last executing test programs: 6m40.021205592s ago: executing program 32 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x101011, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) unshare(0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = userfaultfd(0x40801) (async) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x119) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async) syz_clone(0x8800311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x69a, 0x4, 0x6, 0x5, 0x7, 0x1, 0x12, 0x5, 0x1, [0x5, 0x9, 0x1, 0x39, 0x7fb, 0x6, 0x6, 0x3], [0x6c, 0xc21, 0x2, 0xfff, 0x7ff, 0xdd, 0x10001]}}) io_setup(0x5, &(0x7f0000000180)=0x0) (async) r7 = inotify_init() io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r7, 0x0}]) (async) io_cancel(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000240)="307d33c52ba068f45f9711e3a20b9f32a89fd5d0ee72f725e17b5d6a72ecb0193a33ebeea317887b9bba2c8a3eeb32e63ce4deb692df697ebdc8e2868e006867f6e87075b5144cea7fc18f318457", 0x4e, 0x3ff, 0x0, 0x3e1f579b53359c5e, r5}, &(0x7f0000000340)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 6m26.0804789s ago: executing program 0 (id=982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) readahead(0xffffffffffffffff, 0xf, 0x3) 6m25.896704795s ago: executing program 0 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x288, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x138, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x39, 0x5, "991ba5d9cb72af53d690156827aa7fea9216b5ac2ff8be075f4ccd01ab438b3b438eae0022b1cdb9f4e623f40ff19952dca6a3cd78"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "b3b50fd21d8fa3a822fc196e3566f9ade35897c12197b373f14cb1083531f20d96a6d4b10954341db54ee8e26870c5d9575603a89b679b3fa26dec9e802886e04c9a3133695fdf6cfce3500cb2e7c367d1ee43d0beefba534d6f6049dba62303ee1022c5e09f8eb12b8d2df69186389b4f4ea12f9e791852abca8ef5ee233eb58dde606cd8c10e1f811eebeeeaf5db5107d06f528103bad0551362f59497d8a69af0255e4c0fed796a14583c9403c631f7938ba94c58b858bf056753abfa16a2324aff4ff959e070a2d879f69ebd1b2a0b6fa021"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x96e}]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-${\'!/\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x288}}, 0x0) 6m25.896478345s ago: executing program 0 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0xf6ff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m25.896413035s ago: executing program 0 (id=989): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x4000000, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) 6m25.863984186s ago: executing program 0 (id=991): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000010341a020800000000000109022400010000704009040510fa03000600092101002669b59c15520800000000000000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)={0x40, 0x5, 0x28, {0x28, 0x21, "a712cba5e009cb7ac46b9f82053cfd1afd4b32010fe1e46f43e1034815bf6f2193c26a94fa56"}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x5, 0x9, 0xf2, 0xe7, 0x9}}}, 0x0) 6m22.932347361s ago: executing program 0 (id=1011): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000240)=0x7f) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10008, 0x0) 6m22.856045393s ago: executing program 33 (id=1011): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000240)=0x7f) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10008, 0x0) 4m58.451639759s ago: executing program 4 (id=1571): setuid(0xee00) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc337, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x61, 0x3, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x1, 0xe5, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x1, 0x1, 0x1, 0xc0, 0xdb, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "ef09c56d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xdd9, 0x11}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xf4, 0x0, 0xb}, @obex={0x5}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x22}, @mdlm_detail={0x1b, 0x24, 0x13, 0xd9, "bba2e44a0a8b8852726ccefb550583da0cb49fdcdcd35e"}, @mdlm_detail={0x58, 0x24, 0x13, 0x0, "e0c3831cf8cf20b834edad32e859c0d1c791389f8c4a56359cd0237c0d093856f9179136223cbcb8ff021ba70fd27af8dc888a7c13ba12679faf4c8619ffd849b7bf4798c8271ae0a65064c5a14dd7fbcb6682ec"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x9, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x8, 0xc5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xf, 0xe, 0xf, 0x20, 0x3}, 0x66, &(0x7f00000001c0)={0x5, 0xf, 0x66, 0x6, [@generic={0x14, 0x10, 0x9, "f178111910679c77e821ffac9ce0037f61"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x0, 0xf0f, 0xc61, [0x0]}, @ssp_cap={0x18, 0x10, 0xa, 0x11, 0x3, 0x6, 0xf, 0x101, [0xc000, 0xc030, 0x426a259d4425cb2b]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7e, 0xf8, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "6548b29b50a600015450570360829e1d"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0x7}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x413}}, {0x8a, &(0x7f0000000280)=@string={0x8a, 0x3, "6ed59a3bf972bf7f94f032015acc2c42a2f4740596ab3f6ac191aa6570c48c25711f85961dc1966f9139465309b15a55d4aac5de4d44d500e7aca66fffa2c80d99b67a0bd0c8de73ab13687016fd21ffb85417ce74af26fc8aa04cf0f788e48dfa11f87e42a55c179fd21bf16ab3bf72e7612f8e627fbc8aa72ffe3b86b64399773b1fdf70a7c36d"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x7, 0xb0, {0xb0, 0x21, "e1a7587af7a4e44b38c870c724c2308bf334f656a4c10416bca36db6a7e92ff328b44cc1ba84c2c70787c2c0a8cd62f0af0e808025d213c830b2de165b032cf6a5e6b5fa08162b23251a7a2c88468d4cab86f3d483ffab2795c09f2ff4edde3abb863a52532971d3e2bbb5d5939a2f13ffaf2a70a9f0506dade4f3b9ba5848bb0b13a8ab30f2e3efcb70d0fc2e2b024ef4ad700a29f25a4a5422c7a43c2f95ac6bd7dc8d8b6a409c5f2d72ff8359"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x40, 0x3, 0x1d, "4613c884bbc2055d24d3a547fb8c07b5cf208e1e7b63379e3709cf0ec5"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2a}}) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' !)'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m57.900707254s ago: executing program 4 (id=1575): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdn:Dd', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 4m57.810949976s ago: executing program 4 (id=1576): futex_waitv(&(0x7f00000000c0)=[{0x1, &(0x7f0000000080), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', r7, 0x8000, 0x1, 0x587, 0x4, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x8, 0x0}, {[@generic={0x7, 0xd, "682372e3949b37a3df993a"}, @timestamp={0x44, 0x20, 0xc6, 0x0, 0xc, [0x101, 0xc00, 0x1, 0x0, 0xe, 0x7, 0xffff7fff]}, @timestamp_addr={0x44, 0x44, 0xbf, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@loopback, 0x164000}, {@multicast1, 0x2}, {@private=0xa010100, 0x3}, {@multicast1, 0x3}, {@private=0xa010101, 0x6ac2}, {@empty, 0xc}]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0xe, [{@multicast2, 0x86d}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc1}, {@multicast2, 0x2}, {@rand_addr=0x64010101, 0xcb4}]}, @noop, @generic={0x7, 0x9, "f462f57de9e75f"}, @end]}}}}}) (async) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x181003) getsockopt$packet_int(r8, 0x107, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@remote}, {@dev}, {@loopback}, {@initdev}]}}) (async) ppoll(&(0x7f00000001c0)=[{r2, 0x2205}, {r4, 0x81}, {r5, 0x24e5}, {r8, 0x8000}], 0x4, &(0x7f0000000200), &(0x7f0000000240)={[0x7ff]}, 0x8) (async) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 4m57.607720721s ago: executing program 4 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0100001000130702000000fcdbdf25fe8000000000000000000000000000bb200100000000000000000000000000014e2000004e2106820a0020006c0000004e57083b8e96321b5f1246a4ddc5ee0660391bc3f8254b52e88bb56f6cbf18848537de9c00afdf30b1748fba110c6fe17a077c3c2c35c5fce53c0b2b2d9d01a21d8ba6e826f81536ca76211c3fb282e3200476f59f37d133881902238f87be7386cbd82541d0ce9992794d12a11d343b4ba42ea89c3f82965c3b3da389354ee7f87822a3ca825068b90e324612", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}}, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) recvmsg$can_raw(r0, &(0x7f00000018c0)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/232, 0xe8}, {&(0x7f0000001800)=""/55, 0x37}], 0x5}, 0x2) 4m56.719749364s ago: executing program 4 (id=1580): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000001cb, 0x12) 4m56.656783976s ago: executing program 4 (id=1581): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m56.503791719s ago: executing program 34 (id=1581): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m44.083678139s ago: executing program 5 (id=1657): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r0, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x2e, 0xd}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 4m43.943652462s ago: executing program 5 (id=1660): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_ublk_setup_queues(r0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001780)={0x2e, 0x4, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0xc3b, 0x0, &(0x7f0000000780)=@buf_4k="157c8b26ec7f2d689291eac52a96e4c80f1e8c7f85026693e044d8cabb86ebe950d11808bf18c3f954f13584c83d174c1695d756d876eeb8f576aa2648c2e5e2d98cfacf4522f6b497a12a488d9f1a997b36c16a606da40198aa86292830d685dd943000ac69843e9b502afdab154938f21fd1b4e9363690671bd3b5f30255791041145536be27ee75641b78b27b18e1c49290dd964e1661a481030e138c5e9dcd773e9d9b28548364c42d799210f2c1abcaf0ddc7e3665874d8558dfb0e07d64f9fbc3088e3dc05356d5ae64798fe5672988468aafb237ce63c2eecb93dd35c3f2adc63ccbb4dadc51b9547504d95bdb2a40d48840085d1fe8448097249f90c3ba4c2e32ea5c3276afc5c271179b6c3cfce59cbbec4ccfd34ccc5783b2e18c0192d0de13cb19eea6142399849e7e6bb38f41dbd122b9535ab72278de0e59aad1c75ab407a85b0eff0525229724811034e578523fe9673bf943c6899a4c19b584f63ca8fbacb78ec792a934a9f4c571689be9a61da775fe10b06a3a9c9548e21b89d81a7d4bd321b508f3e535cbb05fc794da9cae4ae7a1fb970160b7580645b06452475778f040148234f77438d4e1ee7627f9798acc076fe9ca15a45fc9c15dae99737153b463c766bf3b565e7e1286571838bb0669bcb66beec13a669c1cb8c16b03086ccbe319338ca6e9a7bc059d0a180a3e7373d13cc6a2be16e94b10ddee6708bb92f05dcfa20a2a332a81a8b67881b0757a8507d145c4c302856660755fd5eebd0c865a30efc5da170192e0b80eeca69ac8529eb47d120f24d11dde21aea2bb8119c9e0932e06b07430e4329544e9104fcd2212a4f258475e5a7ec2780d97e72a22bfe06507e0292308889aa77dce24f91215f583151f54fd08a36a8e7a2c65a799e70b4d3408a6be6e0a0a5b78ff45a1dc2752791fab58615419ede89741deeecda6311c0e4b8a4aa9019e091c8af84e21b909cacce4c77a819122bb318622c001deb5cc629994d6f8f348f35ac9e806e4ccbae584a20e7b7bb60f26a7ac6ba4ad855102f82379e8ebf4b865e1cf4467e9d2d63b39746defbf8198ed10e3f1bcb3cbaa1d8f9e4bdf260565cd8cec3386e208879b44fae9db2397e692a24b9a3eb33ae86ea6f4394c926acd99fda6609e7f3444bdf3de817df44766e355c529725f933ef07dd18713fe2ce8f862832b0b9966e9c8e7beade513d1b7ece1632c0a9bff98b26ab4c96ef9c6bbcf6daa53d366e2933d216f73ec04949a3d885be1e01300bc09b6aea3e36b7466f9c0560d9850ed31c26face6b51818ebc1b62d06edfcdb16679e42427cf2745ec360f971c84609af74e287d5d6546e869435b576a505a0809c73f18ecc3002f9ce94e793da360fff6626ad263a1feb0ed2cb753723da0671b3d969d7ca2bdb8d93f1344ab68c5f70e81468dac1ff31a52cb83916bd5829f7686020f8a6c491700f051a6d8c88cb2b93e7a542aba8f7630466f06d973b45cfee5a80413859362e3dbadb0690a86fe1445d682eafe8af239f04f0aedd5a625d884aaab8392a09d460fb5ff3ace630cff5932bf8605f0f0ac76f7b3ecdfbe7268bd301f1d876bc88307e91e8968fa3d0ee873dc75ec55a3c1b955c676059b11382f30b86757ef54c992a3ef6aa32a1c5391bc5c374f1399605ac8bd7176241805fd9202117994aae20bad66cc4001f7008bfe590acfbb4ec6c5b58139488366ea7650bbaee5eff0604525aae98bafb3395bbc8fe977faa9173eb0a8f3db1414d237edd6b94341a4677c20117134b3c8f816f21db2be409b414d5d023086cbd6b8f339ea383c39d3ab1b7a077487661f4b44d379b7a47e75cb18537da6f5b3e979e2d8c7c4b9ef1eabdde4ef74253f63b549058fbccfe585cc5ea267fa4160972e977c7511a94a115055e495898a0309d870cb89a77cac2e6e554ed1cb768904e5f93ef0b1e75b4dc87b392f220c683827b86bced15605d5f3a7c08d09bd1681277d2c07a59b992e429b205ead694ae7f076174798abcd5d8a25e43a1463d6192331aa2d9c1a1da320888d787608e4c1a681e771534f951378f93e6d108c3a8c1eacd89548a63a7745a06bf2b7a872b639016d8e7cf72e92c9e50343ac19976f4fa445fac5a0bd6a451c9e892e02ae303bcd0558273ad1febfca4c8ff13ee61942dc3b1aecda032cd250e57a869120c224e17197507e25a2160773e458cf8f70e68b5dc03db8d41a5e1a92902106f4aa4ce3b53b68c269dc4b6231572d158c5ba04be682317987bfc5e0a24dd0c0396f187525299405c49ddcd3e7506b0b297990db7f55f5f094ac1fc0fb269a582842435f4d68aa405d8c94378213a3d769671dd0bd7f5365b9e9b0a1582a9890bb2bc6fe001706308dd21e91a60d33548e236b9b219bda3949146c40251f097770d67356f031328d0aca19183c7958357b4c7fd7a004f8be18181a6217c8d60bc9487591884d819d49fb319a67e1f853b9aae569bad4e56b4bf8246cd46ee7d636ea010b017d4ad9391ec40dda1000531bb42dcdcf17d2bce5b4096c3119cff236e7a5403645e9a829c9f287d11ec20af70b39759c1f7c3f6f85e83cb25c700882c9cba21a46373861eb580fc3856c351bc6e139b96f7faa67d1596c74a28be1dd8571936999417215c80d23e2d3d39c96f16251605e65cdd870b856db5cd8d12b74bd645537fa73665fc5723ea21b4d41a2251b271121995f086a7827f638e23a1eb0235f7a4e39ea86475209536cf827eac3437411c05041de2803272f98365d67933724c9178668b869bb11f195927c56cfb246a1188edbd24553475e85c06ea205eba6715bfe940bc0dbef2185ec8df1c5a2992de81bcc8b9751f8154b433baa20fdb05380b3c8d51d09a6e8d2bef05a1bab389e97687c5aa751865118e414c236143f236668cf5ead48da41a60a7f54937dd57eeb241f6e6a5e7a89c635c0300da6031816abd2386bec7f5e760778d26e109ddfe7f5a2a708f799f1871b655693e692e1a951a8269ba5fb65e172fa1f62adad5673449ee718f29d6964f45fbbd2d3e8b0dd8b70ef772b3b342b674111ff1b2492efce8dc47957035fa910f88d85db568fd48b76ab6b9bcf550bc53dda6a97a691f4d6f9b066eaa0d913a5673f5fe86c081784ee1db11053933ac1b0ee42128d19b9ab32877865e1ab49bed5bfb61d1bf1e2761a6f0ac766eb35ee278c72c26afad615e844ad190687b1411854f0c5b99f5e76edea1d3d5e2b69da66a74542988b8cc9c735154329b060439464b00cdd6b2ba2329672e4cade8693319399d61938e27f81e9c0c510b04d7052f5e61cca571b34205008d23f72dd80dfa69ac77be98462a3f6a43f5a6735acf17add708de7b9211466b4e2079945a2d0922463fd659d8f05b293ccbfcb581859a06098f297fe9d0e916fea1160735cff98306ff265f04c11582b2a88ab3dae310cb41a625ccb51bae6d33ddc6f94c4d6d9c73f4ad63a3b5ccf18df3e5b36e94baf6ed330e703099e07d449bd7375aa96c991c046d2d6eff4a7748d6c2b6465366e52974a878c1f0af8fab607fdf98b60fadbdd2f3c8b427f84e832be9fce6f0dd8b0d23cb934c19b3097b66c727fd82bdb9764d77af09f5516ed456cf662c741f9de6a0baf11f48131f12734be42dc996416f7aef6f9077577e9ba42509ef436367e40487436768a41c4b0e6959dda6218977f4ab372e7c0b7a200e78bb5182b00a34b1afb9d4d38c1004b282d2526060d26160e254f367bbbb73b331f7d596506a7648764cd6cedb3fb6d0e66d5d76ced1d3517ddbc1d0b79efe973d896348d0c3e34880911c2847c45ab88feb2b580a01d51f949526df8c2dd6c2f648bfa1b6ac05a21f427e362f875134520ce3108ae5c1b2aa42ca2f1b7fa72b22268d465699c7a70245d46df6cd2afc19893a6773689772a39561ae4844ffd15b10df118e6d5326c04c801eeea20b887ca650c4a776f5664308f2e72011a37908018e7178bc3046defffdfbd072641d8a7b813b5840c6b83c55b447cfa97d3d37e7d179b4f8131e9916c14767f3f50a5783ec680a9f9e93a1f891fba385bca3898d7b52e52dd511fa82a60d2ddf5012c50651bbf71423cd6a7c565834e0429fb8870ba8ab71903813ac781cced9f8219bab3afedfeddc09c69e34e56ad780b1e5bd628cc530ae78d3312dc6e134b2f5c505875da27d4ba1e0c6bb4b929bc9f12beaaa42f5e10ab39b36a66d3ada5e50674075b8d40cebec0be832c95f5c434df9d3827d168474fb328413b3361a10bd3257e676d96d88fdf61706f9f0a965b5afe47c5b32b50ebd4f58a1000b8c22c6daa76e4cbe0262008a64025d006ca5e14beb3b1bbb84ba03e673a2e35464bd7ab052aafb0a94b0ad644def3863194936d3d0def81081c56f310e5663c76b09fd0cc09de12762cb06e74d3eb995fb2fef073e84b9e317b36a36fe1254f51eec73db8700390c5b7b5cb10487f76c02262f88f18a7159edb4eece79b4797747639e83d650a1ea0aec7f97b413cf9b6a8e2d2b8afe9e66b3f2635d3df6e901b5e5fa1bc35384064d3549b001bd294111433ba126983757e72eeb6bb5aa475b974e4cc38e4b1b155741ed189e9e5228be8d90583cd6c6234a455238d2b70e09063d39bb574a415ee9e5e2c6f464db5234a15e369590b74abcb6098f023f5ebe4b51f590db4c865d17d4a35266283d3de25f191f8a4924f8c3a47142f89a21e451a0f7fe2efbc5f18d475446b0a2ce52fb8fdfa13da8f184d23bc2e348abe6059e0562b01e384260b804690492acaea8b73c650debe22c4e8a899b43776c2d6b9173ac8557f32c30e87e067339d542769887e47559f888f54ca24a4caef05869d02fb09b1a3cd2c21095f13472c18412e4749b8665500599fd298596590b8bc39074d5a117f3092df557a46bff299a6ebe696f77871648b1eb5f3fdc560edb089124184202d28f5b8ba48957b21ddf27ae36f6d3df26e68cb59f658980ab6d3c20e0194b833ba6b3ff541be06dc811e589c822e71dd41f81fd62c913f4bb5610152a7663cde34324865e96d03a5dc1ea784c8de03b1e426767cb6fe9f8d363079c32b65995431d21d4afb06975c1f98e27af9acb709c125a667879e86a73e8d873b8b23787a4726f1dc031d9fa32ac8f7b43b5573c696b077f7543c1b5a2b82acb8e170c7c38a02ea08b140f45c46c8a0182bf87c073beb0eaec647a162d29a7241338471044f31da5ea06883be76361b30703817a025d54878fd6ff9ad688ef1cd1815c14468778650410c2c5129176e38f7c1425d1e610e16f8e927e541eb95b3234e677c022a42d481044545d7aed2eb0ad19cc743c6d007a73031c2b85268b4ccadd247100f179352729ad5046c7ba4e0ba43a11926aa652b149d756d9c7cb73e3e64aa1da6cb74712cac11dfc675340db9cfc054b2a4371ba5c7a81b96928c5100c2b4633a9b944d3fe785afc21853c9af3205b66677736d8931073cb0fcb515ae215b1fafc40594f6e4d35c61d89c1ff47c84eff3f15274f441948f0f7e170d480a3b2c672dc22c7b9f9e2d09a89e49d9155913163d321ce0ca977a8ce2b0970de7396754bf84f23252ce4702536f3b475f011d9d55978dd5f3411fcf17725c711b9cc730568f08469ac398f402b81ef7d4e409502020057883ef27e32ea8014d4175202ce9ee7d2c867b0cab7414fb79edf00b56f466784bf34acb74b0cef5bb746af365d02f1aee5c4a04e799b16c3202d3a1b0e2afecb70252913e74c9"}}, 0x0) ioctl(r0, 0x400c4d01, &(0x7f0000000900)) 4m43.587692921s ago: executing program 5 (id=1663): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdn:Dd', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 4m43.552995382s ago: executing program 5 (id=1664): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0xc, 0x6, @broadcast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) 4m43.271209269s ago: executing program 5 (id=1665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9800000c00f32350112000000ed0f35457b64c744240083000000c744240200000100ff2c240f22510f20c035000000400f22c02e64260f299229000000b9800000c00f32c4621129e70f303e0fc7ae448f0000", 0x54}], 0x1, 0x43, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000080)="a4c2", 0x2, 0x91, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m43.175583362s ago: executing program 5 (id=1666): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000380)={'system_u:object_r:insmod_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xf7}, 0x47) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x20, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0xa99, 0x0, 0x0, 0x1000, 0x1da3, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000580)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m43.124857893s ago: executing program 35 (id=1666): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000380)={'system_u:object_r:insmod_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xf7}, 0x47) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x20, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0xa99, 0x0, 0x0, 0x1000, 0x1da3, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000580)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m51.843908209s ago: executing program 1 (id=2057): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x20000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m51.716216922s ago: executing program 1 (id=2060): r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c80)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000000)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3, 0x63f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff9cef}}) 3m50.437133085s ago: executing program 1 (id=2067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f0000000100)={0x0, 0xffff, 0x70, &(0x7f0000000080)={0x70}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0x0, 0x7f}]}) 3m50.27174674s ago: executing program 1 (id=2068): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom(r2, &(0x7f0000000100)=""/10, 0xa, 0x63, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 3m50.2682668s ago: executing program 1 (id=2069): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[], 0x30}, 0x44854) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x18400, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xc) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r3, 0x186a0, 0x0) lseek(r3, 0x249f0, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000240)="75bb9cd895bf66219c2dfd1a5086d26a7584cf6108f28eaa301093e0cbb34d2f556152ec0372eee6d6b223ac087734cd8ca6b6c59305a9fb608a986746338dbe6eeb12dc8f7ad04028d0a51c405e19359df6d02cf3d7fb382cba7bfc98f0c150") r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x8000000000358, 0xa130) r5 = eventfd2(0x8001, 0x80001) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) read$eventfd(r5, &(0x7f00000000c0), 0x8) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) 3m50.197949841s ago: executing program 1 (id=2070): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000000000/0x800000)=nil, 0x800000}}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x104) 3m35.160612828s ago: executing program 36 (id=2070): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000000000/0x800000)=nil, 0x800000}}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x104) 2m36.755692277s ago: executing program 8 (id=2691): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x28300) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x100, 0xcf2b, 0x1000, 0x1, 0x6}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m36.147719782s ago: executing program 8 (id=2697): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) writev(r4, &(0x7f0000004380)=[{&(0x7f0000004180)="30a4", 0x2}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f00000001c0)='[,\x00', 0x68841, &(0x7f0000000200)={@_ha_fsid={[0xfffffff0, 0x9]}, {0x2, 0x3, 0x0, 0xfffffffffffffffc}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x2000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x645, 0x6, 0xffffffffffffffff, 0x14000001, 0x10002, 0x3, 0x400004002004be, 0x7ff, 0x400000, 0x0, 0x404, 0x7, 0x7, 0x0, 0x6, 0x4000000c], 0xeeee8000, 0x100605}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m36.134302703s ago: executing program 8 (id=2698): socket$inet_udp(0x2, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000018fc15ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 2m36.007314026s ago: executing program 8 (id=2702): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4103, 0x1007}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}], 0x1, 0x10120, 0x0) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x300}, 0x7}], 0x3, 0x10160, 0x0) 2m35.919057458s ago: executing program 8 (id=2705): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1100000000000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 2m35.816129471s ago: executing program 8 (id=2708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dcf348ec9c01dd0d34aa094a31d3"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dcf348ec9c01dd0d34aa094a31d3"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x6, 0x109d, &(0x7f0000001080)={{0x12, 0x1, 0x310, 0xd6, 0xa3, 0xe8, 0x8, 0x46d, 0x920, 0x647b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108b, 0x3, 0xa, 0x6, 0xe0, 0x1, "", [{{0x9, 0x4, 0x55, 0x6, 0xe, 0xce, 0x18, 0x93, 0xc9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a455424a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x21, 0x8bae, 0x100, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x7, 0x9, 0x8, 0x0, 0x10}, @mdlm_detail={0x48, 0x24, 0x13, 0x0, "4b72d22ba59a436ffb1e60f9135533468f0053315a211d7e1f10a95458eb8b42b6aaf61b20e3029426ca46fabc2a5b06410b70fb684b2fc1b584d91c86d2fd080d219e54"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0xfff}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x7, [0xc6d]}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0x81, 0x4, 0x0, 0x6, 0xa]}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0xe8, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0xf4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf7a}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x58, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xf03b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xd3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x3, 0x80, 0x83, [@generic={0x7e, 0xa, "fe98976eed3f4f03b707ccda6315e042a81853ed8c5277a8ecc614b0118b039683586e5ad90ec7fca6623aca9f00871d83cb9f428a78a46ea5cc652d3944768c74688ad253712fcdba50018c1d0665a83b48d3d8e471667456e08e99fa5c5d43b66cd987074fa455843cb9ba6d905b8356a06cf084fc8a7a5fce8637"}, @generic={0x5a, 0xd, "6369db4e879dfe28554bdf100904f36866e60db5d7cd427e46facc4704110ac59fac3757e0c68b02817a7de11ef4c93ebf471669f013fe8c85ea243b049e827aebd0da0e55b6d57ff32b13bc050a36481610f7fba0b07854"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0xfd, 0x1, 0x3, [@generic={0xb3, 0x9, "829ef66d44160b51ee7a682b6d2204a88fb38fd041e329814ec7968e71e784b4884f55d781385e709f3037e4890ba3a4f6c3b0c0f82b3b53279e184f5cfdbaa1dde675a2b3efb0361fdfb61f68541ffb339a3eae33b192d8bf13de8c618f41fb6bd08d6c4342ed447330f2d5a036ca8194531fc681822c64955efc17980a1a326d1b60dea233c625b354980fa080f1fb505f6505c2d4cd77e149bdffdae4c3894cc9fce5cf45b5165c97e8564fc80c807b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x8f, 0x5, [@generic={0xc9, 0x23, "bba500da7f119ad57f9061fba844c80a53228cb90dc785659fa0835b91d4383300cae4e57df4ebe7fac234d27998f805b500f7618588fcf2844a9b201eb8643fe3a1fb097b3022f01b5884407239145835dce407a952a41731ce851ec07cf4e6555c23118200743483298d6f5c920329a8d56ef7a6eaf407ad2c263d280d0c8ef334d5465fc1966d67edb66a20da8eb2ebb95fb32328bfcf0aa895e8f7230514300802f485bbf66b238e39db6e61e7c227e4672e345e83341cd6ba74f794044d47002b53ed980e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x0, 0x8, 0x9, [@generic={0x7c, 0x22, "15a3aef6fbc1afdb344cc3bbd87b9995e48cc34f8e729a59a42930caf0aade8483ca618e527ee220640b000893cc69b1ab49fa3e0c9014c655e667f871cc06ee8b7291c0af62f5c8ff83e670ad38f623cc150cee9272949a777afca644def5258fcd5683310ff9e55438c7e4d838dd9108644aa3d1e97eedfad6"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5b4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0xe, 0x4, [@generic={0xc8, 0x23, "72a1a8332c6a45020ec785fd8c2e5a12fd7b0b064684ba81eebeb3a0e99a47f3fd7e1f0a090d0063bb101b160c5204466556e4e1e28bb1b2e9119866ef9d7fa4476a9973a22b947c6487c93927492358b32c836649ae3f077c8ede30038d982f87d58f88e4d35b586c95e544f1c912633f123aede730a5d56d68d14dc6465e9733f87cfcf456575cd9e92cfe7b2b82bddea6f06b8846fe4275b91885e3d811bc100b6989bdc3e36b9a3f83b2c930024e189574f68b967cc36f572037111f8d8432869f62004d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x71, 0x6}]}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0xfe, 0xf8, 0x2, [@generic={0x2f, 0x2e, "3b28d3c57fcba07a6851717a3cf19b05efffc40a080aa15abb5b7ff98f8af4b2b0ad495f1f2f9897b70b9e6237"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xb, 0x4, 0x2, [@generic={0x82, 0x4, "90880e16383e0ad8ba0203c9028928a085bd76a8d3f03af05d90bff1afa152b24aabe7f3871286a95ab38a5dc77cdf9ac19744572d44953e7d017fcb460257a29da7bcbfa5c17c415b47f22181c6639d6fa497919f6a9319b22984aae7d84512eb980a493a703c77d908a8755354eb3b5823c50bbed5d1e264122dff2bbc0f0b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5f, 0xd3, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xb}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x60, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3a, 0x0, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x1}]}}]}}, {{0x9, 0x4, 0x6e, 0x2, 0xd, 0x8f, 0x55, 0xf8, 0x81, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cd3c01"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x93, 0x7f, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}, @mdlm_detail={0x54, 0x24, 0x13, 0xa, "ff44329be2c1881ec890d8d3c600594fcad605f989dec8fe064a1777ab6c04d097ba0c381dea6b177178da7af1a3901c6f512f2ccb9b49b2c4852957c74836dd58cfeaa54485456ce0c8bd7e82775f5c"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x6, 0x6, [@generic={0xab, 0x9, "6d85e29a4824ac24cf89d2048aa89cfb99f10be109cbc7f175fa991dab1742c529f4ae53b87b314f7719e4963bc3f447929428050fe880d2e6130919ae6c5cec69806830f53dd4bfa4ef30701030947770d843aca544f0c519e8b0ae2154b28d1ac91168aab84710f484c0e61f80b28d052478c4a5add9841188592aca3277f0e9aa38c5263e90bbbb935ec0373efc6fdce220fe5b05dfbeeaf318231cd011ea119f37636ffee65c76"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x11, 0x6}, @generic={0x65, 0x3, "f3f6b50da36f2f53a0bb96ff9c0d4cb56628cd3bc78013f887481161297798022796f30d80cdb361d5a771d47d59276c2ea34e58c244e085fa5cc870d098d9842cef0276776fc7fe19c365d1b2452f9fe2cc26a3a6fd8823e0780ad1addb018d7f3cba"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x9, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x5, 0xb1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x5}]}}, {{0x9, 0x5, 0x98ee69bc5b7fc3d8, 0x3, 0x200, 0xd5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0xa, 0xff, [@generic={0xd3, 0x9, "2f18523e2b7ffd57dfcc6e6194826d3f076ce8fabf57f1f116c303aa24c3b6e167d482190c28bbd7b5975b76dc5eca98d0ca33f6f13f5d756536881686b210a0557f216c689c4dae340f525d0829ca467d70c7bbb6b88255850e2bb352eb7c53d3de6bb8ba74d589b6785c1ac4329b30378c2785f22efadb767e27db57fa8485b2b21812f40e8a5a81e9864a408a443a304a6d40cf03f80caaefc23ac9618953aca02eb4b96fb584bc7d0a4d292d447d01c1959870989d1fd1cf0072156e7abe856d031be3426eea7be814fea25450fe48"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x1, 0x2, [@generic={0x5b, 0x31, "cea1ac0bffcad670353e1c1f0ec324a85785ae999fabd6e2e4742439bc6fe9e04942fbe9d79a32c0c2ebd62846e1ffee37185feb53a5d391d208a7d2c312c12a856880dfdac1f01db18be1d0557fa67439624a91fbf3740243"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x2e, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xb9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0xf8, 0x2, [@generic={0x63, 0x10, "2ad1b28ddd4b82de67aca2b4beeec29307f9ac440907199054d9f4624b1373310c49b02e7fb3f4f36bec2c97bd59bfa47ab16714b8f9edbf409de840ba9987eb09b160d5f49786f2eeac767b3149e0cd77cb51c351a6a1cfeab7efb68d8cba99c0"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x2, 0x33, 0x3, [@generic={0xd1, 0x31, "2b7dbf1a6dcd6fc72a3cf8fdd20f7d76b82cad8c15d762f69f2faf3074f98d863556fded94698af367d9a5ed2ee1815697363f4a0a8bda1c2a4ac6183d8483bba47e8dccb1a2054470577c371f4d7098dc6800b7d24b742131bc97327d17a82f826e69346cfae10062321b9b0f845bbea9f98ee4d8cf07911ac4b5a9cc781c15f180f785944c54c19f4734324f0b80dcfc0cebf8e03c489f0b1be1512c0e4460f7bcb53de53d6bc0013380b15336a7bdd9b2d3ea621245775caf915e73b7ca4960e05066a5f79f18a5051a06957c27"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x40, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x92}, @generic={0x8d, 0xb, "3ceb407056158cfd7a84ed699643b3af6fb5615557e926b551078b35545ed9e924212497300f4fbb7da4e7e1debdeae93068a13cef7e29d5f559db0b0a37e56ab5382a802b0822e293192a68edfc71605942aed299c37f42999b44bb2038611621b75508d5e84fb6a3b693a408258e9787af5d219fa700e509e76d50091e9f7a30ebca65eb7f530d4844b5"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xe9, 0xdd, 0x7, [@generic={0x13, 0x31, "6f668f1e6d417af119116e802106bfc4f6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x68, 0xd, 0x5, 0x44, 0x46, 0xe4, 0x6, [@generic={0xc6, 0x24, "76fdf80ebb8dbcea8915c10bd13611c5c079447c374e5b7ad7a96eaa2796945ee3a6712ca2cdfd11af4cbdfdf9274161ed50255de39002c44dd99c55dbeffc365c40eea5d8b7a476e4dcc7b9c6965eb3a0feafbd5311cfe600aa376ff1b50b5489f061e39356358f4fe70e11d844d5ba6b398a963aaca5a940f6fac649d0d1f89b58b55067857ccf75d5ecf9b3803972b082ff61544b4f8129577c3f26b75b95f9bca47bb1e2a36f030fb1c6d282b9734a9fbb3afe58cd4cbdfab6272818c4058e50c055"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "18d59ac518"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xfff6, 0xd, 0xfe}, {0x6, 0x24, 0x1a, 0x35d9, 0x35}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0x524f, 0x6, 0x1, 0x5, 0x6}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0xa, 0xf8, 0xd, [@generic={0xa1, 0x11, "09330564e84ba6bacbcfed1a018a580e7c5daec9c70dc6dba154ea6cc18cc96cfc7a6e888969daefeceb9295cb5e91fe85fc9e2faae1bf79dae89894cc8af37ad4da923e235be0eaa19d44c979571fb0574a31ee40ffaff4cffcddeac5529628dc2fbf7e2bd4a3e16a0d981c4d8e5796fbe24951251caf07155ded9ff0f1bb8c2e6920c1f1a6575dd4c911ee2573964078c406690868a5be5f1cbb398e0687"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x3, 0x1, [@generic={0x8f, 0xf, "9f0f2f14438ea940999e7b540bb55504fd29db9efc51e7618eb7c8d30916af39520d73d6780a54c775222903aaa4d62d6af0d4cd3162b0cdc6f00c52e6908d1ae2b21db78a91774d8425ddc6489caa4044cb25628f23f21a2a68f2aaf8023513f20dad6e7ef27d6e51fb1b0d4ac76523bcd076d98f38d37dee56e3a5fae7da74f9d48cead06452918c0e79a852"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x0, 0xfa, 0x7f, [@generic={0xa1, 0x23, "b441ec7dd1ff6f9adabc14c6ddb43fafa2927173a6b8b21f1993177df0d5672f1f9c62c40d217041bf2b3c9db84d33e80631b978abf278643d8d46fdcbdff4ff337efcd69cad0742bf0f555aa2c5b8df7faedfde8bec00ef65282bd55e7eb2a06ceb9eaf32b320a19c87f6e5844e04dab7f6e16bc1394c8f67af1ccd8927622b85b7ae44d52b137dabb69afd2e0d1bae9ce38054b5b621e42e77b824b5bc7b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x2, 0x7, 0x7, [@generic={0xfd, 0x22, "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"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x8, 0x80, 0x7f, [@generic={0xb6, 0x31, "b0b3c404dda52c9c2412f48420a8cef09794bf19ad25681ede5e838b11308a71386dae0043cb7f81df401f6874fd26c91304902299d71b821352874af310493e7415a84f98b5821bc817cce7f9ef9dfbc321b3b779c4d054761d9791fda442034fba6632df7bc7b5826d51966597762eb252ddcda4bb729377803dd76cab4d4ce5b0f575dec62680d16c12e4fcf0ed7fcfa5f4078c977d0762566b3a6066ded38e0717c946cb79d3a0f40308928d5e30e51a5e67"}, @generic={0xce, 0x21, "2fb33aa208f8118b61615551a96a9eaa83afe24e5ce3ae7f2a428cab2d642f643986cfc28148378995052d3e3847b22e15bd009e235e65c85707f48ab3437f4031807d3b239be903dcc64a8930cd5d8d20a7c2010c286be8ba9a2093768ce851bda3db57ccd542d2cef6232b6e5c6a2d45056ab04303a29b8843ed5fa96e6327751f1c84c26fd72f7013de469ec6b997f0843dd624b2aab1d0f495c9eae9a851c3cf5cc9c832d6d6ea84b1222a93b0d59eff8bb49541b36b4c3c9e375f115216eab1bc24db30f1cc0fb1d5f0"}]}}]}}]}}]}}, &(0x7f00000024c0)={0xa, &(0x7f0000002140)={0xa, 0x6, 0x200, 0x1, 0x5, 0x2d, 0x40, 0x69}, 0x1b, &(0x7f0000002180)={0x5, 0xf, 0x1b, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf0f, 0x9, [0x0]}]}, 0x8, [{0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x1c1f}}, {0x98, &(0x7f0000002200)=@string={0x98, 0x3, "cf24c0d6857491ca65f7545984a04ef00547fcc521707f9e7d83b7f32fc2c55a99232c93bbffdd879c9871e6f9fc327773fb31b0eee154c118f93ed1822de771792fa5cab891349600d2c81c905e4ca7c923d730aa380d63ed89e8b78857fc91b9dbdf6dc8fa91c0f45e884b84fb52a28f81ae1fc1062871c4224442f736cbbd7d777f79c614117ad0286c528ba42b34e842162197f9"}}, {0x78, &(0x7f00000022c0)=@string={0x78, 0x3, "24db90b338ab1d103b7e5354e0400a051b1b0aef06282d34bc53f0213640d3e6664665655691cada8c685ff8d9d73fc18e3ddab66de8f04cfdfb5fef0f2ea4e0792dd7e897b3629b04fdbcc5d362369a20ee0b071408e89d20dc18dab19ee3b3b4751e7f495340e48bd2c0d972124ba715f5b0f1ef37"}}, {0x57, &(0x7f0000002340)=@string={0x57, 0x3, "0539af34d25d08dfbae6f6a0996fe6a749d153cdfb6032361e724f7188fd5391cc42cea009e5cffb7cff2a71b0baad5fc5abe2f3e5765f072989217125bcaee6fc390e70ba9cbccbf956a8d5d89680645052fa0e70"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x1a}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x41b}}, {0x6, &(0x7f0000002480)=@string={0x6, 0x3, "dfcb3a24"}}]}) syz_usb_control_io$rtl8150(r1, &(0x7f0000002680)={0x14, &(0x7f0000002540)={0x40, 0x21, 0x59, {0x59, 0x1, "aefbad111c36ee7bbb15d6ac8448019607b88c4123b1a9093cdbf1058ea02953c1e492f1f0adebd6159ad192a1038df0db2ca35210b4fdb370b35b4d8b8b5e77c7efe6ca788264aa30d778e3673e9022faf56940010cb7"}}, &(0x7f00000025c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "e0be2a2eaa909ed0565edd9ef7389f04f9c7b58e12dfec356a66e1c4bbde11f00569bbf78e1bfe65e7f7deb88a562a50ec762592b22fbb8d2c3748f9e2dfa2cd1ff896252ab5c76497977a3db5bc83cbfc9f1afa79e8fa73a8116faa73989a69f027f095e593345b8d0374670ff5406c4846ad1dd55ca1d5cff1779227092393387d11b333da802f09f37180feb09a574bf2"}}}, &(0x7f0000002800)={0x2c, &(0x7f00000026c0)={0x0, 0x16, 0x15, "0cb2ac9d5a0cb69338237d3168055b90f910454c94"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002780)={0xc0, 0x5, 0x3, "757581"}, &(0x7f00000027c0)={0x40, 0x5, 0x4, "0891875f"}}) (async) syz_usb_control_io$rtl8150(r1, &(0x7f0000002680)={0x14, &(0x7f0000002540)={0x40, 0x21, 0x59, {0x59, 0x1, "aefbad111c36ee7bbb15d6ac8448019607b88c4123b1a9093cdbf1058ea02953c1e492f1f0adebd6159ad192a1038df0db2ca35210b4fdb370b35b4d8b8b5e77c7efe6ca788264aa30d778e3673e9022faf56940010cb7"}}, &(0x7f00000025c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "e0be2a2eaa909ed0565edd9ef7389f04f9c7b58e12dfec356a66e1c4bbde11f00569bbf78e1bfe65e7f7deb88a562a50ec762592b22fbb8d2c3748f9e2dfa2cd1ff896252ab5c76497977a3db5bc83cbfc9f1afa79e8fa73a8116faa73989a69f027f095e593345b8d0374670ff5406c4846ad1dd55ca1d5cff1779227092393387d11b333da802f09f37180feb09a574bf2"}}}, &(0x7f0000002800)={0x2c, &(0x7f00000026c0)={0x0, 0x16, 0x15, "0cb2ac9d5a0cb69338237d3168055b90f910454c94"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002780)={0xc0, 0x5, 0x3, "757581"}, &(0x7f00000027c0)={0x40, 0x5, 0x4, "0891875f"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_usb_connect$midi(0x5, 0x67, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000002099043e104000010203010902550001018190be0904000002010320041324036d0f78470d2c030c01048007e7db050606240201810209058d0320027ffef80425010009058702"], 0x0) (async) syz_usb_connect$midi(0x5, 0x67, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000002099043e104000010203010902550001018190be0904000002010320041324036d0f78470d2c030c01048007e7db050606240201810209058d0320027ffef80425010009058702"], 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 2m20.545011713s ago: executing program 37 (id=2708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dcf348ec9c01dd0d34aa094a31d3"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dcf348ec9c01dd0d34aa094a31d3"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x6, 0x109d, &(0x7f0000001080)={{0x12, 0x1, 0x310, 0xd6, 0xa3, 0xe8, 0x8, 0x46d, 0x920, 0x647b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108b, 0x3, 0xa, 0x6, 0xe0, 0x1, "", [{{0x9, 0x4, 0x55, 0x6, 0xe, 0xce, 0x18, 0x93, 0xc9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a455424a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x21, 0x8bae, 0x100, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x7, 0x9, 0x8, 0x0, 0x10}, @mdlm_detail={0x48, 0x24, 0x13, 0x0, "4b72d22ba59a436ffb1e60f9135533468f0053315a211d7e1f10a95458eb8b42b6aaf61b20e3029426ca46fabc2a5b06410b70fb684b2fc1b584d91c86d2fd080d219e54"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0xfff}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x7, [0xc6d]}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0x81, 0x4, 0x0, 0x6, 0xa]}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0xe8, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0xf4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xf7a}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x58, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xf03b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xd3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x3, 0x80, 0x83, [@generic={0x7e, 0xa, "fe98976eed3f4f03b707ccda6315e042a81853ed8c5277a8ecc614b0118b039683586e5ad90ec7fca6623aca9f00871d83cb9f428a78a46ea5cc652d3944768c74688ad253712fcdba50018c1d0665a83b48d3d8e471667456e08e99fa5c5d43b66cd987074fa455843cb9ba6d905b8356a06cf084fc8a7a5fce8637"}, @generic={0x5a, 0xd, "6369db4e879dfe28554bdf100904f36866e60db5d7cd427e46facc4704110ac59fac3757e0c68b02817a7de11ef4c93ebf471669f013fe8c85ea243b049e827aebd0da0e55b6d57ff32b13bc050a36481610f7fba0b07854"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0xfd, 0x1, 0x3, [@generic={0xb3, 0x9, "829ef66d44160b51ee7a682b6d2204a88fb38fd041e329814ec7968e71e784b4884f55d781385e709f3037e4890ba3a4f6c3b0c0f82b3b53279e184f5cfdbaa1dde675a2b3efb0361fdfb61f68541ffb339a3eae33b192d8bf13de8c618f41fb6bd08d6c4342ed447330f2d5a036ca8194531fc681822c64955efc17980a1a326d1b60dea233c625b354980fa080f1fb505f6505c2d4cd77e149bdffdae4c3894cc9fce5cf45b5165c97e8564fc80c807b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x8f, 0x5, [@generic={0xc9, 0x23, "bba500da7f119ad57f9061fba844c80a53228cb90dc785659fa0835b91d4383300cae4e57df4ebe7fac234d27998f805b500f7618588fcf2844a9b201eb8643fe3a1fb097b3022f01b5884407239145835dce407a952a41731ce851ec07cf4e6555c23118200743483298d6f5c920329a8d56ef7a6eaf407ad2c263d280d0c8ef334d5465fc1966d67edb66a20da8eb2ebb95fb32328bfcf0aa895e8f7230514300802f485bbf66b238e39db6e61e7c227e4672e345e83341cd6ba74f794044d47002b53ed980e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x0, 0x8, 0x9, [@generic={0x7c, 0x22, "15a3aef6fbc1afdb344cc3bbd87b9995e48cc34f8e729a59a42930caf0aade8483ca618e527ee220640b000893cc69b1ab49fa3e0c9014c655e667f871cc06ee8b7291c0af62f5c8ff83e670ad38f623cc150cee9272949a777afca644def5258fcd5683310ff9e55438c7e4d838dd9108644aa3d1e97eedfad6"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5b4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0xe, 0x4, [@generic={0xc8, 0x23, "72a1a8332c6a45020ec785fd8c2e5a12fd7b0b064684ba81eebeb3a0e99a47f3fd7e1f0a090d0063bb101b160c5204466556e4e1e28bb1b2e9119866ef9d7fa4476a9973a22b947c6487c93927492358b32c836649ae3f077c8ede30038d982f87d58f88e4d35b586c95e544f1c912633f123aede730a5d56d68d14dc6465e9733f87cfcf456575cd9e92cfe7b2b82bddea6f06b8846fe4275b91885e3d811bc100b6989bdc3e36b9a3f83b2c930024e189574f68b967cc36f572037111f8d8432869f62004d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x71, 0x6}]}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0xfe, 0xf8, 0x2, [@generic={0x2f, 0x2e, "3b28d3c57fcba07a6851717a3cf19b05efffc40a080aa15abb5b7ff98f8af4b2b0ad495f1f2f9897b70b9e6237"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0xb, 0x4, 0x2, [@generic={0x82, 0x4, "90880e16383e0ad8ba0203c9028928a085bd76a8d3f03af05d90bff1afa152b24aabe7f3871286a95ab38a5dc77cdf9ac19744572d44953e7d017fcb460257a29da7bcbfa5c17c415b47f22181c6639d6fa497919f6a9319b22984aae7d84512eb980a493a703c77d908a8755354eb3b5823c50bbed5d1e264122dff2bbc0f0b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5f, 0xd3, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xb}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x60, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3a, 0x0, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x1}]}}]}}, {{0x9, 0x4, 0x6e, 0x2, 0xd, 0x8f, 0x55, 0xf8, 0x81, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cd3c01"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x93, 0x7f, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}, @mdlm_detail={0x54, 0x24, 0x13, 0xa, "ff44329be2c1881ec890d8d3c600594fcad605f989dec8fe064a1777ab6c04d097ba0c381dea6b177178da7af1a3901c6f512f2ccb9b49b2c4852957c74836dd58cfeaa54485456ce0c8bd7e82775f5c"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x6, 0x6, [@generic={0xab, 0x9, "6d85e29a4824ac24cf89d2048aa89cfb99f10be109cbc7f175fa991dab1742c529f4ae53b87b314f7719e4963bc3f447929428050fe880d2e6130919ae6c5cec69806830f53dd4bfa4ef30701030947770d843aca544f0c519e8b0ae2154b28d1ac91168aab84710f484c0e61f80b28d052478c4a5add9841188592aca3277f0e9aa38c5263e90bbbb935ec0373efc6fdce220fe5b05dfbeeaf318231cd011ea119f37636ffee65c76"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x11, 0x6}, @generic={0x65, 0x3, "f3f6b50da36f2f53a0bb96ff9c0d4cb56628cd3bc78013f887481161297798022796f30d80cdb361d5a771d47d59276c2ea34e58c244e085fa5cc870d098d9842cef0276776fc7fe19c365d1b2452f9fe2cc26a3a6fd8823e0780ad1addb018d7f3cba"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x9, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x5, 0xb1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x5}]}}, {{0x9, 0x5, 0x98ee69bc5b7fc3d8, 0x3, 0x200, 0xd5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0xa, 0xff, [@generic={0xd3, 0x9, "2f18523e2b7ffd57dfcc6e6194826d3f076ce8fabf57f1f116c303aa24c3b6e167d482190c28bbd7b5975b76dc5eca98d0ca33f6f13f5d756536881686b210a0557f216c689c4dae340f525d0829ca467d70c7bbb6b88255850e2bb352eb7c53d3de6bb8ba74d589b6785c1ac4329b30378c2785f22efadb767e27db57fa8485b2b21812f40e8a5a81e9864a408a443a304a6d40cf03f80caaefc23ac9618953aca02eb4b96fb584bc7d0a4d292d447d01c1959870989d1fd1cf0072156e7abe856d031be3426eea7be814fea25450fe48"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x1, 0x2, [@generic={0x5b, 0x31, "cea1ac0bffcad670353e1c1f0ec324a85785ae999fabd6e2e4742439bc6fe9e04942fbe9d79a32c0c2ebd62846e1ffee37185feb53a5d391d208a7d2c312c12a856880dfdac1f01db18be1d0557fa67439624a91fbf3740243"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x2e, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xb9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0xf8, 0x2, [@generic={0x63, 0x10, "2ad1b28ddd4b82de67aca2b4beeec29307f9ac440907199054d9f4624b1373310c49b02e7fb3f4f36bec2c97bd59bfa47ab16714b8f9edbf409de840ba9987eb09b160d5f49786f2eeac767b3149e0cd77cb51c351a6a1cfeab7efb68d8cba99c0"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x2, 0x33, 0x3, [@generic={0xd1, 0x31, "2b7dbf1a6dcd6fc72a3cf8fdd20f7d76b82cad8c15d762f69f2faf3074f98d863556fded94698af367d9a5ed2ee1815697363f4a0a8bda1c2a4ac6183d8483bba47e8dccb1a2054470577c371f4d7098dc6800b7d24b742131bc97327d17a82f826e69346cfae10062321b9b0f845bbea9f98ee4d8cf07911ac4b5a9cc781c15f180f785944c54c19f4734324f0b80dcfc0cebf8e03c489f0b1be1512c0e4460f7bcb53de53d6bc0013380b15336a7bdd9b2d3ea621245775caf915e73b7ca4960e05066a5f79f18a5051a06957c27"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x40, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x92}, @generic={0x8d, 0xb, "3ceb407056158cfd7a84ed699643b3af6fb5615557e926b551078b35545ed9e924212497300f4fbb7da4e7e1debdeae93068a13cef7e29d5f559db0b0a37e56ab5382a802b0822e293192a68edfc71605942aed299c37f42999b44bb2038611621b75508d5e84fb6a3b693a408258e9787af5d219fa700e509e76d50091e9f7a30ebca65eb7f530d4844b5"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xe9, 0xdd, 0x7, [@generic={0x13, 0x31, "6f668f1e6d417af119116e802106bfc4f6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x68, 0xd, 0x5, 0x44, 0x46, 0xe4, 0x6, [@generic={0xc6, 0x24, "76fdf80ebb8dbcea8915c10bd13611c5c079447c374e5b7ad7a96eaa2796945ee3a6712ca2cdfd11af4cbdfdf9274161ed50255de39002c44dd99c55dbeffc365c40eea5d8b7a476e4dcc7b9c6965eb3a0feafbd5311cfe600aa376ff1b50b5489f061e39356358f4fe70e11d844d5ba6b398a963aaca5a940f6fac649d0d1f89b58b55067857ccf75d5ecf9b3803972b082ff61544b4f8129577c3f26b75b95f9bca47bb1e2a36f030fb1c6d282b9734a9fbb3afe58cd4cbdfab6272818c4058e50c055"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "18d59ac518"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xfff6, 0xd, 0xfe}, {0x6, 0x24, 0x1a, 0x35d9, 0x35}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0x524f, 0x6, 0x1, 0x5, 0x6}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0xa, 0xf8, 0xd, [@generic={0xa1, 0x11, "09330564e84ba6bacbcfed1a018a580e7c5daec9c70dc6dba154ea6cc18cc96cfc7a6e888969daefeceb9295cb5e91fe85fc9e2faae1bf79dae89894cc8af37ad4da923e235be0eaa19d44c979571fb0574a31ee40ffaff4cffcddeac5529628dc2fbf7e2bd4a3e16a0d981c4d8e5796fbe24951251caf07155ded9ff0f1bb8c2e6920c1f1a6575dd4c911ee2573964078c406690868a5be5f1cbb398e0687"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x3, 0x1, [@generic={0x8f, 0xf, "9f0f2f14438ea940999e7b540bb55504fd29db9efc51e7618eb7c8d30916af39520d73d6780a54c775222903aaa4d62d6af0d4cd3162b0cdc6f00c52e6908d1ae2b21db78a91774d8425ddc6489caa4044cb25628f23f21a2a68f2aaf8023513f20dad6e7ef27d6e51fb1b0d4ac76523bcd076d98f38d37dee56e3a5fae7da74f9d48cead06452918c0e79a852"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x0, 0xfa, 0x7f, [@generic={0xa1, 0x23, "b441ec7dd1ff6f9adabc14c6ddb43fafa2927173a6b8b21f1993177df0d5672f1f9c62c40d217041bf2b3c9db84d33e80631b978abf278643d8d46fdcbdff4ff337efcd69cad0742bf0f555aa2c5b8df7faedfde8bec00ef65282bd55e7eb2a06ceb9eaf32b320a19c87f6e5844e04dab7f6e16bc1394c8f67af1ccd8927622b85b7ae44d52b137dabb69afd2e0d1bae9ce38054b5b621e42e77b824b5bc7b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x2, 0x7, 0x7, [@generic={0xfd, 0x22, "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"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x8, 0x80, 0x7f, [@generic={0xb6, 0x31, "b0b3c404dda52c9c2412f48420a8cef09794bf19ad25681ede5e838b11308a71386dae0043cb7f81df401f6874fd26c91304902299d71b821352874af310493e7415a84f98b5821bc817cce7f9ef9dfbc321b3b779c4d054761d9791fda442034fba6632df7bc7b5826d51966597762eb252ddcda4bb729377803dd76cab4d4ce5b0f575dec62680d16c12e4fcf0ed7fcfa5f4078c977d0762566b3a6066ded38e0717c946cb79d3a0f40308928d5e30e51a5e67"}, @generic={0xce, 0x21, "2fb33aa208f8118b61615551a96a9eaa83afe24e5ce3ae7f2a428cab2d642f643986cfc28148378995052d3e3847b22e15bd009e235e65c85707f48ab3437f4031807d3b239be903dcc64a8930cd5d8d20a7c2010c286be8ba9a2093768ce851bda3db57ccd542d2cef6232b6e5c6a2d45056ab04303a29b8843ed5fa96e6327751f1c84c26fd72f7013de469ec6b997f0843dd624b2aab1d0f495c9eae9a851c3cf5cc9c832d6d6ea84b1222a93b0d59eff8bb49541b36b4c3c9e375f115216eab1bc24db30f1cc0fb1d5f0"}]}}]}}]}}]}}, &(0x7f00000024c0)={0xa, &(0x7f0000002140)={0xa, 0x6, 0x200, 0x1, 0x5, 0x2d, 0x40, 0x69}, 0x1b, &(0x7f0000002180)={0x5, 0xf, 0x1b, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf0f, 0x9, [0x0]}]}, 0x8, [{0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x1c1f}}, {0x98, &(0x7f0000002200)=@string={0x98, 0x3, "cf24c0d6857491ca65f7545984a04ef00547fcc521707f9e7d83b7f32fc2c55a99232c93bbffdd879c9871e6f9fc327773fb31b0eee154c118f93ed1822de771792fa5cab891349600d2c81c905e4ca7c923d730aa380d63ed89e8b78857fc91b9dbdf6dc8fa91c0f45e884b84fb52a28f81ae1fc1062871c4224442f736cbbd7d777f79c614117ad0286c528ba42b34e842162197f9"}}, {0x78, &(0x7f00000022c0)=@string={0x78, 0x3, "24db90b338ab1d103b7e5354e0400a051b1b0aef06282d34bc53f0213640d3e6664665655691cada8c685ff8d9d73fc18e3ddab66de8f04cfdfb5fef0f2ea4e0792dd7e897b3629b04fdbcc5d362369a20ee0b071408e89d20dc18dab19ee3b3b4751e7f495340e48bd2c0d972124ba715f5b0f1ef37"}}, {0x57, &(0x7f0000002340)=@string={0x57, 0x3, "0539af34d25d08dfbae6f6a0996fe6a749d153cdfb6032361e724f7188fd5391cc42cea009e5cffb7cff2a71b0baad5fc5abe2f3e5765f072989217125bcaee6fc390e70ba9cbccbf956a8d5d89680645052fa0e70"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x1a}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x41b}}, {0x6, &(0x7f0000002480)=@string={0x6, 0x3, "dfcb3a24"}}]}) syz_usb_control_io$rtl8150(r1, &(0x7f0000002680)={0x14, &(0x7f0000002540)={0x40, 0x21, 0x59, {0x59, 0x1, "aefbad111c36ee7bbb15d6ac8448019607b88c4123b1a9093cdbf1058ea02953c1e492f1f0adebd6159ad192a1038df0db2ca35210b4fdb370b35b4d8b8b5e77c7efe6ca788264aa30d778e3673e9022faf56940010cb7"}}, &(0x7f00000025c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "e0be2a2eaa909ed0565edd9ef7389f04f9c7b58e12dfec356a66e1c4bbde11f00569bbf78e1bfe65e7f7deb88a562a50ec762592b22fbb8d2c3748f9e2dfa2cd1ff896252ab5c76497977a3db5bc83cbfc9f1afa79e8fa73a8116faa73989a69f027f095e593345b8d0374670ff5406c4846ad1dd55ca1d5cff1779227092393387d11b333da802f09f37180feb09a574bf2"}}}, &(0x7f0000002800)={0x2c, &(0x7f00000026c0)={0x0, 0x16, 0x15, "0cb2ac9d5a0cb69338237d3168055b90f910454c94"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002780)={0xc0, 0x5, 0x3, "757581"}, &(0x7f00000027c0)={0x40, 0x5, 0x4, "0891875f"}}) (async) syz_usb_control_io$rtl8150(r1, &(0x7f0000002680)={0x14, &(0x7f0000002540)={0x40, 0x21, 0x59, {0x59, 0x1, "aefbad111c36ee7bbb15d6ac8448019607b88c4123b1a9093cdbf1058ea02953c1e492f1f0adebd6159ad192a1038df0db2ca35210b4fdb370b35b4d8b8b5e77c7efe6ca788264aa30d778e3673e9022faf56940010cb7"}}, &(0x7f00000025c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "e0be2a2eaa909ed0565edd9ef7389f04f9c7b58e12dfec356a66e1c4bbde11f00569bbf78e1bfe65e7f7deb88a562a50ec762592b22fbb8d2c3748f9e2dfa2cd1ff896252ab5c76497977a3db5bc83cbfc9f1afa79e8fa73a8116faa73989a69f027f095e593345b8d0374670ff5406c4846ad1dd55ca1d5cff1779227092393387d11b333da802f09f37180feb09a574bf2"}}}, &(0x7f0000002800)={0x2c, &(0x7f00000026c0)={0x0, 0x16, 0x15, "0cb2ac9d5a0cb69338237d3168055b90f910454c94"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002780)={0xc0, 0x5, 0x3, "757581"}, &(0x7f00000027c0)={0x40, 0x5, 0x4, "0891875f"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_usb_connect$midi(0x5, 0x67, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000002099043e104000010203010902550001018190be0904000002010320041324036d0f78470d2c030c01048007e7db050606240201810209058d0320027ffef80425010009058702"], 0x0) (async) syz_usb_connect$midi(0x5, 0x67, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000002099043e104000010203010902550001018190be0904000002010320041324036d0f78470d2c030c01048007e7db050606240201810209058d0320027ffef80425010009058702"], 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 2m10.937831499s ago: executing program 2 (id=2900): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x97ff, @loopback}, 0x1c) 2m10.803714283s ago: executing program 2 (id=2901): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x60, 0x6, 0x103, 0xa5, 0x30, 0x0, 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x2008c5a, 0x0) read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200, 0x1b) 2m10.794515133s ago: executing program 2 (id=2902): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x5, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x0, r3, 0xfffffffd}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f0414f670bc70e0180c200000286dd6100070000140000ff0100933fd97113d6dde500000000000000000000000001200100000000000000000000000000012f00000000000000b961880b"], 0x4e) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x1d8930, r0, 0x3) r6 = socket$igmp(0x2, 0x3, 0x2) dup2(r0, r6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x80082102, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a94ea0609eebd0083"], 0x0}, 0x0) 2m9.297091661s ago: executing program 2 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) (async) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000, 0x12) write$cgroup_int(r0, &(0x7f00000000c0)=0xfffffffffffffffc, 0x12) 2m9.288561922s ago: executing program 2 (id=2911): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c00000018f0077bab092500090007000a0700000000000600003693", 0x1c) 2m8.96762606s ago: executing program 2 (id=2913): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7f, 0x8, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0xb, 0x0, 0x10000000000d}, {0xf, 0xa6f2, 0x6, 0xf, 0x9, 0x4, 0x0, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x79, 0xff, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) (async) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 2m8.96262424s ago: executing program 38 (id=2913): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7f, 0x8, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0xb, 0x0, 0x10000000000d}, {0xf, 0xa6f2, 0x6, 0xf, 0x9, 0x4, 0x0, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x79, 0xff, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) (async) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) (async) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 3.047644362s ago: executing program 3 (id=4293): syz_clone3(&(0x7f0000000280)={0x200008000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x40}, &(0x7f0000000180)=""/55, 0x37, &(0x7f00000001c0)=""/69, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = dup(r0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 2.469483667s ago: executing program 7 (id=4302): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0xfefdffffffffffff, 0x0, 0x2}]) 2.36755365s ago: executing program 7 (id=4304): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2001) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x5}) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) fstatfs(r0, &(0x7f0000002180)=""/214) (async, rerun: 64) r4 = socket$inet6(0xa, 0x800, 0xaa84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000002280)={0x0, 'veth1_vlan\x00', {0x3}, 0x3ff}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002300)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000002700)={r6, r7, "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", "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"}) (async) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000003700)={'\x00', 0x9, 0x0, 0x1}) (async) fsetxattr$security_selinux(r0, &(0x7f0000003780), &(0x7f00000037c0)='system_u:object_r:ipmi_device_t:s0\x00', 0x23, 0x2) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003800), 0x20000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) (async) sendfile(r4, r4, 0x0, 0x2) read$ptp(r2, &(0x7f0000003980)=""/99, 0x63) (async) capget(&(0x7f0000003a00)={0x20071026, r3}, &(0x7f0000003a40)={0x1, 0x2, 0xa39b, 0x100, 0x200000}) capget(&(0x7f0000003a80)={0x20080522, r3}, &(0x7f0000003ac0)={0x974a, 0xffffff97, 0x1ff, 0x9, 0x3, 0x8001}) (async) r9 = accept$nfc_llcp(r2, &(0x7f0000003b00), &(0x7f0000003b80)=0x60) ioctl$OCFS2_IOC_GROUP_EXTEND(r9, 0x40046f01, &(0x7f0000003bc0)=0x5) (async) ioctl$BLKBSZSET(r8, 0x40081271, &(0x7f0000003c00)=0x6) (async) getsockopt(r2, 0x10100, 0x4, &(0x7f0000003c40)=""/208, &(0x7f0000003d40)=0xd0) (async) sendto$inet_nvme_icreq_pdu(r2, &(0x7f0000003d80)={{0x0, 0x1}, 0x0, 0x0, 0x3, 0x7f}, 0x80, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000003e00)={{r4}, "a40cf879f7fbd72ff7c39f71b7329e0a4162ea6c3cdc2229ebbb83118dc96b327b71bd2cb7b5c58647232f5cf800aceec74fe03287baa3c1fbbf4918c21ef1a7906b23856aeb040e5d1b5ca3f60258117cf1a3923fef6b4d0db09d116ba68e48543dda1c66bec3c4232426bb0d0ed1075ee57b97caad3ed5634c53f0e2c9d1aa59a202d2bde32f9c4283e9185dbb00c9f07ca3e86be3ad672ffd098f1cc9866774cb5ba726e5ca2cf14994b5d405718a206c2ccc555d4596bdb6f3ad4f1015fe58c5c9f28f1b465bfc5deb05d0b48c071f4907733611737213de70536d03d1085ebbb1e3ddc2cb268294a5d319cbd9dbe8dafdc7fb6aaea0eb18d369cea7c0fbd834d7c92d06f9d03f881d9e3b40f51c7b250af6cf0182dc1dbc5c66267d8b486b70f4a64274477b3505af72170dd74ee16d6b13aca3c3c80bac3a5bd2422cfb2e20e69b3f342596b75ef7c3a8ee7f73738a0fb17d12f656faffff000afab20a7ef7921dfb130676ea183a89632f3277189e2f16d51218f6d9198b6c5193bf251b3d7d52e3f98e4013e551651f987fede2132765bcc65a4e72dbeabb74954e5b8d9cb0f120d1ce145adcf4f14d9b47bf7e14695b190f1619bb0d17b3a9ddc2e6e378faf7d57efa6ef84b10e2c3f90e8d8bbc8681f31262fe5ef0bd103e778acac6d767c73ac515caefc60d81e846d3400e213c837e2f3955916aaf29d720db50decdc661f025f1a3c87694c5ade69a0005a90296b516d56499014598b846aa68d0bdcd172243dc9f3fb18f642003fbaa590dd4be6a2977f99c3666107148c153da923849f479ec3ea584fa400181075138c6feb966dca30837a86c3e510c0c237f6c0406ad5441ee199a71b733a805f36c6963cefa1e3cf2316e2ac752ce62aee9d5cbe7cc9b995f1a0875836cfd818675fb70050d86ba89005dfe14831140105805999251c1d4b869cf7ee1becda6ca4c302ef0e08c1fdcc4f7ee6097dbe49bfd5930cf19ddd3393ee1c925c27be520cc5f0fc4a513545eba4b3cf3ac94a4682f8d8f436522afa58247091acb3f407a4669c0d2abe72c45c8f9562a4b6eae470c69c96268495c2a9e261f842f49aafbbd0b9a1cbe36bbaf5abb23e3d5c3e4f3c6ce9b91b1fc71d2c18507164d454dc9b1d731032996b6f07db005fc67f20b5a650bf1b1813650f98e410980db4b23aa2dd85933b4a219d75678edc8e7c17de08610902bc060ade2915446a77e462988488a62d4082f315faa76009735bef17164610fa642419972f7e1e041d52a1d431c54e9788a9063a40c546448c698f8afa75b96af39331d71e8f720a7030384b39b68b716a44717cfb869d089dc71d725c2df4e2a03e60209f5fe815190ca53fc392c7006e131d3ad52c94d1ab882a0005d4ab2f2be335468430cb15b8c2b81867c57f34c0ac07022806d037daf1a9acd16f75be0a47afb8721bdeaa3c6922e2c5c75c4e2727e621838b5dac962f12f8e74b7026f9bb9a4b4fa6a9ee7dde45070b04c508fa414fbd0c27f95458dd71014a1199f6bc93e60a6b78b31ed423b321a7ba18e70e0ba8be1633d6ae1a0b79c0278f3394959a545e14eea3d9aaf82c2828988a6454296c446e3d6edffee28affa4615a28518e4cf711039da219a31684b7e382079cfb93b35a85ef15289977df7d5549eddf177ce0929069565cacde93176a615fc8cdc3b541a553672b40f27041f9f6f656ae635316a29200332e264448e26ad484840d9337720c5d320f3793dd105143da17a91eeb5c84cba17390916fbce50bf7979bd54c54221356ccc3cda8c15e9440edf78daf2ff4ec24a56e5e7fe45e83b6dc456c07f101e817faa2d2b868c44ddbf45b8a1fa01db9d444712fcee837ca882ef175e00365e4a7b814c80fd3f90b6b254b97d17cb996184cd52577e61ec4a52f583299f0db57c5cf0823e834504f7b93de42a0783c29a2a4ab3590d1210f77f15549f9d72ce135e94758851241a5842b36886cbeaec3a453cf261d17719cc1ccfd54c2116364214a68bce566fe9a1b020b3c976b2decc9dad41aacf2f8852800a4f258116cf7c2747ad6f4106d2d55d39bfcda861fcb5b9dd986f8e827377949c45e0a76ac156c22353c8a69ecdf08ae2b2d01457619bfe3d369592bb7d9fcd051f9d421a11125210e9b071917d89f296eba64ce5e92438f17fd743442b8e8b25ae3144c2882b33217ba7c64c6feb226fcd4cbe0062ae4cd2a66758f793260f93f20a6a481b931fe4477046a0763adcd7575b6bb192ea76fd08c8d8f18c9a7622763aeb1b49497b1f9b694ed94291c44e7ca5e68ab07b0e8a1ddfb4482776751c551ce0e14c258c5ad827111081abb024c94f0a3c59acf8af0425d5a2b4be6d3d832b0561307a115550947a71e2e20a7c758cd75303797d47c1076fe4dfca5c3b011707e1947f8439b0b99e0878e1f8c5ec9e10bfb17efee9c937f7e84c146c2180a3a39561ebdd69d7de8531088c5c630d5619828c5c872a6fd100c6189daac5175b2f05aaeb327b350cea31986e179c0e48a4d780dbe03b415f57878e0a662eeb05fb82589e345ff59f77b2a99674c157185a65c6bb0d98660ace7494b82cfba3456c84d482a2c510786c6d3435a1a181a8d3b70233cc28fb433e965ff0b4992b1d9d8ce6ffb6b2d894dec1359a79effd683939dd93a060079aae3615af551b0efbb5050c30253cb6a46cf826e7bc2ebd4f1ebb7e906c9e57c6ab8db8049bc883c9856886d52e452f02656558661327bb9bf79fc2b44863accef666bb35d88ea6159a8ccf606a0086444c74dc99074066099ac97cbec93793bdccaf00f8f64c658a10dfd30f1374711b5c11418ec8d5a74c8e90d0a727d0caa9569ffd245b31b02e6c50c5a00312f9c541ea68c8bd5e8e8e0e0ed247997326043b7284197967c2905f7354a7228eab8366295dec4426fb9467f837117bcccf8421eb293d32b9a1ff831bbb88df60600ca89b641f9bdeccb79dce1fd2c0d95aa333ea0c013ac13fc4c3e4c95443b6d96dd5bc2052879f3f770387b01ef1368a1bd80950c1c02821412bc26411b51c08cde71e22371e2267cdfc18b35803cca40e9bff1f357baf382797394e9e75b40e9d6722c894dbf323ee7a1852fcd2360e08f3f2ffcf898961a6b640e93ed4e3ccfba738f7808454338d9f4b08deea88df3a8d74eb52b55d5d46ebe6ee0819a25ea4ce4d5ab11cc09b70c66a8ccbbe179a46bd10d0aecb4c00adaebe0ae2fd7764451a388108a1d1be888270c942e7c41969aa21b4c404bf759670a28d5681492dc50db4547cdf6605d35010f25391ecc5a26cb33dc90dc5c99f2ac9e3157a53ab54b6297786a13f10bb81107742b34e3261d2c0390fe4b23afcbd47b9514df6e545d4cc59249e490ae39c43bfaa90851630f464c6878072a53bfa5b25e47ee6d501cd829fc48217417ba6f27d72a91c26d7427bd74e33c168d451d09b551d1344107cd034c0d7fd580bde9a6d1bc670f74d34c6127c2e0610c07b601809afabcaecca298c79bf86f29be094d4899fdb7e7b32bce84d9b9250e992ac7b2e1ba12d4b33b35ca88072ac7b016a775ba6706909328652f6799f8921d84c3fba11ee1affac1676e3d587e7f84c71735246aa465bacd66e599647e6581552d034436e0966dd86babc056ac8105fec60578e1406f9740dad4bc944f015b2232005c8020721b4ad41059eb5115830fa700ae545fd01f3b34ed2b7516e7d0b46b17a55ad13734c3a88f66d7341480a8f8e52c574fa21b758e5d28b60da6957f1ebe2383b097c5951500bae7c070c33316da1b14d6bf7ecf7bfd27e2416c597617b5cd20a28cf73a79a722d007905a270a25b2e78b678fb89d16f8216c11bf0a8eeb1d19fddcc0954189a1b6e7e13472b7f094039c6a3f61aea4da1e0c71e5d45a58aa6a8a8659a54f4076f03604c0146047efabfb0c84b52e9d757b89a44b55008ec0fb50ed02cfa1b2de99c8e033a2b4912f01ff60ef1ace6ff6d362d9e3935af473613a5ee94a456f2aecad486a31d30bbbd23a896dbc9d86f1962b0b4f74ef47af9ecb8d547cfbeca0b64b4b7803fefdf1d6249c531855b0d519f62c0163adc6d824a8a183975bbefa376d9f1edd589993f6f16bd9400ff8cb5e309b1ea97e6109bf23908d60cd4c43891332a7a4a447ccffddd752f971b5ed0771c31d51647e8f55ca22121637d61128fdf98d50fa42faa046bfb8facb67f2567fc374c5cc2f05214bd8b4554ad6fb88cfa5e5fb0527e36e7d0d231d0dc990dc1a9786f6d10fdf0163a942596df6d65e35c6e10dbb74fa6cd7febe171a228c9d8d8b11d9d9b22913fd02c987f13c0d4afc479de226bcf5d070242973e764a34fa5c09645235f8bdbb0bc0377e25a68660d10d330ebf4f22b48ed7ab7cf1f285ffb466321f4b4c5cea6fdb4a377158e2c6deb21e6faa9bea63f6ea5b9ac5376a95868d04bff900ce3762f6dca86831943998af318a8d2217c9a637efa7cf52368acfef43be0acd0748d5f4434fbc04f67df4699d4bef7424a2ecad1584589d0929a7e64e9a4f0c7fd61f9223719db913e2d04c2b46212c2df35d95d56f3635b3810cebdf8689f9dcbe78b83618a224f266b007c7dbae87644d3675e32b2639d093f5524f4b928bb94064292381db8a1614cdddaadc0fc24b5b0d268ce5685d917ca8f3cf8c388959ce9cf3927ce4cf2843dd7a22c0f8ca9b48b7cbb56aee95d796cbb522cdd33d6f3ad40c97afd992b8b30da435e45c7531845e01db21ccc7874d7e2f52d99965f7cb19282ba08361f6e54cb6ac379d450b0db3ba2d340fc8117d0b9402275bba51f83323e577c8afd3f898c1b84dd1e920c54553a2c2a8d668c2d8d1e4e0d1c335bcb73adb459a7e1d0b10730c737ac7f0afdeb0bd1cbfd666a731ecb892c5e861dd77347cd44e6302bee127253d7a6d6fc99c51177e7fee5876a2e68707b3a477b80b970b915fd9ac8d72f9c1691fc968f27c0cb835a55808fb189a9eadeb4a7a9d550d82b8f05fca03bd709c94c8618997b594c13edfab023345a3f3f1c4041eed7d2f8a0a467bec71157d0274bbe28ec5c92c9f48fb0937257a2ad6e4b04bdf58d3fd1f62daa721d1f52b65754b0a253f0c05dc7349e653622b7d1246e24c8b6b198498ba8e31aae3bc8f0a09283f3277b6fb9acec84d39ce97695348592f84dc394b3941f5e378d5f7e9b76ef6b8c1533bca615cc1fda93002fd14ed468fa52c867cd2c7682e363acf0be0a32ff478c49462b6cc381f7dd172439257c0d7b15f8b29e82e74a19c4559505b622db04c58c8d3ce410cb8f8894be5e61e3e48a4d1bf78fa80b01328f125d370142aca6d1deffa3fdae395637b7cb5b8cb3626113ee6c05c75399cd6fc64b5e68e2210ed664b6b91da56f98972e90b0beba14738a82ad9065ef8f38ed27f70e9151ef1f77b82529fc040fafcf85df4048c6d97a1067dff45426dee6fe72c4105856c149816ceb728469caa3b17234476f800054a89693087b7fe60fa213fd65921082da89992a669001720ae52d78b1b4293810ece6a48777e9df1901649b9294c13f4773ca7eeb628d6cc7a448a19b78bab65f3965fd27a3bef7ab0b7d437e270627713032e619e9e8ff07cb46922e4790827c091edc0023a2e2f04ca881f7a2f9dcbe46419b85df7f7851fa7d95c77b71c7ea97f7bad4b96f0dfb1914a0333b8085e0dea25623ba25718d600c20ab442d760872458ca40d95901a174ee8829329326d6f0efa4dc1b4ba04307e91c"}) 2.36743069s ago: executing program 9 (id=4305): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6f}}}}}, 0x28}, 0x1, 0xf5030000, 0x0, 0x2000c000}, 0x40) 2.36071566s ago: executing program 7 (id=4306): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000001]}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="0404895f004078879b595b1d4d63e13b8c633cc33f72039d2d882376b06fb672d8546ab256e0f104dce7231706cd26c818b4a0a87709ba7bc552ffdddaaba8762690a77ef4ae3aa9249713ea63a29297fac3f91accf4d95413e22d414e22d408ebec189a65b7bfa06b00"/121, 0x79) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ebb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.325660731s ago: executing program 7 (id=4307): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x20100000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 2.289703661s ago: executing program 9 (id=4308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.288167181s ago: executing program 9 (id=4309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x184, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(xtea)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x44050) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xa3f1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x1d}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x4, 0x3, 0x4}}) io_setup(0x1, &(0x7f0000000080)) 2.235635103s ago: executing program 7 (id=4310): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="010530001400280006006000000000301164fe800000000000000000000000000001ff02000000000000000000000000000104d2224e0030"], 0x62) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x2080) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x4, 0x2082080, 0xf35, 0x9267, 0x5767, 0x6, 0x0, 0x0, 0x2, 0x7}}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x4000000, 0x7f, 0x100000, 0x4, 0x83, 0x8000000, 0x0, 0x0, 0x4, 0x2, 0x5, 0x8, 0xc6ea, 0xffffffffffffffff], 0x0, 0x100200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x40, 0x4, 0x80000008000006, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x200000002, 0xfff, 0x40004, 0x1, 0x1c, 0x0, 0x9, 0x8001, 0x3], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.177913095s ago: executing program 9 (id=4311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b83728f2f50f23d00f21f86635300000090f23f80fc78aa000d2210f18d1baf80c66b81f579a8666efbafc0cb097eebaf80c66b8acd21b8f66efbafc0c66ed360f01d10f78bd070066b9820b00000f320faef1", 0x54}], 0x1, 0x7c, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (fail_nth: 3) 2.151852985s ago: executing program 6 (id=4312): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback, 0x80fe}, 0x1c) 2.095648197s ago: executing program 9 (id=4313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001f0ffffff0000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff480001"], 0x1cc}}, 0x0) 2.095143237s ago: executing program 9 (id=4314): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0x8800000, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa8240, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0xfffffffffffffd52) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0xffffffff, 0x180, 0x400000004, 0x6, 0xf1, 0x3, 0xfffffffffffffd7e, 0x3, 0x0, 0x3b9, 0xfffffffffffffffe, 0x80000, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r8, 0xaead) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={&(0x7f00000012c0)={0x344, 0x0, 0xa01, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdca}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6982}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x480000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xced4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "332f906e56a5837ce4f33edd9b96b1bf679adcd394419692f309ea458a9c46c4beaa708c6a20179b9c55fd0d110da98b767b219b936226de8f1133e9ea42bc54c87d66053f8be66f43e4a76213f2a2cb3752c7c6765903ab78c18bf73dd69a79afd88967add65a369a83e8c95054dc675ef5beaea6120bb8c50cffc91147fdbb58771fdac261c80689ec8ee600623016bfb551629f3bd54a010937154d3d3e0f14ede217dffa07c90208d6e1537e13b067349f4dffff1e4e9e0ca9e49bfd5d7395fd3bba085be11702a3880ad8200fb3f33c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x393}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfec9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd60}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5c06}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x1, 0x0, '\x00', 0x1, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="92cafedbde4fb0d9d2960614676e26ad80cd768fe46bddb355c03aadb5f6e1c0c1f5f891314b71d0909ecf61cbcd60e4ca9729f896528d6a18774a1359d86cc2d99babb3b20d98fb9b5c1378a1ec0f7ac0263da2403a1555dadb74c74a3d037a755baae47b4d1a2ffc57798a99f1", 0x6e, 0x20004000, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES8=r9], 0x0) 2.048468248s ago: executing program 6 (id=4315): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000001]}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x47ffbff, 0x2, 0x0, 0x0, 0x9}, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)="0404895f004078879b595b1d4d63e13b8c633cc33f72039d2d882376b06fb672d8546ab256e0f104dce7231706cd26c818b4a0a87709ba7bc552ffdddaaba8762690a77ef4ae3aa9249713ea63a29297fac3f91accf4d95413e22d414e22d408ebec189a65b7bfa06b00"/121, 0x79) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='3\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ebb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.044201038s ago: executing program 7 (id=4316): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) (async) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) accept4$unix(r5, 0x0, &(0x7f0000000140), 0x80800) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$tun(r3, &(0x7f00000003c0)={@void, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x27, 0x78, 0x66, 0x0, 0x2, 0x11, 0x0, @private=0xa010100, @local}, {0x4e27, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "de067397382a5807ce3fa84a8570fd58f1b543ab050811d98ce690bc0411e556", "1a85755270d911b3b48f699e118c37a2", {"511dcd32facbaef9a1f323e9187230f0", "e7a6a4ce6efc793b03cb4e5a3a089867"}}}}}}}}, 0x8a) fgetxattr(r2, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) (async) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x7, r0, 'id1\x00'}) mmap$IORING_OFF_SQES(0x0, 0xffff, 0x2000000, 0x50, r7, 0x10000000) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, &(0x7f0000000080)) 1.96367508s ago: executing program 6 (id=4317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x170, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x682, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x2, 0xc, 0x8, 0x0, 0x0, 0x300000000000000, 0x743}, {0x2a8, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x5, [0x6]}}]}, 0x170}}, 0x0) 1.948081641s ago: executing program 6 (id=4318): mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000001c0)={[{@uuid_auto, 0x5c}, {@xino_off}]}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x630180, 0x8) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4202, 0x0) renameat2(r1, &(0x7f0000000280)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x3) (async) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) lsetxattr$security_selinux(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:inetd_exec_t:s0\x00', 0x22, 0x0) (async, rerun: 64) renameat2(r0, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) creat(&(0x7f0000000400)='./file1\x00', 0x48) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) (async) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setuid(r4) (async) socket$netlink(0x10, 0x3, 0x15) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002400df1e02000000fadbdf25000000001000000000000800", @ANYRES32], 0x30}], 0x1}, 0x0) (rerun: 32) 1.674314048s ago: executing program 3 (id=4320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0xfffdffffffffffff, 0x0, 0x2}]) 1.151661231s ago: executing program 3 (id=4321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="cde5e79eab350f4b29c251db8a37a78d491a4cac790adf23d02cfd5c849ae2eb8b19801d361e4602cad3574348283128b0b2f9e917d25e9beb8de11375577aa9d06a58c333f3ea416421a80a231eb00db542341dc685247edb88aeaed358d9fc0dbcf1117a54c12c0d17612d1f9b54206b9714282d08115368b40e5b39a87a7e4ac185afbead16648ad16e60d9c4d3aad77c3c90368fc501e31233a847a798f4074217dd92cdc3c156433b4f7325c411a93b7202b49142a121e0a5e522908af12fe8f05fc6013f335bbb939d4b3c3e704e57012ffdb04a3c39e79060b29067bb984bfd7429528eea4d9dbf70138ce68e95f5362c820e5309393c8d7ad3f70ad7a7", 0x101, 0x8000, 0x0, 0x0) r1 = openat$incfs(r0, 0x0, 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 673.720533ms ago: executing program 3 (id=4322): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200140, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0)=0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 672.305143ms ago: executing program 6 (id=4323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ffff0f000000000000000fffff00000000000074") 40.464039ms ago: executing program 3 (id=4324): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="010530001400280006006000000000301164fe800000000000000000000000000001ff02000000000000000000000000000104d2224e0030"], 0x62) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x2080) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x4, 0x2082080, 0xf35, 0x9267, 0x5767, 0x6, 0x0, 0x0, 0x2, 0x7}}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x4000000, 0x7f, 0x100000, 0x4, 0x83, 0x8000000, 0x0, 0x0, 0x4, 0x2, 0x5, 0x8, 0xc6ea, 0xffffffffffffffff], 0x0, 0x100200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x40, 0x4, 0x80000008000006, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x200000002, 0xfff, 0x40004, 0x1, 0x1c, 0x0, 0x9, 0x8001, 0x3], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.24153ms ago: executing program 6 (id=4325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=4326): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x22000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) kernel console output (not intermixed with test programs): 445][ T321] usb usb7-port1: unable to enumerate USB device [ 425.150444][ T523] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 425.290464][ T523] usb 10-1: device descriptor read/64, error -71 [ 425.540439][ T523] usb 10-1: device descriptor read/64, error -71 [ 425.661407][ T523] usb usb10-port1: attempt power cycle [ 426.000439][ T523] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 426.023026][ T523] usb 10-1: device descriptor read/8, error -71 [ 426.031540][ T8689] kvm: user requested TSC rate below hardware speed [ 426.153090][ T523] usb 10-1: device descriptor read/8, error -71 [ 426.400440][ T523] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 426.423534][ T523] usb 10-1: device descriptor read/8, error -71 [ 426.553018][ T523] usb 10-1: device descriptor read/8, error -71 [ 426.660567][ T523] usb usb10-port1: unable to enumerate USB device [ 427.118168][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 427.130482][ T8705] x_tables: duplicate underflow at hook 2 [ 427.230125][ T8709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8709 comm=syz.7.3179 [ 427.571854][ T523] usb 8-1: new full-speed USB device number 92 using dummy_hcd [ 427.620434][ T361] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 427.733991][ T523] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 427.741645][ T523] usb 8-1: can't read configurations, error -61 [ 427.783244][ T361] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 427.792623][ T361] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.802885][ T361] usb 10-1: config 0 descriptor?? [ 427.870472][ T523] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 428.024661][ T523] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 428.032405][ T523] usb 8-1: can't read configurations, error -61 [ 428.038842][ T523] usb usb8-port1: attempt power cycle [ 428.380664][ T523] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 428.429587][ T523] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 428.450425][ T523] usb 8-1: can't read configurations, error -61 [ 428.462885][ T361] usb 10-1: Cannot set autoneg [ 428.489185][ T361] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 428.522576][ T361] usb 10-1: USB disconnect, device number 28 [ 428.596599][ T523] usb 8-1: new full-speed USB device number 95 using dummy_hcd [ 428.626173][ T523] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 428.652573][ T523] usb 8-1: can't read configurations, error -61 [ 428.676483][ T523] usb usb8-port1: unable to enumerate USB device [ 428.714419][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3193'. [ 429.610959][ T36] kauditd_printk_skb: 346 callbacks suppressed [ 429.610977][ T36] audit: type=1400 audit(2000000014.490:65087): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.670409][ T361] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 429.686275][ T36] audit: type=1400 audit(2000000014.560:65088): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.713392][ T36] audit: type=1400 audit(2000000014.590:65089): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.739929][ T36] audit: type=1400 audit(2000000014.590:65090): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.766417][ T36] audit: type=1400 audit(2000000014.640:65091): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.805599][ T36] audit: type=1400 audit(2000000014.670:65092): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.831693][ T36] audit: type=1400 audit(2000000014.670:65093): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.856887][ T361] usb 10-1: Using ep0 maxpacket: 16 [ 429.869982][ T36] audit: type=1400 audit(2000000014.670:65094): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.875890][ T8766] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.8192.4), cmd(9) [ 429.897160][ T36] audit: type=1400 audit(2000000014.740:65095): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.931126][ T36] audit: type=1400 audit(2000000014.740:65096): avc: denied { ioctl } for pid=8763 comm="syz.9.3200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.958374][ T361] usb 10-1: unable to get BOS descriptor or descriptor too short [ 429.969303][ T361] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 429.980247][ T361] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.993985][ T361] usb 10-1: config 1 interface 0 has no altsetting 0 [ 430.010590][ T361] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.026237][ T361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.037022][ T361] usb 10-1: Product: syz [ 430.042132][ T361] usb 10-1: Manufacturer: syz [ 430.047693][ T361] usb 10-1: SerialNumber: syz [ 430.057754][ T8764] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 430.300215][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.317867][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.345908][ T361] usb 10-1: bad CDC descriptors [ 430.372496][ T361] usb 10-1: USB disconnect, device number 29 [ 430.740411][ T321] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 430.900383][ T321] usb 8-1: Using ep0 maxpacket: 8 [ 430.916792][ T321] usb 8-1: unable to get BOS descriptor or descriptor too short [ 430.942650][ T321] usb 8-1: config 2 has an invalid interface number: 99 but max is 0 [ 430.957874][ T321] usb 8-1: config 2 has no interface number 0 [ 430.972633][ T321] usb 8-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 430.996096][ T321] usb 8-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.007209][ T321] usb 8-1: config 2 interface 99 has no altsetting 0 [ 431.019714][ T321] usb 8-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 431.029913][ T321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.038870][ T321] usb 8-1: Product: syz [ 431.044159][ T321] usb 8-1: Manufacturer: syz [ 431.048873][ T321] usb 8-1: SerialNumber: syz [ 431.342923][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.357380][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.236864][ T8793] batadv_slave_1: entered promiscuous mode [ 432.250500][ T314] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 432.405705][ T8799] overlayfs: failed to clone upperpath [ 432.411538][ T314] usb 7-1: Using ep0 maxpacket: 16 [ 432.423722][ T314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.440049][ T314] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.452565][ T8792] batadv_slave_1: left promiscuous mode [ 432.464621][ T314] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 432.474295][ T314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.483222][ T314] usb 7-1: Product: syz [ 432.487509][ T314] usb 7-1: Manufacturer: syz [ 432.492300][ T314] usb 7-1: SerialNumber: syz [ 432.837128][ T314] usb 7-1: USB disconnect, device number 96 [ 433.001086][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 433.030453][ T523] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 433.226662][ T523] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 433.238938][ T523] usb 10-1: can't read configurations, error -61 [ 433.348775][ T8821] VFS: file-max limit 0 reached [ 433.380555][ T523] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 433.407483][ T8823] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8823 comm=syz.6.3222 [ 433.574282][ T523] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 433.582192][ T523] usb 10-1: can't read configurations, error -61 [ 433.589560][ T523] usb usb10-port1: attempt power cycle [ 433.642584][ T8834] IPv6: Can't replace route, no match found [ 433.944199][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.953824][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.960494][ T523] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 434.015255][ T523] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 434.023063][ T523] usb 10-1: can't read configurations, error -61 [ 434.090421][ T314] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 434.150555][ T523] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 434.178112][ T523] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 434.188916][ T523] usb 10-1: can't read configurations, error -61 [ 434.197336][ T523] usb usb10-port1: unable to enumerate USB device [ 434.260529][ T314] usb 7-1: Using ep0 maxpacket: 16 [ 434.273423][ T314] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 434.282896][ T314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.291378][ T314] usb 7-1: Product: syz [ 434.295712][ T314] usb 7-1: Manufacturer: syz [ 434.300500][ T314] usb 7-1: SerialNumber: syz [ 434.307013][ T314] usb 7-1: config 0 descriptor?? [ 434.531424][ T314] usb 7-1: USB disconnect, device number 97 [ 434.655063][ T36] kauditd_printk_skb: 3683 callbacks suppressed [ 434.655084][ T36] audit: type=1400 audit(2000000019.530:68780): avc: denied { ioctl } for pid=8864 comm="syz.7.3241" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 434.748863][ T8875] IPv6: Can't replace route, no match found [ 434.765698][ T36] audit: type=1400 audit(2000000019.640:68781): avc: denied { ioctl } for pid=8864 comm="syz.7.3241" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 434.793436][ T36] audit: type=1400 audit(2000000019.660:68782): avc: denied { execmem } for pid=8876 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 434.813571][ T36] audit: type=1400 audit(2000000019.660:68783): avc: denied { mmap_zero } for pid=8876 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 434.835786][ T36] audit: type=1400 audit(2000000019.660:68784): avc: denied { mounton } for pid=8876 comm="syz.3.3245" path="/129/dev" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 434.859298][ T36] audit: type=1400 audit(2000000019.660:68785): avc: denied { mount } for pid=8876 comm="syz.3.3245" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 434.865059][ T8881] netlink: 'syz.3.3247': attribute type 27 has an invalid length. [ 434.882186][ T36] audit: type=1400 audit(2000000019.700:68786): avc: denied { create } for pid=8878 comm="syz.3.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.910692][ T36] audit: type=1400 audit(2000000019.700:68787): avc: denied { write } for pid=8878 comm="syz.3.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.932862][ T36] audit: type=1400 audit(2000000019.700:68788): avc: denied { read } for pid=8878 comm="syz.3.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.949378][ T8883] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3248'. [ 434.953631][ T36] audit: type=1400 audit(2000000019.700:68789): avc: denied { read } for pid=8878 comm="syz.3.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.945198][ T8909] netlink: 'syz.7.3258': attribute type 16 has an invalid length. [ 436.253960][ T8916] IPv6: Can't replace route, no match found [ 436.320404][ T45] usb 7-1: new low-speed USB device number 98 using dummy_hcd [ 436.496700][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.501374][ T8933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8933 comm=syz.9.3268 [ 436.519722][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 436.548465][ T45] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.570406][ T45] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 436.589937][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.617495][ T45] hub 7-1:1.0: bad descriptor, ignoring hub [ 436.630380][ T45] hub 7-1:1.0: probe with driver hub failed with error -5 [ 436.646647][ T45] cdc_wdm 7-1:1.0: skipping garbage [ 436.670363][ T45] cdc_wdm 7-1:1.0: skipping garbage [ 436.680444][ T45] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 436.930632][ T45] usb 7-1: USB disconnect, device number 98 [ 437.175851][ T8958] netlink: 'syz.3.3278': attribute type 5 has an invalid length. [ 437.628236][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.647581][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.820549][ T45] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 437.849601][ T8969] IPv6: Can't replace route, no match found [ 437.982894][ T45] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.992744][ T45] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.007014][ T45] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 438.016158][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.024214][ T45] usb 7-1: Product: syz [ 438.028406][ T45] usb 7-1: Manufacturer: syz [ 438.033024][ T45] usb 7-1: SerialNumber: syz [ 438.042670][ T45] ums-karma 7-1:1.0: USB Mass Storage device detected [ 438.053702][ T45] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 438.053702][ T45] Please send a copy of this message to and [ 438.121545][ T45] ums-karma 7-1:1.0: probe with driver ums-karma failed with error -5 [ 438.305784][ T8984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8984 comm=syz.9.3289 [ 438.998979][ T9018] syzkaller1: entered promiscuous mode [ 439.015546][ T9018] syzkaller1: entered allmulticast mode [ 439.912838][ T36] kauditd_printk_skb: 983 callbacks suppressed [ 439.912858][ T36] audit: type=1400 audit(2000000024.790:69773): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.977829][ T36] audit: type=1400 audit(2000000024.790:69774): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.013239][ T36] audit: type=1400 audit(2000000024.790:69775): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.039920][ T36] audit: type=1400 audit(2000000024.830:69776): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.065123][ T36] audit: type=1400 audit(2000000024.830:69777): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.098617][ T36] audit: type=1400 audit(2000000024.830:69778): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.125684][ T36] audit: type=1400 audit(2000000024.850:69779): avc: denied { read write } for pid=9038 comm="syz.7.3311" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.150413][ T36] audit: type=1400 audit(2000000024.850:69780): avc: denied { read write open } for pid=9038 comm="syz.7.3311" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.155693][ T9042] netlink: 'syz.3.3312': attribute type 27 has an invalid length. [ 440.177306][ T36] audit: type=1400 audit(2000000024.860:69781): avc: denied { ioctl } for pid=9038 comm="syz.7.3311" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.214281][ T36] audit: type=1400 audit(2000000024.870:69782): avc: denied { ioctl } for pid=9038 comm="syz.7.3311" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 440.353683][ T9050] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1281 sclass=netlink_xfrm_socket pid=9050 comm=syz.3.3315 [ 440.367818][ T9051] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1281 sclass=netlink_xfrm_socket pid=9051 comm=syz.3.3315 [ 440.519071][ T9060] overlayfs: failed to resolve './cgroup': -2 [ 440.577925][ T313] usb 7-1: USB disconnect, device number 99 [ 440.838240][ T9080] IPv6: Can't replace route, no match found [ 441.124216][ T9099] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.3145728.4), cmd(9) [ 441.196089][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3336'. [ 441.211114][ T9101] overlay: ./file7 is not a directory [ 441.630439][ T314] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 441.800524][ T314] usb 7-1: Using ep0 maxpacket: 32 [ 441.816058][ T314] usb 7-1: unable to get BOS descriptor or descriptor too short [ 441.833759][ T314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.864255][ T314] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.899131][ T314] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 441.917025][ T314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.925896][ T314] usb 7-1: Product: syz [ 441.930107][ T314] usb 7-1: Manufacturer: syz [ 441.934850][ T314] usb 7-1: SerialNumber: syz [ 441.974116][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 441.974191][ T9122] 9pnet_fd: Insufficient options for proto=fd [ 442.204989][ T314] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 442.233158][ T314] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 442.272965][ T314] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 442.290386][ T314] usb 7-1: USB disconnect, device number 100 [ 442.407648][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 442.413426][ T9136] syzkaller1: entered promiscuous mode [ 442.429116][ T9136] syzkaller1: entered allmulticast mode [ 442.851538][ T9146] netlink: 'syz.3.3354': attribute type 27 has an invalid length. [ 443.913379][ T9164] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.805306368.4), cmd(9) [ 444.024885][ T9166] 9pnet_fd: Insufficient options for proto=fd [ 444.367766][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.395725][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.450427][ T63] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 444.624373][ T63] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.635889][ T63] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.650530][ T63] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 444.659972][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.668417][ T63] usb 10-1: Product: syz [ 444.672861][ T63] usb 10-1: Manufacturer: syz [ 444.677548][ T63] usb 10-1: SerialNumber: syz [ 444.684425][ T63] usb 10-1: config 0 descriptor?? [ 444.921565][ T36] kauditd_printk_skb: 1909 callbacks suppressed [ 444.921586][ T36] audit: type=1400 audit(2000000029.790:71692): avc: denied { unlink } for pid=8032 comm="syz-executor" name="file2" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 444.999572][ T36] audit: type=1400 audit(2000000029.840:71693): avc: denied { read } for pid=9171 comm="syz.9.3364" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.060475][ T36] audit: type=1400 audit(2000000029.840:71694): avc: denied { read open } for pid=9171 comm="syz.9.3364" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.131496][ T36] audit: type=1400 audit(2000000029.840:71695): avc: denied { ioctl } for pid=9171 comm="syz.9.3364" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.157037][ T36] audit: type=1400 audit(2000000029.880:71696): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.182572][ T36] audit: type=1400 audit(2000000029.880:71697): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.209043][ T36] audit: type=1400 audit(2000000029.880:71698): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.230599][ T9204] kvm: user requested TSC rate below hardware speed [ 445.236129][ T36] audit: type=1400 audit(2000000029.940:71699): avc: denied { read } for pid=9203 comm="syz.7.3376" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.264162][ T36] audit: type=1400 audit(2000000029.940:71700): avc: denied { read open } for pid=9203 comm="syz.7.3376" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.294287][ T45] usb 10-1: USB disconnect, device number 34 [ 445.300578][ T36] audit: type=1400 audit(2000000029.950:71701): avc: denied { ioctl } for pid=9203 comm="syz.7.3376" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.546163][ T9215] netlink: 'syz.7.3380': attribute type 27 has an invalid length. [ 445.631991][ T9217] syzkaller1: entered promiscuous mode [ 445.637847][ T9217] syzkaller1: entered allmulticast mode [ 445.932957][ T9226] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3384'. [ 446.233227][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3388'. [ 446.354449][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.383625][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.877126][ T9254] netlink: 'syz.3.3396': attribute type 27 has an invalid length. [ 446.943771][ T9256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9256 comm=syz.3.3397 [ 447.245846][ T9273] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3404'. [ 447.300411][ T45] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 447.330689][ T314] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 447.463857][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.474977][ T45] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 447.485399][ T45] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.500512][ T314] usb 10-1: Using ep0 maxpacket: 8 [ 447.515065][ T45] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 447.520585][ T314] usb 10-1: config 3 has an invalid interface number: 130 but max is 3 [ 447.530417][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.537281][ T314] usb 10-1: config 3 has an invalid interface number: 199 but max is 3 [ 447.549134][ T314] usb 10-1: config 3 has an invalid interface number: 36 but max is 3 [ 447.561011][ T45] usb 7-1: Product: syz [ 447.569407][ T314] usb 10-1: config 3 has an invalid interface number: 21 but max is 3 [ 447.570514][ T45] usb 7-1: Manufacturer: syz [ 447.582444][ T314] usb 10-1: config 3 has no interface number 0 [ 447.594476][ T314] usb 10-1: config 3 has no interface number 1 [ 447.594583][ T45] usb 7-1: SerialNumber: syz [ 447.610359][ T314] usb 10-1: config 3 has no interface number 2 [ 447.620388][ T314] usb 10-1: config 3 has no interface number 3 [ 447.626997][ T314] usb 10-1: config 3 interface 130 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 447.650160][ T314] usb 10-1: config 3 interface 130 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 447.661965][ T314] usb 10-1: config 3 interface 130 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 447.673181][ T314] usb 10-1: config 3 interface 130 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 447.685197][ T314] usb 10-1: config 3 interface 199 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 447.699197][ T314] usb 10-1: config 3 interface 199 altsetting 4 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 447.711349][ T314] usb 10-1: config 3 interface 199 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 447.723460][ T314] usb 10-1: config 3 interface 199 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 447.734461][ T314] usb 10-1: config 3 interface 199 altsetting 4 endpoint 0x9 has invalid wMaxPacketSize 0 [ 447.744902][ T314] usb 10-1: config 3 interface 199 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 447.756008][ T314] usb 10-1: config 3 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 447.778252][ T314] usb 10-1: config 3 interface 199 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 447.792253][ T314] usb 10-1: config 3 interface 199 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 447.810230][ T314] usb 10-1: config 3 interface 199 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 447.822498][ T314] usb 10-1: config 3 interface 199 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 447.833601][ T314] usb 10-1: config 3 interface 36 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 447.845501][ T314] usb 10-1: config 3 interface 36 altsetting 0 endpoint 0xC has an invalid bInterval 252, changing to 11 [ 447.867122][ T314] usb 10-1: config 3 interface 36 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 447.888658][ T314] usb 10-1: config 3 interface 36 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 447.893016][ T45] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 447.905382][ T314] usb 10-1: config 3 interface 36 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 447.938153][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 447.960485][ T45] usb 7-1: clock source 0 is not valid, cannot use [ 447.977595][ T45] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 448.009692][ T314] usb 10-1: config 3 interface 21 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 448.010437][ T45] usb 7-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 448.032160][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.070566][ T45] usb 7-1: USB disconnect, device number 101 [ 448.081179][ T314] usb 10-1: config 3 interface 21 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 448.100583][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.125153][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 448.150386][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 448.162462][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 448.187022][ T3162] udevd[3162]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 448.203503][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 448.207560][ T9300] tipc: Can't bind to reserved service type 0 [ 448.214535][ T314] usb 10-1: config 3 interface 21 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 448.236258][ T314] usb 10-1: config 3 interface 130 has no altsetting 0 [ 448.250924][ T314] usb 10-1: config 3 interface 199 has no altsetting 0 [ 448.258048][ T314] usb 10-1: config 3 interface 21 has no altsetting 0 [ 448.270245][ T314] usb 10-1: New USB device found, idVendor=054c, idProduct=0144, bcdDevice=e1.8f [ 448.284039][ T314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.295497][ T314] usb 10-1: Product: ဇ [ 448.300097][ T314] usb 10-1: Manufacturer: á Š [ 448.307103][ T314] usb 10-1: SerialNumber: syz [ 448.550469][ T45] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 448.573807][ T314] usb 10-1: USB disconnect, device number 35 [ 448.725095][ T45] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 448.749746][ T45] usb 7-1: config 160 has no interface number 0 [ 448.760823][ T45] usb 7-1: config 160 interface 200 has no altsetting 0 [ 448.761931][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.776695][ T45] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 448.796337][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.797730][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.821833][ T45] usb 7-1: Product: syz [ 448.826026][ T45] usb 7-1: Manufacturer: syz [ 448.833694][ T9306] fuse: Unknown parameter '' [ 448.838469][ T45] usb 7-1: SerialNumber: syz [ 449.076765][ T45] usb 7-1: MIDIStreaming interface descriptor not found [ 449.094669][ T45] usb 7-1: USB disconnect, device number 102 [ 449.269587][ T3162] udevd[3162]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 449.430427][ T361] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 449.463388][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.500610][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.606096][ T361] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.628737][ T361] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.648700][ T361] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 449.668082][ T361] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.680729][ T361] usb 10-1: config 0 descriptor?? [ 449.912252][ T9321] netlink: 'syz.9.3423': attribute type 13 has an invalid length. [ 449.938548][ T36] kauditd_printk_skb: 1918 callbacks suppressed [ 449.938568][ T36] audit: type=1400 audit(2000000034.810:73620): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.994028][ T36] audit: type=1400 audit(2000000034.850:73621): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.019761][ T36] audit: type=1400 audit(2000000034.850:73622): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.045800][ T9321] erspan0: refused to change device tx_queue_len [ 450.052789][ T36] audit: type=1400 audit(2000000034.920:73623): avc: denied { read write } for pid=9324 comm="syz.6.3426" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.076598][ T36] audit: type=1400 audit(2000000034.920:73624): avc: denied { read write open } for pid=9324 comm="syz.6.3426" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.157392][ T36] audit: type=1400 audit(2000000034.950:73625): avc: denied { map } for pid=9324 comm="syz.6.3426" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.250400][ T36] audit: type=1400 audit(2000000034.950:73626): avc: denied { read } for pid=9324 comm="syz.6.3426" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 450.335604][ T36] audit: type=1400 audit(2000000035.100:73627): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.430370][ T36] audit: type=1400 audit(2000000035.100:73628): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.480376][ T361] usbhid 10-1:0.0: can't add hid device: -71 [ 450.480401][ T36] audit: type=1400 audit(2000000035.100:73629): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.509045][ T361] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 450.548106][ T361] usb 10-1: USB disconnect, device number 36 [ 450.799475][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3427'. [ 450.912530][ T9347] netlink: 'syz.3.3434': attribute type 27 has an invalid length. [ 450.991091][ T9349] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3435'. [ 451.179532][ T9355] netlink: 'syz.3.3438': attribute type 13 has an invalid length. [ 451.615307][ T313] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 451.790867][ T313] usb 7-1: config 0 has no interfaces? [ 451.804536][ T313] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 451.827266][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.851096][ T313] usb 7-1: Product: syz [ 451.855305][ T313] usb 7-1: Manufacturer: syz [ 451.876980][ T313] usb 7-1: SerialNumber: syz [ 451.895664][ T313] usb 7-1: config 0 descriptor?? [ 452.182462][ T9375] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3445'. [ 452.285236][ T63] usb 7-1: USB disconnect, device number 103 [ 452.464419][ T9380] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 452.820408][ T63] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 453.020561][ T63] usb 10-1: Using ep0 maxpacket: 16 [ 453.037350][ T63] usb 10-1: unable to get BOS descriptor or descriptor too short [ 453.061654][ T63] usb 10-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice= 0.40 [ 453.080362][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.091643][ T63] usb 10-1: Product: syz [ 453.095908][ T63] usb 10-1: Manufacturer: syz [ 453.109735][ T63] usb 10-1: SerialNumber: syz [ 453.335756][ T63] usb 10-1: MIDIStreaming interface descriptor not found [ 453.365367][ T63] usb 10-1: USB disconnect, device number 37 [ 453.481917][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 453.752263][ T9404] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 454.220416][ T313] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 454.385073][ T313] usb 10-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 454.397107][ T313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.417750][ T313] usb 10-1: config 0 descriptor?? [ 454.840664][ T313] samsung 0003:0419:0001.0054: item fetching failed at offset 5/8 [ 454.861035][ T313] samsung 0003:0419:0001.0054: parse failed [ 454.870421][ T313] samsung 0003:0419:0001.0054: probe with driver samsung failed with error -22 [ 454.955611][ T36] kauditd_printk_skb: 1561 callbacks suppressed [ 454.955632][ T36] audit: type=1400 audit(2000000039.830:75191): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.020440][ T36] audit: type=1400 audit(2000000039.830:75192): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.046934][ T36] audit: type=1400 audit(2000000039.830:75193): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.082742][ T9417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.100738][ T9417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.111746][ T36] audit: type=1400 audit(2000000039.850:75194): avc: denied { create } for pid=9443 comm="syz.6.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.145827][ T36] audit: type=1400 audit(2000000039.860:75195): avc: denied { write } for pid=9443 comm="syz.6.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.177921][ T36] audit: type=1400 audit(2000000039.910:75196): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.213158][ T36] audit: type=1400 audit(2000000039.910:75197): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.290378][ T36] audit: type=1400 audit(2000000039.910:75198): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.325198][ T36] audit: type=1400 audit(2000000039.950:75199): avc: denied { read write } for pid=9416 comm="syz.9.3462" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.351160][ T36] audit: type=1400 audit(2000000039.950:75200): avc: denied { read write open } for pid=9416 comm="syz.9.3462" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 455.788081][ T9460] tipc: Started in network mode [ 455.800420][ T9460] tipc: Node identity 8ad20b5cbc8e, cluster identity 4711 [ 455.811616][ T9460] tipc: Enabled bearer , priority 0 [ 455.885177][ T9459] tipc: Disabling bearer [ 455.910531][ T63] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 456.076415][ T63] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.119146][ T63] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.156655][ T63] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 456.171536][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.196730][ T63] usb 7-1: Product: syz [ 456.206830][ T63] usb 7-1: Manufacturer: syz [ 456.217047][ T63] usb 7-1: SerialNumber: syz [ 456.235324][ T63] usb 7-1: config 0 descriptor?? [ 456.367869][ T9470] syzkaller1: entered promiscuous mode [ 456.389641][ T9470] syzkaller1: entered allmulticast mode [ 456.581639][ T63] usb 7-1: USB disconnect, device number 104 [ 456.780191][ T9485] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3490'. [ 456.836152][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3491'. [ 456.891087][ T9493] 9pnet_fd: Insufficient options for proto=fd [ 456.977802][ T9495] 9pnet_fd: Insufficient options for proto=fd [ 456.988358][ T523] usb 10-1: USB disconnect, device number 38 [ 457.028263][ T9497] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3495'. [ 457.127372][ T9499] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 457.361763][ T9506] x_tables: duplicate entry at hook 1 [ 457.513911][ T9511] fuse: Bad value for 'fd' [ 457.930496][ T9525] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 458.341873][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.360539][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.500399][ T45] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 458.541730][ T9544] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 458.682581][ T45] usb 10-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 458.710470][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.727791][ T45] usb 10-1: config 0 descriptor?? [ 459.175522][ T45] ntrig 0003:1B96:0003.0055: unknown main item tag 0x0 [ 459.195398][ T45] ntrig 0003:1B96:0003.0055: unknown main item tag 0x0 [ 459.209985][ T45] ntrig 0003:1B96:0003.0055: unknown main item tag 0x4 [ 459.222193][ T45] ntrig 0003:1B96:0003.0055: unknown main item tag 0x0 [ 459.232457][ T45] ntrig 0003:1B96:0003.0055: hidraw0: USB HID vef.fd Device [HID 1b96:0003] on usb-dummy_hcd.9-1/input0 [ 459.392708][ T45] usb 10-1: USB disconnect, device number 39 [ 459.615431][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.635463][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.974280][ T36] kauditd_printk_skb: 526 callbacks suppressed [ 459.974302][ T36] audit: type=1400 audit(2000000044.840:75727): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.048655][ T36] audit: type=1400 audit(2000000044.840:75728): avc: denied { read write open } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.123591][ T36] audit: type=1400 audit(2000000044.840:75729): avc: denied { ioctl } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.167495][ T36] audit: type=1400 audit(2000000044.850:75730): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.210437][ T36] audit: type=1400 audit(2000000044.850:75731): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.280128][ T9595] netlink: 'syz.3.3532': attribute type 27 has an invalid length. [ 460.288335][ T36] audit: type=1400 audit(2000000044.850:75732): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.361830][ T36] audit: type=1400 audit(2000000044.920:75733): avc: denied { create } for pid=9582 comm="syz.7.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.426895][ T36] audit: type=1400 audit(2000000044.920:75734): avc: denied { create } for pid=9581 comm="syz.9.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.508675][ T36] audit: type=1400 audit(2000000044.940:75735): avc: denied { write } for pid=9581 comm="syz.9.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.574647][ T36] audit: type=1400 audit(2000000044.980:75736): avc: denied { mounton } for pid=9586 comm="syz.3.3530" path="/239/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 460.740475][ T523] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 460.926738][ T523] usb 7-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 460.958928][ T523] usb 7-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 460.972409][ T523] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.989659][ T523] usb 7-1: Product: syz [ 460.998588][ T523] usb 7-1: Manufacturer: syz [ 461.008783][ T523] usb 7-1: SerialNumber: syz [ 461.750694][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.815609][ T523] usb 7-1: USB disconnect, device number 105 [ 461.824109][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.875609][ T9632] netlink: 'syz.9.3547': attribute type 27 has an invalid length. [ 461.912433][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.941938][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.426825][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3553'. [ 462.661366][ T9653] veth0_to_bond: mtu less than device minimum [ 463.283827][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3563'. [ 463.812912][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 464.060936][ T9706] netlink: 'syz.9.3576': attribute type 27 has an invalid length. [ 464.281179][ T9714] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3579'. [ 464.370538][ T63] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 464.379198][ T9715] netlink: 'syz.6.3578': attribute type 27 has an invalid length. [ 464.545860][ T9723] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 464.564000][ T9723] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3582'. [ 464.574772][ T63] usb 10-1: unable to get BOS descriptor or descriptor too short [ 464.600852][ T63] usb 10-1: not running at top speed; connect to a high speed hub [ 464.677801][ T63] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 464.693987][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.712733][ T63] usb 10-1: Product: syz [ 464.717015][ T63] usb 10-1: Manufacturer: syz [ 464.730460][ T63] usb 10-1: SerialNumber: syz [ 464.987685][ T63] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 465.003221][ T63] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 465.028113][ T63] usb 10-1: USB disconnect, device number 40 [ 465.146716][ T36] kauditd_printk_skb: 382 callbacks suppressed [ 465.146736][ T36] audit: type=1400 audit(2000000050.020:76119): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.186130][ T36] audit: type=1400 audit(2000000050.050:76120): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.264789][ T36] audit: type=1400 audit(2000000050.050:76121): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.311906][ T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 465.389705][ T9735] overlayfs: failed to clone upperpath [ 465.395468][ T36] audit: type=1400 audit(2000000050.260:76122): avc: denied { mounton } for pid=9734 comm="syz.3.3586" path="/260/file0" dev="tmpfs" ino=1422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.440842][ T9736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.449777][ T36] audit: type=1400 audit(2000000050.310:76123): avc: denied { mounton } for pid=9734 comm="syz.3.3586" path="/260/bus" dev="tmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.472770][ T9736] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 465.495671][ T9737] fuse: Unknown parameter '–' [ 465.502659][ T36] audit: type=1400 audit(2000000050.320:76124): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.527375][ T9736] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 465.548015][ T36] audit: type=1400 audit(2000000050.320:76125): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.592092][ T9737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9737 comm=syz.3.3586 [ 465.610512][ T36] audit: type=1400 audit(2000000050.320:76126): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.670372][ T36] audit: type=1400 audit(2000000050.370:76127): avc: denied { mounton } for pid=9734 comm="syz.3.3586" path="/260/file1" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.717939][ T36] audit: type=1400 audit(2000000050.410:76128): avc: denied { create } for pid=9734 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.792007][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3586'. [ 465.823033][ T9744] /dev/nullb0: Can't lookup blockdev [ 466.074110][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3590'. [ 466.205007][ T9758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9758 comm=syz.9.3592 [ 466.433310][ T9765] Invalid argument reading file caps for ./file0 [ 466.591872][ T9771] batadv_slave_1: entered promiscuous mode [ 466.611536][ T9771] batadv_slave_1: left promiscuous mode [ 466.633095][ T9771] overlayfs: failed to clone upperpath [ 466.700505][ T313] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 466.850390][ T313] usb 10-1: Using ep0 maxpacket: 32 [ 466.864675][ T313] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.890429][ T313] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 466.900391][ T313] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 466.920385][ T313] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 466.945215][ T313] usb 10-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 466.966900][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.980389][ T313] usb 10-1: Product: syz [ 466.984677][ T313] usb 10-1: Manufacturer: syz [ 466.989372][ T313] usb 10-1: SerialNumber: syz [ 467.015377][ T9765] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 467.239145][ T313] usb 10-1: MIDIStreaming interface descriptor not found [ 467.260966][ T313] usb 10-1: USB disconnect, device number 41 [ 467.295986][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3608'. [ 467.441276][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 467.555229][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3610'. [ 467.769812][ T9801] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3614'. [ 468.253643][ T9818] netlink: 'syz.9.3621': attribute type 4 has an invalid length. [ 468.305992][ T9818] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3621'. [ 468.770452][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.780014][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.801034][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.809543][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.474219][ T9874] rust_binder: Write failure EINVAL in pid:1171 [ 470.156605][ T36] kauditd_printk_skb: 476 callbacks suppressed [ 470.156628][ T36] audit: type=1400 audit(2000000055.030:76605): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.230461][ T36] audit: type=1400 audit(2000000055.030:76606): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.291874][ T36] audit: type=1400 audit(2000000055.030:76607): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.356344][ T36] audit: type=1400 audit(2000000055.040:76608): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.439006][ T36] audit: type=1400 audit(2000000055.040:76609): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.510433][ T36] audit: type=1400 audit(2000000055.120:76610): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.550753][ T36] audit: type=1400 audit(2000000055.120:76611): avc: denied { read write open } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.630404][ T36] audit: type=1400 audit(2000000055.120:76612): avc: denied { ioctl } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.690385][ T36] audit: type=1400 audit(2000000055.170:76613): avc: denied { create } for pid=9906 comm="syz.9.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.752721][ T36] audit: type=1400 audit(2000000055.210:76614): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.854886][ T9916] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 471.702138][ T9947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9947 comm=syz.3.3672 [ 471.725884][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3670'. [ 472.123871][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3675'. [ 472.427608][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3683'. [ 472.566422][ T9984] overlayfs: failed to clone upperpath [ 472.609921][ T9984] overlayfs: failed to clone upperpath [ 472.700509][ T63] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 472.710613][ T9988] netlink: 'syz.3.3689': attribute type 27 has an invalid length. [ 472.860480][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 472.880682][ T63] usb 10-1: too many configurations: 172, using maximum allowed: 8 [ 472.910253][ T63] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 472.918000][ T63] usb 10-1: can't read configurations, error -61 [ 473.080471][ T63] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 473.114462][ T9997] netlink: 'syz.6.3693': attribute type 27 has an invalid length. [ 473.260449][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 473.269903][ T63] usb 10-1: too many configurations: 172, using maximum allowed: 8 [ 473.313184][ T63] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 473.340442][ T63] usb 10-1: can't read configurations, error -61 [ 473.346010][T10002] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3695'. [ 473.347832][ T63] usb usb10-port1: attempt power cycle [ 473.710415][ T63] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 473.761851][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 473.768590][ T63] usb 10-1: too many configurations: 172, using maximum allowed: 8 [ 473.794716][ T63] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 473.811842][ T63] usb 10-1: can't read configurations, error -61 [ 473.875065][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3701'. [ 473.960421][ T63] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 474.001294][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 474.007867][ T63] usb 10-1: too many configurations: 172, using maximum allowed: 8 [ 474.043082][ T63] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 474.061079][ T63] usb 10-1: can't read configurations, error -61 [ 474.071149][ T63] usb usb10-port1: unable to enumerate USB device [ 474.506211][T10028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10028 comm=syz.6.3706 [ 474.823240][T10036] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3710'. [ 475.111714][T10044] syzkaller1: entered promiscuous mode [ 475.117220][T10044] syzkaller1: entered allmulticast mode [ 475.143529][T10048] 9pnet_fd: Insufficient options for proto=fd [ 475.390036][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 475.390055][ T36] audit: type=1400 audit(2000000060.260:77035): avc: denied { create } for pid=10053 comm="syz.3.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.454928][ T36] audit: type=1400 audit(2000000060.270:77036): avc: denied { write } for pid=10053 comm="syz.3.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.508306][ T36] audit: type=1400 audit(2000000060.270:77037): avc: denied { nlmsg_write } for pid=10053 comm="syz.3.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.559042][ T36] audit: type=1400 audit(2000000060.320:77038): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.606038][ T36] audit: type=1400 audit(2000000060.320:77039): avc: denied { read write open } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.654148][ T36] audit: type=1400 audit(2000000060.320:77040): avc: denied { ioctl } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.683452][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.696479][ T36] audit: type=1400 audit(2000000060.380:77041): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.730703][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.738681][ T36] audit: type=1400 audit(2000000060.380:77042): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.765283][ T36] audit: type=1400 audit(2000000060.380:77043): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.797223][ T36] audit: type=1400 audit(2000000060.560:77044): avc: denied { read write } for pid=10062 comm="syz.7.3721" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 475.960364][T10072] netlink: 'syz.6.3724': attribute type 27 has an invalid length. [ 476.270529][ T313] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 476.320075][T10076] 9pnet_fd: Insufficient options for proto=fd [ 476.410555][ T313] usb 7-1: device descriptor read/64, error -71 [ 476.630415][ T45] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 476.660419][ T313] usb 7-1: device descriptor read/64, error -71 [ 476.701525][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.730555][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.780815][ T45] usb 10-1: device descriptor read/64, error -71 [ 476.910436][ T313] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 477.020507][ T45] usb 10-1: device descriptor read/64, error -71 [ 477.050426][ T313] usb 7-1: device descriptor read/64, error -71 [ 477.260467][ T45] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 477.290396][ T313] usb 7-1: device descriptor read/64, error -71 [ 477.368897][T10124] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 477.400483][ T45] usb 10-1: device descriptor read/64, error -71 [ 477.420605][ T313] usb usb7-port1: attempt power cycle [ 477.558861][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 477.640648][ T45] usb 10-1: device descriptor read/64, error -71 [ 477.758468][ T45] usb usb10-port1: attempt power cycle [ 477.770553][ T313] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 477.805595][ T313] usb 7-1: device descriptor read/8, error -71 [ 477.944138][ T313] usb 7-1: device descriptor read/8, error -71 [ 478.120486][ T45] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 478.143045][ T45] usb 10-1: device descriptor read/8, error -71 [ 478.190421][ T313] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 478.212787][ T313] usb 7-1: device descriptor read/8, error -71 [ 478.272986][ T45] usb 10-1: device descriptor read/8, error -71 [ 478.342788][ T313] usb 7-1: device descriptor read/8, error -71 [ 478.450919][ T313] usb usb7-port1: unable to enumerate USB device [ 478.510456][ T45] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 478.517447][T10162] netlink: 'syz.3.3760': attribute type 27 has an invalid length. [ 478.534063][ T45] usb 10-1: device descriptor read/8, error -71 [ 478.587332][T10166] incfs: Backing dir is not set, filesystem can't be mounted. [ 478.595112][T10166] incfs: mount failed -2 [ 478.691152][ T45] usb 10-1: device descriptor read/8, error -71 [ 478.820923][ T45] usb usb10-port1: unable to enumerate USB device [ 479.454499][T10194] incfs: Backing dir is not set, filesystem can't be mounted. [ 479.462358][T10194] incfs: mount failed -2 [ 479.542945][T10197] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 479.891157][T10216] incfs: Backing dir is not set, filesystem can't be mounted. [ 479.898685][T10216] incfs: mount failed -2 [ 480.064831][T10219] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 480.396987][ T36] kauditd_printk_skb: 599 callbacks suppressed [ 480.397007][ T36] audit: type=1400 audit(2000000065.270:77644): avc: denied { create } for pid=10236 comm="syz.9.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 480.445465][ T36] audit: type=1400 audit(2000000065.270:77645): avc: denied { write } for pid=10236 comm="syz.9.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 480.467520][ T36] audit: type=1400 audit(2000000065.270:77646): avc: denied { nlmsg_write } for pid=10236 comm="syz.9.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 480.488542][ T36] audit: type=1400 audit(2000000065.280:77647): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.512960][ T36] audit: type=1400 audit(2000000065.280:77648): avc: denied { read write open } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.539328][ T36] audit: type=1400 audit(2000000065.280:77649): avc: denied { ioctl } for pid=7797 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.582566][ T36] audit: type=1400 audit(2000000065.460:77650): avc: denied { read write } for pid=7797 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.630711][ T36] audit: type=1400 audit(2000000065.460:77651): avc: denied { sys_module } for pid=10241 comm="syz.3.3793" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 480.654233][ T36] audit: type=1400 audit(2000000065.460:77652): avc: denied { create } for pid=10241 comm="syz.3.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.677118][ T36] audit: type=1400 audit(2000000065.460:77653): avc: denied { create } for pid=10241 comm="syz.3.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.843337][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 481.164736][T10269] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 481.278046][T10273] netlink: 'syz.9.3806': attribute type 27 has an invalid length. [ 481.394742][T10277] FAULT_INJECTION: forcing a failure. [ 481.394742][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.430383][T10277] CPU: 1 UID: 0 PID: 10277 Comm: syz.7.3807 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 481.430418][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.430433][T10277] Call Trace: [ 481.430441][T10277] [ 481.430453][T10277] __dump_stack+0x21/0x30 [ 481.430486][T10277] dump_stack_lvl+0x140/0x1c0 [ 481.430514][T10277] ? __cfi_dump_stack_lvl+0x10/0x10 [ 481.430543][T10277] ? rb_commit+0x753/0x7b0 [ 481.430566][T10277] dump_stack+0x19/0x20 [ 481.430592][T10277] should_fail_ex+0x3c2/0x510 [ 481.430617][T10277] should_fail+0xf/0x20 [ 481.430638][T10277] should_fail_usercopy+0x1e/0x30 [ 481.430663][T10277] _copy_to_iter+0x3b6/0x1520 [ 481.430691][T10277] ? __cfi__copy_to_iter+0x10/0x10 [ 481.430717][T10277] ? __check_object_size+0x54c/0x870 [ 481.430741][T10277] ? __cfi___check_object_size+0x10/0x10 [ 481.430763][T10277] ? trace_event_raw_event_skb_copy_datagram_iovec+0x159/0x220 [ 481.430795][T10277] __skb_datagram_iter+0x103/0x940 [ 481.430817][T10277] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 481.430840][T10277] skb_copy_datagram_iter+0x44/0x160 [ 481.430862][T10277] netlink_recvmsg+0x2d4/0xe60 [ 481.430885][T10277] ? __cfi_netlink_recvmsg+0x10/0x10 [ 481.430917][T10277] ? trace_event_buffer_commit+0x256/0x8f0 [ 481.430942][T10277] ? iovec_from_user+0x94/0x310 [ 481.430970][T10277] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 481.430993][T10277] ? security_socket_recvmsg+0x44/0x130 [ 481.431020][T10277] ? __cfi_netlink_recvmsg+0x10/0x10 [ 481.431043][T10277] sock_recvmsg+0x185/0x1e0 [ 481.431070][T10277] ____sys_recvmsg+0x1e7/0x4a0 [ 481.431094][T10277] ? __sys_recvmsg_sock+0x60/0x60 [ 481.431118][T10277] ? import_iovec+0x80/0xb0 [ 481.431146][T10277] ___sys_recvmsg+0x214/0x590 [ 481.431169][T10277] ? __sys_recvmsg+0x2a0/0x2a0 [ 481.431189][T10277] ? __cfi_trace_clock_local+0x10/0x10 [ 481.431211][T10277] ? kvm_sched_clock_read+0x15/0x30 [ 481.431240][T10277] ? sched_clock_noinstr+0xd/0x30 [ 481.431271][T10277] do_recvmmsg+0x36d/0x7f0 [ 481.431300][T10277] ? __sys_recvmmsg+0x2a0/0x2a0 [ 481.431324][T10277] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 481.431350][T10277] ? trace_event_buffer_commit+0x256/0x8f0 [ 481.431374][T10277] __x64_sys_recvmmsg+0x199/0x250 [ 481.431397][T10277] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 481.431422][T10277] x64_sys_call+0x292c/0x2ee0 [ 481.431442][T10277] do_syscall_64+0x57/0xf0 [ 481.431466][T10277] ? clear_bhb_loop+0x50/0xa0 [ 481.431494][T10277] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 481.431521][T10277] RIP: 0033:0x7fc64af9e0d9 [ 481.431541][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.431561][T10277] RSP: 002b:00007fc64beae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 481.431588][T10277] RAX: ffffffffffffffda RBX: 00007fc64b225fa0 RCX: 00007fc64af9e0d9 [ 481.431605][T10277] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 481.431621][T10277] RBP: 00007fc64beae090 R08: 0000000000000000 R09: 0000000000000000 [ 481.431636][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.431650][T10277] R13: 00007fc64b226038 R14: 00007fc64b225fa0 R15: 00007ffc0cc55808 [ 481.431670][T10277] [ 481.811761][T10288] 9pnet_fd: Insufficient options for proto=fd [ 482.018066][T10294] input: syz1 as /devices/virtual/input/input84 [ 482.252956][T10301] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 482.390430][T10303] netlink: 'syz.7.3817': attribute type 27 has an invalid length. [ 482.768124][T10317] 9pnet_fd: Insufficient options for proto=fd [ 483.149809][T10328] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 483.323348][T10334] netlink: 'syz.7.3829': attribute type 27 has an invalid length. [ 483.454686][T10337] lo: entered promiscuous mode [ 483.521307][T10337] lo: left promiscuous mode [ 483.732687][T10352] input: syz1 as /devices/virtual/input/input85 [ 483.768455][T10348] 9pnet_fd: Insufficient options for proto=fd [ 484.770411][ T313] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 484.964433][ T313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.982512][ T313] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.000916][ T313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.023053][ T313] usb 10-1: config 0 descriptor?? [ 485.242016][ T313] usbhid 10-1:0.0: can't add hid device: -71 [ 485.248384][ T313] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 485.269803][ T313] usb 10-1: USB disconnect, device number 50 [ 485.437958][ T36] kauditd_printk_skb: 1443 callbacks suppressed [ 485.437979][ T36] audit: type=1400 audit(2000000070.310:79097): avc: denied { create } for pid=10385 comm="syz.6.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.490586][ T36] audit: type=1400 audit(2000000070.320:79098): avc: denied { read write } for pid=10368 comm="syz.9.3841" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.523089][ T36] audit: type=1400 audit(2000000070.320:79099): avc: denied { read write open } for pid=10368 comm="syz.9.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.549235][ T36] audit: type=1400 audit(2000000070.320:79100): avc: denied { ioctl } for pid=10368 comm="syz.9.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.607878][ T36] audit: type=1400 audit(2000000070.320:79101): avc: denied { ioctl } for pid=10368 comm="syz.9.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.658654][ T36] audit: type=1400 audit(2000000070.320:79102): avc: denied { ioctl } for pid=10368 comm="syz.9.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.684867][ T36] audit: type=1400 audit(2000000070.320:79103): avc: denied { ioctl } for pid=10368 comm="syz.9.3841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.712841][ T36] audit: type=1400 audit(2000000070.400:79104): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.739606][ T36] audit: type=1400 audit(2000000070.400:79105): avc: denied { read write open } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.765224][ T36] audit: type=1400 audit(2000000070.400:79106): avc: denied { ioctl } for pid=4503 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.791056][ T313] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 485.851881][T10393] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 485.954564][ T313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.966045][ T313] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 485.976568][ T313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.987764][ T313] usb 10-1: config 0 descriptor?? [ 486.301720][T10402] tc_dump_action: action bad kind [ 486.822325][ T313] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 486.834668][ T313] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input87 [ 486.877976][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3858'. [ 487.157029][ T313] usb 10-1: USB disconnect, device number 51 [ 487.163164][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 487.801740][T10427] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10427 comm=syz.9.3862 [ 488.017609][T10443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3867'. [ 488.474963][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3879'. [ 488.540417][T10475] overlayfs: failed to clone upperpath [ 489.153511][T10482] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 489.265533][T10488] netlink: 'syz.6.3885': attribute type 3 has an invalid length. [ 489.281149][T10486] netlink: 'syz.6.3885': attribute type 3 has an invalid length. [ 489.302154][T10486] netlink: 'syz.6.3885': attribute type 27 has an invalid length. [ 489.325786][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3888'. [ 489.800855][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.808158][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.880541][ T313] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 490.030586][ T313] usb 10-1: device descriptor read/64, error -71 [ 490.270441][ T313] usb 10-1: device descriptor read/64, error -71 [ 490.451050][ T36] kauditd_printk_skb: 433 callbacks suppressed [ 490.451064][ T36] audit: type=1400 audit(2000000075.330:79540): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.510436][ T313] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 490.518928][ T36] audit: type=1400 audit(2000000075.390:79541): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.544319][ T36] audit: type=1400 audit(2000000075.390:79542): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.569513][ T36] audit: type=1400 audit(2000000075.420:79543): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.594815][ T36] audit: type=1400 audit(2000000075.440:79544): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.620953][ T36] audit: type=1400 audit(2000000075.500:79545): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.646062][ T36] audit: type=1400 audit(2000000075.500:79546): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.671509][ T36] audit: type=1400 audit(2000000075.500:79547): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.697220][ T36] audit: type=1400 audit(2000000075.570:79548): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.750517][ T313] usb 10-1: device descriptor read/64, error -71 [ 490.861121][ T36] audit: type=1400 audit(2000000075.740:79549): avc: denied { ioctl } for pid=10495 comm="syz.9.3890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.010433][ T313] usb 10-1: device descriptor read/64, error -71 [ 491.120591][ T313] usb usb10-port1: attempt power cycle [ 491.460418][ T313] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 491.482978][ T313] usb 10-1: device descriptor read/8, error -71 [ 491.613064][ T313] usb 10-1: device descriptor read/8, error -71 [ 491.764094][T10497] tipc: Started in network mode [ 491.769231][T10497] tipc: Node identity ac14140f, cluster identity 4711 [ 491.791476][T10497] tipc: New replicast peer: 255.255.255.255 [ 491.797753][T10497] tipc: Enabled bearer , priority 10 [ 491.833171][T10511] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3895'. [ 491.860473][ T313] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 491.890641][T10515] incfs: Backing dir is not set, filesystem can't be mounted. [ 491.912887][T10515] incfs: mount failed -2 [ 491.936204][ T313] usb 10-1: device descriptor read/8, error -71 [ 492.086374][ T313] usb 10-1: device descriptor read/8, error -71 [ 492.201500][ T313] usb usb10-port1: unable to enumerate USB device [ 492.201514][T10529] netlink: 'syz.3.3903': attribute type 27 has an invalid length. [ 492.541754][T10551] netlink: 'syz.3.3911': attribute type 16 has an invalid length. [ 492.940436][ T321] tipc: Node number set to 2886997007 [ 493.102542][T10571] incfs_lookup_dentry err:-13 [ 493.725735][T10599] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3932'. [ 493.915029][T10607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10607 comm=syz.3.3935 [ 493.974176][T10611] netlink: 'syz.3.3937': attribute type 27 has an invalid length. [ 494.454991][T10619] incfs_lookup_dentry err:-13 [ 494.611412][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3942'. [ 494.833918][T10634] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3948'. [ 495.017252][T10641] incfs_lookup_dentry err:-13 [ 495.090407][ T321] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 495.230394][ T321] usb 7-1: device descriptor read/64, error -71 [ 495.239317][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3955'. [ 495.256798][T10652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10652 comm=syz.3.3956 [ 495.320252][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 495.470278][ T36] kauditd_printk_skb: 493 callbacks suppressed [ 495.470427][ T321] usb 7-1: device descriptor read/64, error -71 [ 495.476734][ T36] audit: type=1400 audit(2000000080.340:80043): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.507603][ T36] audit: type=1400 audit(2000000080.360:80044): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.539961][ T36] audit: type=1400 audit(2000000080.360:80045): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.569211][ T36] audit: type=1400 audit(2000000080.440:80046): avc: denied { create } for pid=10662 comm="syz.7.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 495.591217][ T36] audit: type=1400 audit(2000000080.440:80047): avc: denied { create } for pid=10662 comm="syz.7.3960" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.608559][T10663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 495.613910][ T36] audit: type=1400 audit(2000000080.440:80048): avc: denied { map } for pid=10662 comm="syz.7.3960" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.619375][T10663] audit: audit_lost=162 audit_rate_limit=0 audit_backlog_limit=64 [ 495.653720][ T36] audit: type=1400 audit(2000000080.440:80049): avc: denied { read write } for pid=10662 comm="syz.7.3960" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.654584][T10663] audit: backlog limit exceeded [ 495.740414][ T321] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 495.890918][ T321] usb 7-1: device descriptor read/64, error -71 [ 496.141674][ T321] usb 7-1: device descriptor read/64, error -71 [ 496.254705][T10673] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 496.281053][ T321] usb usb7-port1: attempt power cycle [ 496.362654][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3965'. [ 496.535606][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3968'. [ 496.545255][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3968'. [ 496.640500][ T321] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 496.663022][ T321] usb 7-1: device descriptor read/8, error -71 [ 496.790427][ T63] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 496.793963][ T321] usb 7-1: device descriptor read/8, error -71 [ 496.930434][ T63] usb 10-1: device descriptor read/64, error -71 [ 496.954079][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.968957][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.050480][ T321] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 497.073642][ T321] usb 7-1: device descriptor read/8, error -71 [ 497.087920][T10688] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3970'. [ 497.172845][ T63] usb 10-1: device descriptor read/64, error -71 [ 497.187558][T10697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10697 comm=syz.3.3973 [ 497.224986][ T321] usb 7-1: device descriptor read/8, error -71 [ 497.340977][ T321] usb usb7-port1: unable to enumerate USB device [ 497.410418][ T63] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 497.560489][ T63] usb 10-1: device descriptor read/64, error -71 [ 497.820400][ T63] usb 10-1: device descriptor read/64, error -71 [ 497.940986][ T63] usb usb10-port1: attempt power cycle [ 498.290406][ T63] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 498.325948][ T63] usb 10-1: device descriptor read/8, error -71 [ 498.332968][T10730] netlink: 'syz.3.3983': attribute type 27 has an invalid length. [ 498.493491][ T63] usb 10-1: device descriptor read/8, error -71 [ 498.656842][T10740] incfs_lookup_dentry err:-13 [ 498.730398][ T63] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 498.777313][T10753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10753 comm=syz.6.3988 [ 498.800525][ T63] usb 10-1: device descriptor read/8, error -71 [ 498.933836][ T63] usb 10-1: device descriptor read/8, error -71 [ 499.045106][ T63] usb usb10-port1: unable to enumerate USB device [ 499.174437][T10771] incfs_lookup_dentry err:-13 [ 499.404955][T10782] rust_binder: 10780:10782 no such ref 0 [ 499.424030][T10782] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 499.424103][T10782] rust_binder: Read failure Err(EFAULT) in pid:1346 [ 499.790146][T10802] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4007'. [ 500.069127][T10810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10810 comm=syz.9.4011 [ 500.249078][T10817] 9pnet_fd: Insufficient options for proto=fd [ 500.450274][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4016'. [ 500.473250][ T36] kauditd_printk_skb: 3771 callbacks suppressed [ 500.473268][ T36] audit: type=1400 audit(2000000085.350:83821): avc: denied { create } for pid=10825 comm="syz.3.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.540668][ T36] audit: type=1400 audit(2000000085.380:83822): avc: denied { execmem } for pid=10827 comm="syz.7.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 500.579502][ T36] audit: type=1400 audit(2000000085.380:83823): avc: denied { mmap_zero } for pid=10827 comm="syz.7.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 500.602339][T10830] netlink: 'syz.3.4022': attribute type 27 has an invalid length. [ 500.621945][ T36] audit: type=1400 audit(2000000085.390:83824): avc: denied { mounton } for pid=10827 comm="syz.7.4020" path="/519/dev" dev="tmpfs" ino=2805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 500.691425][ T36] audit: type=1400 audit(2000000085.390:83825): avc: denied { mount } for pid=10827 comm="syz.7.4020" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 500.743778][ T36] audit: type=1400 audit(2000000085.390:83826): avc: denied { read } for pid=10827 comm="syz.7.4020" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.790741][ T36] audit: type=1400 audit(2000000085.390:83827): avc: denied { read open } for pid=10827 comm="syz.7.4020" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 500.846609][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.848233][ T36] audit: type=1400 audit(2000000085.390:83828): avc: denied { create } for pid=10827 comm="syz.7.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.877111][ T36] audit: type=1400 audit(2000000085.400:83829): avc: denied { read } for pid=10827 comm="syz.7.4020" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 500.883674][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.902106][ T36] audit: type=1400 audit(2000000085.400:83830): avc: denied { read open } for pid=10827 comm="syz.7.4020" path="/519/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 501.062973][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4029'. [ 501.119375][T10856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10856 comm=syz.3.4031 [ 501.535643][T10875] incfs_lookup_dentry err:-13 [ 502.049051][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4040'. [ 502.229478][T10886] FAULT_INJECTION: forcing a failure. [ 502.229478][T10886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.242939][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.7.4042 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 502.242973][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.242991][T10886] Call Trace: [ 502.243001][T10886] [ 502.243011][T10886] __dump_stack+0x21/0x30 [ 502.243044][T10886] dump_stack_lvl+0x140/0x1c0 [ 502.243071][T10886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 502.243094][T10886] ? kvm_vcpu_ioctl+0x661/0x1000 [ 502.243112][T10886] ? check_stack_object+0x81/0x150 [ 502.243131][T10886] ? __virt_addr_valid+0x2a1/0x370 [ 502.243154][T10886] dump_stack+0x19/0x20 [ 502.243178][T10886] should_fail_ex+0x3c2/0x510 [ 502.243198][T10886] should_fail+0xf/0x20 [ 502.243216][T10886] should_fail_usercopy+0x1e/0x30 [ 502.243237][T10886] _copy_from_user+0x20/0xa0 [ 502.243260][T10886] memdup_user+0x81/0x170 [ 502.243277][T10886] kvm_vcpu_ioctl+0x661/0x1000 [ 502.243294][T10886] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 502.243311][T10886] ? __kasan_check_read+0x15/0x20 [ 502.243328][T10886] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 502.243350][T10886] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 502.243376][T10886] ? bpf_lsm_file_ioctl+0xd/0x20 [ 502.243400][T10886] ? security_file_ioctl+0x3e/0x110 [ 502.243429][T10886] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 502.243449][T10886] __se_sys_ioctl+0x135/0x1b0 [ 502.243474][T10886] __x64_sys_ioctl+0x7f/0xa0 [ 502.243499][T10886] x64_sys_call+0x1878/0x2ee0 [ 502.243518][T10886] do_syscall_64+0x57/0xf0 [ 502.243541][T10886] ? clear_bhb_loop+0x50/0xa0 [ 502.243567][T10886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 502.243598][T10886] RIP: 0033:0x7fc64af9e0d9 [ 502.243617][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.243636][T10886] RSP: 002b:00007fc64beae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.243669][T10886] RAX: ffffffffffffffda RBX: 00007fc64b225fa0 RCX: 00007fc64af9e0d9 [ 502.243687][T10886] RDX: 00002000000001c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 502.243705][T10886] RBP: 00007fc64beae090 R08: 0000000000000000 R09: 0000000000000000 [ 502.243721][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.243736][T10886] R13: 00007fc64b226038 R14: 00007fc64b225fa0 R15: 00007ffc0cc55808 [ 502.243756][T10886] [ 502.703902][T10894] overlay: Unknown parameter 'fsuuid' [ 502.802827][T10900] incfs_lookup_dentry err:-13 [ 503.050500][ T313] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 503.058281][T10910] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4050'. [ 503.225841][ T313] usb 10-1: config 0 has no interfaces? [ 503.251756][ T313] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 503.261110][T10920] incfs_lookup_dentry err:-13 [ 503.265613][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.275172][ T313] usb 10-1: Product: syz [ 503.279434][ T313] usb 10-1: Manufacturer: syz [ 503.285067][ T313] usb 10-1: SerialNumber: syz [ 503.298472][ T313] usb 10-1: config 0 descriptor?? [ 503.369523][T10927] incfs_lookup_dentry err:-13 [ 503.441570][T10925] netlink: 'syz.3.4057': attribute type 27 has an invalid length. [ 503.777696][T10945] FAULT_INJECTION: forcing a failure. [ 503.777696][T10945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.797773][ T10] usb 10-1: USB disconnect, device number 60 [ 503.813494][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.7.4062 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 503.813527][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.813541][T10945] Call Trace: [ 503.813549][T10945] [ 503.813559][T10945] __dump_stack+0x21/0x30 [ 503.813590][T10945] dump_stack_lvl+0x140/0x1c0 [ 503.813616][T10945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 503.813642][T10945] ? check_stack_object+0x138/0x150 [ 503.813665][T10945] dump_stack+0x19/0x20 [ 503.813690][T10945] should_fail_ex+0x3c2/0x510 [ 503.813711][T10945] should_fail+0xf/0x20 [ 503.813731][T10945] should_fail_usercopy+0x1e/0x30 [ 503.813754][T10945] _copy_to_user+0x24/0xa0 [ 503.813779][T10945] simple_read_from_buffer+0xed/0x160 [ 503.813805][T10945] proc_fail_nth_read+0x1aa/0x220 [ 503.813834][T10945] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 503.813862][T10945] ? bpf_lsm_file_permission+0xd/0x20 [ 503.813889][T10945] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 503.813917][T10945] vfs_read+0x288/0xc70 [ 503.813938][T10945] ? rb_commit+0x753/0x7b0 [ 503.813962][T10945] ? __cfi_vfs_read+0x10/0x10 [ 503.813983][T10945] ? __kasan_check_write+0x18/0x20 [ 503.814005][T10945] ? mutex_lock+0x97/0x1d0 [ 503.814032][T10945] ? __cfi_mutex_lock+0x10/0x10 [ 503.814060][T10945] ksys_read+0x145/0x260 [ 503.814079][T10945] ? __cfi_ksys_read+0x10/0x10 [ 503.814099][T10945] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 503.814129][T10945] __x64_sys_read+0x7f/0x90 [ 503.814149][T10945] x64_sys_call+0x2638/0x2ee0 [ 503.814170][T10945] do_syscall_64+0x57/0xf0 [ 503.814193][T10945] ? clear_bhb_loop+0x50/0xa0 [ 503.814221][T10945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 503.814256][T10945] RIP: 0033:0x7fc64af5e90e [ 503.814276][T10945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.814297][T10945] RSP: 002b:00007fc64beadfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.814323][T10945] RAX: ffffffffffffffda RBX: 00007fc64beae6c0 RCX: 00007fc64af5e90e [ 503.814341][T10945] RDX: 000000000000000f RSI: 00007fc64beae0a0 RDI: 0000000000000006 [ 503.814359][T10945] RBP: 00007fc64beae090 R08: 0000000000000000 R09: 0000000000000000 [ 503.814375][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.814390][T10945] R13: 00007fc64b226038 R14: 00007fc64b225fa0 R15: 00007ffc0cc55808 [ 503.814410][T10945] [ 504.282772][T10951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10951 comm=syz.7.4064 [ 504.438464][T10955] incfs_lookup_dentry err:-13 [ 504.782499][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4071'. [ 504.931113][T10972] 9pnet_fd: Insufficient options for proto=fd [ 505.098279][T10978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.206922][T10981] rust_binder: 10980:10981 got transaction to invalid handle 1 [ 505.223006][T10981] rust_binder: 10980:10981 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 505.243607][T10981] rust_binder: 10980: undelivered TRANSACTION_ERROR: 29201 [ 505.270522][ T361] usb 10-1: new full-speed USB device number 61 using dummy_hcd [ 505.318804][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4080'. [ 505.453291][ T361] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.473664][ T361] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.483050][ T36] kauditd_printk_skb: 2313 callbacks suppressed [ 505.483070][ T36] audit: type=1400 audit(2000000090.360:86066): avc: denied { map } for pid=10991 comm="syz.3.4082" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.533563][ T361] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 505.545013][T10992] audit: audit_backlog=66 > audit_backlog_limit=64 [ 505.551493][ T36] audit: type=1400 audit(2000000090.360:86067): avc: denied { read write } for pid=10991 comm="syz.3.4082" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.551627][ T361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.585245][ T4733] audit: audit_backlog=65 > audit_backlog_limit=64 [ 505.591969][T10992] audit: audit_lost=189 audit_rate_limit=0 audit_backlog_limit=64 [ 505.597170][ T36] audit: type=1400 audit(2000000090.360:86068): avc: denied { map } for pid=10991 comm="syz.3.4082" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.608086][ T4733] audit: audit_lost=190 audit_rate_limit=0 audit_backlog_limit=64 [ 505.625756][ T36] audit: type=1400 audit(2000000090.360:86069): avc: denied { read } for pid=10991 comm="syz.3.4082" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.632192][T10992] audit: backlog limit exceeded [ 505.657890][ T36] audit: type=1400 audit(2000000090.360:86070): avc: denied { create } for pid=10991 comm="syz.3.4082" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.661612][ T361] usb 10-1: Product: syz [ 505.724633][ T361] usb 10-1: Manufacturer: syz [ 505.724825][T10996] netlink: 'syz.7.4083': attribute type 27 has an invalid length. [ 505.733926][ T361] usb 10-1: SerialNumber: syz [ 505.754684][ T361] usb 10-1: config 0 descriptor?? [ 505.966718][T11000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11000 comm=syz.7.4084 [ 506.013865][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.039729][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.115253][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.147558][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.165653][T11010] incfs_lookup_dentry err:-13 [ 506.410476][T11018] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 506.767225][T11027] 9pnet_fd: Insufficient options for proto=fd [ 506.957190][T11037] incfs_lookup_dentry err:-13 [ 507.052481][T11043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11043 comm=syz.3.4098 [ 507.388650][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4102'. [ 507.648424][T11065] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 507.917462][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.970584][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.031131][T11075] incfs_lookup_dentry err:-13 [ 508.215865][T11080] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4110'. [ 508.372653][T11087] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 508.439241][T11090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11090 comm=syz.6.4114 [ 508.641710][T11098] incfs_lookup_dentry err:-13 [ 508.770419][ T10] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 508.925223][T11109] Invalid ELF header len 7 [ 508.930632][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 508.950730][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 508.973654][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 508.986423][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.994583][ T10] usb 7-1: Product: syz [ 508.998749][ T10] usb 7-1: Manufacturer: syz [ 509.003438][ T10] usb 7-1: SerialNumber: syz [ 509.061004][T11115] netlink: 'syz.3.4124': attribute type 27 has an invalid length. [ 509.222634][ T10] usb 7-1: Unsupported UAC3 BADD profile [ 509.251418][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 509.279243][ T10] usb 7-1: USB disconnect, device number 115 [ 509.319619][T11123] incfs_lookup_dentry err:-13 [ 509.428701][ T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 509.748344][T11133] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 509.895883][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4134'. [ 510.169070][T11144] incfs_lookup_dentry err:-13 [ 510.296463][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.314871][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.406129][T11151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11151 comm=syz.6.4139 [ 510.499665][ T36] kauditd_printk_skb: 2565 callbacks suppressed [ 510.499686][ T36] audit: type=1400 audit(2000000095.370:88635): avc: denied { read write } for pid=4733 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.523444][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.546213][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.590460][ T36] audit: type=1400 audit(2000000095.370:88636): avc: denied { read write open } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.639429][ T36] audit: type=1400 audit(2000000095.370:88637): avc: denied { ioctl } for pid=4733 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 510.657578][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4141'. [ 510.700408][ T36] audit: type=1400 audit(2000000095.380:88638): avc: denied { read write } for pid=11154 comm="syz.7.4141" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.743885][ T36] audit: type=1400 audit(2000000095.380:88639): avc: denied { read write open } for pid=11154 comm="syz.7.4141" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.769809][ T36] audit: type=1400 audit(2000000095.380:88640): avc: denied { ioctl } for pid=11154 comm="syz.7.4141" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.823046][ T36] audit: type=1400 audit(2000000095.380:88641): avc: denied { ioctl } for pid=11154 comm="syz.7.4141" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.863813][ T36] audit: type=1400 audit(2000000095.460:88642): avc: denied { read } for pid=11154 comm="syz.7.4141" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 510.889122][ T36] audit: type=1400 audit(2000000095.460:88643): avc: denied { read open } for pid=11154 comm="syz.7.4141" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 510.914998][ T36] audit: type=1400 audit(2000000095.460:88644): avc: denied { ioctl } for pid=11154 comm="syz.7.4141" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 510.973773][T11170] incfs_lookup_dentry err:-13 [ 511.089349][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4149'. [ 511.218323][T11181] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 511.350396][ T361] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 511.519144][ T361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.550528][ T361] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.577760][ T361] usb 7-1: config 1 interface 1 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 511.605048][ T361] usb 7-1: config 1 interface 1 has no altsetting 1 [ 511.625773][ T361] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.647240][ T361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.665886][ T361] usb 7-1: Product: syz [ 511.675683][ T361] usb 7-1: Manufacturer: syz [ 511.687154][ T361] usb 7-1: SerialNumber: syz [ 511.702705][T11192] 9pnet_fd: Insufficient options for proto=fd [ 511.713144][ T361] usb 7-1: selecting invalid altsetting 1 [ 512.060221][T11200] incfs_lookup_dentry err:-13 [ 512.189447][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.198650][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.563020][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.575093][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.596799][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.606815][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.152142][T11228] incfs_lookup_dentry err:-13 [ 513.265514][T11233] netlink: 140 bytes leftover after parsing attributes in process `syz.9.4169'. [ 513.450444][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.470756][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.138852][T11247] netlink: 'syz.9.4175': attribute type 27 has an invalid length. [ 514.187881][ T361] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 514.200460][ T361] cdc_ncm 7-1:1.0: bind() failure [ 514.206805][ T361] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 514.241689][ T361] cdc_ncm 7-1:1.1: bind() failure [ 514.248483][ T361] usb 7-1: USB disconnect, device number 116 [ 514.312633][T11249] 9pnet_fd: Insufficient options for proto=fd [ 514.335683][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.366261][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.749623][T11258] incfs_lookup_dentry err:-13 [ 515.106573][T11272] rust_binder: Failure in copy_transaction_data: EINVAL [ 515.106608][T11272] rust_binder: 11266:11272 transaction call to 11266:0 failed EINVAL, code 0 size 0-63999 [ 515.442433][T11287] incfs_lookup_dentry err:-13 [ 515.501681][ T36] kauditd_printk_skb: 3331 callbacks suppressed [ 515.501702][ T36] audit: type=1400 audit(2000000100.380:91976): avc: denied { read write } for pid=11277 comm="syz.9.4188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 515.592718][ T36] audit: type=1400 audit(2000000100.410:91977): avc: denied { map } for pid=11277 comm="syz.9.4188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 515.652868][T11278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.655656][T11289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.668498][ T36] audit: type=1400 audit(2000000100.410:91978): avc: denied { read write } for pid=11277 comm="syz.9.4188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 515.680467][T11278] audit: audit_lost=191 audit_rate_limit=0 audit_backlog_limit=64 [ 515.702686][T11289] audit: audit_lost=192 audit_rate_limit=0 audit_backlog_limit=64 [ 515.718002][ T361] rust_binder: 11266: undelivered TRANSACTION_ERROR: 29201 [ 515.727737][T11289] audit: backlog limit exceeded [ 515.745439][ T4733] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.745546][T11289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.766710][T11289] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4191'. [ 515.889259][T11292] input: syz1 as /devices/virtual/input/input88 [ 515.936098][T11294] netlink: 'syz.7.4192': attribute type 27 has an invalid length. [ 516.523227][T11326] netlink: 'syz.3.4205': attribute type 4 has an invalid length. [ 516.693754][T11336] overlayfs: empty lowerdir [ 516.817256][T11341] incfs_lookup_dentry err:-13 [ 516.967779][T11350] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4214'. [ 517.147865][T11357] netlink: 'syz.3.4217': attribute type 27 has an invalid length. [ 517.222356][T11363] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4220'. [ 517.290711][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4221'. [ 517.379263][T11367] incfs_lookup_dentry err:-13 [ 517.512659][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4218'. [ 517.740433][ T361] usb 7-1: new full-speed USB device number 117 using dummy_hcd [ 517.770939][T11377] netlink: 'syz.7.4226': attribute type 27 has an invalid length. [ 517.893722][ T361] usb 7-1: config 0 has no interfaces? [ 517.918201][ T361] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 517.934103][ T361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.958693][ T361] usb 7-1: Product: syz [ 517.970802][ T361] usb 7-1: Manufacturer: syz [ 517.983308][ T361] usb 7-1: SerialNumber: syz [ 518.001747][ T361] usb 7-1: config 0 descriptor?? [ 518.154422][T11391] 9pnet_fd: Insufficient options for proto=fd [ 518.390932][T11404] netlink: 'syz.3.4236': attribute type 27 has an invalid length. [ 518.508504][T11408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11408 comm=syz.3.4237 [ 518.624343][ T321] usb 7-1: USB disconnect, device number 117 [ 519.660876][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.695502][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.803582][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.826523][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.972228][T11453] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 520.284106][T11460] netlink: 140 bytes leftover after parsing attributes in process `syz.9.4256'. [ 520.540853][ T36] kauditd_printk_skb: 1932 callbacks suppressed [ 520.540874][ T36] audit: type=1400 audit(2000000105.420:93894): avc: denied { create } for pid=11467 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 520.592969][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4260'. [ 520.636939][ T36] audit: type=1400 audit(2000000105.450:93895): avc: denied { read } for pid=11467 comm="syz.9.4260" dev="nsfs" ino=4026532959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.693789][ T36] audit: type=1400 audit(2000000105.450:93896): avc: denied { read open } for pid=11467 comm="syz.9.4260" path="net:[4026532959]" dev="nsfs" ino=4026532959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 520.742452][ T36] audit: type=1400 audit(2000000105.450:93897): avc: denied { create } for pid=11467 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 520.790918][ T36] audit: type=1400 audit(2000000105.450:93898): avc: denied { mounton } for pid=11469 comm="syz.3.4261" path="/520/file0" dev="tmpfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 520.802562][T11477] netlink: 'syz.3.4264': attribute type 4 has an invalid length. [ 520.849444][T11477] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4264'. [ 520.854088][T11475] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 520.865997][T11476] netlink: 'syz.3.4264': attribute type 4 has an invalid length. [ 520.870365][ T36] audit: type=1400 audit(2000000105.460:93899): avc: denied { read write } for pid=11467 comm="syz.9.4260" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 520.883332][T11476] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4264'. [ 520.940515][ T36] audit: type=1400 audit(2000000105.460:93900): avc: denied { read write open } for pid=11467 comm="syz.9.4260" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 520.990380][ T36] audit: type=1400 audit(2000000105.470:93901): avc: denied { setopt } for pid=11467 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 521.050370][ T36] audit: type=1400 audit(2000000105.470:93902): avc: denied { write } for pid=11467 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.083701][T11480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.691904][T11495] netlink: 140 bytes leftover after parsing attributes in process `syz.9.4271'. [ 521.959890][T11504] netlink: 192 bytes leftover after parsing attributes in process `syz.6.4275'. [ 521.990732][T11499] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 522.077053][T11507] incfs_lookup_dentry err:-13 [ 522.269479][T11515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11515 comm=syz.9.4280 [ 522.717317][T11538] incfs_lookup_dentry err:-13 [ 522.759559][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4290'. [ 523.500532][T11579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11579 comm=syz.9.4305 [ 523.858421][T11600] syzkaller1: entered promiscuous mode [ 523.869380][T11600] syzkaller1: entered allmulticast mode [ 524.010989][T11608] netlink: 'syz.6.4318': attribute type 4 has an invalid length. [ 524.019192][T11608] netlink: 'syz.6.4318': attribute type 5 has an invalid length. [ 524.027162][T11608] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4318'. [ 524.037152][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4318'. [ 524.068097][T11608] netlink: 'syz.6.4318': attribute type 4 has an invalid length. [ 524.088480][T11608] netlink: 'syz.6.4318': attribute type 5 has an invalid length. [ 524.109405][T11608] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4318'. [ 524.137273][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4318'. [ 524.150200][T11608] netlink: 'syz.6.4318': attribute type 4 has an invalid length. [ 524.178158][T11608] netlink: 'syz.6.4318': attribute type 5 has an invalid length. [ 524.197303][T11608] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4318'. [ 524.246691][T11608] netlink: 'syz.6.4318': attribute type 4 has an invalid length. [ 524.273584][T11608] netlink: 'syz.6.4318': attribute type 5 has an invalid length. [ 524.473018][ T314] usb 8-1: USB disconnect, device number 96 [ 524.772962][ T8471] bridge_slave_1: left allmulticast mode [ 524.778647][ T8471] bridge_slave_1: left promiscuous mode [ 524.784339][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.811724][ T8471] bridge_slave_0: left allmulticast mode [ 524.817388][ T8471] bridge_slave_0: left promiscuous mode [ 524.823119][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.110891][ T8471] tipc: Left network mode [ 525.211122][ T8471] veth1_macvtap: left promiscuous mode [ 525.216682][ T8471] veth0_vlan: left promiscuous mode [ 525.817855][ T36] kauditd_printk_skb: 1266 callbacks suppressed [ 525.817885][ T36] audit: type=1400 audit(2000000110.690:95119): avc: denied { execmem } for pid=11625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 525.850118][ T36] audit: type=1400 audit(2000000110.710:95120): avc: denied { create } for pid=11626 comm="syz.3.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 525.871268][ T36] audit: type=1400 audit(2000000110.740:95121): avc: denied { name_bind } for pid=11627 comm="syz.6.4325" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 525.897572][ T36] audit: type=1400 audit(2000000110.740:95122): avc: denied { create } for pid=11627 comm="syz.6.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 525.918896][ T36] audit: type=1400 audit(2000000110.770:95123): avc: denied { read write } for pid=4503 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 525.943300][ T36] audit: type=1400 audit(2000000110.770:95124): avc: denied { create } for pid=11630 comm="syz.3.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 525.963093][ T36] audit: type=1400 audit(2000000110.780:95125): avc: denied { create } for pid=11630 comm="syz.3.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 525.963420][ T8471] ------------[ cut here ]------------ [ 525.983585][ T36] audit: type=1400 audit(2000000110.790:95126): avc: denied { mounton } for pid=11630 comm="syz.3.4326" path="/532/file0" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 525.988330][ T8471] WARNING: CPU: 1 PID: 8471 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 526.021242][ T8471] Modules linked in: [ 526.025131][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: kworker/u8:43 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 526.036969][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.047165][ T8471] Workqueue: netns cleanup_net [ 526.052038][ T8471] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 526.058044][ T8471] Code: e8 c1 62 d6 fc 4b 83 3c 3e 00 75 19 e8 45 9e 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 9e 7d fc 49 83 c7 08 eb c9 e8 2c 9e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 526.077767][ T8471] RSP: 0018:ffffc90002607b90 EFLAGS: 00010293 [ 526.083995][ T8471] RAX: ffffffff8509d394 RBX: ffff888131894700 RCX: ffff88811777df00 [ 526.092007][ T8471] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881386a8000 [ 526.099988][ T8471] RBP: ffffc90002607bb0 R08: 0000000000000003 R09: 0000000000000004 [ 526.108025][ T8471] R10: dffffc0000000000 R11: fffff520004c0f04 R12: dffffc0000000000 [ 526.116045][ T8471] R13: dffffc0000000000 R14: ffff8881386a8000 R15: 0000000000000000 [ 526.124295][ T8471] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 526.133521][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.140133][ T8471] CR2: 00007fe37d0ddff8 CR3: 000000014e828000 CR4: 00000000003526b0 [ 526.148161][ T8471] Call Trace: [ 526.151607][ T8471] [ 526.154553][ T8471] cleanup_net+0x6ba/0xc90 [ 526.158985][ T8471] ? __cfi_cleanup_net+0x10/0x10 [ 526.163965][ T8471] ? kick_pool+0xb9/0x540 [ 526.168309][ T8471] process_scheduled_works+0x7f7/0x1060 [ 526.173902][ T8471] worker_thread+0xc99/0x13f0 [ 526.178592][ T8471] kthread+0x2c7/0x360 [ 526.182699][ T8471] ? __cfi_worker_thread+0x10/0x10 [ 526.187819][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.192542][ T8471] ret_from_fork+0x67/0xa0 [ 526.196970][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.201603][ T8471] ret_from_fork_asm+0x1a/0x30 [ 526.206373][ T8471] [ 526.209377][ T8471] ---[ end trace 0000000000000000 ]--- [ 526.215250][ T8471] ------------[ cut here ]------------ [ 526.220768][ T8471] WARNING: CPU: 1 PID: 8471 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 526.230999][ T8471] Modules linked in: [ 526.234901][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: kworker/u8:43 Tainted: G W syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 526.248223][ T8471] Tainted: [W]=WARN [ 526.252060][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.262163][ T8471] Workqueue: netns cleanup_net [ 526.266943][ T8471] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 526.273042][ T8471] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 9d 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 9d 7d fc 49 83 c7 08 eb c5 e8 d7 9d 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 9d 7d fc 5b 41 5c 41 5e 41 [ 526.292706][ T8471] RSP: 0018:ffffc90002607b90 EFLAGS: 00010293 [ 526.298772][ T8471] RAX: ffffffff8509d3e9 RBX: ffff8881386a8800 RCX: ffff88811777df00 [ 526.306806][ T8471] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881386a8810 [ 526.314823][ T8471] RBP: ffffc90002607bb0 R08: 0000000000000003 R09: 0000000000000004 [ 526.322833][ T8471] R10: dffffc0000000000 R11: fffff520004c0f04 R12: dffffc0000000000 [ 526.330848][ T8471] R13: dffffc0000000000 R14: ffff8881386a8000 R15: 0000000000000010 [ 526.338825][ T8471] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 526.347783][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.354419][ T8471] CR2: 00007fe37d0ddff8 CR3: 000000014e828000 CR4: 00000000003526b0 [ 526.362437][ T8471] Call Trace: [ 526.365713][ T8471] [ 526.368638][ T8471] cleanup_net+0x6ba/0xc90 [ 526.373090][ T8471] ? __cfi_cleanup_net+0x10/0x10 [ 526.378060][ T8471] ? kick_pool+0xb9/0x540 [ 526.382423][ T8471] process_scheduled_works+0x7f7/0x1060 [ 526.387972][ T8471] worker_thread+0xc99/0x13f0 [ 526.392682][ T8471] kthread+0x2c7/0x360 [ 526.396754][ T8471] ? __cfi_worker_thread+0x10/0x10 [ 526.401899][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.406493][ T8471] ret_from_fork+0x67/0xa0 [ 526.410954][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.415549][ T8471] ret_from_fork_asm+0x1a/0x30 [ 526.420365][ T8471] [ 526.423380][ T8471] ---[ end trace 0000000000000000 ]--- [ 526.480707][ T8471] ------------[ cut here ]------------ [ 526.486221][ T8471] WARNING: CPU: 0 PID: 8471 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 526.495875][ T8471] Modules linked in: [ 526.499778][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: kworker/u8:43 Tainted: G W syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 526.513123][ T8471] Tainted: [W]=WARN [ 526.516922][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.527094][ T8471] Workqueue: netns cleanup_net [ 526.531928][ T8471] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 526.537473][ T8471] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 526.557483][ T8471] RSP: 0018:ffffc90002607b70 EFLAGS: 00010293 [ 526.563608][ T8471] RAX: ffffffff84ef154e RBX: ffff888131894700 RCX: ffff88811777df00 [ 526.571685][ T8471] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811777df00 [ 526.579670][ T8471] RBP: ffffc90002607b98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 526.587792][ T8471] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 526.595839][ T8471] R13: dffffc0000000000 R14: ffff888131895300 R15: dffffc0000000000 [ 526.603989][ T8471] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 526.612976][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.619573][ T8471] CR2: 000055557d985958 CR3: 000000014e88a000 CR4: 00000000003526b0 [ 526.627616][ T8471] Call Trace: [ 526.630939][ T8471] [ 526.633878][ T8471] xfrm_net_exit+0x31/0x80 [ 526.638315][ T8471] cleanup_net+0x6ba/0xc90 [ 526.640417][ T36] audit: type=1400 audit(2000000111.440:95127): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1990]" dev="pipefs" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 526.642793][ T8471] ? __cfi_cleanup_net+0x10/0x10 [ 526.670899][ T8471] ? kick_pool+0xb9/0x540 [ 526.672652][ T36] audit: type=1400 audit(2000000111.440:95128): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1990]" dev="pipefs" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 526.675238][ T8471] process_scheduled_works+0x7f7/0x1060 [ 526.703988][ T8471] worker_thread+0xc99/0x13f0 [ 526.708676][ T8471] kthread+0x2c7/0x360 [ 526.712800][ T8471] ? __cfi_worker_thread+0x10/0x10 [ 526.717923][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.722565][ T8471] ret_from_fork+0x67/0xa0 [ 526.726998][ T8471] ? __cfi_kthread+0x10/0x10 [ 526.731639][ T8471] ret_from_fork_asm+0x1a/0x30 [ 526.736413][ T8471] [ 526.739432][ T8471] ---[ end trace 0000000000000000 ]--- [ 526.900704][ T8471] ------------[ cut here ]------------ [ 526.906202][ T8471] WARNING: CPU: 1 PID: 8471 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310 [ 526.915849][ T8471] Modules linked in: [ 526.919761][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: kworker/u8:43 Tainted: G W syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 526.933139][ T8471] Tainted: [W]=WARN [ 526.936952][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.947055][ T8471] Workqueue: netns cleanup_net [ 526.951882][ T8471] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 526.957444][ T8471] Code: cc e8 72 5c 98 fc 0f 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c 98 fc 0f 0b e9 8c fe ff ff e8 4e 5c 98 fc <0f> 0b e9 f9 fe ff ff e8 42 5c 98 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 526.977114][ T8471] RSP: 0018:ffffc90002607b70 EFLAGS: 00010293 [ 526.983270][ T8471] RAX: ffffffff84ef1572 RBX: ffff888131894700 RCX: ffff88811777df00 [ 526.991295][ T8471] RDX: 0000000000000000 RSI: ffff88812077f180 RDI: ffff8881000418c0 [ 526.999274][ T8471] RBP: ffffc90002607b98 R08: 00000000decd15c0 R09: 000000006a4b9b49 [ 527.007346][ T8471] R10: 000000000000000d R11: ffffffff81759ed0 R12: ffff88812077fb80 [ 527.015356][ T8471] R13: 1ffff11026312a63 R14: 0000000000000040 R15: ffff888131895318 [ 527.023376][ T8471] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 527.032360][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.038952][ T8471] CR2: 0000557b62188af8 CR3: 000000010cf60000 CR4: 00000000003526b0 [ 527.046994][ T8471] Call Trace: [ 527.050285][ T8471] [ 527.053298][ T8471] xfrm_net_exit+0x31/0x80 [ 527.057715][ T8471] cleanup_net+0x6ba/0xc90 [ 527.062194][ T8471] ? __cfi_cleanup_net+0x10/0x10 [ 527.067141][ T8471] ? kick_pool+0xb9/0x540 [ 527.071515][ T8471] process_scheduled_works+0x7f7/0x1060 [ 527.077071][ T8471] worker_thread+0xc99/0x13f0 [ 527.081837][ T8471] kthread+0x2c7/0x360 [ 527.085909][ T8471] ? __cfi_worker_thread+0x10/0x10 [ 527.091061][ T8471] ? __cfi_kthread+0x10/0x10 [ 527.095661][ T8471] ret_from_fork+0x67/0xa0 [ 527.100069][ T8471] ? __cfi_kthread+0x10/0x10 [ 527.104724][ T8471] ret_from_fork_asm+0x1a/0x30 [ 527.109508][ T8471] [ 527.112611][ T8471] ---[ end trace 0000000000000000 ]--- [ 527.118346][ T8471] ------------[ cut here ]------------ [ 527.123863][ T8471] WARNING: CPU: 0 PID: 8471 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310 [ 527.133485][ T8471] Modules linked in: [ 527.137381][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: kworker/u8:43 Tainted: G W syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 527.150702][ T8471] Tainted: [W]=WARN [ 527.154503][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.164681][ T8471] Workqueue: netns cleanup_net [ 527.169461][ T8471] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 527.175043][ T8471] Code: ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c 98 fc 0f 0b e9 8c fe ff ff e8 4e 5c 98 fc 0f 0b e9 f9 fe ff ff e8 42 5c 98 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 527.194692][ T8471] RSP: 0018:ffffc90002607b70 EFLAGS: 00010293 [ 527.200794][ T8471] RAX: ffffffff84ef157e RBX: ffff888131894700 RCX: ffff88811777df00 [ 527.208783][ T8471] RDX: 0000000000000000 RSI: ffff88812077fb80 RDI: ffff8881000418c0 [ 527.216801][ T8471] RBP: ffffc90002607b98 R08: 00000000cb7842a5 R09: 00000000baa66764 [ 527.224888][ T8471] R10: 000000000000000d R11: ffffffff81759ed0 R12: ffff888104e87900 [ 527.232938][ T8471] R13: 1ffff11026312a62 R14: 0000000000000040 R15: ffff888131895310 [ 527.240952][ T8471] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 527.249886][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.256508][ T8471] CR2: 00007fbfc6d57e20 CR3: 000000010cfde000 CR4: 00000000003526b0 [ 527.264557][ T8471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 527.272578][ T8471] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 527.280580][ T8471] Call Trace: [ 527.283843][ T8471] [ 527.286762][ T8471] xfrm_net_exit+0x31/0x80 [ 527.291287][ T8471] cleanup_net+0x6ba/0xc90 [ 527.295728][ T8471] ? __cfi_cleanup_net+0x10/0x10 [ 527.300711][ T8471] ? kick_pool+0xb9/0x540 [ 527.305050][ T8471] process_scheduled_works+0x7f7/0x1060 [ 527.310655][ T8471] worker_thread+0xc99/0x13f0 [ 527.315361][ T8471] kthread+0x2c7/0x360 [ 527.319426][ T8471] ? __cfi_worker_thread+0x10/0x10 [ 527.324594][ T8471] ? __cfi_kthread+0x10/0x10 [ 527.329193][ T8471] ret_from_fork+0x67/0xa0 [ 527.333643][ T8471] ? __cfi_kthread+0x10/0x10 [ 527.338238][ T8471] ret_from_fork_asm+0x1a/0x30 [ 527.343030][ T8471] [ 527.346045][ T8471] ---[ end trace 0000000000000000 ]--- [ 527.382152][ T10] usb 10-1: USB disconnect, device number 61 [ 528.150901][ T8471] bridge_slave_1: left allmulticast mode [ 528.156553][ T8471] bridge_slave_1: left promiscuous mode [ 528.162267][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.180797][ T8471] bridge_slave_0: left allmulticast mode [ 528.186483][ T8471] bridge_slave_0: left promiscuous mode [ 528.192278][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.211068][ T8471] bridge_slave_1: left allmulticast mode [ 528.216801][ T8471] bridge_slave_1: left promiscuous mode [ 528.222489][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.250945][ T8471] bridge_slave_0: left allmulticast mode [ 528.256591][ T8471] bridge_slave_0: left promiscuous mode [ 528.262285][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.510721][ T8471] tipc: Disabling bearer [ 528.516149][ T8471] tipc: Left network mode [ 528.760856][ T8471] veth1_macvtap: left promiscuous mode [ 528.766376][ T8471] veth0_vlan: left promiscuous mode [ 530.351053][ T8471] bridge_slave_1: left allmulticast mode [ 530.356726][ T8471] bridge_slave_1: left promiscuous mode [ 530.362431][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.380782][ T8471] bridge_slave_0: left allmulticast mode [ 530.386427][ T8471] bridge_slave_0: left promiscuous mode [ 530.392115][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.640690][ T8471] tipc: Disabling bearer [ 530.646234][ T8471] tipc: Left network mode [ 530.760835][ T8471] veth1_macvtap: left promiscuous mode [ 530.766346][ T8471] veth0_vlan: left promiscuous mode