last executing test programs: 3m28.847799307s ago: executing program 3 (id=36): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) sched_getparam(r0, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r2, r3+10000000}, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x48) 3m27.928173988s ago: executing program 3 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4480, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x31) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0xffff495e, 0x4) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001100)=ANY=[@ANYBLOB="010000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100006200000000"], 0x90) sendmmsg$inet6(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32=r6, @ANYBLOB="1d000000"], 0x28}}], 0x2, 0x4001c00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x0, 0x4, 0x540000, r1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0xfffffffc, 0x6, 0x0, 0x200, 0x6, 0x180107, r1}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000001200)='net/tcp6\x00') preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000011c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x4}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r11}) 3m25.719429082s ago: executing program 3 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x141300, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"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"}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000040)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3}) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x64e) ptrace(0x10, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r7, 0x11a, 0x3, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000207000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m25.460148155s ago: executing program 3 (id=51): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) r1 = gettid() r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x178) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f0000000280)=""/169) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x2}, {{@in=@private, 0x8000000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874cc"]) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) chdir(&(0x7f00000001c0)='./file0/../file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket(0x3, 0x5, 0xffffffb8) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2243005, 0x0) setns(r3, 0x24020000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000340), 0x0, 0x0) 3m25.453507466s ago: executing program 3 (id=52): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x7}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8000000000000001, 0x102) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x10100, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x100000000, 0xffffffffffffffff, 'id0\x00'}) poll(&(0x7f0000000400)=[{r0, 0x1100}, {0xffffffffffffffff, 0x280}, {r1, 0xd418}, {r2, 0x8091}, {}, {r3, 0x220}, {r4, 0x8}], 0x7, 0x2f) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000240)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000340)=""/166, 0xa6}) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000580)="390000001300034700bb65e12fb45d664e38dd350100000045ffffffffffffff7f0011005711f9b18208a4f1d094afe599e10600ad0002000000000000060400b400000000000000989a0043b15cbc9233d01615e29a9057a2d5d1e8c55117c461cc63976df82813941aa7179088b4a15525dc28e3bac68634363e330d6605c462f45a74e1031cfd989736a1202d03dbca3df98519a2c312ab6dc56d56fa99bb7d33fd58fceaae5e8e875727640169ca2cb4979cb13d0ed6e9a86c66e34a1ddef65523b6b4ede3947e5246132312b921e24eec1baa50a0df00005a01000000ed2cec47fc868c160bb6895fd28f743d4f5a4f1595850ae879d5701bea745bca4c3e82a0f64b70fbaaffcd8e85b26513812da1db49d587ca1a2ccda6271ec32e8e72922bd656890cdf926baaaaccbfaea04397eb761356626bd62379d202bad0825a2b6dacdc94276a4d05d460d3d1935d4a1080e50721cfd81994db4966a5d44ab4516c099f612d165f0c79eccaa9993e9077b3d4b173f42ba10fc33e8f289028f5", 0x181}], 0x1) 3m25.304818439s ago: executing program 3 (id=53): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="c45b59d6fa", 0x5}, {&(0x7f0000000100)="5ca6a1", 0x3}, {&(0x7f00000003c0)="3c4bf0f9b8af677cf9b0a64072798c428e5816141d762315e6e4e8580dd8de13ab7a1ca1707ffa1b800f8d51b3535b057f06ab7244020fdfc874c2acb03393869b6bfebc66cc9e2c8856ed1a0e34a1b02a24be2611062bdd07a52db8b670c4a20e57ff98aec27547a1ac097f78cd3706a789048534def6ab1855e4c31f12f3679a3240310702f5e4bf112321a336845e6f9d0cc32076e2791b7ad25f4c38c2d68bd1d99251c0bf7e2cf189de23ea08a1124ecef4617baa4cfd1bc664b6739cc099d3b9", 0xc3}], 0x3) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) poll(&(0x7f0000000180)=[{r2, 0x5080}, {r0, 0x2000}, {r0, 0x100}], 0x3, 0x1000) 3m25.257636463s ago: executing program 32 (id=53): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="c45b59d6fa", 0x5}, {&(0x7f0000000100)="5ca6a1", 0x3}, {&(0x7f00000003c0)="3c4bf0f9b8af677cf9b0a64072798c428e5816141d762315e6e4e8580dd8de13ab7a1ca1707ffa1b800f8d51b3535b057f06ab7244020fdfc874c2acb03393869b6bfebc66cc9e2c8856ed1a0e34a1b02a24be2611062bdd07a52db8b670c4a20e57ff98aec27547a1ac097f78cd3706a789048534def6ab1855e4c31f12f3679a3240310702f5e4bf112321a336845e6f9d0cc32076e2791b7ad25f4c38c2d68bd1d99251c0bf7e2cf189de23ea08a1124ecef4617baa4cfd1bc664b6739cc099d3b9", 0xc3}], 0x3) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000240)) poll(&(0x7f0000000180)=[{r2, 0x5080}, {r0, 0x2000}, {r0, 0x100}], 0x3, 0x1000) 1m0.163498443s ago: executing program 0 (id=819): syz_usb_connect$uac1(0x5, 0xad, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109029b000301aaf0220904000000010100004a2401080001060201020c240201050206061bffdc0111240605020507000600000002000800b9082404020229d21109040100050002000904010101010200000905010920000408a5072501010708000904020000010200000904020101010200000824020101034a40082402010a02030207240110010000090582090800020303052504841932f2d1ecfe11471d2525ae"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0xff, 0x7, 0x40, 0x0, 0x3, 0x1, 0x3d, 0x35, 0x6, 0x6, 0xff, 0x5, 0x0, 0xffff56e5, 0x0, 0x5, 0x7, 0x0, 0x4, '\x00', 0x7, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/115, 0x73}], 0x2}, 0x2000) syz_usb_connect$uac1(0x1, 0xf5, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x4, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x6, 0x9, 0x6, 0xc, 0xb}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x4, 0x5, 0xfd}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x5, 0x5, [0x7, 0x5, 0xa, 0x9, 0x0], 0x3e}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x6, 0x7f, 0xa, 0x3, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x1, 0x3, 0x6d}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x6, 0x6, 0x5d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xf3, 0xa0, "2493", "98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x8, 0xe, {0x7, 0x25, 0x1, 0x1, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x80, 0x9, "df8599", 'z'}, @as_header={0x7, 0x24, 0x1, 0x6}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x283c, 0x0, 0xe, "002f87000000000000"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3, 0x0, 'R'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xda, 0x1, 0x8, {0x7, 0x25, 0x1, 0x82, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0xe, 0x8, 0x10, 0x5}, 0xd5, &(0x7f0000000180)={0x5, 0xf, 0xd5, 0x3, [@generic={0xb5, 0x10, 0x3, "75e6c58e6684ac4fa1ecf123181a8114424bb3a4cf2632066c62739583c88f6db0d9869a98a2a7b89aad59869f4b74adbdb932e9154938bf12f51f3211b598c3034aa714b548421caf6fe442f7d5225f524fa31212f0adae3d480f0d1110195f2f80c68e1626414dd771d800d2e40cbf46b1481eebd7c61dbf5e415849125e6da7a12ae1532d21752580c7b1c501b7c1edfc15fd153744a033302fc8fe4b7b45fe0b98811bb7eb8c03da254e5df945269c90"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x1, 0xf, 0xe95, [0x7e9f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xb4, 0x7, 0x50}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41a}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "f5c42a09759572c45c6076ad73585b29e4f51f2aa214e6b83879863d9675baf3ca3fbcba28729a745f7fd7d10e7c553d2ddc2d7ff1b1bf26870ae9a2e7961f51524de77358d411d1187f0f2a1ce24ceb8bac6a42c56f29fd9a9be87604415eb9b80b55fab07b32d52ec1b53b427889192b710aa68ea2b79b67880cb414b1fee38f8a40c21af84c7da9d5e13c5b9fae7678fae4f9e0bb97f1e2ce5727459f98fabbb790ec1d23073febd5dec06faffe05c780"}}]}) 56.877333482s ago: executing program 0 (id=828): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000180)='./file0\x00') r2 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r2, &(0x7f0000000440)={&(0x7f00000001c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f0000000400)=""/1, 0x1}, 0x40000101) (async) recvmsg$inet_nvme(r2, &(0x7f0000000440)={&(0x7f00000001c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/173, 0xad}], 0x2, &(0x7f0000000400)=""/1, 0x1}, 0x40000101) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000480)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000540)={@mcast1, 0x7d, r3}) (async) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000540)={@mcast1, 0x7d, r3}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000580)={0x2, 0x5}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000580)={0x2, 0x5}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000005c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1e, 0x4, 0x8, 0xf}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2800, 0xa9a8, 0x2, 0xd}}, @code={0xa, 0x70, {"f3440f09c4c17d284000c74424003e000000c74424020d000000c7442406000000000f011424c744240016010000c7442402535251e7ff1c240f01c8400f457f8b66baf80cb8ad929f88ef66bafc0cec3e2ef2490f2c5dfa0f0050000f01cf"}}], 0xe0}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000700)) ioctl$KVM_SMI(r4, 0xaeb7) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14, 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000800)={r3, 0x1, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000800)={r3, 0x1, 0x6, @remote}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000880)={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, {0xa, 0x4e22, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0xffffffffffffffff, {[0x7ff, 0x9, 0x3, 0x2, 0x1, 0x5, 0x11489d1, 0x7fffffff]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000880)={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, {0xa, 0x4e22, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0xffffffffffffffff, {[0x7ff, 0x9, 0x3, 0x2, 0x1, 0x5, 0x11489d1, 0x7fffffff]}}, 0x5c) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f0000000900)=[@wr_crn={0x67, 0x20, {0x4, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x518}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c03, 0x401, 0xffffffffffffffff, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x6, 0x9, 0x4, 0x7}}, @set_irq_handler={0xc8, 0x20, {0xf8, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_code={0x12e, 0x8e, {0x1, "2636f30faed366bad004b006ee0f005b0966b8f2008ed866450f388090f97f0000b9800000c00f3235000100000f30c7442400ae000000c744240200880000c7442406000000000f01142448b800200000000000000f23c80f21f835000010000f23f8c441f562937b5c000066ba2000b805000000ef"}}, @cpuid={0x64, 0x18, {0x81, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5d8ce239, 0xd3}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @wr_drn={0x68, 0x20, {0x6, 0x4}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}], 0x2e6}) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f0000000c40)) (async) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f0000000c40)) r10 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000d80)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) bind$packet(r5, &(0x7f0000000f00)={0x11, 0x1, r6, 0x1, 0x7, 0x6, @remote}, 0x14) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000f40)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000f40)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) getsockname$packet(r5, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000fc0)=0x14) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000001000)) 56.768169342s ago: executing program 0 (id=829): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBLED(r0, 0x4b65, 0x1713) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x9, 0x7ff, 0x100000000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) listen(r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x3) writev(r2, &(0x7f0000000180), 0x0) 56.767369082s ago: executing program 0 (id=831): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202, r1}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x9) (async, rerun: 32) creat(&(0x7f0000000000)='./file0\x00', 0x28) (rerun: 32) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) (async) rmdir(&(0x7f000001f940)='./file0\x00') ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d42, 0x801000009, 0x8001, 0x2, 0xf10a, 0x800003, 0x4002004c4, 0xa, 0x5, 0x0, 0x40000000800005, 0x2000000000000000, 0x401, 0x0, 0x9, 0x800000b], 0x2000}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]}) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, r5}, 0x14) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) 56.726516465s ago: executing program 0 (id=833): timerfd_create(0x151ac11a66d40d6, 0x80000) 56.529284953s ago: executing program 0 (id=834): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = dup(r3) read$hiddev(r4, 0x0, 0xc) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000002000)={0xc1, 0x0, 0x5}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x8, 0x0}, @multicast1, 0x1, "4efe98e816b2c0f934d61b6b1b3da3162b446720738b62ba507a93690d38fd54", 0x3, 0x2, 0x7e, 0xffffff60}, 0x3c) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000080)) 56.473455658s ago: executing program 33 (id=834): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = dup(r3) read$hiddev(r4, 0x0, 0xc) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000002000)={0xc1, 0x0, 0x5}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x8, 0x0}, @multicast1, 0x1, "4efe98e816b2c0f934d61b6b1b3da3162b446720738b62ba507a93690d38fd54", 0x3, 0x2, 0x7e, 0xffffff60}, 0x3c) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000080)) 52.504881076s ago: executing program 2 (id=854): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002e00fdffffffffffffff7d83a8000200", @ANYRES32], 0x2c}], 0x1}, 0xcc000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'veth0_to_team\x00', @multicast}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = inotify_init1(0x80800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = dup3(r4, r2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0xffffff8e, 0x0, &(0x7f0000000000), 0x50, 0x0, &(0x7f0000000180)="db48cd0e407262b4000000537e2fd64478f18ada2b4a5308206835d97529006a0a729b137ec1b8504925bb0056f719494a629385da74506a689fac82acf19f55"}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) fcntl$setstatus(r7, 0x4, 0x4000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000004c0)={0x4, 0x4, 0x3ff}) fcntl$setstatus(r8, 0x4, 0x2400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r9, &(0x7f0000000180)=ANY=[], 0xff2e) 52.427481563s ago: executing program 2 (id=855): futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) 52.426348683s ago: executing program 2 (id=856): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r1, 0x110) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xb0000005}) 52.417028944s ago: executing program 2 (id=857): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) 49.152100251s ago: executing program 2 (id=883): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x7}, 0x2) recvfrom$inet(r1, &(0x7f0000000140)=""/61, 0x3d, 0x10000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="20070600000041783e"], 0x0}, 0x0) 48.864059477s ago: executing program 2 (id=888): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000200000040ef1709601700000000010902240001000080050904000702030001000921000001012205000905020000014872b1c0999a8273bab707c5c0694d2952df101c6c57c6961ccc5404e7409470e49befd38dbd6796b5a67f7dc95d68621f25fb3f6f90f785d23cb44156abefdb623e58dc5114ec11a4fe31d30d707cd9c88b83554c1cdc5d0b9485df923101007a4d641e213c5fc3d18d2ab9d3829c4bf24f8e81d8c28b599806a87d219482bc1b10b75849cbee98b33b8938146ae82c5f0446"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201580200000040b804020240000102030109022400010108880109040000020701030609050102000473810009058202ef03b84000a2855189f0541e43743f63bd0ebbb88f540600defa9e1eab7a9443a6ff5aaf4e52c29d8c89237ba1eb10ee021792c5f3a6c501800000779d1072ef1d947ceaff3969d87ea15f2159305dbcf377d49ab432874e22dadd6ba72c6a66d0"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0xb, 0x5, 0x40, 0x1}, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="050f16000207100200f803000a10030008007f030300ec1b8ba95a7e383284a5d2a17ff5b6326b0d072e186ca0c5d1a0048a58e224a775ae3ac7763b339bd8a92796a6b30c4122c9ffd953aa75b3288c933668602881e520f09db867018db729ab3c607aa296ce83b799879e6416afe7f227193fd31b6103aefbbff97e39976b7c2f8ad0531912508d28dc61895235e6f1b7b7270f987723cfa7cb83fe9f9eee402b4bee95ebc7e5a620e2ad4e3d28781efe150cba2e611ecf1793c60c82996451f244388376000000"], 0x5, [{0x31, &(0x7f0000000180)=ANY=[@ANYBLOB="3103483e06c55128aafed12b33b7fdbc7dc50cc479004d5a1edc233b746a7753f982f767feff450a89afa4eb682431dc0f"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x401}}, {0x9b, &(0x7f0000000200)=ANY=[@ANYBLOB="9b03a54b50cb34450341337b5f166299e2ff63b3f7849660777aba09c2aae6366e4edacae673393c0e4db91e3479e5a35c636baf69b5c73503337933b494cf188f95260804932916366dd1f57734c1acae761f378697848ae97c13e1f21d4e802e4842f45fbf1145c07f9f6c3545f776b46bb051e8dfc370d0be610fcef739df336beb1157a32ce100a2bc9d3cd63bda51"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0xa) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x1000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x400) inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x2000040) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="74ff03676574205043493a303a653a372e313400"], 0x14) 48.848925478s ago: executing program 34 (id=888): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000200000040ef1709601700000000010902240001000080050904000702030001000921000001012205000905020000014872b1c0999a8273bab707c5c0694d2952df101c6c57c6961ccc5404e7409470e49befd38dbd6796b5a67f7dc95d68621f25fb3f6f90f785d23cb44156abefdb623e58dc5114ec11a4fe31d30d707cd9c88b83554c1cdc5d0b9485df923101007a4d641e213c5fc3d18d2ab9d3829c4bf24f8e81d8c28b599806a87d219482bc1b10b75849cbee98b33b8938146ae82c5f0446"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201580200000040b804020240000102030109022400010108880109040000020701030609050102000473810009058202ef03b84000a2855189f0541e43743f63bd0ebbb88f540600defa9e1eab7a9443a6ff5aaf4e52c29d8c89237ba1eb10ee021792c5f3a6c501800000779d1072ef1d947ceaff3969d87ea15f2159305dbcf377d49ab432874e22dadd6ba72c6a66d0"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0xb, 0x5, 0x40, 0x1}, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="050f16000207100200f803000a10030008007f030300ec1b8ba95a7e383284a5d2a17ff5b6326b0d072e186ca0c5d1a0048a58e224a775ae3ac7763b339bd8a92796a6b30c4122c9ffd953aa75b3288c933668602881e520f09db867018db729ab3c607aa296ce83b799879e6416afe7f227193fd31b6103aefbbff97e39976b7c2f8ad0531912508d28dc61895235e6f1b7b7270f987723cfa7cb83fe9f9eee402b4bee95ebc7e5a620e2ad4e3d28781efe150cba2e611ecf1793c60c82996451f244388376000000"], 0x5, [{0x31, &(0x7f0000000180)=ANY=[@ANYBLOB="3103483e06c55128aafed12b33b7fdbc7dc50cc479004d5a1edc233b746a7753f982f767feff450a89afa4eb682431dc0f"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x401}}, {0x9b, &(0x7f0000000200)=ANY=[@ANYBLOB="9b03a54b50cb34450341337b5f166299e2ff63b3f7849660777aba09c2aae6366e4edacae673393c0e4db91e3479e5a35c636baf69b5c73503337933b494cf188f95260804932916366dd1f57734c1acae761f378697848ae97c13e1f21d4e802e4842f45fbf1145c07f9f6c3545f776b46bb051e8dfc370d0be610fcef739df336beb1157a32ce100a2bc9d3cd63bda51"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0xa) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x1000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x400) inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x2000040) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="74ff03676574205043493a303a653a372e313400"], 0x14) 4.918748658s ago: executing program 5 (id=1188): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x6002, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x6002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{r3}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000001c0)={0xc7, 0x0, 0x1}) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r7, 0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x20, 0x21, 0xc5, {0xc5, 0x10, "9a48c71c619b54c3ae701a61dec087bf12c7f24c4ccbafa1a60eee884b1141d849b5a1672f69bba42ef3b2852d67df36906694da3b815303bfdfc96786f655eb5ef755303534d30050cd164a6e145f9ce25e0c66da40061cee6fd1f3e3546ce7c57454bc43c53c5f67f605365f0655540802b0f32e902c54df26d214e7c85781f7deaf7ce6ce11915abfe3986f115a52999b666e9f8ee01fb9e369fa752d886533c54039d1fa87996ba704fe3b3656ef5f05655ee1f800a8d4ddd11c545e694dddc725"}}, &(0x7f0000000440)={0x0, 0x3, 0x58, @string={0x58, 0x3, "b85a162220252f74b01c089d0f35a0b72d9d392d146a0a5b2ccafbe6c3ea3d622ba2afa7b9342f04c68398fe476f73237b1f0e497489d44cf07fbe0daabcb945a073157e4480b1602eb27c82760f8763d21b863c417f"}}, &(0x7f0000000640)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x4, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x9, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "448ab90eaeddfff23de160b2dfb4d99f"}, @wireless={0xb, 0x10, 0x1, 0x56aeddea09cb4a9, 0x90, 0x5, 0x6, 0x7f, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x42, 0x5, 0x6, 0x0, 0x9, [0xc030, 0x1fe0030, 0xff0000, 0xc000, 0xff00cf]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xca, 0x0, 0x7, 0x0, "9f0d61c6", "93ea645d"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x1, 0xf6, 0x8, 0xf, 0x26f}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x13, 0x92, "a95bfb2318601088448ff0cc749a3eb475d33c206a136e9193d630637de0f30e38a3d0b1d702dab503d7591d85e609ef3de55f8f5d4693cf51a122300f74251aad465d3ca190851fa5c197424649b3dbe0a4e18c978fe23dd217e0419b3ab89450af40fb878a3921383025e49943b6e97dcf2a889744d20dd9a0680012881a4c2d7fa61495872d852690727527207e1cb50e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x200, 0x2, [0xff0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000940)={0x40, 0xb, 0x2, "fcbf"}, &(0x7f0000000980)={0x40, 0xf, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "9b47"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x90}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x20, 0x21, 0xc5, {0xc5, 0x10, "9a48c71c619b54c3ae701a61dec087bf12c7f24c4ccbafa1a60eee884b1141d849b5a1672f69bba42ef3b2852d67df36906694da3b815303bfdfc96786f655eb5ef755303534d30050cd164a6e145f9ce25e0c66da40061cee6fd1f3e3546ce7c57454bc43c53c5f67f605365f0655540802b0f32e902c54df26d214e7c85781f7deaf7ce6ce11915abfe3986f115a52999b666e9f8ee01fb9e369fa752d886533c54039d1fa87996ba704fe3b3656ef5f05655ee1f800a8d4ddd11c545e694dddc725"}}, &(0x7f0000000440)={0x0, 0x3, 0x58, @string={0x58, 0x3, "b85a162220252f74b01c089d0f35a0b72d9d392d146a0a5b2ccafbe6c3ea3d622ba2afa7b9342f04c68398fe476f73237b1f0e497489d44cf07fbe0daabcb945a073157e4480b1602eb27c82760f8763d21b863c417f"}}, &(0x7f0000000640)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x4, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x9, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "448ab90eaeddfff23de160b2dfb4d99f"}, @wireless={0xb, 0x10, 0x1, 0x56aeddea09cb4a9, 0x90, 0x5, 0x6, 0x7f, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x42, 0x5, 0x6, 0x0, 0x9, [0xc030, 0x1fe0030, 0xff0000, 0xc000, 0xff00cf]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xca, 0x0, 0x7, 0x0, "9f0d61c6", "93ea645d"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x1, 0xf6, 0x8, 0xf, 0x26f}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x13, 0x92, "a95bfb2318601088448ff0cc749a3eb475d33c206a136e9193d630637de0f30e38a3d0b1d702dab503d7591d85e609ef3de55f8f5d4693cf51a122300f74251aad465d3ca190851fa5c197424649b3dbe0a4e18c978fe23dd217e0419b3ab89450af40fb878a3921383025e49943b6e97dcf2a889744d20dd9a0680012881a4c2d7fa61495872d852690727527207e1cb50e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x200, 0x2, [0xff0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000940)={0x40, 0xb, 0x2, "fcbf"}, &(0x7f0000000980)={0x40, 0xf, 0x2}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "9b47"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x90}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x6}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000f5d000000506e48e7050f5d790158100a7bd4a07408c5080963a987877ab8743a45a96e539b2ea931d467b715c9dc1fce21027706000000000000004e12cb0d58d779f0895f4b8070a6aecc9a0d47a05dbf720ea8e752"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.740029122s ago: executing program 6 (id=1192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1e0, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x46b5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2f8c}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x790c}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @private2, 0x1388}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff, @mcast1, 0xc}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc084}, 0x40) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r4, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001500)="e0", 0x1}, {&(0x7f00000000c0)="befa8d4f8e92497189bcdf", 0xb}, {&(0x7f00000000c0)}, {&(0x7f0000000100)}], 0x4}, 0x4004000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 3.738861562s ago: executing program 6 (id=1193): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000040)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x200}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x7) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$RTC_ALM_SET(r2, 0x40187014, 0x0) 3.069686061s ago: executing program 5 (id=1197): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0xbdce3000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x8100}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000007, 0x2012, r4, 0x0) 2.906965425s ago: executing program 5 (id=1201): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) getpid() (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setns(r3, 0x4000000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000380)={'#! ', './cgroup.cpu/cpuset.cpus', [{0x20, '\x1d\'0i\xf1\f\xef5\x92\x03\xd6\xc5o\x8c\x13\x9d\x96t\x02b^4'}, {0x20, '[/])'}, {0x20, '#! '}], 0xa, "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"}, 0x167) r6 = openat(r3, &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x6e0280, 0x40) write$tcp_mem(r6, &(0x7f0000000300)={0xfffffffffffffffe, 0x20, 0x3, 0x20, 0x8}, 0x48) close(r5) (async) close(r5) execveat$binfmt(r6, r0, 0x0, 0x0, 0x400) (async) execveat$binfmt(r6, r0, 0x0, 0x0, 0x400) 2.881730317s ago: executing program 5 (id=1202): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000100)=""/160, 0xa0}) (async) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) 2.811403933s ago: executing program 6 (id=1203): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0)=0x3, 0x7, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001800010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b5432cbd7000fcdbdf250100"], 0x34}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd0, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xf06556bd8f1b5c3b}}]}, 0xd0}}, 0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000140)={0x84c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_TID_CONFIG={0x510, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0xa}, {}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3ac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x12c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa9e7, 0x2, 0x101, 0x1, 0x4, 0x8, 0x400]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x5}, {0x7, 0x1}, {}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x7}, {0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x558, 0x2, 0x9, 0x2, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0xa}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x5, 0x5, 0xc, 0x30, 0xb, 0x16, 0xb, 0x12, 0x333e855b13be2e65, 0x2]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x3}, {0x7}, {0x7, 0x2}, {0x3}, {0x3, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x7}, {0x7, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x8}, {0x4, 0x1}, {}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x3}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {}, {0x5, 0x4}, {0x5, 0x1}, {0x6, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0xa}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x7}, {0x3, 0x6}, {0x1, 0x7}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x24, 0x1b, 0x16, 0x0, 0x6c, 0x0, 0x272e15836a50c3a1, 0x6c, 0x18, 0x5, 0x30, 0x48, 0x18, 0x18, 0x9, 0x3, 0x0, 0x5, 0x24, 0x6c, 0xc, 0x36, 0x60, 0xc, 0x79, 0x1, 0x60, 0x60, 0x1b]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x4}, {0x2}, {0x5, 0x4}, {0x4, 0x2}, {0x4}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0xa}, {0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x1}, {0x4, 0x9}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x6}, {0x7}, {0x1, 0x8}, {0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x1}, {0x4, 0x8}, {0x4}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x6, 0x9}, {0x3, 0x2}, {0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x6, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf42f, 0x1, 0x7, 0x9, 0x101, 0xfffa, 0x69, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa, 0x7ff, 0x2d3, 0xf7e2, 0x4, 0x5, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x8, 0x9, 0x10, 0x7fff, 0x44f1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x2, 0x913, 0x0, 0x3, 0x71ea, 0x2, 0xff75]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x3}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x7, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0xa}, {}, {0x5, 0x2}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x4}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x1b, 0x9, 0x30, 0x2, 0x6c, 0x36, 0x60, 0x6, 0x3, 0x1d, 0x6, 0x3, 0x16, 0x24, 0x9, 0x4, 0x0, 0xb, 0xa23fe7a0ac8d65b1, 0x48, 0x19, 0x11c1fc86901b9458, 0x12, 0x12, 0x24, 0x18, 0x36, 0x1b, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x7ff, 0xf931, 0x4, 0x7fff, 0x40, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x1}, {0x6, 0xa}, {0x4, 0x5}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x5}, {0x0, 0x4}, {0x7, 0x5}, {0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x400, 0x2, 0xfff, 0x6, 0x0, 0x6, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0xf0a8, 0x81, 0x8, 0x3, 0x1, 0x6, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x3, 0xd, 0x3, 0x7, 0xff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x6, 0x48, 0x30, 0x30, 0x24, 0x24, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x288, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xd3, 0x5f, 0x9, 0x7, 0xcf, 0x0, 0xdc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x4}, {0x6, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x3, 0x9}, {0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {}, {0x3, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x5}, {}, {0x2, 0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x1}, {0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x3, 0x5}, {0x2, 0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7, 0xf, 0x77f, 0x2, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5823, 0x7, 0x0, 0x34c, 0xffff, 0x9, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xff, 0x7, 0x8, 0x2, 0x6, 0x4, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x9, 0x7, 0x792, 0x0, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xd8fc3623c57f162, 0x1b, 0x6, 0x4, 0x5, 0x5, 0x24, 0x30, 0xc, 0x12, 0x36, 0x1]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x2, 0x60, 0x30, 0x6c, 0x48, 0x1b, 0x9, 0x5, 0xb, 0x3, 0xc, 0x18, 0x0, 0x30, 0x2, 0x1, 0x9, 0x24, 0x30, 0x16, 0xb, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x9, 0x5, 0x30, 0xc, 0x36, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x200, 0x400, 0x4, 0xffff, 0x66, 0x9, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}]}]}]}, 0x84c}, 0x1, 0x0, 0x0, 0x4000}, 0x40054) 2.810936663s ago: executing program 5 (id=1204): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x20, 0x5, 0x4, "f5c300f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0xd, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmsg$can_raw(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="1522d517202717e68cdd295c015d64221f156e4e40b6dead1dfb995c62252b2569f2fa5d25569e9661ee2a03ff50623649464dddec89fbf114adac3e0a60eb3b0f84669355bad8ced76835cccb50d4588a9a8468afa17c72f2cce285a5827d800b9d093bb2c70680908cfcd5fcab6d2f4e076fc8baf0de3aa061fcf429db16db4f8b488809c54bed7f8f748c4897bd711dc6b5d112b50249364f0680581cd4f71f02aed6dce77646c527ac6a80e8ed95d2dfac7fb4b8b2aa8b03ca6a7847466e12f1e82071cbee26f0836e0c39451843c3f6d5915430b7104512c042018b46769f7497a3", 0xe4}, {&(0x7f0000000200)="c79b0adf43fd060b9e92398d8e38473b71e3ac2d3b21349fb2821e9831f315df5216e77c050bf92a4af8d553e8d91d1676af0e50a952d13ea928be7d3f29265a90a38f75005b77298d3f675cc62f868a916ea483db33dd345562f9326da980b0e18af7050a449fc4275c47aa0cfe42eaf392d057ba25b28bd3dcd612b5cc1dd2", 0x80}, {&(0x7f0000000280)="4e0e1ddd6661f46511538661c28ac289a33f9bce5958153c225de5a2b59ff70a8fbcd48ce3d31c6eaa07fd42a92c9b2a68bc5143313d8b44c081ed13fd974f1c58e4f73b", 0x44}, {&(0x7f0000000300)="12f6974895914af8f10a1e5d73c0e26ae790c8ba5b7c08bdb7bff68b3d93fbbef839ba827d1c40fc3ea4562607d9c359d4fbc26afaeacf24de99fdce83061b117505c5e546668cd2ae22d9619d727beead5d414dc8e4b60f170cfe88b6ccb879ab1387a1ff77fe577dfefd6898245413cfea1cfaf0d282a03032c4230b850890eb514bfa31e2616658597c6823c96922c2a477cbbc6932172a0ffb6f689f49ecb44dce5394205a69ea1df59ab683da4a315ecb33152976d1bc2d59188ad5aae94a24526caacaf0f625a1b0344803cf54efc236a924f82478ec8da390fd04a29f62190ee7e094c94da449991cc0c8f2578301ffc2d611", 0xf6}, {&(0x7f0000000400)="f7330c259bbcd80fac6f236985f06332a2fd6674bc0e81ff4da95e4f1522d6f4c707cacba30fe9daaf4ab998951d6abaace8d2a119e2860681437fce6b9ccf70cbecede479f78a0fa50e776c43211f2a5ef11aa27a261ec04be1ad5b8d2bb47f18a2c24e33455a9b2d11f9ff7370b9da818546ce24dfaa62cb855390256881c68a374381dbe84ae8603e4cb1001794617234506a81257d288f117c7bf87e6c469c568273c15ca3b050ddbf062d4ddf4465312f0e1a226884e540e432e73742e5ef29eec5017baf9e1938e8498bd8842265", 0xd1}, {&(0x7f0000000500)="33fd68668a4d78c63b6e7f6b25fc285dd54237b1b5f1bc33b667c8fbc8c181c552679cd1d0c38f97c11fc052ae8e38e1e82439028fff42acc9a451ec8c1de597f97792eac5798df5641134b241bfdacdd6b0739253d4", 0x56}, {&(0x7f0000000580)="d7ac7a3462d52323b84b0c3894ed6e388d28fa768175b5753650300e7f8529fa06c6372d1c301f22053b4b9093217403933e770f552d1c857138145793763ea6851dbe9e761682319d2cea64e76d7608312778d10dc3d9c9e2d8e31c4e026fd021a6261cb03e1c4434bd46abca38378125f52e5e40b75686939a83ee7458e208cb2d8e20fdf4f5efb00a00f19ea6a3bc3c64ec42ede8fcc794cd7b0c86405b303eb540e258c11319144b9aba1329bacc2c08b7e6898bb05fc4e9bab2857f5b28a2c7d8e78e1ff1c6f804db2980ad2666cd91d8f73829210f3e", 0xd9}, {&(0x7f0000000680)="2357aff22b09de474844bcbb325598cdc2156b229b607f45a5a7ba42e2c2b73c322358e55a36d6637508dd9c2ba036c8fcf8034552c4391dc560dac5c21b651a1f7581388531719493413da8cdb95230d05597aa8fd8bd6b3941ccdcfa14e8bbb3fda66467c6e17576cae92b067086beb6e38c617c7ae5c56842ba921b78dc351d7f039472ebd461a3aedcbb50e959269c1c6d0ca09271130a94b713cf436354", 0xa0}, {&(0x7f0000000740)="59a050542079e3327da453e6649bd0e50ebc4b4531e24c273a4a4b3712eb9d19147617e57189bc0cdb71f698005f1765c4b1043f7726da9cfb64fdabd907c52ad1618e7beb37f40cd6dded78cc2f0178d994e8632f6a01e14e69a855b8e887da734611f6092647444377c3012a84553ee63410f907360d46386bd16f", 0x7c}], 0x9, &(0x7f0000000880)=[{0xc8, 0x118, 0x7, "ab494d05b5f85ec664c65bd28bd3de20d3dc55288530ae6a0e4e8cfb9f8ab2416294ec28a9b737a0f9d8dfffcc742961e1cf4952727c1f3bfc7b65db50d13b446ee4da6148a861b8991a07a15044a09a9f98c35ac9d8bc630df6af479b8c6572dd27b071228bb890bc6c6155d75824120c80f7d8acc51674d2d8bf8d4329b6bc4f1ad3f676963a1097185faa4d9569a3b5b9ab7adbda766b2c7be9bc47647dc56734b01e7f62a54a3befe8f2346286efb35413e603cfe787"}], 0xc8}}], 0x1, 0x0) 2.810101023s ago: executing program 6 (id=1205): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000480)) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)="d8efb9217e0cbc2f7fb2b9acc2dc7c489bfecf33", 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) 2.793868505s ago: executing program 6 (id=1206): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="0185d2441112ea905673d581be0e91758c82cef254a7033404af4712f2a494de1a8a1570bbed1a04527abcc69611b3b8abb459bcedd8e74c9b0cd0089d4233808f637959bcab6bae8e05206647", 0x4d, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000200)=""/133, 0x85}], 0x2, &(0x7f0000000300)=""/27, 0x1b}, 0x5}, {{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/226, 0xe2}], 0x3, &(0x7f0000000640)=""/178, 0xb2}, 0x6}, {{&(0x7f0000000700)=@llc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/97, 0x61}, {&(0x7f0000000a40)=""/133, 0x85}, {&(0x7f0000000b00)=""/86, 0x56}, {&(0x7f0000000b80)=""/206, 0xce}], 0x7, &(0x7f0000000d00)=""/242, 0xf2}, 0x9}, {{&(0x7f0000000e00)=@ax25={{}, [@bcast, @remote, @netrom, @bcast, @default, @netrom, @default, @bcast]}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/39, 0x27}, {&(0x7f0000000fc0)=""/55, 0x37}, {&(0x7f0000001000)=""/247, 0xf7}, {&(0x7f0000001100)=""/84, 0x54}], 0x5, &(0x7f0000001200)=""/190, 0xbe}, 0x43c}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/98, 0x62}], 0x1}, 0x1fc00000}], 0x5, 0x10000, &(0x7f00000014c0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000001500)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001540)={[{0x2d, 'hugetlb'}, {0x2b, 'io'}, {0x2b, 'net'}, {0x2d, 'net'}]}, 0x17) connect$inet(r0, &(0x7f0000001580)={0x2, 0x4e24, @broadcast}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000001700)=0xe8) r3 = getegid() write$FUSE_STATX(r1, &(0x7f0000001740)={0x130, 0x0, 0x0, {0x5, 0xffffffff, 0x0, '\x00', {0x10, 0x1, 0x2d, 0x6, r2, r3, 0x8000, '\x00', 0xfffffffffffffffe, 0x18000000000000, 0x6, 0x0, {0x4, 0x1}, {0x5b53, 0x81}, {0x4000, 0x5}, {0xc1f, 0xffff}, 0x0, 0x7fffffff, 0x3}}}, 0x130) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x181000, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000018c0)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000001900)=@ccm_128={{0x303}, "0170695068d6b11e", "7ec75b439bfab6a44edd1e5b4a6fc44a", "0d5886e0", "1fba962a489f38eb"}, 0x28) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000001940)={0x6, 0xba7, 0x80000000, 0x5, 0x2, "6b09faad146f0ddc20fe050863f8320f43218c", 0x2, 0xda}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000001980)={0x0, 0xffffffffffffffff}) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000019c0)={0x5, 0x4, 0x2, 0xff, 0x7fffffff}) syz_io_uring_setup(0x1db, &(0x7f0000001a00)={0x0, 0xef3a, 0x8000, 0x1, 0x1f1}, &(0x7f0000001a80), &(0x7f0000001ac0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200000c4) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000001d00)={&(0x7f0000001c00)=""/250, 0xfa}) readv(r4, &(0x7f0000002d40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000002d80)=""/89, &(0x7f0000002e00)=0x59) ioctl$TCSETA(r4, 0x5406, &(0x7f0000002e40)={0x273, 0x8, 0x7, 0x53, 0x7, "a17ade3fa715f84a"}) ioctl$TIOCSIG(r4, 0x40045436, 0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000002e80)={0x24, @none={0x0, 0x2}}, 0x14) write(r5, &(0x7f0000002ec0)="97cf414cba0cfb986a39202d2acf55b25321dfe003d3fd8fbb2dcd1438060dca41c4f9", 0x23) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000003040)={&(0x7f0000002f00)=0x7, 0x6, &(0x7f0000002f40)=[{}], &(0x7f0000003000)}) 2.260421832s ago: executing program 4 (id=1207): flock(0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x18b100, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000600)={0x114, r5, 0x509, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x73}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x919}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x60000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb6e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x19227131}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x10}]}, 0x114}, 0x1, 0x0, 0x0, 0x54}, 0x0) getdents(r6, &(0x7f0000000740)=""/167, 0xa7) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf322e00000008000200", @ANYRES32=0x0, @ANYBLOB="0800c9006c09000038005180340000800c000400b328302f554e986e09000400a41ae10a4e000000080007000100000005000200040000000800070000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x480a0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x234, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x20c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x31, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.200174876s ago: executing program 4 (id=1208): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206d0483c200000000000109022400010000901d09fd391fb39663a50400000103000000092100000401220700090581032000190074"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.893063244s ago: executing program 6 (id=1209): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/igmp\x00') r2 = syz_pidfd_open(r0, 0x0) r3 = dup(r1) pidfd_getfd(r2, r3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e3000"], 0x2c}}, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0xfffffbff, {{0x2, 0x4e24, @local}}}, 0x88) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x8000, 0x200000000000}) r7 = open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0x1000000, 0x5029b4c3, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24d81, 0x2) syz_fuse_handle_req(r8, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r10, &(0x7f0000000600)=[{&(0x7f0000000180)="d92d3e", 0x3}, {&(0x7f0000000340)="112da1", 0x3}], 0x2) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000400)=0x20) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 1.675581763s ago: executing program 4 (id=1210): epoll_create1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="82d720e75bc1e36832c315a68f6edd37b8665d2d421083637dfe66a3cb3e2c7c1f94d365a43a1aaa3bb9e081fa7eac6d43554854eeb65908cfc28dd4093dcd07a3c7d238ee3aeb709b39e9629c368d48e618e56ec90e1d5dc3fbb74e7e1b97f13e75d1721060cd7e648e4a03c80cc6"], 0x0) epoll_create1(0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) read$eventfd(r0, &(0x7f0000000080), 0x8) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="82d720e75bc1e36832c315a68f6edd37b8665d2d421083637dfe66a3cb3e2c7c1f94d365a43a1aaa3bb9e081fa7eac6d43554854eeb65908cfc28dd4093dcd07a3c7d238ee3aeb709b39e9629c368d48e618e56ec90e1d5dc3fbb74e7e1b97f13e75d1721060cd7e648e4a03c80cc6"], 0x0) (async) 1.079935165s ago: executing program 1 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10}]}, 0x2c}}, 0x4000054) r4 = epoll_create1(0x4e71967bbd4433a0) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x10, &(0x7f00000001c0)={[0x6]}, 0x8) 1.079781415s ago: executing program 4 (id=1213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="800100001000010000000000fedbdf25fc1e0101000000000000000000000000fe8000000000000000000000000000aa0077e629a20000000000000000000000550c0aa00c31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000001000000000000000000000000000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff00000000000000000200000000000000000000000000001000000000000000000f000000000000000400000001000000000000000000000000000000000000000100000000000000000000000000000000000000020001060000000000000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480001007368613235362d61726d36342d6e656f6e00"/312], 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 981.876394ms ago: executing program 4 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x81062) close(r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f00000001c0)={0x200000, 0x102000}) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f00000001c0)={0x200000, 0x102000}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000b11000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) syz_usb_control_io$hid(r4, &(0x7f0000000b40)={0x24, &(0x7f0000000a40)={0x40, 0x1, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x20, 0x13, 0x5, "d53c12f21a"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000c40)={0x20, 0x1, 0xcf, "7920134082a5c5586bccfcad0b19dd5ba0ce6d1cf223f72dae66e51c5319f82cd0fdcbb2af93b70f4c9a18c238a6fc34bd3ac213a0b0face0a6fb5711adb697311cefe35f9ab4a56fd0a1ab270c5b5084aa9981f9a47829a5e0e28eb431987d47c4d3428e08cb49b8aa11731225ff7fa24312938665d5eb4476f043bf08450358c826150f8adfc66d21951aa125bfaae959c46a1d01f9c7e1dbd89b4ceaa142e98978066d68c3a142985e15e106d2fe19bf9071786f55f8e0c41d186523718deb8fe2df32c6e8300e4f3ae36b1a947"}, 0x0}) 882.637753ms ago: executing program 5 (id=1215): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000002380)={&(0x7f0000002200)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000ea5c689400000700000007038e070386007f"], 0x18}, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "d6b18748"}, @local=@item_4={0x3, 0x2, 0x0, "01c39702"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x5}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x3, 0x7, "61b8a5086d4698"}, 0x0, 0x0, 0x0, 0x0}) 348.21828ms ago: executing program 4 (id=1216): r0 = socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff", @ANYRES8=r1, @ANYRES64=r0], 0x0) 188.614924ms ago: executing program 1 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3a, 0x0, 0xfffffffffffffffc}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 75.846714ms ago: executing program 1 (id=1218): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xd3, 0x1, 0x44, @rand_addr=' \x01\x00', @mcast2, 0x40, 0x7800, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x7, 0x1, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @private=0xa010102}}}}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000240), &(0x7f00000006c0)=0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x0, 0x4, 0xffff, {{0x24, 0x4, 0x1, 0x3, 0x90, 0x66, 0x0, 0xe3, 0xc767d92e0369b180, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @rr={0x7, 0x1b, 0x71, [@multicast2, @local, @remote, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @cipso={0x86, 0x45, 0x3, [{0x6, 0xf, "12c21411f8a50c0ad6b86527b7"}, {0x7, 0xa, "217efe41731bd8dc"}, {0x6, 0x5, "ed7561"}, {0x2, 0x4, "57a3"}, {0x2, 0x9, "1ad4d23262953c"}, {0x0, 0x9, "e6cf2a83f9ecdb"}, {0x5, 0xb, "5c76a2db5bf6f52db7"}]}, @cipso={0x86, 0x19, 0x1, [{0x2, 0x4, ';S'}, {0x7, 0xf, "dde0d8eca8ef0184aa7ae2032f"}]}]}}}}}) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@private, @multicast1, 0x0}, &(0x7f0000000400)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r13, &(0x7f0000000040)={0x1, @disconnect={{0x406, 0x3}, {0xc9, 0x89}}}, 0x7) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x80, 0x1, 0x0, @empty, @loopback, 0x10, 0x7, 0x4, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x80, 0x1, 0x0, @empty, @loopback, 0x10, 0x7, 0x4, 0x6}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @loopback, @local}, &(0x7f00000005c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @loopback, @local}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xd8, 0x3, 0x2, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x40, 0x9, 0xfffffff3}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f00000019c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r1, @ANYBLOB="020027bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f5ffffff08000600", @ANYRES32=r8, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400dd001007060000001000fe0709000000ffff02f2000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="980102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400b96cffff08000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="6802028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000c000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004004c0d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x6bc}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f00000019c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r1, @ANYBLOB="020027bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f5ffffff08000600", @ANYRES32=r8, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400dd001007060000001000fe0709000000ffff02f2000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="980102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400b96cffff08000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="6802028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000c000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004004c0d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x6bc}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ff00001d00000000000000080009000d000000", 0x24) 3.28562ms ago: executing program 1 (id=1219): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 850.471µs ago: executing program 1 (id=1220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004020}, 0x24000084) 0s ago: executing program 1 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000640)={0x3, 0x1, 0x10}, 0x18) mkdirat(r0, &(0x7f0000000680)='./file0/file1\x00', 0x127) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000580)=ANY=[@ANYBLOB="726c6f675f70616765733d3638323433322c000e000000acb171c97439f2cc93b4309ad82ccec6f3016155fe653c1db0be16613174dcefad31c7b97731c22e1fb167a3f06f94674132cd3e54edeb5b22466d13663da7c35e2e93672ddc4e311b925d4f98191fb7c9a14fd277693808ffb69d7a4aa6ead6645406eafe2e5f177433ac36e8babd5a2f86cc96c2846fc8839592684c506411fe76dfff39a8caa644f26529f4c9990c535bc25782b21c0603a0"]) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000240)={0x3, 0xffffffffffffffff, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080001) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000002c0)={{0x9, 0x4}, 0x100, './file0\x00'}) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x300, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x810) syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') kernel console output (not intermixed with test programs): 55] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 171.576784][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.584954][ T355] usb 2-1: Product: syz [ 171.589183][ T355] usb 2-1: Manufacturer: syz [ 171.593898][ T355] usb 2-1: SerialNumber: syz [ 171.599346][ T355] usb 2-1: config 0 descriptor?? [ 171.607616][ T355] usb-storage 2-1:0.0: USB Mass Storage device detected [ 171.615858][ T355] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 171.821713][ T355] usb 2-1: USB disconnect, device number 84 [ 171.890602][ T853] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 172.051906][ T853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 172.063188][ T853] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 172.072308][ T853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.081589][ T853] usb 1-1: config 0 descriptor?? [ 172.086990][ T2592] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.383908][ T2604] netlink: 'syz.1.737': attribute type 16 has an invalid length. [ 172.526933][ T853] usbhid 1-1:0.0: can't add hid device: -71 [ 172.533892][ T853] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 172.543003][ T853] usb 1-1: USB disconnect, device number 80 [ 173.013739][ T36] audit: type=1400 audit(1771900460.360:30001): avc: denied { add_name } for pid=2625 comm="syz.4.745" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.051439][ T2628] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 173.215220][ T2640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.223982][ T2640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.532732][ T853] usb 3-1: USB disconnect, device number 69 [ 173.740163][ T2650] kvm: kvm [2649]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 173.749160][ T2650] kvm: kvm [2649]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 173.772481][ T2650] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 173.808821][ T2653] sit0: entered promiscuous mode [ 173.814067][ T2653] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 173.829547][ T2653] netlink: 1 bytes leftover after parsing attributes in process `syz.4.754'. [ 173.928298][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 173.928320][ T36] audit: type=1400 audit(1771900461.214:30004): avc: denied { ioctl } for pid=2654 comm="syz.4.755" path="socket:[19557]" dev="sockfs" ino=19557 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.979146][ T36] audit: type=1400 audit(1771900461.261:30005): avc: denied { getopt } for pid=2656 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.030836][ T2665] rust_binder: Write failure EFAULT in pid:493 [ 174.031833][ T2665] rust_binder: Write failure EFAULT in pid:493 [ 174.044953][ T2667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.060847][ T2667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.267657][ T355] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 174.428947][ T355] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 174.437220][ T355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.447657][ T355] usb 3-1: config 1 has no interface number 0 [ 174.455659][ T355] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 174.465069][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.473134][ T355] usb 3-1: Product: syz [ 174.477415][ T355] usb 3-1: Manufacturer: syz [ 174.482214][ T355] usb 3-1: SerialNumber: syz [ 174.703245][ T853] usb 3-1: USB disconnect, device number 70 [ 174.801786][ T36] audit: type=1400 audit(1771900462.039:30006): avc: denied { execheap } for pid=2671 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 174.832618][ T2674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.841219][ T2674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.941776][ T2678] netlink: 104 bytes leftover after parsing attributes in process `syz.0.764'. [ 175.138449][ T2689] veth1_to_hsr: entered promiscuous mode [ 175.145796][ T2689] veth1_to_hsr: left promiscuous mode [ 175.378986][ T36] audit: type=1400 audit(1771900462.574:30007): avc: denied { bind } for pid=2694 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.381684][ T2695] __vm_enough_memory: pid: 2695, comm: syz.2.770, bytes: 18014402804453376 not enough memory for the allocation [ 175.399102][ T36] audit: type=1400 audit(1771900462.574:30008): avc: denied { name_bind } for pid=2694 comm="syz.2.770" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 175.411953][ T355] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 175.440573][ T36] audit: type=1400 audit(1771900462.574:30009): avc: denied { node_bind } for pid=2694 comm="syz.2.770" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 175.474038][ T2698] syzkaller1: entered promiscuous mode [ 175.479582][ T2698] syzkaller1: entered allmulticast mode [ 175.488992][ T2698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.497762][ T2698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.553364][ T2695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 175.622775][ T355] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 175.631153][ T355] usb 1-1: config 0 has no interface number 0 [ 175.637729][ T355] usb 1-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 175.650565][ T355] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 175.659800][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.667929][ T355] usb 1-1: Product: syz [ 175.672149][ T355] usb 1-1: Manufacturer: syz [ 175.676914][ T355] usb 1-1: SerialNumber: syz [ 175.682687][ T355] usb 1-1: config 0 descriptor?? [ 175.688210][ T2689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.912929][ T36] audit: type=1400 audit(1771900463.081:30010): avc: denied { append } for pid=2687 comm="syz.0.767" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 175.936954][ T2689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.762442][ T45] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 176.833562][ T2711] incfs: Options parsing error. -22 [ 176.839245][ T2711] incfs: mount failed -22 [ 176.921522][ T45] usb 3-1: device descriptor read/64, error -71 [ 177.097686][ T36] audit: type=1400 audit(1771900464.188:30011): avc: denied { mounton } for pid=2715 comm="syz.1.778" path="/186/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.120854][ T2716] fuse: Unknown parameter ' ' [ 177.153577][ T2727] input: syz0 as /devices/virtual/input/input35 [ 177.188009][ T45] usb 3-1: device descriptor read/64, error -71 [ 177.269903][ T2737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2737 comm=syz.1.785 [ 177.284186][ T36] audit: type=1400 audit(1771900464.366:30012): avc: denied { listen } for pid=2735 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.423173][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.432532][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.454447][ T45] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 177.571723][ T9] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 177.593057][ T45] usb 3-1: device descriptor read/64, error -71 [ 177.734542][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 177.743798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.751899][ T9] usb 2-1: Product: syz [ 177.756220][ T9] usb 2-1: Manufacturer: syz [ 177.760956][ T9] usb 2-1: SerialNumber: syz [ 177.766598][ T9] usb 2-1: config 0 descriptor?? [ 177.773162][ T9] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 177.848838][ T45] usb 3-1: device descriptor read/64, error -71 [ 177.966222][ T45] usb usb3-port1: attempt power cycle [ 177.986253][ T36] audit: type=1400 audit(1771900465.014:30013): avc: denied { unmount } for pid=501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.010265][ T9] usb 2-1: USB disconnect, device number 85 [ 178.060652][ T2753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.071929][ T2753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.328468][ T45] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 178.346519][ T355] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 178.357403][ T355] asix 1-1:0.188: probe with driver asix failed with error -71 [ 178.367726][ T45] usb 3-1: device descriptor read/8, error -71 [ 178.377567][ T355] usb 1-1: USB disconnect, device number 81 [ 178.510907][ T45] usb 3-1: device descriptor read/8, error -71 [ 178.765505][ T45] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 178.771037][ T2781] 9pnet_fd: Insufficient options for proto=fd [ 178.798837][ T45] usb 3-1: device descriptor read/8, error -71 [ 178.869998][ T2789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.878769][ T2789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.937215][ T45] usb 3-1: device descriptor read/8, error -71 [ 179.063933][ T45] usb usb3-port1: unable to enumerate USB device [ 179.435152][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 179.435172][ T36] audit: type=1400 audit(1771900466.374:30015): avc: denied { module_load } for pid=2792 comm="syz.4.805" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 179.758993][ T2806] rust_binder: Error while translating object. [ 179.759039][ T2806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 179.765274][ T2806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:602 [ 179.800241][ T2808] netlink: 'syz.1.812': attribute type 2 has an invalid length. [ 179.937156][ T2811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.937195][ T2811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 180.140498][ T853] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 180.236357][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 180.310978][ T853] usb 2-1: Using ep0 maxpacket: 32 [ 180.317514][ T853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.328656][ T853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.338671][ T853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 180.351785][ T853] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 180.361048][ T853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.370016][ T853] usb 2-1: config 0 descriptor?? [ 180.397489][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.407747][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 180.417335][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.426278][ T9] usb 3-1: config 0 descriptor?? [ 180.432446][ T9] usb 3-1: bad CDC descriptors [ 180.457623][ T2821] netlink: 328 bytes leftover after parsing attributes in process `syz.4.817'. [ 180.467420][ T2821] 8021q: VLANs not supported on gre0 [ 180.496230][ T2823] can0: slcan on ttynull. [ 180.563359][ T2831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.574209][ T2831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.645605][ T369] usb 3-1: USB disconnect, device number 75 [ 180.779956][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 180.941419][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.950022][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 180.958927][ T9] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 180.969199][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.979796][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.989198][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.997393][ T9] usb 1-1: Product: syz [ 181.001647][ T853] usbhid 2-1:0.0: can't add hid device: -71 [ 181.007622][ T9] usb 1-1: Manufacturer: syz [ 181.012238][ T9] usb 1-1: SerialNumber: syz [ 181.016937][ T853] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 181.027010][ T853] usb 2-1: USB disconnect, device number 86 [ 181.341539][ T2850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.350241][ T2850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.813847][ T853] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 181.976870][ T853] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 181.986188][ T853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.995311][ T853] usb 2-1: Product: syz [ 181.999616][ T853] usb 2-1: Manufacturer: syz [ 182.004239][ T853] usb 2-1: SerialNumber: syz [ 182.027131][ T45] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 182.188219][ T45] usb 3-1: config index 0 descriptor too short (expected 6180, got 36) [ 182.196835][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.208443][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=001b, bcdDevice= 0.00 [ 182.217708][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.227769][ T45] usb 3-1: config 0 descriptor?? [ 182.444140][ T36] audit: type=1326 audit(1771900469.207:30016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.1.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7e259c629 code=0x0 [ 182.684448][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.693103][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.700302][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.707344][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.715544][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.722781][ T45] wacom 0003:056A:001B.0026: unknown main item tag 0x0 [ 182.730211][ T45] wacom 0003:056A:001B.0026: Unknown device_type for 'HID 056a:001b'. Ignoring. [ 182.898188][ T45] usb 3-1: USB disconnect, device number 76 [ 183.392097][ T853] rtl8150 2-1:1.0: couldn't reset the device [ 183.398341][ T853] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 183.515388][ T2862] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 183.525848][ T2862] SELinux: failed to load policy [ 183.597613][ T2864] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 183.606210][ T2864] netlink: 17 bytes leftover after parsing attributes in process `syz.2.826'. [ 183.754915][ T2831] can0 (unregistered): slcan off ttynull. [ 183.844290][ T9] usb 1-1: 0:1 : does not exist [ 183.857095][ T9] usb 1-1: 0:2 : does not exist [ 183.867486][ T9] usb 1-1: USB disconnect, device number 82 [ 183.890911][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.986668][ T2900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.002966][ T2900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.152889][ T46] bridge_slave_1: left allmulticast mode [ 184.162078][ T46] bridge_slave_1: left promiscuous mode [ 184.168153][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.178693][ T46] bridge_slave_0: left allmulticast mode [ 184.184757][ T46] bridge_slave_0: left promiscuous mode [ 184.191006][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.322835][ T46] veth1_macvtap: left promiscuous mode [ 184.328565][ T46] veth0_vlan: left promiscuous mode [ 184.365260][ T36] audit: type=1400 audit(1771900471.009:30017): avc: denied { mounton } for pid=2924 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 184.456128][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.463864][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.473494][ T2924] bridge_slave_0: entered allmulticast mode [ 184.481129][ T2924] bridge_slave_0: entered promiscuous mode [ 184.489413][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.496621][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.505037][ T2924] bridge_slave_1: entered allmulticast mode [ 184.512051][ T2924] bridge_slave_1: entered promiscuous mode [ 184.575820][ T2929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.585740][ T2929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.593794][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.600942][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.608312][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.615981][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.640315][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.647821][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.658079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.665175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.674879][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.681993][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.713424][ T2924] veth0_vlan: entered promiscuous mode [ 184.727851][ T2924] veth1_macvtap: entered promiscuous mode [ 184.750504][ T36] audit: type=1400 audit(1771900471.365:30018): avc: denied { mounton } for pid=2924 comm="syz-executor" path="/root/syzkaller.dfoUZv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 184.782219][ T45] usb 2-1: USB disconnect, device number 87 [ 184.841662][ T2941] usb usb9: usbfs: process 2941 (syz.5.835) did not claim interface 47 before use [ 184.852178][ T36] audit: type=1400 audit(1771900471.468:30019): avc: denied { read } for pid=2936 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.921501][ T2947] kvm: kvm [2946]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x8 [ 184.973609][ T2949] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2949 comm=syz.5.841 [ 185.203337][ T45] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 185.209671][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.220002][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.267324][ T338] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.267324][ T853] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 185.373912][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 185.380441][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 185.391635][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 185.401352][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 185.414134][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 185.417235][ T853] usb 3-1: device descriptor read/64, error -71 [ 185.425335][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 185.442140][ T338] usb 6-1: Using ep0 maxpacket: 32 [ 185.449442][ T45] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 185.459882][ T338] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 185.470149][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.478155][ T45] usb 2-1: Product: syz [ 185.482427][ T338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.491587][ T45] usb 2-1: Manufacturer: syz [ 185.496206][ T45] usb 2-1: SerialNumber: syz [ 185.501185][ T338] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.514744][ T45] usb 2-1: config 0 descriptor?? [ 185.522115][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 185.534847][ T338] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.544291][ T338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.554120][ T338] usb 6-1: Product: syz [ 185.558475][ T338] usb 6-1: Manufacturer: syz [ 185.563125][ T338] usb 6-1: SerialNumber: syz [ 185.683105][ T853] usb 3-1: device descriptor read/64, error -71 [ 185.751503][ T339] usb 2-1: USB disconnect, device number 88 [ 185.788578][ T338] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 185.795753][ T338] cdc_ncm 6-1:1.0: bind() failure [ 185.803475][ T338] usb 6-1: USB disconnect, device number 2 [ 185.917915][ T2967] SELinux: failed to load policy [ 185.949623][ T853] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 186.032875][ T2969] fuse: Bad value for 'fd' [ 186.050894][ T2971] fuse: Unknown parameter 'grokp_id' [ 186.057520][ T2971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.066514][ T2971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.088110][ T853] usb 3-1: device descriptor read/64, error -71 [ 186.343828][ T853] usb 3-1: device descriptor read/64, error -71 [ 186.461252][ T853] usb usb3-port1: attempt power cycle [ 186.599738][ T369] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 186.625207][ T2977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.631909][ T338] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 186.634539][ T2977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.771353][ T369] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 186.782752][ T369] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.789522][ T369] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 186.798887][ T369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.808058][ T369] usb 6-1: config 0 descriptor?? [ 186.814074][ T2973] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.824074][ T853] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 186.824899][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.844405][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.854628][ T338] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.857589][ T853] usb 3-1: device descriptor read/8, error -71 [ 186.868528][ T338] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.885834][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.895196][ T338] usb 2-1: config 0 descriptor?? [ 187.006287][ T853] usb 3-1: device descriptor read/8, error -71 [ 187.039261][ T36] audit: type=1400 audit(1771900473.514:30020): avc: denied { create } for pid=2972 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.063734][ T36] audit: type=1400 audit(1771900473.514:30021): avc: denied { write } for pid=2972 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.085099][ T36] audit: type=1400 audit(1771900473.514:30022): avc: denied { nlmsg_write } for pid=2972 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.257533][ T369] uclogic 0003:28BD:0042.0027: interface is invalid, ignoring [ 187.265839][ T853] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 187.293576][ T853] usb 3-1: device descriptor read/8, error -71 [ 187.332190][ T338] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 187.341513][ T338] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 187.432375][ T853] usb 3-1: device descriptor read/8, error -71 [ 187.548387][ T853] usb usb3-port1: unable to enumerate USB device [ 187.756988][ T2983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.765776][ T2983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.775195][ T2983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.784076][ T2983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.792820][ T2983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.802119][ T2983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.903776][ T36] audit: type=1400 audit(1771900474.330:30023): avc: denied { execute } for pid=2972 comm="syz.5.849" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.925101][ T36] audit: type=1400 audit(1771900474.330:30024): avc: denied { execute_no_trans } for pid=2972 comm="syz.5.849" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.230421][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 188.241811][ T2988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:615 [ 188.271927][ T36] audit: type=1400 audit(1771900474.668:30025): avc: denied { setattr } for pid=2991 comm="syz.2.856" name="" dev="pipefs" ino=21735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.317339][ T36] audit: type=1326 audit(1771900474.715:30026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.2.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9d959c629 code=0x0 [ 188.363558][ T2999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.372177][ T2999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.380405][ T36] audit: type=1400 audit(1771900474.780:30027): avc: denied { mounton } for pid=2995 comm="syz.2.857" path="/212/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 188.485184][ T3008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.499982][ T3008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.075506][ T3012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.085222][ T3012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.587687][ T853] usb 2-1: USB disconnect, device number 89 [ 189.609094][ T338] usb 6-1: USB disconnect, device number 3 [ 189.651784][ T36] audit: type=1400 audit(1771900475.972:30028): avc: denied { execmem } for pid=3018 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 189.684224][ T3014] netlink: 'syz.1.863': attribute type 46 has an invalid length. [ 189.788509][ T3023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.797242][ T3023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.999798][ T338] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.113959][ T3034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3034 comm=syz.1.871 [ 190.126694][ T3034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 190.161177][ T338] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.172495][ T338] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.179242][ T338] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 190.188619][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.203109][ T338] usb 6-1: config 0 descriptor?? [ 190.371332][ T3043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.380526][ T3043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.426247][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 190.426269][ T36] audit: type=1400 audit(1771900476.694:30030): avc: denied { accept } for pid=3016 comm="syz.5.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.427501][ T3017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.464887][ T3017] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.476588][ T3017] overlayfs: missing 'lowerdir' [ 190.699284][ T338] elecom 0003:056E:00FB.0029: hidraw0: USB HID v0.02 Device [HID 056e:00fb] on usb-dummy_hcd.5-1/input0 [ 190.912120][ T338] usb 6-1: USB disconnect, device number 4 [ 190.954545][ T3047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.964907][ T3047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.034872][ T3049] tipc: Enabling of bearer rejected, failed to enable media [ 191.059411][ T36] audit: type=1326 audit(1771900477.285:30031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3050 comm="syz.1.876" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7e259c629 code=0x0 [ 191.315818][ T3063] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 191.394575][ T3067] netlink: 'syz.1.880': attribute type 58 has an invalid length. [ 191.402567][ T3067] netlink: 'syz.1.880': attribute type 58 has an invalid length. [ 191.412817][ T36] audit: type=1400 audit(1771900477.623:30032): avc: denied { bind } for pid=3065 comm="syz.1.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.597402][ T53] bridge_slave_1: left allmulticast mode [ 191.603352][ T53] bridge_slave_1: left promiscuous mode [ 191.609073][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.618932][ T53] bridge_slave_0: left allmulticast mode [ 191.625440][ T53] bridge_slave_0: left promiscuous mode [ 191.631517][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.729296][ T3083] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 191.790420][ T369] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 191.801894][ T53] veth1_macvtap: left promiscuous mode [ 191.807481][ T53] veth0_vlan: left promiscuous mode [ 191.994210][ T369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.996749][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.005317][ T369] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.011852][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.028628][ T3087] bridge_slave_0: entered allmulticast mode [ 192.029125][ T369] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.036247][ T3087] bridge_slave_0: entered promiscuous mode [ 192.046538][ T369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.052324][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.064712][ T369] usb 6-1: SerialNumber: syz [ 192.064790][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.076569][ T3087] bridge_slave_1: entered allmulticast mode [ 192.083185][ T3087] bridge_slave_1: entered promiscuous mode [ 192.117633][ T3092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3092 comm=syz.4.891 [ 192.162998][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.163652][ T338] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 192.170086][ T3087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.185610][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.192665][ T3087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.222463][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.232338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.239482][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.276182][ T3087] veth0_vlan: entered promiscuous mode [ 192.294075][ T3100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.304239][ T369] usb 6-1: 0:2 : does not exist [ 192.305072][ T3087] veth1_macvtap: entered promiscuous mode [ 192.315231][ T338] usb 2-1: device descriptor read/64, error -71 [ 192.323008][ T3100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.327174][ T369] usb 6-1: USB disconnect, device number 5 [ 192.347356][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.357145][ T3100] netlink: 'syz.4.892': attribute type 12 has an invalid length. [ 192.403882][ T3102] can0: slcan on ttyS3. [ 192.494423][ T3102] can0 (unregistered): slcan off ttyS3. [ 192.568606][ T338] usb 2-1: device descriptor read/64, error -71 [ 192.824398][ T338] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 192.962898][ T338] usb 2-1: device descriptor read/64, error -71 [ 193.016248][ T355] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 193.112203][ T45] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.179422][ T355] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 193.188978][ T355] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.197015][ T355] usb 7-1: Product: syz [ 193.201440][ T355] usb 7-1: Manufacturer: syz [ 193.206220][ T355] usb 7-1: SerialNumber: syz [ 193.218888][ T338] usb 2-1: device descriptor read/64, error -71 [ 193.273257][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.283750][ T45] usb 6-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.296902][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 193.303823][ T45] usb 6-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 193.313441][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.322677][ T45] usb 6-1: config 0 descriptor?? [ 193.336111][ T338] usb usb2-port1: attempt power cycle [ 193.457758][ T355] rtl8150 7-1:1.0: couldn't reset the device [ 193.464144][ T355] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 193.474976][ T355] usb 7-1: USB disconnect, device number 2 [ 193.698384][ T338] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 193.721035][ T338] usb 2-1: device descriptor read/8, error -71 [ 193.765607][ T45] usb 6-1: string descriptor 0 read error: -71 [ 193.773028][ T45] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 193.781456][ T45] usb 6-1: USB disconnect, device number 6 [ 193.859558][ T338] usb 2-1: device descriptor read/8, error -71 [ 194.114111][ T338] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 194.136434][ T338] usb 2-1: device descriptor read/8, error -71 [ 194.241911][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 194.275094][ T338] usb 2-1: device descriptor read/8, error -71 [ 194.322816][ T3119] syzkaller1: entered promiscuous mode [ 194.328661][ T3119] syzkaller1: entered allmulticast mode [ 194.336129][ T3119] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 194.391239][ T338] usb usb2-port1: unable to enumerate USB device [ 194.412481][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 194.422951][ T9] usb 7-1: config 16 has an invalid interface number: 60 but max is 0 [ 194.431653][ T9] usb 7-1: config 16 has no interface number 0 [ 194.440242][ T9] usb 7-1: config 16 interface 60 has no altsetting 0 [ 194.451187][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0475, bcdDevice=77.d1 [ 194.461406][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.470960][ T9] usb 7-1: Product: syz [ 194.476149][ T9] usb 7-1: Manufacturer: syz [ 194.481057][ T9] usb 7-1: SerialNumber: syz [ 194.660695][ T3125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3125 comm=syz.5.899 [ 194.709798][ T9] usb 7-1: USB disconnect, device number 3 [ 194.977562][ T338] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.137293][ T338] usb 6-1: Using ep0 maxpacket: 32 [ 195.145403][ T338] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.153993][ T338] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 195.161652][ T338] usb 6-1: can't read configurations, error -71 [ 195.521440][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 195.542418][ T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 195.612911][ T36] audit: type=1400 audit(1771900481.554:30033): avc: denied { mount } for pid=3146 comm="syz.4.908" name="/" dev="configfs" ino=2552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 195.636493][ T36] audit: type=1400 audit(1771900481.582:30034): avc: denied { search } for pid=3146 comm="syz.4.908" name="/" dev="configfs" ino=2552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.674188][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.687184][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.695165][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.702973][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.713454][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.725773][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 195.730007][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.731075][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.741746][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.752008][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.757919][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.764932][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.772752][ T9] usb 7-1: SerialNumber: syz [ 195.783533][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.793120][ T45] usb 2-1: config 0 has no interface number 0 [ 195.799455][ T36] audit: type=1400 audit(1771900481.723:30035): avc: denied { mounton } for pid=3150 comm="syz.5.910" path="/proc/36/task" dev="proc" ino=22268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 195.799574][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.829712][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 195.837215][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.845309][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.853414][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.861566][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.869757][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.877661][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.886827][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.894408][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.903029][ T45] usb 2-1: Product: syz [ 195.907388][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.914927][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.922671][ T45] usb 2-1: Manufacturer: syz [ 195.927368][ T45] usb 2-1: SerialNumber: syz [ 195.932616][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.940644][ T45] usb 2-1: config 0 descriptor?? [ 195.946157][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.955227][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.963222][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.971976][ T45] smsc75xx v1.0.0 [ 195.975818][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.983461][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.991033][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 195.999025][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.007227][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.014914][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.022665][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.030381][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.037953][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.045542][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.047618][ T9] usb 7-1: 0:2 : does not exist [ 196.053163][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.065499][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.073426][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.081176][ T9] usb 7-1: USB disconnect, device number 4 [ 196.082229][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.095127][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.102894][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.110569][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.113934][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.118235][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.141947][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.149585][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.157195][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.164865][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.172426][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.180234][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.188567][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.196147][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.203834][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.211492][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.219155][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.227073][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.234624][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.244116][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.252037][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.259898][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.267433][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.275374][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.283300][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.291156][ T338] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 196.298783][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.306460][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.314368][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.323237][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.330841][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.338546][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.346214][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.354015][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.361534][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.369112][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.376681][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.384506][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.392045][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.399926][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.407575][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.415137][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.422908][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.430559][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.438419][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.446079][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.453746][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 196.463771][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.471508][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.479205][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.486766][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.494855][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.504114][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.512016][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.519730][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.527380][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.535026][ T338] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 196.543245][ T338] usb 6-1: config 0 has no interface number 0 [ 196.549478][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.557096][ T338] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 196.566464][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.574168][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.581864][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.592011][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.600186][ T338] usb 6-1: config 0 descriptor?? [ 196.605352][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.613026][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.620877][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.628533][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.636233][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.643819][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.651757][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.659574][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 196.671200][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.678895][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.686508][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 196.696428][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.704365][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 196.715085][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.722735][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.730487][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 196.740222][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.747999][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 196.756831][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.765506][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.773140][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.780850][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.788437][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.796295][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.804047][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.811786][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.819314][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.826872][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.834547][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.842325][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.850233][ T338] usb 6-1: string descriptor 0 read error: -71 [ 196.856567][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.864630][ T338] usb-storage 6-1:0.168: USB Mass Storage device detected [ 196.871956][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.880152][ T338] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 196.887881][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.895423][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.903129][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.911024][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.918801][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.926675][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.934927][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.946431][ T338] usb 6-1: USB disconnect, device number 8 [ 196.953046][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.961265][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.969624][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.977974][ T816] hid-generic 0000:10000:0007.002A: unknown main item tag 0x0 [ 196.986620][ T816] hid-generic 0000:10000:0007.002A: hidraw0: HID v9.40 Device [syz1] on syz1 [ 197.020193][ T3168] fido_id[3168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.146085][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 197.152812][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 197.157754][ T3183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.168755][ T3183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.248433][ T355] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 197.418291][ T355] usb 7-1: Using ep0 maxpacket: 8 [ 197.425054][ T355] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 197.436393][ T355] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 197.450073][ T355] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 197.459284][ T355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.468297][ T355] usb 7-1: config 0 descriptor?? [ 197.475550][ T355] ums-jumpshot 7-1:0.0: USB Mass Storage device detected [ 197.484606][ T355] ums-jumpshot 7-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 197.663442][ T338] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 197.714110][ T3166] syzkaller0: entered promiscuous mode [ 197.719759][ T3166] syzkaller0: entered allmulticast mode [ 197.805962][ T853] usb 7-1: USB disconnect, device number 5 [ 197.824409][ T338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.834662][ T338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.844782][ T338] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.853917][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.862579][ T338] usb 6-1: SerialNumber: syz [ 198.084322][ T338] usb 6-1: 0:2 : does not exist [ 198.093515][ T338] usb 6-1: USB disconnect, device number 9 [ 198.108661][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.340300][ T338] usb 2-1: USB disconnect, device number 94 [ 198.359410][ T853] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 198.374550][ T853] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.468943][ T3190] SELinux: policydb version 243437066 does not match my version range 15-33 [ 198.478906][ T3190] SELinux: failed to load policy [ 198.629947][ T36] audit: type=1400 audit(1771900484.387:30036): avc: denied { setattr } for pid=3196 comm="syz.1.923" name="icmp6" dev="proc" ino=4026532366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 198.686636][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 198.847674][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 198.858609][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.869551][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.879437][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 198.892691][ T9] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 198.901833][ T853] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 198.909675][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.918640][ T9] usb 7-1: config 0 descriptor?? [ 198.921232][ T338] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 199.070319][ T853] usb 2-1: Using ep0 maxpacket: 16 [ 199.077336][ T853] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 199.088199][ T853] usb 2-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 199.093605][ T338] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 199.098025][ T853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.108636][ T338] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 199.115978][ T853] usb 2-1: Product: syz [ 199.129405][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.132985][ T853] usb 2-1: Manufacturer: syz [ 199.145980][ T853] usb 2-1: SerialNumber: syz [ 199.154189][ T338] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 199.315455][ T460] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 199.315455][ T55] Bluetooth: hci1: command 0x1003 tx timeout [ 199.361385][ T3201] netlink: 468 bytes leftover after parsing attributes in process `syz.5.924'. [ 199.379609][ T9] usb 7-1: string descriptor 0 read error: -71 [ 199.387951][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 199.394202][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.403150][ T9] usb 7-1: USB disconnect, device number 6 [ 199.984600][ T3220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.993909][ T3220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.670742][ T3230] kvm: emulating exchange as write [ 200.833355][ T3233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.847564][ T3233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.865691][ T36] audit: type=1400 audit(1771900486.489:30037): avc: denied { setopt } for pid=3234 comm="syz.6.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.138114][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 201.276840][ T9] usb 7-1: device descriptor read/64, error -71 [ 201.408188][ T3237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.417227][ T3237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.523993][ T36] audit: type=1400 audit(1771900487.108:30038): avc: denied { create } for pid=3241 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.532652][ T9] usb 7-1: device descriptor read/64, error -71 [ 201.631789][ T3250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.640445][ T3250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.731540][ T853] usb 2-1: USB disconnect, device number 95 [ 201.798958][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 201.869481][ T338] usb 6-1: USB disconnect, device number 10 [ 201.948220][ T9] usb 7-1: device descriptor read/64, error -71 [ 202.204002][ T9] usb 7-1: device descriptor read/64, error -71 [ 202.214884][ T853] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 202.239999][ T3268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.248700][ T3268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.321321][ T9] usb usb7-port1: attempt power cycle [ 202.353228][ T853] usb 2-1: device descriptor read/64, error -71 [ 202.609017][ T853] usb 2-1: device descriptor read/64, error -71 [ 202.683664][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 202.706204][ T9] usb 7-1: device descriptor read/8, error -71 [ 202.844781][ T9] usb 7-1: device descriptor read/8, error -71 [ 202.855139][ T3272] virtio-fs: tag not found [ 202.863487][ T36] audit: type=1400 audit(1771900488.356:30039): avc: denied { map } for pid=3271 comm="syz.4.945" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.878361][ T3272] 9pnet_fd: Insufficient options for proto=fd [ 202.887848][ T853] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 202.964684][ T3275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.973552][ T3275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.035360][ T853] usb 2-1: device descriptor read/64, error -71 [ 203.099318][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 203.121830][ T9] usb 7-1: device descriptor read/8, error -71 [ 203.248530][ T369] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 203.260447][ T9] usb 7-1: device descriptor read/8, error -71 [ 203.291181][ T853] usb 2-1: device descriptor read/64, error -71 [ 203.376643][ T9] usb usb7-port1: unable to enumerate USB device [ 203.408623][ T853] usb usb2-port1: attempt power cycle [ 203.415396][ T369] usb 6-1: No LPM exit latency info found, disabling LPM. [ 203.423768][ T369] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.432895][ T369] usb 6-1: config 1 has no interface number 1 [ 203.439010][ T369] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 203.452741][ T369] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 203.466229][ T369] usb 6-1: string descriptor 0 read error: -22 [ 203.472799][ T369] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.482044][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.495646][ T369] usb 6-1: low speed audio streaming not supported [ 203.712270][ T369] usb 6-1: USB disconnect, device number 11 [ 203.770814][ T853] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 203.793325][ T853] usb 2-1: device descriptor read/8, error -71 [ 203.897699][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.906380][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.916920][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.925653][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.934891][ T853] usb 2-1: device descriptor read/8, error -71 [ 204.197154][ T853] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 204.219828][ T853] usb 2-1: device descriptor read/8, error -71 [ 204.358356][ T853] usb 2-1: device descriptor read/8, error -71 [ 204.474647][ T853] usb usb2-port1: unable to enumerate USB device [ 204.485506][ T369] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 204.516908][ T816] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 204.644820][ T369] usb 7-1: Using ep0 maxpacket: 8 [ 204.651178][ T369] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.659563][ T369] usb 7-1: config 179 has no interface number 0 [ 204.665963][ T369] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 204.666261][ T816] usb 6-1: device descriptor read/64, error -71 [ 204.677602][ T369] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 204.695435][ T369] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.706861][ T369] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.720256][ T369] usb 7-1: config 179 interface 65 has no altsetting 0 [ 204.727283][ T369] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 204.729342][ T3291] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 204.736901][ T369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.748779][ T3291] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 204.767539][ T369] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input41 [ 204.794248][ T3293] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 204.802194][ T3293] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.815472][ T96] input input41: unable to receive magic message: -110 [ 204.827254][ T96] input input41: unable to receive magic message: -32 [ 204.839191][ T96] input input41: unable to receive magic message: -32 [ 204.919557][ T3297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3297 comm=syz.4.956 [ 204.943298][ T816] usb 6-1: device descriptor read/64, error -71 [ 204.977028][ T3287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.985790][ T3287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.996959][ T338] usb 7-1: USB disconnect, device number 11 [ 204.996959][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 205.015846][ T338] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 205.199357][ T816] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 205.338236][ T816] usb 6-1: device descriptor read/64, error -71 [ 205.423416][ T3330] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 205.593523][ T816] usb 6-1: device descriptor read/64, error -71 [ 205.710837][ T816] usb usb6-port1: attempt power cycle [ 205.785337][ T338] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 205.817310][ T369] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 205.946579][ T338] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.958030][ T338] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.971199][ T338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.978196][ T338] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 205.987634][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.987919][ T369] usb 7-1: Using ep0 maxpacket: 32 [ 206.002535][ T369] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.007270][ T338] usb 2-1: config 0 descriptor?? [ 206.013890][ T369] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.036639][ T369] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 206.045942][ T369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.061816][ T369] usb 7-1: config 0 descriptor?? [ 206.083755][ T816] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 206.106248][ T816] usb 6-1: device descriptor read/8, error -71 [ 206.244841][ T816] usb 6-1: device descriptor read/8, error -71 [ 206.270845][ T36] audit: type=1400 audit(1771900491.555:30040): avc: denied { map } for pid=3355 comm="syz.4.972" path="socket:[25172]" dev="sockfs" ino=25172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.296912][ T36] audit: type=1400 audit(1771900491.555:30041): avc: denied { read } for pid=3355 comm="syz.4.972" path="socket:[25172]" dev="sockfs" ino=25172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.336271][ T3358] can0: slcan on ttyS3. [ 206.364503][ T3358] can0 (unregistered): slcan off ttyS3. [ 206.375171][ T3358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.386298][ T3358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.395019][ T36] audit: type=1400 audit(1771900491.677:30042): avc: denied { mount } for pid=3357 comm="syz.4.973" name="/" dev="pstore" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 206.422852][ T3358] fuse: blksize only supported for fuseblk [ 206.452935][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.461671][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.471938][ T338] pyra 0003:1E7D:2C24.002C: ignoring exceeding usage max [ 206.483762][ T338] pyra 0003:1E7D:2C24.002C: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 206.499546][ T816] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 206.514973][ T369] savu 0003:1E7D:2D5A.002D: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 206.541456][ T816] usb 6-1: device descriptor read/8, error -71 [ 206.681763][ T816] usb 6-1: device descriptor read/8, error -71 [ 206.688603][ T338] pyra 0003:1E7D:2C24.002C: couldn't init struct pyra_device [ 206.697259][ T338] pyra 0003:1E7D:2C24.002C: couldn't install mouse [ 206.704684][ T338] pyra 0003:1E7D:2C24.002C: probe with driver pyra failed with error -71 [ 206.715414][ T338] usb 2-1: USB disconnect, device number 100 [ 206.789225][ T369] usb 7-1: USB disconnect, device number 12 [ 206.808802][ T816] usb usb6-port1: unable to enumerate USB device [ 207.036470][ T36] audit: type=1400 audit(1771900492.278:30043): avc: denied { unmount } for pid=501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 207.256257][ T3375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.265258][ T3375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.367294][ T3379] x_tables: unsorted underflow at hook 1 [ 207.377635][ T3379] netlink: 140 bytes leftover after parsing attributes in process `syz.6.979'. [ 207.405235][ T36] audit: type=1400 audit(1771900492.615:30044): avc: denied { map } for pid=3381 comm="syz.6.980" path="pipe:[23349]" dev="pipefs" ino=23349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 207.497131][ T3390] netlink: 'syz.5.983': attribute type 16 has an invalid length. [ 207.511967][ T3390] netlink: 64122 bytes leftover after parsing attributes in process `syz.5.983'. [ 207.757932][ T338] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 207.917102][ T338] usb 7-1: Using ep0 maxpacket: 8 [ 207.926551][ T338] usb 7-1: unable to get BOS descriptor or descriptor too short [ 207.935973][ T338] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 207.945203][ T338] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 207.956532][ T338] usb 7-1: config 4 has no interface number 0 [ 207.966250][ T338] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 207.976799][ T338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.987412][ T338] usb 7-1: Product: syz [ 207.992043][ T338] usb 7-1: Manufacturer: syz [ 207.996964][ T338] usb 7-1: SerialNumber: syz [ 208.118660][ T36] audit: type=1400 audit(1771900493.291:30045): avc: denied { mounton } for pid=3405 comm="syz.4.988" path="/279/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 208.124073][ T3406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 208.194230][ T36] audit: type=1400 audit(1771900493.366:30046): avc: denied { unmount } for pid=501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 208.238067][ T853] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 208.274574][ T3391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.284011][ T3391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.348303][ T338] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 208.357315][ T338] usb 7-1: No valid video chain found. [ 208.369431][ T338] usb 7-1: USB disconnect, device number 13 [ 208.400436][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.411076][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.424470][ T853] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 208.434713][ T853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.443148][ T853] usb 2-1: Product: syz [ 208.447646][ T853] usb 2-1: Manufacturer: syz [ 208.452688][ T853] usb 2-1: SerialNumber: syz [ 208.462308][ T853] ftdi_sio 2-1:4.0: FTDI USB Serial Device converter detected [ 208.470587][ T853] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 208.665973][ T3431] rust_binder: Write failure EFAULT in pid:84 [ 208.675703][ T853] usb 2-1: USB disconnect, device number 101 [ 208.690324][ T853] ftdi_sio 2-1:4.0: device disconnected [ 208.991356][ T3444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.003338][ T3444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.196756][ T3456] netlink: 'syz.6.1003': attribute type 11 has an invalid length. [ 209.204720][ T3456] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1003'. [ 209.277861][ T3458] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1004'. [ 209.288689][ T3458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3458 comm=syz.6.1004 [ 209.526502][ T853] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 209.537287][ T816] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 209.559038][ T369] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 209.559337][ T36] audit: type=1400 audit(1771900494.651:30047): avc: denied { listen } for pid=3465 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.665052][ T853] usb 6-1: device descriptor read/64, error -71 [ 209.697101][ T816] usb 2-1: Using ep0 maxpacket: 8 [ 209.703552][ T816] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 209.711737][ T816] usb 2-1: config 0 has no interface number 0 [ 209.719578][ T816] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 209.728729][ T816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.731061][ T369] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.736959][ T816] usb 2-1: Product: syz [ 209.748526][ T369] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.751343][ T816] usb 2-1: Manufacturer: syz [ 209.761594][ T369] usb 7-1: config 1 has no interface number 0 [ 209.765186][ T816] usb 2-1: SerialNumber: syz [ 209.772645][ T369] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.783277][ T816] usb 2-1: config 0 descriptor?? [ 209.794014][ T369] usb 7-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 209.803338][ T369] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.813008][ T369] usb 7-1: Product: syz [ 209.817496][ T369] usb 7-1: Manufacturer: syz [ 209.822216][ T369] usb 7-1: SerialNumber: syz [ 209.829053][ T369] cdc_ncm 7-1:1.1: skipping garbage [ 209.834592][ T369] usb 7-1: selecting invalid altsetting 1 [ 209.931631][ T853] usb 6-1: device descriptor read/64, error -71 [ 210.187336][ T853] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 210.325939][ T853] usb 6-1: device descriptor read/64, error -71 [ 210.502308][ T369] usb 7-1: selecting invalid altsetting 1 [ 210.508206][ T369] cdc_ncm 7-1:1.1: bind() failure [ 210.581718][ T853] usb 6-1: device descriptor read/64, error -71 [ 210.699115][ T853] usb usb6-port1: attempt power cycle [ 210.764124][ T338] usb 7-1: USB disconnect, device number 14 [ 211.061334][ T853] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 211.083810][ T853] usb 6-1: device descriptor read/8, error -71 [ 211.147588][ T3478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.156754][ T3478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.222549][ T853] usb 6-1: device descriptor read/8, error -71 [ 211.477056][ T853] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 211.499718][ T853] usb 6-1: device descriptor read/8, error -71 [ 211.594425][ T339] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 211.638221][ T853] usb 6-1: device descriptor read/8, error -71 [ 211.714592][ T3482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.723529][ T3482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.734685][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.743611][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.748561][ T3482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.760680][ T339] usb 7-1: Using ep0 maxpacket: 16 [ 211.761603][ T3482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.766434][ T853] usb usb6-port1: unable to enumerate USB device [ 211.781655][ T339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 211.788593][ T339] usb 7-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 211.798027][ T339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.807200][ T339] usb 7-1: config 0 descriptor?? [ 211.832243][ T36] audit: type=1400 audit(1771900496.781:30048): avc: denied { create } for pid=3486 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 212.458391][ T339] usb 7-1: string descriptor 0 read error: -71 [ 212.467870][ T339] uclogic 0003:5543:3031.002E: failed retrieving string descriptor #200: -71 [ 212.493359][ T339] uclogic 0003:5543:3031.002E: failed retrieving pen parameters: -71 [ 212.509084][ T339] uclogic 0003:5543:3031.002E: failed probing pen v2 parameters: -71 [ 212.528801][ T339] uclogic 0003:5543:3031.002E: failed probing parameters: -71 [ 212.539311][ T339] uclogic 0003:5543:3031.002E: probe with driver uclogic failed with error -71 [ 212.573424][ T816] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 212.591199][ T816] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 212.604716][ T339] usb 7-1: USB disconnect, device number 15 [ 212.626762][ T816] usb 2-1: USB disconnect, device number 102 [ 212.969813][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.984428][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.066356][ T3515] kvm: MWAIT instruction emulated as NOP! [ 213.331706][ T816] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 213.374320][ T338] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 213.504144][ T816] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 213.513631][ T816] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.526525][ T816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.536689][ T338] usb 7-1: device descriptor read/64, error -71 [ 213.547319][ T816] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.566031][ T816] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.578435][ T816] usb 2-1: Product: syz [ 213.585742][ T816] usb 2-1: Manufacturer: syz [ 213.597324][ T816] usb 2-1: SerialNumber: syz [ 213.604727][ T816] usb 2-1: config 0 descriptor?? [ 213.618199][ T816] hub 2-1:0.0: bad descriptor, ignoring hub [ 213.627600][ T816] hub 2-1:0.0: probe with driver hub failed with error -5 [ 213.642325][ T816] usb 2-1: selecting invalid altsetting 0 [ 213.657628][ T36] audit: type=1400 audit(1771900498.489:30049): avc: denied { read } for pid=3522 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.726210][ T36] audit: type=1400 audit(1771900498.545:30050): avc: denied { ioctl } for pid=3522 comm="syz.4.1026" path="socket:[26767]" dev="sockfs" ino=26767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.726564][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 213.832667][ T338] usb 7-1: device descriptor read/64, error -71 [ 213.859958][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.876198][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.905748][ T3530] rust_binder: 754: no such ref 1 [ 214.088485][ T338] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 214.173801][ T339] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 214.237960][ T338] usb 7-1: device descriptor read/64, error -71 [ 214.345869][ T339] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.354972][ T339] usb 6-1: config 0 has no interface number 0 [ 214.362162][ T339] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.373779][ T339] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.383807][ T339] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 214.393925][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.403487][ T339] usb 6-1: config 0 descriptor?? [ 214.440538][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.449674][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.458791][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.468209][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.493650][ T338] usb 7-1: device descriptor read/64, error -71 [ 214.610884][ T338] usb usb7-port1: attempt power cycle [ 214.841265][ T339] prodikeys 0003:041E:2801.002F: item fetching failed at offset 3/7 [ 214.852561][ T339] prodikeys 0003:041E:2801.002F: hid parse failed [ 214.863413][ T339] prodikeys 0003:041E:2801.002F: probe with driver prodikeys failed with error -22 [ 214.973130][ T338] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 215.006963][ T338] usb 7-1: device descriptor read/8, error -71 [ 215.061979][ T339] usb 6-1: USB disconnect, device number 20 [ 215.135389][ T3540] SELinux: failed to load policy [ 215.165212][ T338] usb 7-1: device descriptor read/8, error -71 [ 215.420792][ T338] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 215.443448][ T338] usb 7-1: device descriptor read/8, error -71 [ 215.582117][ T338] usb 7-1: device descriptor read/8, error -71 [ 215.620263][ T36] audit: type=1400 audit(1771900500.327:30051): avc: denied { watch watch_reads } for pid=3544 comm="syz.5.1034" path="/35/file0" dev="incremental-fs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.698021][ T338] usb usb7-port1: unable to enumerate USB device [ 215.744319][ T3555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=3555 comm=syz.4.1038 [ 215.861842][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.873067][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.887857][ T36] audit: type=1400 audit(1771900500.581:30052): avc: denied { create } for pid=3558 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 215.975162][ T339] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 216.124231][ T339] usb 6-1: device descriptor read/64, error -71 [ 216.338775][ T36] audit: type=1400 audit(1771900501.012:30053): avc: denied { create } for pid=3563 comm="syz.6.1041" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.371652][ T36] audit: type=1400 audit(1771900501.022:30054): avc: denied { mounton } for pid=3563 comm="syz.6.1041" path="/29/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.412153][ T339] usb 6-1: device descriptor read/64, error -71 [ 216.444092][ T36] audit: type=1400 audit(1771900501.097:30055): avc: denied { unlink } for pid=3087 comm="syz-executor" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.480249][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 216.491135][ T36] audit: type=1400 audit(1771900501.144:30056): avc: denied { bind } for pid=3568 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.491917][ T3569] syz.4.1042 (3569): /proc/3568/oom_adj is deprecated, please use /proc/3568/oom_score_adj instead. [ 216.525795][ T3569] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1042'. [ 216.536686][ T3569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.546283][ T3569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.582552][ T338] usb 2-1: reset high-speed USB device number 103 using dummy_hcd [ 216.678487][ T339] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 216.743013][ T338] usb 2-1: device firmware changed [ 216.748524][ T338] usb 2-1: USB disconnect, device number 103 [ 216.827699][ T339] usb 6-1: device descriptor read/64, error -71 [ 217.062300][ T338] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 217.083584][ T339] usb 6-1: device descriptor read/64, error -71 [ 217.200958][ T339] usb usb6-port1: attempt power cycle [ 217.237594][ T338] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 217.248473][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.268395][ T338] usb 2-1: Product: syz [ 217.275628][ T338] usb 2-1: Manufacturer: syz [ 217.284563][ T338] usb 2-1: SerialNumber: syz [ 217.321189][ T3579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.332286][ T3579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.507591][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.522294][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.558301][ T36] audit: type=1400 audit(1771900502.148:30057): avc: denied { ioctl } for pid=3589 comm="syz.1.1050" path="socket:[27156]" dev="sockfs" ino=27156 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.587284][ T338] rtl8150 2-1:1.0: couldn't reset the device [ 217.595464][ T338] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 217.605977][ T339] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 217.616035][ T338] usb 2-1: USB disconnect, device number 104 [ 217.639232][ T339] usb 6-1: device descriptor read/8, error -71 [ 217.651607][ T36] audit: type=1400 audit(1771900502.241:30058): avc: denied { create } for pid=3596 comm="syz.1.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.724003][ T3598] 9pnet_fd: Insufficient options for proto=fd [ 217.779333][ T339] usb 6-1: device descriptor read/8, error -71 [ 217.797748][ T816] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 217.936249][ T816] usb 7-1: device descriptor read/64, error -71 [ 218.032223][ T339] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 218.049301][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.064541][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.072738][ T339] usb 6-1: device descriptor read/8, error -71 [ 218.097411][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.111655][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.213359][ T816] usb 7-1: device descriptor read/64, error -71 [ 218.226569][ T339] usb 6-1: device descriptor read/8, error -71 [ 218.341548][ T339] usb usb6-port1: unable to enumerate USB device [ 218.469156][ T816] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 218.618402][ T816] usb 7-1: device descriptor read/64, error -71 [ 218.725443][ T3615] overlayfs: workdir and upperdir must be separate subtrees [ 218.758063][ T3619] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 218.784675][ T3622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.793378][ T3622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.874225][ T816] usb 7-1: device descriptor read/64, error -71 [ 218.991564][ T816] usb usb7-port1: attempt power cycle [ 219.012879][ T339] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 219.172637][ T339] usb 2-1: Using ep0 maxpacket: 8 [ 219.179322][ T339] usb 2-1: config 1 interface 0 altsetting 242 bulk endpoint 0x1 has invalid maxpacket 32 [ 219.189795][ T339] usb 2-1: config 1 interface 0 altsetting 242 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.203229][ T339] usb 2-1: config 1 interface 0 has no altsetting 0 [ 219.211760][ T339] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 219.221471][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.229683][ T339] usb 2-1: Product: syz [ 219.233930][ T339] usb 2-1: Manufacturer: syz [ 219.238792][ T339] usb 2-1: SerialNumber: syz [ 219.353854][ T369] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 219.353854][ T816] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 219.387255][ T816] usb 7-1: device descriptor read/8, error -71 [ 219.406716][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.417263][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.462202][ T339] usb 2-1: USB disconnect, device number 105 [ 219.526379][ T369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 219.535187][ T369] usb 6-1: not running at top speed; connect to a high speed hub [ 219.537096][ T816] usb 7-1: device descriptor read/8, error -71 [ 219.544243][ T369] usb 6-1: config 7 has an invalid interface number: 16 but max is 0 [ 219.558902][ T369] usb 6-1: config 7 has no interface number 0 [ 219.567248][ T369] usb 6-1: New USB device found, idVendor=2537, idProduct=1068, bcdDevice=55.95 [ 219.576509][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.585110][ T369] usb 6-1: Product: syz [ 219.589504][ T369] usb 6-1: Manufacturer: syz [ 219.594190][ T369] usb 6-1: SerialNumber: syz [ 219.801607][ T816] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 219.819145][ T369] usb-storage 6-1:7.16: USB Mass Storage device detected [ 219.825374][ T816] usb 7-1: device descriptor read/8, error -71 [ 219.830078][ T369] usb-storage 6-1:7.16: Quirks match for vid 2537 pid 1068: 800000 [ 219.859859][ T369] usb 6-1: USB disconnect, device number 25 [ 219.962544][ T816] usb 7-1: device descriptor read/8, error -71 [ 220.087451][ T816] usb usb7-port1: unable to enumerate USB device [ 220.091582][ T3643] bridge: RTM_NEWNEIGH with invalid ether address [ 220.632873][ T369] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 220.793993][ T369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.805690][ T369] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.815257][ T369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.825076][ T369] usb 6-1: config 0 descriptor?? [ 220.857576][ T3659] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1073'. [ 220.866887][ T3659] tipc: Invalid UDP bearer configuration [ 220.866917][ T3659] tipc: Enabling of bearer rejected, failed to enable media [ 221.009929][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1074'. [ 221.061523][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.070858][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.079786][ T369] usbhid 6-1:0.0: can't add hid device: -71 [ 221.096062][ T369] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 221.108046][ T369] usb 6-1: USB disconnect, device number 26 [ 221.293836][ T45] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 221.442930][ T339] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 221.453721][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 221.460208][ T45] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 221.468819][ T45] usb 7-1: config 4 has no interface number 0 [ 221.475131][ T45] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.486698][ T45] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.496924][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 221.506047][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.518668][ T45] hub 7-1:4.128: USB hub found [ 221.581546][ T339] usb 2-1: device descriptor read/64, error -71 [ 221.651768][ T3686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.660717][ T3686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.837348][ T339] usb 2-1: device descriptor read/64, error -71 [ 221.884409][ T3686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.893154][ T3686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.944080][ T45] hub 7-1:4.128: config failed, can't read hub descriptor (err -22) [ 221.965563][ T45] usb 7-1: USB disconnect, device number 24 [ 222.093108][ T339] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 222.116221][ T3686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1081'. [ 222.191622][ T3700] netlink: 'syz.5.1085': attribute type 4 has an invalid length. [ 222.202873][ T3700] netlink: 'syz.5.1085': attribute type 4 has an invalid length. [ 222.225182][ T3702] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 222.233282][ T3702] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.241149][ T3702] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.250857][ T3702] tipc: Started in network mode [ 222.256827][ T339] usb 2-1: device descriptor read/64, error -71 [ 222.256963][ T3702] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 222.271427][ T3702] tipc: Enabled bearer , priority 2 [ 222.279183][ T3704] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.496218][ T3709] netlink: 'syz.6.1088': attribute type 2 has an invalid length. [ 222.504544][ T3709] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1088'. [ 222.519628][ T339] usb 2-1: device descriptor read/64, error -71 [ 222.551481][ T45] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 222.636813][ T339] usb usb2-port1: attempt power cycle [ 222.671176][ T3711] overlayfs: failed to resolve './bus': -2 [ 222.679424][ T3712] overlayfs: failed to resolve './bus': -2 [ 222.696729][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.705653][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.714143][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.722739][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 222.724920][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.734970][ T45] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.746915][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.753754][ T45] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 222.763718][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.773661][ T45] usb 6-1: config 0 descriptor?? [ 222.779062][ T369] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 222.948087][ T369] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.958409][ T369] usb 7-1: New USB device found, idVendor=046d, idProduct=b305, bcdDevice= 0.00 [ 222.970054][ T369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.981241][ T369] usb 7-1: config 0 descriptor?? [ 222.999157][ T339] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 223.022134][ T339] usb 2-1: device descriptor read/8, error -71 [ 223.160070][ T339] usb 2-1: device descriptor read/8, error -71 [ 223.203147][ T3709] fuse: blksize only supported for fuseblk [ 223.224282][ T45] hid-generic 0003:1E71:2009.0030: collection stack underflow [ 223.231832][ T45] hid-generic 0003:1E71:2009.0030: item 0 2 0 12 parsing failed [ 223.239803][ T45] hid-generic 0003:1E71:2009.0030: probe with driver hid-generic failed with error -22 [ 223.292408][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 223.292428][ T36] audit: type=1400 audit(1771900507.533:30060): avc: denied { create } for pid=3718 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 223.298866][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.331696][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.344250][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.356952][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.369981][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.382455][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.394906][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.407471][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.420806][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.425579][ T339] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 223.442661][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.4.1091 [ 223.467629][ T339] usb 2-1: device descriptor read/8, error -71 [ 223.468260][ T45] tipc: Node number set to 10070698 [ 223.475167][ T369] hid-generic 0003:046D:B305.0031: hidraw0: USB HID v0.00 Device [HID 046d:b305] on usb-dummy_hcd.6-1/input0 [ 223.587426][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.596436][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.629249][ T339] usb 2-1: device descriptor read/8, error -71 [ 223.660928][ T369] usb 7-1: USB disconnect, device number 25 [ 223.745354][ T339] usb usb2-port1: unable to enumerate USB device [ 224.164680][ T3736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.173354][ T3736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.211344][ T3738] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1097'. [ 224.235574][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1098'. [ 224.813756][ T3772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.822600][ T3772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.833882][ T3772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.842460][ T3772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.971081][ T45] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 225.130828][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 225.139559][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.02 [ 225.149650][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.158170][ T45] usb 2-1: Product: syz [ 225.162603][ T45] usb 2-1: Manufacturer: syz [ 225.167448][ T45] usb 2-1: SerialNumber: syz [ 225.174777][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 225.181131][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 225.493255][ T369] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 225.508780][ T45] usb 6-1: USB disconnect, device number 27 [ 225.617052][ T338] r8152-cfgselector 2-1: USB disconnect, device number 110 [ 225.654489][ T369] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.665277][ T369] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.675188][ T369] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.684353][ T369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.692590][ T369] usb 7-1: SerialNumber: syz [ 225.866386][ T45] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 225.914308][ T369] usb 7-1: cannot find UAC_HEADER [ 225.921174][ T369] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.931086][ T369] usb 7-1: USB disconnect, device number 26 [ 225.941865][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.038490][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.046879][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 226.055513][ T45] usb 6-1: config 129 has an invalid interface number: 26 but max is 0 [ 226.063896][ T45] usb 6-1: config 129 has no interface number 0 [ 226.070275][ T45] usb 6-1: config 129 interface 26 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 226.081442][ T45] usb 6-1: config 129 interface 26 has no altsetting 0 [ 226.089908][ T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=20.06 [ 226.099305][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.107423][ T45] usb 6-1: Product: syz [ 226.111677][ T45] usb 6-1: Manufacturer: syz [ 226.116307][ T45] usb 6-1: SerialNumber: syz [ 226.224703][ T36] audit: type=1400 audit(1771900510.282:30061): avc: denied { write } for pid=369 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27910 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 226.427970][ T45] usb 6-1: USB disconnect, device number 28 [ 226.445815][ T3786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.455980][ T3786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.052649][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.061610][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.107383][ T3808] overlayfs: missing 'lowerdir' [ 227.133877][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.142975][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.230607][ T369] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 227.388658][ T36] audit: type=1400 audit(1771900511.370:30062): avc: denied { shutdown } for pid=3813 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.392390][ T369] usb 6-1: config 127 has an invalid interface number: 197 but max is 0 [ 227.417247][ T369] usb 6-1: config 127 has no interface number 0 [ 227.423680][ T369] usb 6-1: config 127 interface 197 altsetting 0 endpoint 0xA has an invalid bInterval 45, changing to 7 [ 227.434971][ T369] usb 6-1: config 127 interface 197 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 227.446213][ T369] usb 6-1: New USB device found, idVendor=0e6f, idProduct=b8e2, bcdDevice=59.b2 [ 227.455552][ T369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.533663][ T3818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1124'. [ 227.868541][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.880521][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.892198][ T369] usb 6-1: string descriptor 0 read error: -71 [ 227.906886][ T369] usb 6-1: USB disconnect, device number 29 [ 228.026982][ T3829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.037836][ T3829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.328465][ T339] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 228.488318][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 228.501401][ T339] usb 2-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 228.515163][ T339] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.534262][ T339] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 228.546758][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.560196][ T339] usb 2-1: config 0 descriptor?? [ 228.565710][ T36] audit: type=1400 audit(1771900512.477:30064): avc: denied { getopt } for pid=3843 comm="syz.6.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.594300][ T36] audit: type=1400 audit(1771900512.477:30063): avc: denied { getopt } for pid=3843 comm="syz.6.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.608358][ T339] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 228.777523][ T3858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1137'. [ 228.852883][ T3861] overlayfs: failed to resolve './file0/file0': -13 [ 228.860598][ T36] audit: type=1400 audit(1771900512.749:30065): avc: denied { shutdown } for pid=3860 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.889406][ T3866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.904221][ T3866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.912983][ T3866] selinux_netlink_send: 35 callbacks suppressed [ 228.913015][ T3866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=3866 comm=syz.4.1139 [ 229.213850][ T338] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 229.374395][ T338] usb 7-1: config 0 has an invalid interface number: 252 but max is 0 [ 229.383070][ T338] usb 7-1: config 0 has no interface number 0 [ 229.389385][ T338] usb 7-1: config 0 interface 252 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 229.400898][ T338] usb 7-1: config 0 interface 252 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.412722][ T338] usb 7-1: New USB device found, idVendor=19d2, idProduct=1277, bcdDevice=93.8a [ 229.422421][ T338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.430948][ T338] usb 7-1: Product: syz [ 229.435165][ T338] usb 7-1: Manufacturer: syz [ 229.440048][ T338] usb 7-1: SerialNumber: syz [ 229.445698][ T338] usb 7-1: config 0 descriptor?? [ 229.478729][ T3871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.487401][ T3871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.666999][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.676114][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.685964][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.697213][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.734904][ T339] usb 7-1: USB disconnect, device number 27 [ 229.754342][ T3880] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 229.754374][ T3880] rust_binder: Read failure Err(EFAULT) in pid:167 [ 229.837083][ T3888] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 229.956205][ T3898] netlink: 'syz.6.1149': attribute type 27 has an invalid length. [ 230.059662][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.083322][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.354542][ T338] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 230.492200][ T338] usb 7-1: device descriptor read/64, error -71 [ 230.748665][ T338] usb 7-1: device descriptor read/64, error -71 [ 230.835774][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'. [ 231.014505][ T338] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 231.149919][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.153165][ T338] usb 7-1: device descriptor read/64, error -71 [ 231.163375][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.184969][ T853] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 231.279659][ T339] usb 2-1: USB disconnect, device number 111 [ 231.346417][ T853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.354726][ T853] usb 6-1: not running at top speed; connect to a high speed hub [ 231.363772][ T853] usb 6-1: config 4 has an invalid interface number: 21 but max is 0 [ 231.372006][ T853] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 231.381173][ T853] usb 6-1: config 4 has an invalid interface number: 215 but max is 0 [ 231.390150][ T853] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 231.399564][ T853] usb 6-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 231.409019][ T853] usb 6-1: config 4 has no interface number 0 [ 231.415236][ T853] usb 6-1: config 4 has no interface number 1 [ 231.421401][ T853] usb 6-1: config 4 interface 21 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 231.430336][ T338] usb 7-1: device descriptor read/64, error -71 [ 231.432797][ T853] usb 6-1: config 4 interface 21 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 231.451708][ T853] usb 6-1: too many endpoints for config 4 interface 215 altsetting 185: 208, using maximum allowed: 30 [ 231.463076][ T853] usb 6-1: config 4 interface 215 altsetting 185 has a duplicate endpoint with address 0xE, skipping [ 231.474380][ T853] usb 6-1: config 4 interface 215 altsetting 185 has an invalid descriptor for endpoint zero, skipping [ 231.485859][ T853] usb 6-1: config 4 interface 215 altsetting 185 has a duplicate endpoint with address 0xD, skipping [ 231.497107][ T853] usb 6-1: config 4 interface 215 altsetting 185 has 6 endpoint descriptors, different from the interface descriptor's value: 208 [ 231.510564][ T853] usb 6-1: config 4 interface 21 has no altsetting 0 [ 231.517450][ T853] usb 6-1: config 4 interface 215 has no altsetting 0 [ 231.526095][ T853] usb 6-1: New USB device found, idVendor=0df6, idProduct=006e, bcdDevice=ac.36 [ 231.535570][ T853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.544426][ T853] usb 6-1: Product: syz [ 231.548799][ T853] usb 6-1: Manufacturer: syz [ 231.553824][ T853] usb 6-1: SerialNumber: syz [ 231.558685][ T338] usb usb7-port1: attempt power cycle [ 231.564439][ T3921] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 231.795746][ T853] usb 6-1: USB disconnect, device number 30 [ 231.892101][ T36] audit: type=1400 audit(1771900515.601:30066): avc: denied { watch watch_reads } for pid=3945 comm="syz.4.1164" path="/355/file0" dev="tmpfs" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.931154][ T338] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 231.953881][ T338] usb 7-1: device descriptor read/8, error -71 [ 232.092244][ T338] usb 7-1: device descriptor read/8, error -71 [ 232.101655][ T339] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 232.262665][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.272861][ T339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.282477][ T339] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.291598][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.299768][ T339] usb 2-1: SerialNumber: syz [ 232.346840][ T338] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 232.390451][ T338] usb 7-1: device descriptor read/8, error -71 [ 232.523015][ T339] usb 2-1: 0:2 : does not exist [ 232.529244][ T338] usb 7-1: device descriptor read/8, error -71 [ 232.533184][ T339] usb 2-1: USB disconnect, device number 112 [ 232.549850][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 232.645347][ T338] usb usb7-port1: unable to enumerate USB device [ 232.730573][ T355] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 232.869051][ T355] usb 6-1: device descriptor read/64, error -71 [ 233.105012][ T3963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.113617][ T3963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.124926][ T355] usb 6-1: device descriptor read/64, error -71 [ 233.359341][ T339] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 233.380658][ T355] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 233.412466][ T3968] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1172'. [ 233.497940][ T339] usb 2-1: device descriptor read/64, error -71 [ 233.519230][ T355] usb 6-1: device descriptor read/64, error -71 [ 233.753761][ T339] usb 2-1: device descriptor read/64, error -71 [ 233.773621][ T3979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.776821][ T355] usb 6-1: device descriptor read/64, error -71 [ 233.783033][ T3979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.817721][ T338] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 233.903072][ T355] usb usb6-port1: attempt power cycle [ 233.979241][ T338] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.990964][ T338] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.006289][ T338] usb 7-1: config 0 interface 0 has no altsetting 0 [ 234.014216][ T338] usb 7-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 234.020500][ T339] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 234.025475][ T338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.049352][ T338] usb 7-1: config 0 descriptor?? [ 234.169840][ T339] usb 2-1: device descriptor read/64, error -71 [ 234.265483][ T355] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 234.276334][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.285624][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.296286][ T355] usb 6-1: device descriptor read/8, error -71 [ 234.418930][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.428898][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.437433][ T339] usb 2-1: device descriptor read/64, error -71 [ 234.438512][ T355] usb 6-1: device descriptor read/8, error -71 [ 234.497829][ T338] lenovo 0003:17EF:6009.0032: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.6-1/input0 [ 234.553389][ T339] usb usb2-port1: attempt power cycle [ 234.702368][ T355] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 234.725319][ T853] usb 7-1: USB disconnect, device number 32 [ 234.728314][ T355] usb 6-1: device descriptor read/8, error -71 [ 234.874094][ T355] usb 6-1: device descriptor read/8, error -71 [ 234.915516][ T339] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 234.937972][ T339] usb 2-1: device descriptor read/8, error -71 [ 234.990249][ T355] usb usb6-port1: unable to enumerate USB device [ 235.026096][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.036912][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.076665][ T339] usb 2-1: device descriptor read/8, error -71 [ 235.331266][ T339] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 235.364362][ T339] usb 2-1: device descriptor read/8, error -71 [ 235.502839][ T339] usb 2-1: device descriptor read/8, error -71 [ 235.619654][ T339] usb usb2-port1: unable to enumerate USB device [ 235.821504][ T355] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 235.993725][ T355] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.005605][ T355] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.015894][ T355] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.025607][ T355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.033905][ T355] usb 7-1: SerialNumber: syz [ 236.077383][ T339] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 236.247887][ T339] usb 6-1: Using ep0 maxpacket: 16 [ 236.258423][ T339] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 236.259355][ T355] usb 7-1: 0:2 : does not exist [ 236.269059][ T339] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.285367][ T339] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.293409][ T355] usb 7-1: USB disconnect, device number 33 [ 236.296200][ T339] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.321825][ T1613] udevd[1613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.326933][ T339] usb 6-1: config 7 interface 0 has no altsetting 0 [ 236.345702][ T339] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 236.358857][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.548574][ T4017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.557272][ T4017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.749086][ T369] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 236.820183][ T339] hid (null): invalid report_size 20000 [ 236.826436][ T339] hid (null): unknown global tag 0xc [ 236.832858][ T339] hid (null): unknown global tag 0xd [ 236.843076][ T339] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0033/input/input43 [ 236.861481][ T339] kye 0003:0458:5010.0033: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 236.887395][ T369] usb 2-1: device descriptor read/64, error -71 [ 237.094236][ T355] usb 6-1: USB disconnect, device number 35 [ 237.143197][ T369] usb 2-1: device descriptor read/64, error -71 [ 237.160544][ T4038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.169355][ T4038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.178863][ T36] audit: type=1400 audit(1771900520.564:30067): avc: denied { nlmsg_read } for pid=4037 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.199685][ T36] audit: type=1400 audit(1771900520.574:30068): avc: denied { read } for pid=4037 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.399008][ T369] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 237.537550][ T369] usb 2-1: device descriptor read/64, error -71 [ 237.764211][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.772825][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.793366][ T369] usb 2-1: device descriptor read/64, error -71 [ 237.807063][ T4047] syzkaller1: entered promiscuous mode [ 237.812865][ T4047] syzkaller1: entered allmulticast mode [ 237.849284][ T4056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1202'. [ 237.911491][ T369] usb usb2-port1: attempt power cycle [ 237.991464][ T4065] Unsupported ieee802154 address type: 0 [ 238.145164][ T355] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 238.273006][ T369] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 238.295483][ T369] usb 2-1: device descriptor read/8, error -71 [ 238.305022][ T355] usb 6-1: Using ep0 maxpacket: 16 [ 238.311920][ T355] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 238.320438][ T355] usb 6-1: config 0 has no interface number 0 [ 238.326693][ T355] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 238.336681][ T355] usb 6-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 65344, setting to 1024 [ 238.348179][ T355] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 238.360037][ T355] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 238.369202][ T355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.377252][ T355] usb 6-1: Product: syz [ 238.381504][ T355] usb 6-1: Manufacturer: syz [ 238.386260][ T355] usb 6-1: SerialNumber: syz [ 238.391730][ T355] usb 6-1: config 0 descriptor?? [ 238.397268][ T4060] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.404630][ T4060] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.444775][ T369] usb 2-1: device descriptor read/8, error -71 [ 238.487724][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.496486][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.627018][ T4060] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.634341][ T4060] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 238.699494][ T369] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 238.722116][ T369] usb 2-1: device descriptor read/8, error -71 [ 238.860499][ T369] usb 2-1: device descriptor read/8, error -71 [ 238.976930][ T369] usb usb2-port1: unable to enumerate USB device [ 239.053496][ T4075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.062220][ T4075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.071234][ T4075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.080041][ T4075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.297685][ T355] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 239.309661][ T355] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 239.320404][ T355] asix 6-1:0.251: probe with driver asix failed with error -71 [ 239.329279][ T355] usb 6-1: USB disconnect, device number 36 [ 239.602598][ T4078] vlan0: mtu less than device minimum [ 239.645347][ T4082] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1213'. [ 239.674525][ T4084] syz.1.1212: attempt to access beyond end of device [ 239.674525][ T4084] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 239.687689][ T4084] EXT4-fs (loop1): unable to read superblock [ 239.750674][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.759381][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.095724][ T853] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 240.256880][ T853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.267850][ T853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.277673][ T853] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 240.286744][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.295673][ T853] usb 6-1: config 0 descriptor?? [ 240.338753][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.347493][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.517012][ T853] arvo 0003:1E7D:30D4.0034: item fetching failed at offset 5/7 [ 240.525040][ T853] arvo 0003:1E7D:30D4.0034: parse failed [ 240.537167][ T853] arvo 0003:1E7D:30D4.0034: probe with driver arvo failed with error -22 [ 240.703255][ T4103] ------------[ cut here ]------------ [ 240.708841][ T4103] WARNING: CPU: 0 PID: 4103 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 240.719019][ T4103] Modules linked in: [ 240.723592][ T4103] CPU: 0 UID: 0 PID: 4103 Comm: syz.1.1221 Not tainted syzkaller #0 ec67a0b9c3f9090985a335a00964337a606b4ed6 [ 240.730399][ T355] usb 6-1: USB disconnect, device number 37 [ 240.735568][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.753065][ T4103] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 240.759466][ T4103] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ea aa 0b 06 00 0f 85 c2 00 00 00 c6 05 dd aa 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 240.779429][ T4103] RSP: 0018:ffffc90007f77860 EFLAGS: 00010246 [ 240.785681][ T4103] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 240.793797][ T4103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90007f77918 [ 240.801965][ T4103] RBP: ffffc90007f77988 R08: ffffc90007f77917 R09: 0000000000000000 [ 240.810325][ T4103] R10: ffffc90007f77900 R11: fffff52000feef23 R12: ffffc90007f778a0 [ 240.818450][ T4103] R13: dffffc0000000000 R14: 1ffff92000feef10 R15: 0000000000000000 [ 240.826858][ T4103] FS: 00007ff7e35006c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 240.836245][ T4103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.843099][ T4103] CR2: 0000200000001000 CR3: 000000012f8b8000 CR4: 00000000003526b0 [ 240.851145][ T4103] Call Trace: [ 240.854608][ T4103] [ 240.857602][ T4103] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.863831][ T4103] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 240.869711][ T4103] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 240.875477][ T4103] ___kmalloc_large_node+0x81/0x210 [ 240.880755][ T4103] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 240.886511][ T4103] __kmalloc_large_node_noprof+0x1e/0xd0 [ 240.892219][ T4103] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 240.898111][ T4103] __kmalloc_noprof+0x326/0x500 [ 240.903128][ T4103] ? __cfi_lockref_get+0x10/0x10 [ 240.908185][ T4103] incfs_realloc_mount_info+0xa7/0x4d0 [ 240.913721][ T4103] ? incfs_add_sysfs_node+0x118/0x230 [ 240.919235][ T4103] incfs_alloc_mount_info+0x478/0x5f0 [ 240.924700][ T4103] incfs_mount_fs+0x3ca/0x970 [ 240.929796][ T4103] ? __cfi_incfs_mount_fs+0x10/0x10 [ 240.935073][ T4103] ? vfs_parse_fs_string+0x10f/0x180 [ 240.940500][ T4103] ? selinux_capable+0x38/0x50 [ 240.945338][ T4103] legacy_get_tree+0x106/0x1b0 [ 240.950348][ T4103] ? __cfi_incfs_mount_fs+0x10/0x10 [ 240.955805][ T4103] vfs_get_tree+0x9e/0x290 [ 240.960616][ T4103] do_new_mount+0x251/0xb30 [ 240.965199][ T4103] ? security_capable+0x44/0x130 [ 240.970258][ T4103] path_mount+0x682/0x1010 [ 240.974776][ T4103] __se_sys_mount+0x2bf/0x480 [ 240.979542][ T4103] ? __x64_sys_mount+0xf0/0xf0 [ 240.984579][ T4103] ? __kasan_check_write+0x18/0x20 [ 240.989773][ T4103] ? fpregs_restore_userregs+0x11c/0x260 [ 240.995969][ T4103] __x64_sys_mount+0xc3/0xf0 [ 241.001459][ T4103] x64_sys_call+0x2021/0x2ee0 [ 241.006634][ T4103] do_syscall_64+0x57/0xf0 [ 241.012961][ T4103] ? clear_bhb_loop+0x50/0xa0 [ 241.018447][ T4103] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.024651][ T4103] RIP: 0033:0x7ff7e259c629 [ 241.030164][ T4103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.052071][ T4103] RSP: 002b:00007ff7e3500028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.061140][ T4103] RAX: ffffffffffffffda RBX: 00007ff7e2815fa0 RCX: 00007ff7e259c629 [ 241.069473][ T4103] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 241.077534][ T4103] RBP: 00007ff7e2632b39 R08: 0000200000000580 R09: 0000000000000000 [ 241.085639][ T4103] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 241.093692][ T4103] R13: 00007ff7e2816038 R14: 00007ff7e2815fa0 R15: 00007ffe9d8fbbc8 [ 241.101893][ T4103] [ 241.104947][ T4103] ---[ end trace 0000000000000000 ]--- [ 241.110552][ T4103] incfs: Error allocating mount info. -12 [ 241.116386][ T4103] incfs: mount failed -12 [ 242.677485][ T12] bridge_slave_1: left allmulticast mode [ 242.683223][ T12] bridge_slave_1: left promiscuous mode [ 242.688935][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.696948][ T12] bridge_slave_0: left allmulticast mode [ 242.702639][ T12] bridge_slave_0: left promiscuous mode [ 242.708560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state