocking state [ 69.527693][ T2062] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 69.531615][ T2070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.543753][ T2070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.562970][ T36] audit: type=1400 audit(1772861653.128:353): avc: denied { getopt } for pid=2072 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.582388][ T36] audit: type=1400 audit(1772861653.138:354): avc: denied { setattr } for pid=2072 comm="syz.0.541" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.612866][ T36] audit: type=1400 audit(1772861653.179:355): avc: denied { read } for pid=2075 comm="syz.0.542" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 70.070507][ T2086] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.079814][ T2086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.088424][ T2086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.120770][ T2090] __nla_validate_parse: 1 callbacks suppressed [ 70.120792][ T2090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 70.222141][ T2098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 70.502589][ T2105] netlink: 'syz.0.553': attribute type 4 has an invalid length. [ 70.511776][ T2105] netlink: 'syz.0.553': attribute type 4 has an invalid length. [ 70.634664][ T2115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2115 comm=syz.0.557 [ 70.683900][ T2125] veth0_to_team: entered promiscuous mode [ 70.744605][ T2141] netlink: 'syz.2.563': attribute type 4 has an invalid length. [ 70.752609][ T2138] netlink: 'syz.2.563': attribute type 4 has an invalid length. [ 70.925348][ T564] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 71.074497][ T564] usb 1-1: Using ep0 maxpacket: 16 [ 71.080705][ T564] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 71.089038][ T564] usb 1-1: config 0 has no interface number 0 [ 71.095227][ T564] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 71.105266][ T564] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 71.116688][ T564] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 71.125774][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.133743][ T564] usb 1-1: Product: syz [ 71.137924][ T564] usb 1-1: Manufacturer: syz [ 71.142515][ T564] usb 1-1: SerialNumber: syz [ 71.147999][ T564] usb 1-1: config 0 descriptor?? [ 71.153229][ T2122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.160512][ T2122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.367755][ T2122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.375031][ T2122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.652520][ T2157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.661371][ T2157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.831504][ T36] audit: type=1400 audit(1772861655.412:356): avc: denied { associate } for pid=2158 comm="syz.1.571" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 71.980062][ T564] asix 1-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 213 [ 72.181391][ T237] usb 1-1: USB disconnect, device number 25 [ 72.211946][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.220577][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.470323][ T2175] netlink: 108 bytes leftover after parsing attributes in process `syz.4.577'. [ 72.548320][ T36] audit: type=1400 audit(1772861656.136:357): avc: denied { bind } for pid=2194 comm="syz.1.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.630192][ T2215] fuse: Unknown parameter '0x0000000000000007' [ 72.645119][ T36] audit: type=1400 audit(1772861656.226:358): avc: denied { nlmsg_read } for pid=2217 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.699044][ T36] audit: type=1400 audit(1772861656.287:359): avc: denied { transfer } for pid=2221 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.848658][ T36] audit: type=1400 audit(1772861656.437:360): avc: denied { nlmsg_write } for pid=2251 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 72.870355][ T36] audit: type=1400 audit(1772861656.458:361): avc: denied { getopt } for pid=2240 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.916800][ T2263] overlayfs: failed to resolve './file0': -2 [ 72.923421][ T2263] overlayfs: failed to resolve './file0': -2 [ 72.993358][ T564] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 73.041361][ T36] audit: type=1400 audit(1772861656.629:362): avc: denied { connect } for pid=2276 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.093419][ T1069] tipc: Subscription rejected, illegal request [ 73.109767][ T36] audit: type=1400 audit(1772861656.699:363): avc: denied { name_bind } for pid=2279 comm="syz.4.615" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.142545][ T564] usb 1-1: Using ep0 maxpacket: 32 [ 73.149123][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.160188][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.169965][ T564] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 73.179155][ T564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.187918][ T564] usb 1-1: config 0 descriptor?? [ 73.399110][ T36] audit: type=1400 audit(1772861656.981:364): avc: denied { listen } for pid=2231 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.419007][ T36] audit: type=1400 audit(1772861657.001:365): avc: denied { write } for pid=2231 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.718891][ T564] usbhid 1-1:0.0: can't add hid device: -71 [ 73.724941][ T564] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.736101][ T564] usb 1-1: USB disconnect, device number 26 [ 74.475063][ T564] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 74.604311][ T564] usb 1-1: device descriptor read/64, error -71 [ 74.843641][ T564] usb 1-1: device descriptor read/64, error -71 [ 74.898722][ T2342] 9pnet_fd: Insufficient options for proto=fd [ 75.081681][ T564] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 75.210955][ T564] usb 1-1: device descriptor read/64, error -71 [ 75.449669][ T564] usb 1-1: device descriptor read/64, error -71 [ 75.559383][ T564] usb usb1-port1: attempt power cycle [ 75.827369][ T2369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.835922][ T2369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.897205][ T564] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 75.924595][ T564] usb 1-1: device descriptor read/8, error -71 [ 76.057491][ T564] usb 1-1: device descriptor read/8, error -71 [ 76.295059][ T564] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 76.315936][ T564] usb 1-1: device descriptor read/8, error -71 [ 76.370295][ T2381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.378846][ T2381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.387547][ T2381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.396543][ T2381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.445287][ T564] usb 1-1: device descriptor read/8, error -71 [ 76.563809][ T564] usb usb1-port1: unable to enumerate USB device [ 76.742690][ T2401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.749913][ T2401] IPv6: NLM_F_CREATE should be set when creating new route [ 76.757157][ T2401] IPv6: NLM_F_CREATE should be set when creating new route [ 77.061017][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 77.067206][ T36] audit: type=1400 audit(1772861660.661:372): avc: denied { write } for pid=2409 comm="syz.2.661" path="socket:[15793]" dev="sockfs" ino=15793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.393931][ T2420] netlink: 460 bytes leftover after parsing attributes in process `syz.1.665'. [ 77.399992][ T2422] netlink: 240 bytes leftover after parsing attributes in process `syz.0.666'. [ 77.469028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.481122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.493168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.505206][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.517263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.529310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.541340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.553365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.565361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.577353][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.947092][ T237] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 78.086370][ T2457] netlink: 104 bytes leftover after parsing attributes in process `syz.2.680'. [ 78.095555][ T2456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.680'. [ 78.104781][ T237] usb 1-1: Using ep0 maxpacket: 8 [ 78.120774][ T237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.137401][ T237] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 78.157920][ T237] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 78.180214][ T237] usb 1-1: config 4 has no interface number 0 [ 78.197415][ T237] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 78.216615][ T237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.257028][ T237] usb 1-1: Product: syz [ 78.264889][ T237] usb 1-1: Manufacturer: syz [ 78.274278][ T237] usb 1-1: SerialNumber: syz [ 78.290878][ T2475] sit0: entered promiscuous mode [ 78.306053][ T36] audit: type=1400 audit(1772861661.914:373): avc: denied { sqpoll } for pid=2474 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.327368][ T2475] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 78.350887][ T2475] netlink: 1 bytes leftover after parsing attributes in process `syz.2.685'. [ 78.508908][ T237] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 78.536874][ T237] usb 1-1: No valid video chain found. [ 78.578230][ T237] usb 1-1: USB disconnect, device number 31 [ 79.721646][ T2511] overlayfs: failed to clone upperpath [ 79.775006][ T2520] veth1_to_bond: entered allmulticast mode [ 79.803205][ T2519] veth1_to_bond: left allmulticast mode [ 79.848219][ T36] audit: type=1400 audit(1772861663.464:374): avc: denied { mounton } for pid=2527 comm="syz.0.704" path="/proc/228/cgroup" dev="proc" ino=16921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 79.904572][ T36] audit: type=1400 audit(1772861663.484:375): avc: denied { mounton } for pid=2527 comm="syz.0.704" path="/proc/228/cgroup" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.944253][ T36] audit: type=1326 audit(1772861663.554:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2531 comm="syz.0.706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a739c799 code=0x0 [ 80.407118][ T2538] »»»»»»: renamed from veth0_vlan (while UP) [ 80.469240][ T2542] overlayfs: failed to clone upperpath [ 80.664816][ T2555] FAULT_INJECTION: forcing a failure. [ 80.664816][ T2555] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.678881][ T2555] CPU: 0 UID: 0 PID: 2555 Comm: syz.2.714 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 80.678919][ T2555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.678932][ T2555] Call Trace: [ 80.678939][ T2555] [ 80.678948][ T2555] __dump_stack+0x21/0x30 [ 80.678977][ T2555] dump_stack_lvl+0x140/0x1c0 [ 80.679000][ T2555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.679025][ T2555] ? _parse_integer+0x2e/0x40 [ 80.679053][ T2555] ? kstrtoull+0x13b/0x1e0 [ 80.679071][ T2555] dump_stack+0x19/0x20 [ 80.679092][ T2555] should_fail_ex+0x3d7/0x530 [ 80.679112][ T2555] should_fail+0xf/0x20 [ 80.679130][ T2555] should_fail_usercopy+0x1e/0x30 [ 80.679151][ T2555] _copy_from_user+0x20/0xa0 [ 80.679175][ T2555] ___sys_sendmsg+0x1c7/0x370 [ 80.679195][ T2555] ? __sys_sendmsg+0x2a0/0x2a0 [ 80.679213][ T2555] ? proc_fail_nth_write+0x184/0x220 [ 80.679233][ T2555] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 80.679259][ T2555] __x64_sys_sendmsg+0x1fb/0x2d0 [ 80.679278][ T2555] ? fput+0x1a4/0x240 [ 80.679295][ T2555] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 80.679313][ T2555] ? ksys_write+0x1f3/0x260 [ 80.679342][ T2555] ? __kasan_check_read+0x15/0x20 [ 80.679367][ T2555] x64_sys_call+0x2a4c/0x2ee0 [ 80.679392][ T2555] do_syscall_64+0x57/0xf0 [ 80.679411][ T2555] ? clear_bhb_loop+0x50/0xa0 [ 80.679432][ T2555] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.679461][ T2555] RIP: 0033:0x7fce8d59c799 [ 80.679483][ T2555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.679501][ T2555] RSP: 002b:00007fce8e45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.679523][ T2555] RAX: ffffffffffffffda RBX: 00007fce8d815fa0 RCX: 00007fce8d59c799 [ 80.679538][ T2555] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 80.679551][ T2555] RBP: 00007fce8e45f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.679563][ T2555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.679573][ T2555] R13: 00007fce8d816038 R14: 00007fce8d815fa0 R15: 00007ffe66221108 [ 80.679589][ T2555] [ 80.963477][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.973050][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.982156][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.991340][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.001234][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.010462][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.019568][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.028817][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.038655][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.048284][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.197039][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 81.366159][ T2571] can: request_module (can-proto-4) failed. [ 81.376713][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.400748][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.423915][ T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 81.447513][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.481228][ T10] usb 1-1: config 0 descriptor?? [ 81.528283][ T36] audit: type=1326 audit(1772861665.144:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 81.558275][ T36] audit: type=1326 audit(1772861665.144:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 81.584132][ T36] audit: type=1326 audit(1772861665.144:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 81.608938][ T36] audit: type=1326 audit(1772861665.144:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 81.639065][ T36] audit: type=1326 audit(1772861665.144:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 81.697128][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 81.705992][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.727241][ T10] usb 1-1: USB disconnect, device number 32 [ 81.994411][ T2601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.013869][ T2601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.067085][ T36] kauditd_printk_skb: 3450 callbacks suppressed [ 82.067102][ T36] audit: type=1326 audit(1772861665.684:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.102502][ T2602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.111138][ T2602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.121692][ T36] audit: type=1326 audit(1772861665.704:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.145257][ T36] audit: type=1326 audit(1772861665.704:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.169417][ T36] audit: type=1326 audit(1772861665.714:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.194461][ T36] audit: type=1326 audit(1772861665.714:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.239435][ T36] audit: type=1326 audit(1772861665.714:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.269198][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.280079][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.294665][ T36] audit: type=1326 audit(1772861665.714:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.318262][ T36] audit: type=1326 audit(1772861665.714:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.342357][ T36] audit: type=1326 audit(1772861665.714:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.366596][ T36] audit: type=1326 audit(1772861665.714:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e459c799 code=0x7ff00000 [ 82.477043][ C1] net_ratelimit: 82834 callbacks suppressed [ 82.477058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 82.495077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.507115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 82.519179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.531191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 82.543284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.555358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 82.567411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.580046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 82.592170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.708412][ T2617] overlay: Unknown parameter 'hash' [ 82.714114][ T2617] bpf: Bad value for 'uid' [ 82.781316][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 82.781432][ T2621] rust_binder: Write failure EINVAL in pid:247 [ 83.117046][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 83.289329][ T10] usb 1-1: device descriptor read/64, error -71 [ 87.487052][ C1] net_ratelimit: 86373 callbacks suppressed [ 87.487073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.505059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 87.517123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.529099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.541074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.553137][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 87.565199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 87.577358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.589336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.601428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 87.818620][ C1] sched: DL replenish lagged too much [ 92.497047][ C1] net_ratelimit: 78893 callbacks suppressed [ 92.497068][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.514977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.527046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 92.539115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.551092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.563071][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.575141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 92.587211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 92.599191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.611172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.507012][ C1] net_ratelimit: 78791 callbacks suppressed [ 97.507037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.525083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 97.537138][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.549119][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.561087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.573142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 97.585280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.597255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.609279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.621332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 102.517037][ C1] net_ratelimit: 80959 callbacks suppressed [ 102.517059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 102.535029][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.547026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.558984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.571037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 102.583097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.595077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.607058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.619115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 102.631180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.527013][ C1] net_ratelimit: 81207 callbacks suppressed [ 107.527034][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.544910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.556882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.568938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 107.580999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.592970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.604940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.617010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 107.629081][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.641058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.537046][ C1] net_ratelimit: 80856 callbacks suppressed [ 112.537067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.555050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 112.567127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.579114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.591204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.603278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 112.615358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.627350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.639429][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.651532][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 117.547044][ C1] net_ratelimit: 78428 callbacks suppressed [ 117.547067][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.564995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.577034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.589139][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 117.601294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.613325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.625360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.637454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 117.649543][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.661533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.477940][ T294] bridge0: port 3(syz_tun) entered disabled state [ 122.557012][ C1] net_ratelimit: 68792 callbacks suppressed [ 122.557034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.575014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 122.587072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.599054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.611076][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.623181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 122.635248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.647218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.659206][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.671290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.437517][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 123.437539][ T36] audit: type=1400 audit(1772861706.904:3901): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1476]" dev="pipefs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 127.567013][ C1] net_ratelimit: 101140 callbacks suppressed [ 127.567036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.585020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.597035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.609092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 127.621191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.633165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.645144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.657207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 127.669357][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.681328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.576989][ C1] net_ratelimit: 100371 callbacks suppressed [ 132.577011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 132.595083][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.607056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.619027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.630987][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.643037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:e4:fb:31:1e:a1, vlan:0) [ 132.655094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.667047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.679103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.691063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)