last executing test programs: 5.559317032s ago: executing program 3 (id=1154): socket(0x2c, 0x1, 0x7) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x22, 0x6, {0x6, 0x8, "6df27518"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000a00)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x9b, "708179e5e8c9e41605bd7810dd3b93f34c298c353143dc2778634f18241b36b8031b262aadcb1e3eed306645a62856ee38b25ba1ffbe509cdafdc54c56ae75d9faae46315b56e278c6c91d929ed9dd4c3a7f270e386b10e4e08701d787040dde797b40a949e596f36d98891b1feb667cb150decba671f18de2a21673cc8170eba1a4ac722ce03eeec79eac4aa4879819edcdf7e84fe3003b74648b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x81, 0x3, "a7516b"}, &(0x7f0000000700)={0x20, 0x82, 0x2, '}Q'}, &(0x7f0000000740)={0x20, 0x83, 0x1, "b0"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "83d418c9"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "960058"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="00171f000000ca6bf5115b07371085881b32ab33d5854d3bcc091a5e4dcd1b9139f15b0e63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2a, 0x803, 0xe) 4.106900249s ago: executing program 0 (id=1162): sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x33, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x973, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0xdcdc, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x4, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x2000}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYBLOB="902bd6467d3d18a77f6d7a9079008f203bb43a5e21fe399dd358f1d41559c5f7c418d4081545294c64832a9f0657ea190154fd0522d99763fc0dfe26016d557a7ec84a6d2bf9e5859ebf049064e8521ccd3635fe49ad25b7cfbfe20d7697def65753da443f71078951c25106ad704f17d3c004aec8c1d5d07fa7f87294f8", @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendfile(r0, r1, &(0x7f0000000100)=0xfe00000000000000, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000001600)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r5, &(0x7f00000003c0), 0x100000000000022d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 3.850782517s ago: executing program 0 (id=1163): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd00000000000) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) ioctl$KDSETLED(r0, 0x4b32, 0x0) eventfd2(0x7, 0x0) r1 = getpgid(0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x7, 0x2, 0x401, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x2}, [@nested={0x57, 0x103, 0x0, 0x1, [@typed={0x4, 0x6b}, @generic="a6ad0bdbb0a7a219f0de0ba548cec28937a2685c8a3e9dc478aeb413e9cded1a1ddf5bd215728807a3e4b34c4813b8d5d4b12e", @typed={0x1c, 0x66, 0x0, 0x0, @binary="7a4e13487e54e1306df35ecc918ab45ead57b999fdb25492"}]}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x80000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0xc}, &(0x7f0000000240)=""/216, 0xd8, &(0x7f0000000340)=""/242, &(0x7f0000000440)=[r1, r1, 0xffffffffffffffff, r1], 0x4, {r2}}, 0x58) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000540)=""/69, &(0x7f00000005c0)=0x45) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000002640)={0x18, 0x0, r6, {0x7}}, 0x18) fcntl$setownex(r2, 0xf, &(0x7f0000002680)={0x0, r4}) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000026c0)=0x10001) (async) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000002700)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002800), r10) (async, rerun: 64) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) (async, rerun: 64) fstat(r5, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004c80)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000004d80)=0xe8) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000004f40)='./file0\x00', &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async, rerun: 64) lstat(&(0x7f0000005440)='./file0\x00', &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_fuse_handle_req(r11, &(0x7f0000002880)="a62e65d8537d0c43eed9e368876c1afbd4f4744c648228ecb6331db09b6d16a1d891a3e82e3b4aa8876e289e22a4dcf3f1cc7bc140f875e37dfae5f5c112dd23140a619a208d0a2819e5877059d5aa13ef29c19ecf426b823aa0d2e378b0a0b8e8f71b59bdb6fcc81db094080452242f2f47f3ad69601d7239f29447faaae0d7f5752608b7df9b553ef323dd3e20e8ad03e9f088611d42ec46b994848b0cd0a93ac579e7f137d57ae1438a9346ec67c8a19878f02a0759e66ee532dc7cec76c4aac22a3410e960cd77666be940a3d1e56be51ab6743782c831dd1f97f1ebaead2eb3955c56cd9632256f15c26f4cc025c672599dc6caefdf7099e228994391e07cc6728ffa3a4576ae2417ba585ea38ad690fb53f2705c6716044c6b702b50ce471c082d21393357d9e91e3b0f74913cc52319bb627d4e9226dc50580c1602a8847b80da6f97b10ee0304f77f66da13358a29111890cbc004622d72fe34c2833074d0561de7efa6d3b54b55e19071a26cb5af4223dc1a8ce7003761573145c3acd7be602c3510142e1e98fe15cd5bde8306d50e60dfa4d08fd1670b3d02d8961c1c13a41a1db0ba2d2479834009573a518877f763f461ae2993ece1889d911698eabdf64d2489f52d5313cd9ca675b040955859beb26bbc8362a93aaa21487db06337e29e9f347203407969b1923420d485044cf371e5c5857660c536853460260f8f5fc5c23e71632ccf1c5f965c6527b6b4871ef5864ea7ccd4429e319198b5f967d1a59871990573cbef9f75982ec6768822062a696b9d502c351c85e10abc33cb63dfd361237cdad5ca30be1ed7f4c50eb837d7ce94ce7fdc4366dcc304761bd7be48f954fabda298a5e9bfe47fd277c9a69e3076ab0a0580451cc30a9f2b86f42225d876a303d98a298b94f074d07483c27fa39347f3dc6df50f339f9d1f391087073172366ee8586ca897b40788a835f09830d5e4543a42b10e5a04e5c9d33e03c2d3b0f37932e47d26bad0840b1815948c5efbbd9446a793784ab3e517a305e3d7a877cf9bb5908d2cb8bc28bc4f6bbe0462bdf8ed9c88b21a8e9cd7cd2c23836070c993e9ce2f95240cf1ce89bd8e81f04b50a55fc64a86eb2702a7115a5a0585b4f26dc51e8b684cdb4fe8571794df252dc4f4a6d77d3afe5a507b19ffdc5d8edf9d9bc29eac4339d8984d71e1dda7d08ed1683d1afd6f6e69dc26946bfdfe5bec3f29870ffb71d94115606d85c116d54ecfc65af2695fa8aeccc8e1930a9bba3175e4499be9314c55e6d6f16d12aa5a0ab1a910d8df0aeafbbf88bc98723abbfac4815b08d3ed5bd956c517484a3917c30186a89c5b46a16b2ae47c68fe43e887e7a9999f8034518ffc71ab791551dfed6097f3b0943bbe6c7e8d6bb98841d9ac7329cc2d34bd50c41936ebeca166b37c89079102c0dd9ff54ec834cff375dbb52cdb2d572fd8cb71b8ee5035239777d21ee337d6bfa832c5138aa947a3dba68a308df87393e73d50d7434c69b408c7e16175c06e5925898549005b8efa236e599fd83520312ecd327b34f01e3ccfcf749513022353e2c86e48ce4cf141936a0ef03484fc275d05bacf03dd58e30ce3e23ae6f65b5289b36ad9db59d55776bf46e7c54a16e208c540cd834f69b500c623ad033465d0f5c73d60a31accd0e27dcb2e3e73e6930fc909c3b45dcb50ba027a9f8301375c3aba1eddcce0ff0683326cbdcf393132450685dafd6c360f9c845f32e1af19e49d075c2f27f89fab4b2a568074617dea2fd0bee15ef1ef8bf7e56cf476f63a2243f0e06138600c63a8a835b2f7eff96f696543fcc7606ac09bb6a199710560183e32d05782b19e48e66b28c598261c43d66303591ea2ceec302aa237c4d4a0070c21f145fee6425d8bb13fb10d3b50fb75de45be055fb74d0e962c527d64cdd25bbd6a0a486123a1ad4099188ee121c887efca2cd27bcb7331eecaa44ffadf7302740851d05e376e68b1e64ffff571c39f54f35330e2fea48ca4744b8e9cb741e05325bbd7831bc743d053bf6f91d0b90ade5f7ad284e864b1614f236b4971560169a53058204bb9bca641a41692fcb9257bdf8f4b42b205dbd1f23318c19290eae3d35ecc8076d1c9ddfa337c7d984b20e2ee3310951b39f545ec0fa14d4088c51b80379de7741a37f2a9fe5f8fca177e1d47b57880ba458b7bb9cc5b844b3010d4802879206ebea9139e5b2310959469ce2f51f2fbd6e018c3dbc0c948ba580242d190b4d82b00b5dcadcbf3f2095d67d04b2831eb87a901083a37421ffc2e8b6b1d0de2c5433d18b3b3077fd494a6adcd76586a8d84bb197f5f7c4055a0d9fb5cf344d62a1f9729cc1f48acc39eb6a0635b4b9e4a0240265a236c006e4e974d24ae03aebfed2202d6345c80aedde61f12de5aabf5cfeb86b87576b192f5c38169271db7d3d68bceb06183b85770de5bbc28a91db10348ad9ed128aa71e5866c8055aad910aa28b522b9c77d2fa39b562bb156ae26457797ed7b0d77d25e9e025e53814ded760db7b0742a8397e04051deef448569482e2cb2823cff86dbf4d19cfb149667873d77e82978f59cb69046a6bf7d94af200b4308467ffa4cf5329bb5ed575a8297121a7f5440323722ea28b1243082a45422f622d114c23e145d5e584173983e5f305146bb22274b8f6593cf67d47e5d95dee3ca5d341cdfecc2d97e24f909f8c66b264244f7926ca9773d0ea611f795064fc1dbf3e41d5cdaaae8a1a94a31d0a79e01560b20976159c47592d2a35355fcebb82f38b1c15e812993792d16bbcfa76d2c1fc0f467e35b8da34b9609897347086a9964b17e87ca8342541e0907451f7bfa93eec12e1c3584eb6fd3869dd7b526cd396e3864347183fe7bd798d9b9fd8957fb9cdaaf589b596c61d926163642277f06e3df6404ede1a9f70f4764d122f4d46e66a8dfec300170a11c3667487d631f7a1b423a882da17419f57c0e0b70e9d94d4bc2fd9288262589e90dfc65cc9c57f68ef59d72cff7f5b8f8c227f6ce9c15901120948c45926a960db9f45283daac1b0316b6627b903a13f7d104ed1c4ef282158044a274468108c027f4d0e8ef3ef2130e405cb4abca1e9f6afa12a5cc2c6fa7f7e626aa427b23c9db35b989a8964b9d5d30939fd52f8290c578968315af7b26a89655f52ef719c19794408ac0ec8b9c115a08bd56daa6806c23a91a70c489d211751d4e7ae6adafbc53199535d61dffff3f7cb382a9896382468af9c80d0185fee7321a80a6ccd6839e99a57441dd625e7da51c1cc2937f80f9ecb210e7d08a9c26d4d339add2901cf87819c093a597012ac572ac91c65bf55701712285d9319861ee2383cd357093a2438318d7544ab3a54c209a84790b36eb7263745ccc21028d7dc321c6e50d8e2b6024eb4e97dd00b77071172f65baa4218b9ffbb2d59408b36d02c236e9919c8034e85f4739021fcd39e5100c7e601aaa9be2f36e833255456336ed5cfe4f220f5e359bef0d846a260a74089abca7621984e9eaef517db498bff923a497670f131e7576effcaf43888328dead1c12db906aaba11321733e7df38ffa6580b8780139e8ec5cc87dff6e5fb8371c8ff7d19cfaa7a68be14e9760893129158c3cb6d84366a1e745c3474d686bbe09c3e3925335f6d19412d1ca31d922cf58589cf90440f52caa5c820923f158259dcbeba76207f414548276b52d504a5e0c755ce9cd0c384e6bf41195cce362120fa4ce4a5d9fdcdb04643eea1c30a58cfc5daf216d2da9e28b30ab85076b6f7d18d62c725f5e650959a540acfce771f1c84bac11ec9eeeaf75de17de80d10e86ec3c659fa8011ec19c92fbffa255600a99f57c6c8077284af9ed88cfc8156b3ca645c06728cdea5b3bf02e18e66b9ceeae9876abc49d5f9605f278242714502347ac786bfc2f5d67f8f57ce3e60cc9b9d77d3407bc7949da93263fb38b329f4a0904eba29aa6f6154bf4b054161892236ae66b2d9b26a34de2294e8f2af06e60bbb641b55d6b59162d1dfe69ad429752c7db6b87d2ddf6d36d30342bc2ff200d65d8c4c0a22ec1c9b68c7e0716727c4ec34d784eb0f73dda325471a621e0e2f3e77ff7a364b6c4455fe1f2f8d7e77418eed6286ce403142eb866b2ac8f384d68207bde991e2f4e81c305dcd269daa50d5fb8e314fa691ef8aee0b66b627f8403c81430f3235dc16478a76689bcb464dbbc5cc007e32b29e615e756a14bc2ffe483a52c67def3fb75171ae0064d9b373211a3c3fbd75db938f30900d5996782cc54593c98275499026b99fb2b9129e6871cd938f8a0d48ea4a0fb154a2dcb2cd6284797eea3af7ca86dd57b7526c22fec484826eb00d032d512d06ee66e9a112ce0025874a28501929f6fdde74f141412f812c564c3c2d23912cc5186ecc611347edaa6fbe28e7f0a04e07ea21f52e9958e2e50c5fa8b0b2e82247bdc66ceb998cecb1f0549589dc9cb80ebd22f530a08702426cfe6db68bb9b1339305133957decc2787b92eae4b8418a30f475b1f795c0bd74d2ea035be8ee450f00d3c20032c94b50452cee8d738b15a5d3cbbccd9079150e0e0f6bac2d688a4d336d2ed664708aa72da7c0062e5a54d162d1f15ffc3222d6999578d676b5b2aff771ad0840083e16134a3c5712ee33b60dcd0b595b07f06b293706040ee073688c0cafa0c2c38278d109bfa62b37acfac79f8dd5c6cba4a41865cbea7685e6a5439a91fec63208bf4fb8eb2b6ed540f95551fb78cfc566be1d01f21b07851784050b9f476bbf608eb184213adb3e8fb04783b68ff8a1a2e253652c59123034a3f9e4be9ce29a69d0fb6ce0a05723328891f4f8f2148f29e8ba2bfc968ff31a0016d29db3c5bec1d9843b4fe185d9897cd682e8966d59484a4b5989ce41f875a603e3a5bf6d7e858e16f1bbcd02655c5c15734000c370418a014c5ac8bfd7fccbc7b4bea0a50060b872b4d3b0fc1f5b83151ae137b54aa8e78b30cbfebe951cf1609b1f59806810cbe4b8d40a997c828519d226aa5808fb53008c6934f5f3949f287d510f116f48f38e86f87a7cb656fd1530617b6d2f938a6bfc23a5cc028e4e469a8f62597bf81c830c5140f19175fce2dec1c41079f5f4869d72141e67e61682bcd4c7cd19020ed571ab0486a18033253ef2266444e8692f9612d5dbc653d9de12b08ca830399185f2e1c4c6f7abb9dacc049ad53ac154d1cbafc5b3278228e72c1615e226e7ae8b4f3d8f35efc0f15f3af6a0bbe88426ad570d88f4523b0069aca42d0547f0343cc9d883c3326727c556cd3b4d9bdf4b78a20cda4f36e138b2e42ce8df8e9f56d369ea248440c3defb2aceb720c93730af4e2d8f4c0f489be458a06f1487b3248a6615743038d611771292a51a4ddce3a5e804cce8ee8b8358dbd269739369307fff19ecb01b99786ad54ae188367d46f2ea2325e306f38a6a4416d5fbf7c6b1323c02520010e3f11037fa7ba47c4281a1fbe2d7f6a4316d7e8fe711dc4e80193ec2f484f2422df3e38e163fcfcd742b35eb75a9f4fa1a0c4fc4dfc4f9e6cdb972ef3c3e0d78b11b796bf877585ce451f751ed585abd9cff546cbadadcedea110dccf70e9af410d77ae2a4d5eb48d504a08d6a45144d73d60cfe7252501c6735bade81e8b784128294102c9cdeb82a53a95922eab407d6511c73f3bfd5a77ccab8594253fd81bf732dbbd6417809775982c0006a179e50dab188ee9475f2a2bb7bef3fa368c58c1f1edcef1db86cd1fe7e0424576cb5eed9f51cd200139fcbe3e551b50732454aa106a8eca5e9b52d6a7cdac7c9b4bce7613d1985ffe1f8feeffbc69b1f354e9a18a54b7bdc10a4df51e1fe2ab0f71d12449c2f817ae3b538273a85f68c5489394b3f953a3f2ac7a190a5a7f7ea8896e14671349d379f08b102a23e55f2504bf72f4ca1404ce48d7129b5a694f8409bb707a608de41e35069675e58a2dee9c0aa8fde1630cb44d2e270be7fe10576811a93945faa71eeed47aa764b91e0f694809904ff14d697488596cbcda45daf0b6df09544acd4dd1859b0568b2de9d26fc1a12d111ed8ea96fc4e96581ef57b7faaa6af43c1b8786fa802a8b04f4659e89fa005a8399a7cfa1950028968340593d5f5cbb2f9e455a8910ec85697f789c3dda430c2581fabe2eb3485f22c043e137dfd853391bc24891bf0d4670f4c1a789bd28bfbc0a6b919399e3e1955e72e7dda7e6155aa9063c3c959b807725ae9cd2e89673ed4abb8b0a8ee1f4f42ef6ad01c9227020ebdc28408219fbf84b806120f5c1bbc16256e1c4fb3fcd564390953c6517353774c34bb4ea365b7f89509249cc73f908472ce25e21b634120a9831b2e190fb5381d19d4fc2143a304d3579474fe21aa8f6a3f63088d85fbf586eb00a0c06dd4b40ebd54f1f886080bb1c66026d75c8dcc0531c16a411233d378977f6f161dd7fbebb6d4a80a1b8d66b9f99c5725894419bcf14d64489003055383ddbe9c9e87fa89b6e42fc42e84622fc818166a15e85fc8ac700c3a67eb315c0f6024ea1824722dc718bda39dd8461985fd86aba95b8519b5abd29eb0d4c126ea6b534d6b6a9046996bd4a58d6dccceacba9cf94b406352fd35b2476dec5edf00c8a723a6393ee83b74a49e3fc4467524a571234b13a7e872effe84fc57893964ed834c6591ac081e6cfc4b8a97e49977936c6bacef2f97e1140d30a18078ffb21b7928f6b11b6827f65d1c9159cd8522cc666dbe49e452d4cb6591c93b8d8d7a48eae632cee22e72f065bacbebee55d2d22fed71ae21a89c2e8eb7af1af04c5d7d67dcd02adfaf65ab28c8a9b512bd4941ff3d3c4ea330be99455689fc92dd3b043feb7523c6089a48f7ea9421f3fbf80466b39bb35e91c23c8afb91d2e2013b2618bbbeb2bd3cd0f63062c585d513cbc101420b26fd5cb4c367440baccdc199309425ef7b13fd795dae7b4f002b2b0f8a0b68e594f50d30b2bbd72ee5a1d26272a058bc3534b90b9e448a9df5e3e8a2ee7cd7e5fe58dadb26b93a806bc8848892a30666dccfdc618ee0c2ec0ba393b200b00f383648652157fb2a54e07f13175201ddc1478f935bba6dc53813eb62bce0a4d057cb5cc428d0e47c6be44928554f5e9d7fbd07b6d6ececf5414df3939f8994f69258e4403ac2b462802024e7a9a933a340f8ea5653dad1e47f97b00970ea44977d549d9dd547b68c09da5ea5d8676b0ef2645bcd05aaca88f98edffa71a0026195f49e057ba2d68de699b8defc98d4c4985fc21be6c43500f39d94a871520d65497ac7eefe3b474296990e7c932ad71f29f712b4215ccd72d16266c76de0561d7a0938053aeda63e8e5453aef8ce16a9f0e01eabe16086ea6b811579ea88ecb6411c0dd13917c8bc65df51e358c7d884fc682c1ff398ca4702c6855e821f3e5c51ebe68578441d91a7bd228dff154e1b79d87ce1c0f5fd889821af2bcda45b5d2e24aa7cd91e01dba196e2fc3b64044b0996b39848dd6f2440a2596dddd66299a127a57aa6c561e95cda87587112c60a984e6102ad270e3efa74c9ac7b1614d0827080db6a510b7374e8977214ea133b5888bcc594325457e5c75f81724ed52958e6c730887b4c83c4870c4a335c864520781310f5d15d9279c4ef9bb12c764672b9f85e4a758bd42bf3e9e225e93edd90192a2d8a1703e0f7b95647ce8268136dcd37d14d76b3576f644f91db9ddbcb413001c25e32d84a6072405bb36f71b25d4f71e0e87c6c18cd4d92409003349b78fe48eed7697a9e324af31da45a19d3bbf9b4d0d35adcc5f3d0982e9f16452dd765d96fe326cf6ca1c2d822080a8e33a06ed5bd948ccd1c7e39f401ae7e0d078252ddb60b1d989fd1958f95daa83bfa3962719ebef207ef801936e20080dcc976710406f997984de4f06e395931220e40d0a3825aa851631f6997d10e8cf3d6281203dc85d8163387504b4452b9ba7af6b55ce59678aeb03c2effb4c0d0dc54e650adae1d65709dc1b81aabc3d853289e14c85dd3aa43edb29ebc9934e4cfb74f6d104c391c69fb7bebfd6adc6a80ac323db6ff6540a30dbb466f2ebf29816a77c98a4d8c180facd64f6ec141de0f71cfdf357d6524b0bed429514ce498241a022f6b68b52d7d6fb651f61392ad688e1630ed372a1eac112730b786488b7933daceade63da0ddbe385aa7f60ee533cf270f7b144d89554db10571d0f02ea47f23cf1ac72e2b7738ad83a3ee8a8b344e23903406cdd3ca0e7f2378d86da33d38525572652789491ab61567b9014edd3eb56cf68c4b1729400b178e6d5ea75c9bd6bdc274784820e984ce85558559da11fac28edcfa97a3c7da7a4c86b86704c411ba4d95b2f59cef62959cdd8b336a8d7c8bcb44738f5ecd6849109bce99d2eb76ff177584d1e93e627c3b37af49b55237c0388aad348fdee4035e1244ef95e924fef35b31c99888d51ac7d16d8442da414f0a12b8c89bd433e289922dd8232fe9e2e03b5ec2b72a83b3b502696adea6d3fa8da5ee3101a953a0341bfcc18af8a7305e775e2dffa3ca7d787618b0aed701129ffb6ce1083d2287fc7393eab0750f38c1d94725c3b5c00151253061e101ce95b003338a4444863fc443e1cf26ad4c6c7f1b7038620c4972412d227786e922173655c0045f3cfb4e33f6df566ca4948ecce9a30a73cb02d3499667dceb0d0abc7b570145649f1388c033d382616c74d88899fa8337755d5a00172ee4513e2683490c97cae52cf8a9779d5e680ce10e7082c4dc0bdd43cdd68279dce09813cc1a81621dd6450897fa5d49b4a32fed643bacce52c378172f3f57a0cc0f6a9c9e81d499c3d089d4b7c4cf98a249d9392aeeed278839666d9c4e8e5d7a7100c134b240c3e592b079c9304ce9e729222e03e446b6b2483c7d85410b10768d7dbd365e3fc3b8012bbafa39ac37afaa1b16a09b502c037c9dde8c81493e51935c805434a636fe07e4a7df114e35cd548be3212a0e6520b0ea0a967c5366e15a4d4cee39a3a92a2c49994d00f889b8abbb51b7c00d64069db29787933442ec031583b41fa31a62f85834c084a439c51c4c0edc25739982887e0212c7775abf07d0850cb8ef467db491a6a8d6227dca5c1cb393a8f86095d0d59b32606288dc3b96b24df4fcdddc054bd85b4c43d121298c6ed18e9ef9ba4ebfd9c72d5fd2939eb51abff3089756068b42816bb60007c0d37c46ec27879f60cffc6a44a25acc1cd755b4f63360a6d6f6ceb6bcea4cf75d6c77b05c27c595ced122f60477fc33ac8b59ee3c6ee3fb42171080d3535ff01c66a2ac39a9618d5099f0d5c20b19bbf2845c65aaae18e49f40c1b10623670674b3467344700509b532685b9413b7909bfb5fedaecfeca6225a3daada8840387c52e47d4ca101c729c01406c587114a5782cc6457bb7a550ecad51f8406c83dac8814cc75e8fa3036be184621a9d4aba62e1aa48c28b713c6ccf441e70b6919e5a51cf18bc45f7eefc0db18fa0354f541454edada0eb874e51dd0e9766731df38e03b411aee9fe85fd05ebba4d2bbbe0c26871b4ce5a03f2eedd35287512365050b39e3389cf32a8d8be89c9182e4f4690f09ff9ff8bf42749dc895e1d1f0c2c90dd5c637bb1f6c741ac4a53926b72d8f71388241be459beac7791d534e3c9f5389ef859b0ac1a77359365fe8842f5f5ab9052480c37d42072541c5a55abd63952baf4b52c226425afcdd104f639de81735f7f8b40855a7ca3f0ba8a87dfad0b2b9ff3424658224d2afdf8eb5eb0edda6298942ad006902f2e4ba4db2fd26bb557e2357b473cee6e2ed576658b2586b8a3cdc5972bce70214de9d399457673927994f34a2f159680dc16370954dfcb367228346a524ee7bc8790dec1183bbf0a092fd0ee84e1546377c95642dc95334e4cc945ae42541983094a0d36fde97c80a0af2ac9ee66828bd21009ad9e2103b358a07e2c27f1ab7bc3434cecf0f4d31112ca2a2e8008e90281fd029086abe3c597b4bdac3059714b85c7600e91a57e0a9fe42b7213b78945bb48e967d25e1cb547e39e29e3260c832b5eaa205f89bf022c70fe14c1862de11f38f8667f016da3aead0a57eb3790d4929a389fa8c5aeb448ef6442079ae2478ed350010a4b1a76c1ca83ba30850d44bf330b2e205eb2b3448d5b2fc1e8db99cf3ba8c58ccb9293fb1d3ce05cd685e27b4ae6d89cfc8dd1ed0a020c977b69c348d3a214d4bf803347776fe049f978bb23b6c4e08e57669065bafdff7a6ec184bdc8fd36332ce03737d0744ca529314110c8c297af5f6ffbd09891a43de65884658eac28d347a4de614af8ed545fa2ef5b172e7a632fc05d0528b83a721fdfa88975d2ec213f48e7650078cb1907573adf8f946903a49f72c94bc66b962edf6f517081ae3a4d8540731199f9cc17a97722f1715f7908ae6d68e61727f915cee542b527c24faecf50f2cc69fda0b6ae76bda99616868b2efd800b118608e2fed180dceecb0b1a9ea5c7d113802661588fbe20a885e4d3415214b92334664afc43d72431937115545e4397d5686695094deeeb95fd716204e44eefd26903c1fb35b04c4edc117a7d00316d954292f2f80db3025d2af481cbacd33bb9b6396c47a2b91ca123917b32c929f9e5cd050b9eefd061a32c099ee138196d4cbb8993986016872e4dbd351812c9952fbd72ad08a66e3827f29f47da1d7354952803eadf7f069221825a2e66338639920a895adb66396737ea27e04a521636eefcac6d6acf0436d170fe37f3ec3b0efa09c0afb2e9ba5fa67f98b7cd25f09eda88604fa37c872c9e0f817dbb060de6133f18a59192288ea218b722c0e21b1dfae90689b92f73c0391dc16a51c6b23eb742e07a2d8399e1eb807089253d8af3432737afa614d8a8877ae301898836b3e3075a73ce28a18245901c311881ce42ab97ee94762986e75215ffde05b3925846bea093958dd0e9ecf6a2c02fc5ef95af9ddd753986e0040468750ef88c7757f6e93b46b006d6c54bc281432f76568429a6b6e0a46d2a782730f79b32dc55564da9910f7513aafc5fcb4a4a07051dcba2c739dc715179104dfbb2207b2194e335de217ba60336ca72b0dac0bfcbed83390c794adf982f369e6a16081781228b839326deae7b98c6ce81cf6e33c384cdb237f01834177766877ac73c952e70e98b2fe7033efe93b6a7013f42dac02fc521855ef84d1b07fa7bc357ff0a25e293e914f15ec499bf08293dc160dc1b1178a94e70bfe97ff31b8f25cdf6ca984f24ed103ee027c9054a080182916ef16e4edbdc1c285810dec944943fec820b4d37404b4d9c0b34d31dfdd9a02ddc86bea3df4ea09f651569bfb5f7114065f7960215d5fe3604f8a68889e93cb7610d469b8b5c34388a882b0758bcd7d6a1730d2cec8f3cc02e9359bf769892fc8080cb28c0516a8d442660f8d87045c84a3872b20e34b931e92554d73a417d7dcd4e5d4e996e4b691e6020d8ed032c0c89e8c5d3513e171839affad363a708f84031ef6f470c26bf3ec402c6148cb6e781fd59b48a25e5f9bfa2509e5927c1a15a098305118e1ac7824490b5390130", 0x2000, &(0x7f0000005640)={&(0x7f0000004880)={0x50, 0x0, 0x4, {0x7, 0x2d, 0x9, 0x50104, 0x5, 0x8, 0xba, 0x95a, 0x0, 0x0, 0x20, 0x1}}, &(0x7f0000004900)={0x18, 0xfffffffffffffff5, 0x4f0, {0x9acf}}, &(0x7f0000004940)={0x18, 0xfffffffffffffff5, 0x0, {0x7}}, &(0x7f0000004980)={0x18, 0x0, 0x10, {0x400}}, &(0x7f00000049c0)={0x18, 0x0, 0x200, {0x6}}, &(0x7f0000004a00)={0x28, 0x0, 0x9, {{0x2, 0xc, 0x2, r9}}}, &(0x7f0000004a40)={0x60, 0x0, 0x6, {{0x5, 0x2, 0x4, 0x3, 0x100000000, 0x8001, 0x0, 0xffff2b7d}}}, &(0x7f0000004ac0)={0x18, 0x0, 0x0, {0xbf3}}, &(0x7f0000004b00)={0x14, 0x0, 0x8, {'fou\x00'}}, &(0x7f0000004b40)={0x20, 0x0, 0xe5, {0x0, 0x1}}, &(0x7f0000004c00)={0x78, 0xffffffffffffffda, 0x6, {0x1, 0x9, 0x0, {0x5, 0xfffffffffffffffa, 0x3, 0x6, 0xffffffffffff7c01, 0xffffffffffffffff, 0x9, 0xfff, 0x1, 0x1000, 0x0, r12, r8, 0x7ff, 0x2}}}, &(0x7f0000004dc0)={0x90, 0x0, 0x2, {0x4, 0x3, 0x5, 0x6, 0x47b9, 0x100, {0x0, 0x5, 0x3ff, 0xe3, 0x10, 0x48d4, 0xffff, 0x7fff, 0x927, 0x2000, 0x3ff, r13, r8, 0x6, 0x6}}}, &(0x7f0000004e80)={0x98, 0x0, 0x30, [{0x1, 0x10000, 0x2, 0x6, '-['}, {0x2, 0x7ff, 0x4, 0x5, 'fou\x00'}, {0x3, 0x6, 0xc, 0xfffffffb, ')%\\$:@:/-}[@'}, {0x3, 0x7, 0x1, 0x8d3f, '-'}]}, &(0x7f0000005000)={0x328, 0x0, 0x6, [{{0x2, 0x3, 0x8, 0x1, 0x4, 0x14af, {0x2, 0xf0c5, 0xdd, 0x10, 0xfffffffffffffff9, 0xba, 0xc83, 0x5, 0x8, 0xc000, 0x2, r7, 0xee01, 0x9, 0xfffffff7}}, {0x2, 0xfffffffffffffffd, 0x3, 0x8, '(]\xe9'}}, {{0x1, 0x0, 0x9, 0x6, 0x2, 0x8, {0x2, 0x0, 0x7, 0x3, 0x9, 0x5c, 0x0, 0x8, 0x7, 0x6000, 0x5, r7, r8, 0x10000}}, {0x0, 0x4, 0x2, 0x0, '{-'}}, {{0x6, 0x2, 0x1, 0x7f, 0x9, 0x8000, {0x5, 0x5, 0x3, 0x2, 0xfffffffffffffffa, 0x8, 0x8000, 0x9, 0x9, 0x4000, 0xc, 0xee01, r8, 0x3, 0x4}}, {0x2, 0xf24, 0x0, 0x7ff}}, {{0x3, 0x1, 0xc, 0x9, 0xd00a, 0x9cf, {0x4, 0x5, 0xb7, 0x0, 0x2, 0x0, 0x6, 0x48b1, 0x9, 0xa000, 0x40, r7, r8, 0x400, 0x2}}, {0x2, 0x1, 0x4, 0x7fff, '+%!{'}}, {{0x1, 0x0, 0x846d, 0x9, 0x1, 0x8, {0x0, 0xa, 0x87d, 0x9, 0x6, 0x8, 0x5, 0x80, 0x40, 0x4000, 0x800, r7, r14, 0x2, 0x1}}, {0x5, 0x3ff, 0x4, 0x8, 'fou\x00'}}]}, &(0x7f0000005340)={0xa0, 0x0, 0x6, {{0x6, 0x0, 0x7ff, 0x6, 0x24b, 0x0, {0x1, 0x8, 0x3, 0x5, 0x7fff, 0x9, 0x1, 0x7fff, 0x488, 0x4000, 0x6, r7, r8, 0x8, 0x400}}}}, &(0x7f0000005400)={0x20, 0x0, 0x7, {0x8000, 0x0, 0x3, 0x3}}, &(0x7f0000005500)={0x130, 0x0, 0x7, {0x4, 0x1, 0x0, '\x00', {0x2000, 0x1, 0xffffffffffffffff, 0x3, r15, r8, 0x1000, '\x00', 0x2, 0x5, 0x81, 0x6, {0x6, 0x7dd}, {0xe2, 0x10000}, {0x100000000, 0x7}, {0xffffffffffffffff, 0x400}, 0x4c7, 0x5, 0x14c7, 0x5}}}}) (async, rerun: 32) r16 = open$dir(&(0x7f0000005700)='./file0\x00', 0x44ae02, 0x98) (rerun: 32) close_range(0xffffffffffffffff, r16, 0x2) (async) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000005740), &(0x7f0000005780), 0x2, 0x1) (async) openat$cgroup_ro(r2, &(0x7f00000057c0)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) syz_clone(0x200000, &(0x7f0000005800)="0af825489b5d9ab5dfc15974fbe76e9b4f5ea07839f84cc5ada7544e6b99d8113e9787d6441f44cd109217ba6f7943751c750775eab8c74a57d53eab229391b5c4f1672083e460908a2f1c58fcc3d7fa91bfc72e36ca59b32c970426922736993fad2e727c7a9bda391655ca9e67c0ac9dbd81d9acc4be2a1c1ecaef014a659cee573d0855596084bd085052c15eeef589f580a46bdb3f23235fa7c78055a432f709b1", 0xa3, &(0x7f00000058c0), &(0x7f0000005900), &(0x7f0000005940)="c2ac9490f080f73c7bc9c78a79f924a470c22a73670e3af1a3f3b6bc68f6bb91940d3a2c0ea20853cf603fde80ef1e60a99e1b5595d67a9a380ec8728559939b1ebc973338d3a23eda569fabcb5989cc73ef65c869143181eed1104ea8293961c4a1470c864997071e0c6d6db9ed9e068c9a3afc0e989a2c5478aa8f4af845341533ac6c0a84bfdd7876cb095fdb2b59895457e8ed90bd553ef4c73e0ed8becbaa86b53d4971681aa1e3ba8033a241f320470009d816") (async) r17 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000005a00), 0x2) ioctl$UDMABUF_CREATE(r17, 0x40187542, &(0x7f0000005a80)={0xffffffffffffffff, 0x1, 0x8000, 0xfffff000}) 3.850392207s ago: executing program 0 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x28c0, 0x181) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x9, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.389983722s ago: executing program 3 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)='7'}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 2.81464365s ago: executing program 1 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a000000000000010162000009001780fdffffffff"], 0x28}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x521842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0xb, 0x7, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x5, 0x1, 0x3, 0x0, 0x0, 0x100}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.80548246s ago: executing program 1 (id=1172): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x10) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 2.752922942s ago: executing program 1 (id=1173): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc14fff5004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xe8, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60880, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20) 2.750180912s ago: executing program 1 (id=1174): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501400, 0x0) lseek(r0, 0x9, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x381100) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000100)=0x8) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x8) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000180)={0x45, 0x1}) (async) write(r3, &(0x7f00000001c0)="8e8e99eea5ac12ab738e895f24bddb52d9ecf14982edcf922840039f4f35433230191c95b5565ddf994c5e88b10c09eb1eabcb59729d5cdb27400e70a5e07a6f1b13f4c7b37c33ec8e7bea5366db4ef0704f57054f02448fb2afd51cc9df2f88bd3b858429e090cb44a0cbc0ab73621e885f490b61ac22517d4b89d51e9f4a66eb85b9e3495f82bd27a07998dfaca03e7693ebbf38c8959e1e92dc32fcc7d99caad8276b5210f2803ec1de4fcccc3143be4822f88b4bf0b4ae637c86dd1be42d2559be2536d6142665cd5a1a", 0xcc) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000002c0)={{r3}, "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"}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000012c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$xdp(r2, &(0x7f0000001500)={0x2c, 0x3, 0x0, 0x31}, 0x10) (async) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f0000001540)={0x2, 0x1ff}) fstatfs(r1, &(0x7f0000001580)=""/213) r4 = accept$inet(r2, &(0x7f0000001680)={0x2, 0x0, @remote}, &(0x7f00000016c0)=0x10) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000001700)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x10000, 0x6, 0xfff, 0x2, 0x3]}, &(0x7f0000001780)=0x78) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000001, 0x4000010, r2, 0x9) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000017c0)={r2, 0x7, 0x1, 0x1}) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x806}, 0x20000800) (async) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000001940)=0x0) ptrace$poke(0x5, r6, &(0x7f0000001980), 0x3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'gretap0\x00', &(0x7f00000019c0)={'gre0\x00', 0x0, 0x1, 0x7, 0xbd, 0x7, {{0x1b, 0x4, 0x3, 0x30, 0x6c, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x13, 0x16, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x0, [{@remote, 0x6}, {@multicast2, 0xa5a3}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000001ac0)={@private=0xa010100, @empty, r7}, 0xc) 2.749868272s ago: executing program 1 (id=1175): socket(0x2c, 0x1, 0x7) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x22, 0x6, {0x6, 0x8, "6df27518"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000a00)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x9b, "708179e5e8c9e41605bd7810dd3b93f34c298c353143dc2778634f18241b36b8031b262aadcb1e3eed306645a62856ee38b25ba1ffbe509cdafdc54c56ae75d9faae46315b56e278c6c91d929ed9dd4c3a7f270e386b10e4e08701d787040dde797b40a949e596f36d98891b1feb667cb150decba671f18de2a21673cc8170eba1a4ac722ce03eeec79eac4aa4879819edcdf7e84fe3003b74648b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x81, 0x3, "a7516b"}, &(0x7f0000000700)={0x20, 0x82, 0x2, '}Q'}, &(0x7f0000000740)={0x20, 0x83, 0x1, "b0"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "83d418c9"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "960058"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="00171f000000ca6bf5115b07371085881b32ab33d5854d3bcc091a5e4dcd1b9139f15b0e63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2a, 0x803, 0xe) 2.327537526s ago: executing program 0 (id=1176): r0 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r2, &(0x7f0000005980)=[{{&(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x6b38deb179a6f499) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$inet(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000080)="a2d42dd8a4a9f554226c1563f9ac06422a0a474c213578a18f503b7fc621248a9646cf2c69f938b164c3e77177226ed4a85958e8342a94b26da6d6635e4a4ad35eb16efa40b3a5d7eb3989fa42956c0453dfce941f60c32eaae7cf63b885fde2e60e8e85e45bd3ba46604c430d6776659d85abef8aff3e36493cfae212d85255a825583a9307bf22d231ec34e216406c75", 0x91}], 0x1}, 0x20008080) close(r1) (async) close(r1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="28010000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fbdbdf2537000000083dc300", @ANYRES32=r6, @ANYBLOB="0c009900060000000b0000000800570000000007050019010e0000000800270003000000080057000d0000000500180106000000080022019b020000080027000200000008009f000300000008002201ba03000008009f000600000008002700020000000800570007000000080026006c090000080022012702000008002201990300000800a100ff7f000005001801040000000800a000030000000500180119000000080022015d020000050018011a0000000500180104000000050018012b000000080026006c09000005001801030000000800a100070000000800570002000000050019010400000008002600e01500000800a00002000000080022011b02000008002600fd160000"], 0x128}, 0x1, 0x0, 0x0, 0x44000}, 0x51) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 1.747813194s ago: executing program 3 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x7) (async) r1 = inotify_init1(0x800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) open$dir(&(0x7f0000000940)='./file0\x00', 0x410400, 0x40) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040851) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2=0x7f000001}}}, 0x108) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) preadv(r5, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x80000000, 0xffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010328bd7000fcdbdf2529"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004814) (async) inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x44000201) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001540), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.745507134s ago: executing program 3 (id=1179): r0 = syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4141, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0xac, 0xa, {0x4}}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0xa1, 0x7, 0xa, {0x4}}}]}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x8, 0x7b, {0x7b, 0x22, "7f4f2df678b60d489bee459ee8f6afe1a415ff7d7291c695b25c48951904316784205de24355a98d870060044013b64c860219abb4f79e56b87ab13fc71ee2d1552d6b09ab48bd7bcb9a19ed2a65905a2ada22d9c5f3926c5192d90bf864c9e25f1cb7aca467ecf35f80980a62b35cef9a4f8eaacf4460d2d6"}}, &(0x7f0000000100)={0x0, 0x3, 0x75, @string={0x75, 0x3, "36b7c1fe95843998a21b6fb7da252382fc41955e08fa31fbf0547fa40c6f576016857a8db91c84bf26f0439ba24d26ed44466de4d59dd604afd63756c7b8c501113ca825b2bac309cf8ee4e4b83b0576777e0faf2bd42a22914b9e0464451cced7f13d1a47a04c51abb7eb7d2840da5b2d0b95"}}, &(0x7f0000000180)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x9, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d54e21e39ea39075e48d8bb4b15dcfc0"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "403363357b1f2f54f83be9a32983ce12"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x2, 0xef, "944b79ad", "29e75844"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x3, 0x4, 0x6, 0x16, 0x9d5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x40, 0xf, 0xfc, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c029"}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "05da"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) 1.445051154s ago: executing program 0 (id=1183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc0, 0x8, 0xfe}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="762d953ee5457e4f2061f9316e1e9b1fe5455ca4323fb1221342b8"], 0xff2e) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000400)={0x0, 0x7ff, 0x4, 0x102, 0xb, "4652802cbdbc5aa71d316e0202b566ce8f7caf"}) ptrace$cont(0x9, r4, 0x7ff, 0x3) ptrace$cont(0x21, r4, 0x80000001, 0x4) ptrace(0x4207, r4) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0x800a40, 0x4) setuid(0xee01) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040)=0x2, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x28, {0x28, 0x23, "f70fa39f030000000000000000cb4fdca0560f920d54f365c5b105000000bf6fc9520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.093955095s ago: executing program 2 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) splice(r0, &(0x7f0000000100)=0xffffffffffff8000, r0, &(0x7f0000000180)=0x401, 0x3d, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) setitimer(0x0, &(0x7f0000000200)={{}, {0x0, 0xea60}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000200)=ANY=[]) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x0, 0xea60}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0x6558}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x48, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x9, '\x00', {0x4, 0x6, "b857f1", 0x6, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [@routing={0x32, 0x2, 0x0, 0x7, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}}, 0x82) 976.985689ms ago: executing program 2 (id=1186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000ffd21f076040000102030109022d0001010600000004000c020301021d09212900f56254edaa07008103200001070309050203ff0305060c"], &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xe, 0xf3, 0x3e, 0xff, 0xfd}, 0x18a, &(0x7f00000005c0)={0x5, 0xf, 0x18a, 0x6, [@generic={0x82, 0x10, 0x4, "65298cda892a8af74b3865632f0652964a847b845e2424578ec695243fd67b5366011cb3581b8f5174432c64f0e65f22cef09de886b32de1240b30bbd77aecaf56aec52fd2e45b005f171fd2e1e1146ac392f99edcbd8ff42e4e3c4b6133025e6982f2186fbc438b203d50d7ca32992454d464f940983efd80e1c066d9972b"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x5, 0x4, 0x6, 0x6}, @generic={0xd6, 0x10, 0xb, "d1527f93bc7ff1214c4fc1ef08ec3a91509ace440955de063d811439450ac444a283b7171b913a29ecd577666de55fe08088e6ebf69b11bd5fd3118692b14d6af57492f330b0560c6d0ccc4366b2cec294f777ab8559384682e45e4be746ab52d5d01adecdb95024b6bb5e60cfe5fc14c1735e48d13d398f7f5615fa945b3196bf9557cf6ea2f4db08fa02f723703012d810ec80513ac1244d64426e5a2623b100d8d6a3ba88170c607256b078a60d1d63aee2a606feaa7e0a29696df3b6ebce101b8d2dac8748755379663f7e468055e4af55"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0xc6, 0x3, 0x2, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd1, 0xb, 0x8, 0x3, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x5, 0xf, 0x9}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}, {0xa8, &(0x7f0000000280)=@string={0xa8, 0x3, "e75110c5baa07efa3b7517e779b74c6ac47dd3bbcd780afaf5c4860612d36419432957855713819e4665e934fb9f40104e871e860aad5d08a8edd80a05d7ae905b1b3f945f6104bf8fbe865ad0a0d90b73404f0bef4f9d0a20df3ce31878d0f397ad634db5ef9d686dc696f490916c24635dbd7a206f37ae8b2af390546aa8caf91a739ee07f7b31a3f64234cc9a34d2feaa1f122c6e05c6df216839e985342e0d2751e93efa"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @empty, @empty}}}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400a04000000a0e763a83808ca3a5bfb63fefbdd68"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x20, 0x30, 0x80, {0x80, 0x3, "d769aac0b9d771f7d98350299ef2bd99cbee1017ce4d6678c8e73f45da508058c1f8f2d862cc357b4e93cded61de2685d7d736630aeb1e79164e41f2055d370c1c83c0de0d41b8250d70075a4ccad69d0371eb62de3174f7b23ae30b979e9fdfde332f58b7448ac3139f21a77d1bda36dc9260e44ac74a94d3f7fb9fb47d"}}, &(0x7f0000000180)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "f23bec6af0f52d3d74f7f1ef5bc37e4a31b2694db2a228e21a4fb235"}}, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "246d9d50"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x2dd}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000440)={0x40, 0x0, 0x91, "f96e39b930d075d80cedb028a218eea3f065aa7b0610ff69bbb59d7a00dd333b9ab6c272d9fa885af59d088e6b41c4e73445d5736dfeb7ae4c167ecaa668d897cc6ecd672673c60b2673034cc6a32442df8d773eb920246dbf9908a4d5d2b05f277ff9156eac135622fad8154dd9f488424fcc67a02bf71a4be7ed3900c7e710f67c6dbb0746631bb951aedddc4dc37953"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x1, 0xa0, "27ffcd36b26078951d08c795b724085e16e17581430e83554598378387baa2ccb99c1a1a68af3fd8e1a344ef469693eb59aac0a40a165fba1506c544ca8f5a4e99da52a697fb52929a09335d18359adf7254ad8368a5ad722e2efcfe49d85845e496792afb81174026331383a2a535d886e0bdf9cd104706835f0be04d093c1724e1b3bd2e1e32b15da075943b488d1a6c0a7c0b96d57a0abd4637f1530f3347"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x97}}) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x4, 0x81, 0x6, 0x100000001, 0x8, 0x5, 0x4}, &(0x7f00000008c0)={0xa, 0xf7f9, 0x3, 0x2, 0x3, 0x1, 0x5, 0x7}, &(0x7f0000000900)={0xfffffffffffffffc, 0x7, 0x6ea, 0x6, 0xffffffff, 0x4, 0x7fff, 0x6}, &(0x7f0000000940)={0x0, 0x3938700}, &(0x7f00000009c0)={&(0x7f0000000980)={[0x309]}, 0x8}) 883.786202ms ago: executing program 3 (id=1187): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=@updpolicy={0x16c, 0x19, 0x4, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x0, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a07f3c4, 0x0, 0xb, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x4, 0x0, 0x1}, [@algo_aead={0x64, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xc0, 0x0, "2302a6825fa886ed53bd97a25acffb6cf9dba2366d386833"}}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd27, 0x70bd2c, 0x70bd29, 0x70bd25, 0x0, [0xcd1, 0xffffffff, 0x3db, 0x4, 0x1, 0x5d, 0x10, 0x1eaadf1a, 0x2, 0x5]}}, @mark={0xc, 0x15, {0x35075b, 0x1000}}]}, 0x16c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x50480, 0xc6) linkat(r3, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @remote}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe80"], 0xfdef) 828.209184ms ago: executing program 3 (id=1188): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000010) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x91}, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900890000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000000601000a00030005000000000002004e21ac1e01010000000000000021020013"], 0x78}, 0x1, 0x7}, 0x0) 595.343411ms ago: executing program 1 (id=1189): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) read$FUSE(r3, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a340)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x400000009, {0x200000000000008, 0x0, 0x0, {0x4, 0x400, 0x0, 0x8, 0x10004, 0x80000000009, 0x100009, 0xd67, 0x886, 0xa000, 0x80000002, r4, r2, 0x4, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010902640002016270060904000001020d0000052406000105240001000d240f0101000000000003020406241a03000b0424139e0424130209058103ff030008080901000000000000000904010102020d000009058202"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 409.132197ms ago: executing program 2 (id=1190): unshare(0x6020400) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x3, 0xc0, 0x5, 0x14c, 0x1}) 408.770087ms ago: executing program 2 (id=1191): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x2d, &(0x7f0000000440)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048880}, 0x24000080) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6erspan0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0xec, "fcb5bc04cdae878eb81d57a690ae912648e029879b37945071c4133bbd00f074c2345e761aac1f9630ef54ef87cce4b3995e715a4bc40ad5e471652c93b151c92750a48122b886ba33163a20536d634321bf932a2accb580364bec274b68a03f9d682a75a9a72486cded31fc6bab719eecc3aba1372410bce2cc9e0b1ec0aba33c69d99f142c029b2e8bc7a5b0f4994925d2170a908f1c56fe9811de61d07cbb846237c43bc8946bf5f46bb4d20557789a6a9399f59afafae54ded71299a3aff839280b5074c97f8989d370acdd620b637c1b9ce3048739b302e980bbdc98654eb42bd8998472850249af4a2"}}) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 408.442117ms ago: executing program 2 (id=1192): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8000000000b, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) fsetxattr$security_ima(r1, &(0x7f0000000400), &(0x7f0000000480)=@sha1={0x1, "f7ce7bf329d424a4fdd3ec83f9b4b35ce36a4305"}, 0x15, 0x2) (async) fsetxattr$security_ima(r1, &(0x7f0000000400), &(0x7f0000000480)=@sha1={0x1, "f7ce7bf329d424a4fdd3ec83f9b4b35ce36a4305"}, 0x15, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf, 0x3}, 0xe) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001800230000000000000040000a0000000800000001000000"], 0x1c}}, 0x20010000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001800230000000000000040000a0000000800000001000000"], 0x1c}}, 0x20010000) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000380)={&(0x7f0000000280)=[{&(0x7f0000000000)="b3e7546722bca5612377e70684ebbcfd384b17a6ce60edbe116f2c21892ca29300f8f4d4132ae1dc8a31155cd0d680ebe2b2a3e0eb3d83abb157504501c370a6ee4cfd1f085ec37442dc7e57266bbaa4253f8419f6fc465cc70614aa243c221627e6de348c5def6f90c5837f660e458e6e21d593ea2795a847911deb9467b641efc190f99ae55e5d460e4991883c826a3a96a39c744431c117dbff", 0x9b}, {&(0x7f00000000c0)="6924bd05d9a99d4f69f5ad44704fd3c6c238b9dcdf197710b428cb0bd8589caa56c8c296a7e710dc3e893396d33239348e87745af7377810c0b29a3dbd5182206b9ea74fd1f882c158ffb7be5d03088686d3205fc801356ca111936de00911d15cf6feecd59d4cc9868ddd722b9bcd", 0x6f}, {&(0x7f0000000140)='aU', 0x2}, {&(0x7f0000000180)="bddd4deeee7401ec5f383fb670506d8a1acf2ce9e64b54355ed868ad27690d91579188cd7d1a0465028364f182e062e4f7b4f4b64833a0d6ce476393f208b5566906239088ca0d931183ea52c64700e49d6d4c00621d5fa96422971970130a6d8f117b88c12fb6cf5438c5d598cdc842031f72db8e5967f4f77fcf771fe0a46724d1b15cf93b2eee03c58ef4eeb91f", 0x8f}], 0x4, 0x1761, 0x0, 0x400, 0x7fff, 0x2f4fffc, 0x1, 0x7}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) 269.479711ms ago: executing program 2 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x299}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x400040) splice(r0, &(0x7f0000000240)=0x6, r3, &(0x7f00000002c0)=0xfffffffffffffffd, 0x8, 0x8) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000340)={'system_u:object_r:syslogd_var_run_t:s0', 0x20, 'system_u:object_r:getty_etc_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x82) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000400)={{0x2, 0x0, 0x1, 0x0, 0x3}, 0x9, 0x89e, 0x9d77}) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f0000000480)="a79d3e9a7706fb16b7673164bf680d24260c9ed466fe7d3156ff79140dcd671a760cf7e1b6f4e58f21a2034c93da81a9d23ed25fc542f6d090393c310edb1b9f7f8284ef1a2031cfa1044c07f3b901d4ad15967601a38960185ce8e2ce8f8b3ca01976") r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x1410}, {r5, 0x8000}, {r0, 0x8000}, {r2, 0x4}, {r0, 0x8018}], 0x5, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0x2]}, 0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x4000084) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x101000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) r8 = socket$packet(0x11, 0x5, 0x300) getsockname$packet(r8, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r10, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000bc0)={r7, &(0x7f0000000ac0)=')\x00', 0x80100, &(0x7f0000000b00)={@align=0x6, {0x4, 0xb9, 0x3, 0x5}}, 0x1, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0xfff}) fcntl$getownex(r0, 0x10, &(0x7f0000000c00)={0x0, 0x0}) syz_open_procfs$pagemap(r12, &(0x7f0000000c40)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000c80)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$SNAPSHOT_CREATE_IMAGE(r11, 0x40043311, &(0x7f0000000d00)) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000d40)={r7, 0x0, 0xd, 0x3, 0xa707, 0xf}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6gre0\x00', r9, 0x2f, 0x94, 0xea, 0x4, 0x20, @private2, @mcast1, 0x8, 0x1, 0x6, 0x8000}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000001100)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x234, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x65b6965b42c6eedc, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x10) 221.444113ms ago: executing program 32 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x299}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x400040) splice(r0, &(0x7f0000000240)=0x6, r3, &(0x7f00000002c0)=0xfffffffffffffffd, 0x8, 0x8) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000340)={'system_u:object_r:syslogd_var_run_t:s0', 0x20, 'system_u:object_r:getty_etc_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x82) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000400)={{0x2, 0x0, 0x1, 0x0, 0x3}, 0x9, 0x89e, 0x9d77}) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f0000000480)="a79d3e9a7706fb16b7673164bf680d24260c9ed466fe7d3156ff79140dcd671a760cf7e1b6f4e58f21a2034c93da81a9d23ed25fc542f6d090393c310edb1b9f7f8284ef1a2031cfa1044c07f3b901d4ad15967601a38960185ce8e2ce8f8b3ca01976") r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x1410}, {r5, 0x8000}, {r0, 0x8000}, {r2, 0x4}, {r0, 0x8018}], 0x5, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0x2]}, 0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x4000084) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x101000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) r8 = socket$packet(0x11, 0x5, 0x300) getsockname$packet(r8, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r10, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000bc0)={r7, &(0x7f0000000ac0)=')\x00', 0x80100, &(0x7f0000000b00)={@align=0x6, {0x4, 0xb9, 0x3, 0x5}}, 0x1, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0xfff}) fcntl$getownex(r0, 0x10, &(0x7f0000000c00)={0x0, 0x0}) syz_open_procfs$pagemap(r12, &(0x7f0000000c40)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000c80)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$SNAPSHOT_CREATE_IMAGE(r11, 0x40043311, &(0x7f0000000d00)) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000d40)={r7, 0x0, 0xd, 0x3, 0xa707, 0xf}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6gre0\x00', r9, 0x2f, 0x94, 0xea, 0x4, 0x20, @private2, @mcast1, 0x8, 0x1, 0x6, 0x8000}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000001100)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={0x234, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x65b6965b42c6eedc, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x10) 0s ago: executing program 0 (id=1195): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x2000006, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) brk(0x200000ffc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0) ioctl$TIOCMSET(r9, 0x5418, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xf4, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe7}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x6e21, 0x8, @remote, 0x76}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe6b2082}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40840}, 0x20000002) kernel console output (not intermixed with test programs): pid=3089 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.654035][ T3092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.663593][ T3092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.675041][ T3092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.684128][ T3092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.708066][ T36] audit: type=1400 audit(1780333509.835:518): avc: denied { audit_write } for pid=3095 comm="syz.3.789" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.776501][ T337] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.783183][ T337] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 193.792387][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.801453][ T337] usb 1-1: config 0 descriptor?? [ 193.985525][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 194.008690][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.015794][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.022752][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.029848][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.036834][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.043772][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.050729][ T337] lenovo 0003:17EF:6047.0026: unknown main item tag 0x0 [ 194.058354][ T337] lenovo 0003:17EF:6047.0026: hidraw0: USB HID v0.04 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 194.085485][ T10] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 194.136817][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.145206][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.155320][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.166431][ T9] usb 4-1: string descriptor 0 read error: -22 [ 194.172636][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 194.181674][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.191888][ T9] usb 4-1: selecting invalid altsetting 1 [ 194.197797][ T9] usb 4-1: unit 6 not found! [ 194.237913][ T337] usb 1-1: USB disconnect, device number 93 [ 194.243919][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 194.260194][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 194.271101][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.279955][ T10] usb 2-1: Product: syz [ 194.284195][ T10] usb 2-1: Manufacturer: syz [ 194.288990][ T10] usb 2-1: SerialNumber: syz [ 194.355828][ T3120] netlink: 832 bytes leftover after parsing attributes in process `syz.2.796'. [ 194.364930][ T3121] netlink: 832 bytes leftover after parsing attributes in process `syz.2.796'. [ 194.375832][ T3120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 194.391557][ T9] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 194.402339][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 194.407583][ T2221] udevd[2221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 194.538028][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 194.548681][ T10] usb 2-1: USB disconnect, device number 89 [ 194.585597][ T337] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 194.640415][ T3130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.648836][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.648938][ T3130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.657313][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.667792][ T3130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.681390][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.682053][ T3130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.690460][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.698764][ T3130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.713524][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.714182][ T3130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.722559][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.746958][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.757868][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.767596][ T337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.780478][ T337] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.789507][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.797970][ T337] usb 1-1: config 0 descriptor?? [ 195.204717][ T337] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 195.212203][ T337] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 195.219847][ T337] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 195.228718][ T337] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 195.285785][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 195.382220][ T3143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.390769][ T3143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.425799][ T10] usb 2-1: device descriptor read/64, error -71 [ 195.559035][ T337] usb 1-1: USB disconnect, device number 94 [ 195.665853][ T10] usb 2-1: device descriptor read/64, error -71 [ 195.908231][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.916767][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.925890][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 196.055917][ T10] usb 2-1: device descriptor read/64, error -71 [ 196.155947][ T337] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 196.296008][ T10] usb 2-1: device descriptor read/64, error -71 [ 196.307071][ T337] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 196.316158][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.324551][ T337] usb 1-1: config 0 descriptor?? [ 196.406067][ T10] usb usb2-port1: attempt power cycle [ 196.468127][ T3157] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 196.594407][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.602977][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.731333][ T337] thrustmaster 0003:044F:B304.0028: global environment stack underflow [ 196.739636][ T337] thrustmaster 0003:044F:B304.0028: item 0 2 1 11 parsing failed [ 196.747389][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 196.755056][ T337] thrustmaster 0003:044F:B304.0028: parse failed [ 196.761548][ T337] thrustmaster 0003:044F:B304.0028: probe with driver thrustmaster failed with error -22 [ 196.773755][ T45] usb 4-1: USB disconnect, device number 88 [ 196.787073][ T10] usb 2-1: device descriptor read/8, error -71 [ 196.799048][ T3166] incfs: Options parsing error. -22 [ 196.804276][ T3166] incfs: mount failed -22 [ 196.917018][ T10] usb 2-1: device descriptor read/8, error -71 [ 196.935779][ T3150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.944269][ T3150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.973342][ T337] usb 1-1: USB disconnect, device number 95 [ 197.136149][ T45] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 197.156142][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 197.177145][ T10] usb 2-1: device descriptor read/8, error -71 [ 197.286183][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 197.292495][ T45] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 197.300705][ T45] usb 4-1: config 0 has no interface number 0 [ 197.306818][ T45] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 197.317299][ T10] usb 2-1: device descriptor read/8, error -71 [ 197.318238][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 197.332528][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.340525][ T45] usb 4-1: Product: syz [ 197.344674][ T45] usb 4-1: Manufacturer: syz [ 197.349267][ T45] usb 4-1: SerialNumber: syz [ 197.354526][ T45] usb 4-1: config 0 descriptor?? [ 197.359791][ T3166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 197.426291][ T10] usb usb2-port1: unable to enumerate USB device [ 197.567542][ T3166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 197.775426][ T45] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 197.785629][ T45] asix 4-1:0.188: probe with driver asix failed with error -61 [ 197.806269][ T66] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 197.956663][ T66] usb 1-1: too many configurations: 10, using maximum allowed: 8 [ 197.965110][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.975207][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.984079][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.997589][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.007684][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.016584][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.030127][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.040250][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.049115][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.062949][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.073238][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.082372][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.095530][ T36] audit: type=1400 audit(2000000000.009:519): avc: denied { getopt } for pid=3179 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.115670][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.120484][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.125784][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.133763][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.142237][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.150201][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.163573][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.170876][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.180511][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.188449][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.196954][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.204813][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.218072][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.225267][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.235341][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.243642][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.251671][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.259517][ T3183] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 198.272748][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.290078][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.299203][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.313379][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.322477][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.330483][ T66] usb 1-1: Product: syz [ 198.334634][ T66] usb 1-1: Manufacturer: syz [ 198.339225][ T66] usb 1-1: SerialNumber: syz [ 198.346130][ T66] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 198.353532][ T66] cdc_ncm 1-1:1.0: bind() failure [ 198.526312][ T10] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 198.656308][ T10] usb 2-1: device descriptor read/64, error -71 [ 198.896315][ T10] usb 2-1: device descriptor read/64, error -71 [ 199.136314][ T10] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 199.266752][ T10] usb 2-1: device descriptor read/64, error -71 [ 199.498514][ T36] audit: type=1326 audit(2000000001.419:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3160 comm="syz.2.807" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5659ce59 code=0x7fc00000 [ 199.526397][ T10] usb 2-1: device descriptor read/64, error -71 [ 199.530860][ T3191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.541228][ T3191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.636453][ T10] usb usb2-port1: attempt power cycle [ 199.806668][ T66] usb 4-1: USB disconnect, device number 89 [ 199.819816][ T36] audit: type=1400 audit(2000000001.729:521): avc: denied { read } for pid=3193 comm="syz.3.818" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.976308][ T10] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 199.997360][ T10] usb 2-1: device descriptor read/8, error -71 [ 200.076759][ T3204] mmap: syz.2.820 (3204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.089124][ T36] audit: type=1400 audit(2000000002.009:522): avc: denied { execmem } for pid=3202 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.108438][ T66] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 200.137397][ T10] usb 2-1: device descriptor read/8, error -71 [ 200.172994][ T36] audit: type=1400 audit(2000000002.089:523): avc: denied { create } for pid=3209 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.205582][ T3214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.216722][ T3214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.267423][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.277605][ T66] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.286484][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.300742][ T66] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 200.310013][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.318093][ T66] usb 4-1: Product: syz [ 200.322245][ T66] usb 4-1: Manufacturer: syz [ 200.326867][ T66] usb 4-1: SerialNumber: syz [ 200.332011][ T66] usb 4-1: config 0 descriptor?? [ 200.386312][ T10] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 200.407273][ T10] usb 2-1: device descriptor read/8, error -71 [ 200.537315][ T10] usb 2-1: device descriptor read/8, error -71 [ 200.544083][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.552622][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.646431][ T10] usb usb2-port1: unable to enumerate USB device [ 200.818497][ T3219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.827073][ T3219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.840794][ T66] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 200.847300][ T66] usb 4-1: No valid video chain found. [ 200.855150][ T66] usb 4-1: USB disconnect, device number 90 [ 200.973326][ T316] usb 1-1: USB disconnect, device number 96 [ 201.346439][ T316] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 201.402281][ T3242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.410850][ T3242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.497752][ T316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.506095][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.516261][ T316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.527012][ T316] usb 1-1: string descriptor 0 read error: -22 [ 201.533193][ T316] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 201.542352][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.552168][ T316] usb 1-1: selecting invalid altsetting 1 [ 201.558064][ T316] usb 1-1: unit 6 not found! [ 201.696297][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 201.752006][ T316] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 201.761836][ T316] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.764022][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 201.866323][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 201.872543][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 201.880633][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.890710][ T10] usb 4-1: config 0 has no interface number 0 [ 201.898157][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 201.907233][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.915298][ T10] usb 4-1: Product: syz [ 201.919473][ T10] usb 4-1: Manufacturer: syz [ 201.924057][ T10] usb 4-1: SerialNumber: syz [ 201.929206][ T10] usb 4-1: config 0 descriptor?? [ 201.936717][ T10] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 201.943103][ T10] usb 4-1: Failed to create links for entity 6 [ 201.949298][ T10] usb 4-1: Failed to register entities (-22). [ 201.951299][ T3251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3251 comm=syz.2.836 [ 201.975151][ T3254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.983905][ T3254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.993216][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.001751][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.010717][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.019251][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.187531][ T3249] kvm: pic: non byte read [ 202.192047][ T3249] kvm: pic: non byte read [ 202.196675][ T3249] kvm: pic: non byte write [ 202.201542][ T3249] kvm: pic: non byte write [ 202.206187][ T3249] kvm: pic: non byte write [ 202.210788][ T3249] kvm: pic: non byte write [ 202.215377][ T3249] kvm: pic: non byte write [ 202.220038][ T3249] kvm: pic: non byte write [ 202.225861][ T3249] kvm: pic: non byte write [ 202.236488][ T3249] kvm: pic: non byte write [ 202.248692][ T3249] kvm: pic: non byte write [ 202.258362][ T3263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3263 comm=syz.1.839 [ 202.655571][ T3269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.692787][ T3273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.701322][ T3273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.710234][ T36] audit: type=1400 audit(2000000004.629:524): avc: denied { nlmsg_write } for pid=3272 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.209914][ T3281] fuse: Bad value for 'fd' [ 203.224380][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.232891][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.265430][ T3280] cgroup: Need name or subsystem set [ 203.755335][ T3286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.763754][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.763862][ T3286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.772293][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.994467][ T3292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'. [ 204.048208][ T316] usb 1-1: USB disconnect, device number 97 [ 204.058354][ T36] audit: type=1400 audit(2000000005.979:525): avc: denied { ioctl } for pid=3293 comm="syz.0.849" path="cgroup:[4026532446]" dev="nsfs" ino=4026532446 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.236299][ T598] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 204.295186][ T36] audit: type=1400 audit(2000000006.209:526): avc: denied { read } for pid=3311 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.348065][ T3312] fuse: Bad value for 'fd' [ 204.371232][ T3318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.380228][ T3318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.397616][ T598] usb 2-1: not running at top speed; connect to a high speed hub [ 204.406540][ T598] usb 2-1: config 2 has an invalid interface number: 188 but max is 2 [ 204.414785][ T598] usb 2-1: config 2 has an invalid interface number: 63 but max is 2 [ 204.422904][ T598] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 204.431635][ T598] usb 2-1: config 2 has an invalid interface number: 156 but max is 2 [ 204.439937][ T598] usb 2-1: config 2 has no interface number 0 [ 204.446195][ T598] usb 2-1: config 2 has no interface number 1 [ 204.452456][ T598] usb 2-1: config 2 has no interface number 2 [ 204.462977][ T598] usb 2-1: config 2 interface 188 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 204.474591][ T598] usb 2-1: config 2 interface 188 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.487754][ T598] usb 2-1: too many endpoints for config 2 interface 63 altsetting 246: 239, using maximum allowed: 30 [ 204.498858][ T598] usb 2-1: config 2 interface 63 altsetting 246 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 204.510523][ T598] usb 2-1: config 2 interface 63 altsetting 246 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 204.521538][ T598] usb 2-1: config 2 interface 63 altsetting 246 has 3 endpoint descriptors, different from the interface descriptor's value: 239 [ 204.534862][ T598] usb 2-1: config 2 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 204.545817][ T598] usb 2-1: config 2 interface 156 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 204.556536][ T598] usb 2-1: config 2 interface 156 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 204.567630][ T316] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 204.575221][ T598] usb 2-1: config 2 interface 156 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 204.586411][ T598] usb 2-1: config 2 interface 156 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 204.599330][ T36] audit: type=1400 audit(2000000006.519:527): avc: denied { ioctl } for pid=3319 comm="syz.3.857" path="socket:[23050]" dev="sockfs" ino=23050 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.599685][ T598] usb 2-1: config 2 interface 156 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 204.624510][ T9] usb 4-1: USB disconnect, device number 91 [ 204.637293][ T598] usb 2-1: config 2 interface 188 has no altsetting 0 [ 204.650427][ T598] usb 2-1: config 2 interface 63 has no altsetting 0 [ 204.662232][ T598] usb 2-1: New USB device found, idVendor=185b, idProduct=3020, bcdDevice=17.1d [ 204.671443][ T598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.679445][ T598] usb 2-1: Product: 밙啡뛀✃⤝蔏耆ꁿ証쮰퇓䪐ᯇ듫죻ਾ랻홁舷蝀墩Ϫ굮㷗冢黤ᬵൂ杋쥤䡇홅핟㕪塜鞭⸏젞畏ꗶ駹༜覦ቹ [ 204.695529][ T598] usb 2-1: Manufacturer:  [ 204.700139][ T598] usb 2-1: SerialNumber: ␉ [ 204.747563][ T316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.755585][ T316] usb 1-1: not running at top speed; connect to a high speed hub [ 204.764014][ T316] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 204.772439][ T316] usb 1-1: config 249 has an invalid interface number: 129 but max is 0 [ 204.780978][ T316] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 204.791249][ T316] usb 1-1: config 249 has 2 interfaces, different from the descriptor's value: 1 [ 204.800391][ T316] usb 1-1: config 249 has no interface number 0 [ 204.806648][ T316] usb 1-1: config 249 has no interface number 1 [ 204.812903][ T316] usb 1-1: config 249 interface 203 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.826214][ T316] usb 1-1: config 249 interface 203 has no altsetting 0 [ 204.834587][ T316] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 204.843666][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.851872][ T316] usb 1-1: Product: syz [ 204.856027][ T316] usb 1-1: Manufacturer: syz [ 204.860632][ T316] usb 1-1: SerialNumber: syz [ 204.900478][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.908944][ T66] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 204.909903][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.067564][ T3326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.068068][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.076076][ T3326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.084688][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.101599][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.111323][ T316] rtl8150 1-1:249.203: couldn't find required endpoints [ 205.119215][ T316] rtl8150 1-1:249.203: probe with driver rtl8150 failed with error -5 [ 205.129149][ T66] usb 4-1: string descriptor 0 read error: -22 [ 205.138463][ T598] usb 2-1: USB disconnect, device number 98 [ 205.146362][ T66] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 205.155396][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.164543][ T316] rtl8150 1-1:249.129: couldn't find required endpoints [ 205.171774][ T316] rtl8150 1-1:249.129: probe with driver rtl8150 failed with error -5 [ 205.182458][ T66] usb 4-1: selecting invalid altsetting 1 [ 205.188383][ T66] usb 4-1: unit 6 not found! [ 205.194047][ T316] usb 1-1: USB disconnect, device number 98 [ 205.382559][ T66] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 205.392917][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.394511][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 205.435465][ T36] audit: type=1400 audit(2000000007.349:528): avc: denied { create } for pid=3327 comm="syz.2.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 205.566672][ T3335] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 205.763043][ T3353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.771871][ T3353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.896323][ T316] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 205.996310][ T598] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 206.047304][ T316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.053925][ T316] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 206.062979][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.071628][ T316] usb 1-1: config 0 descriptor?? [ 206.146289][ T598] usb 2-1: Using ep0 maxpacket: 32 [ 206.152426][ T598] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.160573][ T598] usb 2-1: config 0 has no interface number 0 [ 206.167971][ T598] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.177048][ T598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.185029][ T598] usb 2-1: Product: syz [ 206.189195][ T598] usb 2-1: Manufacturer: syz [ 206.193785][ T598] usb 2-1: SerialNumber: syz [ 206.198997][ T598] usb 2-1: config 0 descriptor?? [ 206.204646][ T598] smsc95xx v2.0.0 [ 206.278856][ T316] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 206.285874][ T316] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 206.293048][ T316] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 206.300047][ T316] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 206.307164][ T316] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 206.309063][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.316754][ T316] lenovo 0003:17EF:6047.0029: hidraw0: USB HID v0.04 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 206.325783][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.420796][ T3366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.429434][ T3366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.605750][ T598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.616510][ T598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.998998][ T3369] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 207.182248][ T3375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.190788][ T3375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.220247][ T3380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.228801][ T3380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.236607][ T598] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 207.247446][ T598] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.257754][ T598] usb 2-1: USB disconnect, device number 99 [ 207.667043][ T10] usb 4-1: USB disconnect, device number 92 [ 207.783062][ T3390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.791570][ T3390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.976305][ T598] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 208.006309][ T10] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 208.106303][ T598] usb 2-1: device descriptor read/64, error -71 [ 208.167351][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.177519][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.186412][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 208.197306][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 208.206347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.215122][ T3386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 208.222980][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 208.228945][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 208.236177][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 208.241387][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 208.246985][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 208.252899][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 208.346310][ T598] usb 2-1: device descriptor read/64, error -71 [ 208.398669][ T3393] validate_nla: 56 callbacks suppressed [ 208.398682][ T3393] netlink: 'syz.2.882': attribute type 21 has an invalid length. [ 208.420781][ T36] audit: type=1400 audit(2000000010.339:529): avc: denied { mounton } for pid=3394 comm="syz.2.883" path="mnt:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 208.421753][ T3395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.452985][ T3395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.596315][ T598] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 208.671055][ T10] usb 1-1: USB disconnect, device number 99 [ 208.683400][ T3398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.884'. [ 208.693751][ T3398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.884'. [ 208.736338][ T598] usb 2-1: device descriptor read/64, error -71 [ 208.971936][ T3404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.980452][ T3404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.988240][ T598] usb 2-1: device descriptor read/64, error -71 [ 209.066308][ T10] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 209.096379][ T598] usb usb2-port1: attempt power cycle [ 209.217363][ T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 209.225507][ T10] usb 1-1: config 0 has no interface number 0 [ 209.231628][ T10] usb 1-1: config 0 interface 41 has no altsetting 0 [ 209.239668][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 209.248759][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.256758][ T10] usb 1-1: Product: syz [ 209.260897][ T10] usb 1-1: Manufacturer: syz [ 209.265476][ T10] usb 1-1: SerialNumber: syz [ 209.270925][ T10] usb 1-1: config 0 descriptor?? [ 209.436309][ T598] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 209.457302][ T598] usb 2-1: device descriptor read/8, error -71 [ 209.503305][ T3406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.511846][ T3406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.587331][ T598] usb 2-1: device descriptor read/8, error -71 [ 209.677581][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 209.687171][ T10] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 209.696393][ T10] usb 1-1: USB disconnect, device number 100 [ 209.826313][ T598] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 209.847296][ T598] usb 2-1: device descriptor read/8, error -71 [ 209.977301][ T598] usb 2-1: device descriptor read/8, error -71 [ 210.061626][ T3408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.070167][ T3408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.086407][ T598] usb usb2-port1: unable to enumerate USB device [ 210.187916][ T3410] tipc: Started in network mode [ 210.192837][ T3410] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 210.200086][ T3410] tipc: Enabled bearer , priority 23 [ 210.214307][ T36] audit: type=1400 audit(2000000012.129:530): avc: denied { relabelfrom } for pid=3411 comm="syz.0.890" name="NETLINK" dev="sockfs" ino=23514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.214364][ T3414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.238760][ T36] audit: type=1400 audit(2000000012.129:531): avc: denied { relabelto } for pid=3411 comm="syz.0.890" name="NETLINK" dev="sockfs" ino=23514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 210.247603][ T3414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 210.295348][ T36] audit: type=1400 audit(2000000012.209:532): avc: denied { remount } for pid=3418 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.297213][ T3420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.324740][ T3420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.332995][ T3420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.341527][ T3420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.589413][ T3426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.597885][ T3426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.746306][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 210.897554][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.905866][ T10] usb 1-1: config 5 has an invalid interface number: 45 but max is 0 [ 210.914034][ T10] usb 1-1: config 5 has no interface number 0 [ 210.920138][ T10] usb 1-1: config 5 interface 45 has no altsetting 0 [ 210.928742][ T10] usb 1-1: New USB device found, idVendor=8528, idProduct=a193, bcdDevice=c3.51 [ 210.937788][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.945768][ T10] usb 1-1: Product: syz [ 210.949936][ T10] usb 1-1: Manufacturer: syz [ 210.954517][ T10] usb 1-1: SerialNumber: syz [ 211.098164][ T9] usb 4-1: USB disconnect, device number 93 [ 211.135116][ T3433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.144010][ T3433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.151815][ T598] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 211.156134][ T3433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.168357][ T3433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.177296][ T10] usb-storage 1-1:5.45: USB Mass Storage device detected [ 211.198745][ T10] usb 1-1: USB disconnect, device number 101 [ 211.306321][ T598] usb 2-1: Using ep0 maxpacket: 16 [ 211.312569][ T598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.325491][ T598] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 211.334554][ T598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.336314][ T310] tipc: Node number set to 10070698 [ 211.346914][ T598] usb 2-1: config 0 descriptor?? [ 211.406303][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 211.557655][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.566015][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.576139][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.587106][ T9] usb 4-1: string descriptor 0 read error: -22 [ 211.593290][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 211.602364][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.612765][ T9] usb 4-1: selecting invalid altsetting 1 [ 211.618734][ T9] usb 4-1: unit 6 not found! [ 211.690570][ T3441] netlink: 'syz.2.899': attribute type 16 has an invalid length. [ 211.700047][ T3443] netlink: 'syz.2.899': attribute type 16 has an invalid length. [ 211.755662][ T598] wacom 0003:056A:032F.002A: unknown main item tag 0x7 [ 211.762608][ T598] wacom 0003:056A:032F.002A: unknown main item tag 0x0 [ 211.769841][ T598] wacom 0003:056A:032F.002A: unknown main item tag 0x1 [ 211.776832][ T598] wacom 0003:056A:032F.002A: unknown main item tag 0xd [ 211.784486][ T598] wacom 0003:056A:032F.002A: hidraw0: USB HID v0.77 Device [HID 056a:032f] on usb-dummy_hcd.1-1/input0 [ 211.813974][ T9] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 211.825525][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 211.830095][ T3457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.837568][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 211.845290][ T3457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.886791][ T3457] : port 1(bridge_slave_0) entered forwarding state [ 211.926304][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 211.956092][ T9] usb 2-1: USB disconnect, device number 104 [ 212.076290][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 212.082390][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.090773][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.100856][ T10] usb 1-1: config 0 has no interface number 0 [ 212.108269][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 212.117432][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.125407][ T10] usb 1-1: Product: syz [ 212.129635][ T10] usb 1-1: Manufacturer: syz [ 212.134222][ T10] usb 1-1: SerialNumber: syz [ 212.139478][ T10] usb 1-1: config 0 descriptor?? [ 212.145203][ T10] uvcvideo 1-1:0.105: Found Unit with invalid ID 0 [ 212.151853][ T10] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 212.158200][ T10] usb 1-1: No valid video chain found. [ 212.347387][ T10] usb 1-1: USB disconnect, device number 102 [ 212.511904][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.520428][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.529616][ T3468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.538071][ T3468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.596859][ T36] audit: type=1400 audit(2000000014.519:533): avc: denied { ioctl } for pid=3470 comm="syz.2.910" path="socket:[24757]" dev="sockfs" ino=24757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.621351][ T36] audit: type=1400 audit(2000000014.519:534): avc: denied { write } for pid=3470 comm="syz.2.910" path="socket:[24757]" dev="sockfs" ino=24757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.677742][ T3480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3480 comm=syz.2.914 [ 212.706328][ T316] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 212.723978][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.732479][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.856303][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 212.864049][ T316] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 212.872704][ T316] usb 2-1: config 0 has no interface number 0 [ 212.878926][ T316] usb 2-1: config 0 interface 184 has no altsetting 0 [ 212.887049][ T316] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 212.896078][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.904068][ T316] usb 2-1: Product: syz [ 212.908245][ T316] usb 2-1: Manufacturer: syz [ 212.912816][ T316] usb 2-1: SerialNumber: syz [ 212.918030][ T316] usb 2-1: config 0 descriptor?? [ 212.923648][ T316] smsc75xx v1.0.0 [ 213.251835][ T3490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3490 comm=syz.2.917 [ 213.315011][ T3497] netlink: 228 bytes leftover after parsing attributes in process `syz.2.920'. [ 213.335731][ T36] audit: type=1400 audit(2000000015.249:535): avc: denied { map } for pid=3498 comm="syz.2.921" path="pipe:[3009]" dev="pipefs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 213.335799][ T3500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.921'. [ 213.382171][ T3502] fuse: Bad value for 'user_id' [ 213.388169][ T3502] fuse: Bad value for 'user_id' [ 213.407528][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.417447][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.426934][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.436151][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.524825][ T316] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 213.525074][ T36] audit: type=1400 audit(2000000015.439:536): avc: denied { read } for pid=3459 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.550307][ T316] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.555921][ T3460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.574007][ T3460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.806298][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 213.957377][ T10] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 213.962179][ T3514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3514 comm=syz.2.926 [ 213.965626][ T10] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 213.979324][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 213.991174][ T10] usb 1-1: config 0 has no interface number 0 [ 213.997677][ T316] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 214.004887][ T3514] bridge_slave_1: left allmulticast mode [ 214.013642][ T316] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 214.019647][ T3514] bridge_slave_1: left promiscuous mode [ 214.028874][ T316] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 214.034942][ T3514] : port 2(bridge_slave_1) entered disabled state [ 214.043841][ T316] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 214.051112][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 214.064760][ T316] usb 2-1: USB disconnect, device number 105 [ 214.067885][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.081858][ T10] usb 1-1: Product: syz [ 214.081871][ T3514] bridge_slave_0: left allmulticast mode [ 214.086020][ T10] usb 1-1: Manufacturer: syz [ 214.086035][ T10] usb 1-1: SerialNumber: syz [ 214.091871][ T3514] bridge_slave_0: left promiscuous mode [ 214.107110][ T3514] : port 1(bridge_slave_0) entered disabled state [ 214.114041][ T10] usb 1-1: config 0 descriptor?? [ 214.116558][ T45] usb 4-1: USB disconnect, device number 94 [ 214.167706][ T3519] syzkaller1: entered promiscuous mode [ 214.173217][ T3519] syzkaller1: entered allmulticast mode [ 214.210614][ T3522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.219812][ T3522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.322542][ T10] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 214.330347][ T10] usb 1-1: No valid video chain found. [ 214.338213][ T10] usb 1-1: USB disconnect, device number 103 [ 214.345977][ T3534] bridge0: port 3(erspan0) entered blocking state [ 214.352713][ T3534] bridge0: port 3(erspan0) entered disabled state [ 214.359203][ T3534] erspan0: entered allmulticast mode [ 214.364710][ T3534] erspan0: entered promiscuous mode [ 214.370001][ T3534] bridge0: port 3(erspan0) entered blocking state [ 214.376428][ T3534] bridge0: port 3(erspan0) entered forwarding state [ 214.626532][ T45] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 214.756359][ T316] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 214.776297][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 214.783297][ T45] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 214.791876][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.802030][ T45] usb 4-1: config 0 has no interface number 0 [ 214.809505][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 214.818651][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.826649][ T45] usb 4-1: Product: syz [ 214.830894][ T45] usb 4-1: Manufacturer: syz [ 214.835864][ T45] usb 4-1: SerialNumber: syz [ 214.841494][ T45] usb 4-1: config 0 descriptor?? [ 214.860220][ T36] audit: type=1400 audit(2000000016.779:537): avc: denied { mounton } for pid=3550 comm="syz.0.940" path="/177/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 214.860256][ T3551] fuse: Unknown parameter 'e' [ 214.861540][ T3551] 9pnet_fd: Insufficient options for proto=fd [ 214.917759][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.926706][ T316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.940307][ T316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.952233][ T316] usb 2-1: string descriptor 0 read error: -22 [ 214.958541][ T316] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 214.968131][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.980400][ T316] usb 2-1: selecting invalid altsetting 1 [ 214.986356][ T316] usb 2-1: unit 6 not found! [ 215.049556][ T598] usb 4-1: USB disconnect, device number 95 [ 215.072008][ T3573] loop9: detected capacity change from 0 to 7 [ 215.078533][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.087686][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.095619][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.104788][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.112744][ T3573] loop9: unable to read partition table [ 215.120000][ T3573] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 215.122018][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.137304][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.145350][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.154510][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.163613][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.172783][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.172927][ T36] audit: type=1400 audit(2000000017.099:538): avc: denied { create } for pid=3576 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 215.201331][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.210483][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.219126][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.228270][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 215.381358][ T3593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.388593][ T3593] IPv6: NLM_F_CREATE should be set when creating new route [ 215.395794][ T3593] IPv6: NLM_F_CREATE should be set when creating new route [ 215.576670][ T36] audit: type=1400 audit(2000000017.499:539): avc: denied { getopt } for pid=3599 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.836311][ T45] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 215.987356][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 215.997095][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 216.016841][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.018813][ T3604] syzkaller1: entered promiscuous mode [ 216.028488][ T316] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.031477][ T3604] syzkaller1: entered allmulticast mode [ 216.044718][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 216.061563][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.070692][ T45] usb 4-1: Product: syz [ 216.074919][ T45] usb 4-1: Manufacturer: syz [ 216.079578][ T45] usb 4-1: SerialNumber: syz [ 216.084625][ T45] usb 4-1: config 0 descriptor?? [ 216.090626][ T45] usb 4-1: 0:0 : invalid sync pipe. bmAttributes ff, bLength 9, bSynchAddress 00 [ 216.117300][ T3606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.126434][ T3606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.135370][ T3606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.143892][ T3606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.153527][ T3606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.161992][ T3606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.246292][ T9] usb 2-1: USB disconnect, device number 106 [ 216.293433][ T45] usb 4-1: USB disconnect, device number 96 [ 216.526330][ T316] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 216.656303][ T316] usb 1-1: device descriptor read/64, error -71 [ 216.687802][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.696445][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.754324][ T3623] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 216.760959][ T399] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.896331][ T316] usb 1-1: device descriptor read/64, error -71 [ 216.952126][ T3639] netlink: 'syz.3.969': attribute type 4 has an invalid length. [ 216.959980][ T3639] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.969'. [ 216.996320][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 217.126331][ T9] usb 2-1: device descriptor read/64, error -71 [ 217.136316][ T316] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 217.216523][ T310] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 217.263267][ T3645] input: syz1 as /devices/virtual/input/input43 [ 217.269767][ T316] usb 1-1: device descriptor read/64, error -71 [ 217.338719][ T36] audit: type=1400 audit(2000000019.259:540): avc: denied { shutdown } for pid=3646 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.340054][ T3649] netlink: 'syz.2.973': attribute type 8 has an invalid length. [ 217.368560][ T9] usb 2-1: device descriptor read/64, error -71 [ 217.376300][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 217.382669][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.391384][ T310] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 217.399327][ T310] usb 4-1: can't read configurations, error -22 [ 217.463801][ T3653] rust_binder: 1187: no such ref 0 [ 217.488389][ T36] audit: type=1400 audit(2000000019.409:541): avc: denied { accept } for pid=3656 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.514638][ T3661] 9pnet_fd: Insufficient options for proto=fd [ 217.520883][ T316] usb 1-1: device descriptor read/64, error -71 [ 217.528741][ T310] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 217.542299][ T3664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'. [ 217.553199][ T3664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'. [ 217.606289][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 217.636349][ T316] usb usb1-port1: attempt power cycle [ 217.686334][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 217.693171][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.703947][ T310] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 217.711917][ T310] usb 4-1: can't read configurations, error -22 [ 217.718887][ T310] usb usb4-port1: attempt power cycle [ 217.737359][ T9] usb 2-1: device descriptor read/64, error -71 [ 217.834045][ T36] audit: type=1400 audit(2000000019.749:542): avc: denied { create } for pid=3675 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 217.892970][ T36] audit: type=1326 audit(2000000019.809:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.984" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf5659ce59 code=0x0 [ 217.893210][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.925957][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.996298][ T9] usb 2-1: device descriptor read/64, error -71 [ 218.056329][ T310] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 218.076500][ T316] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 218.076710][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 218.090623][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.099266][ T310] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 218.107269][ T310] usb 4-1: can't read configurations, error -22 [ 218.107325][ T316] usb 1-1: device descriptor read/8, error -71 [ 218.113590][ T9] usb usb2-port1: attempt power cycle [ 218.247239][ T316] usb 1-1: device descriptor read/8, error -71 [ 218.256318][ T310] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 218.276700][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 218.283129][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.291786][ T310] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 218.299713][ T310] usb 4-1: can't read configurations, error -22 [ 218.306086][ T310] usb usb4-port1: unable to enumerate USB device [ 218.456301][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 218.477368][ T9] usb 2-1: device descriptor read/8, error -71 [ 218.496334][ T316] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 218.517416][ T316] usb 1-1: device descriptor read/8, error -71 [ 218.607292][ T9] usb 2-1: device descriptor read/8, error -71 [ 218.647298][ T316] usb 1-1: device descriptor read/8, error -71 [ 218.756392][ T316] usb usb1-port1: unable to enumerate USB device [ 218.786306][ T3625] Bluetooth: hci0: command 0x1003 tx timeout [ 218.786308][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.856301][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 218.877335][ T9] usb 2-1: device descriptor read/8, error -71 [ 219.007390][ T9] usb 2-1: device descriptor read/8, error -71 [ 219.116413][ T9] usb usb2-port1: unable to enumerate USB device [ 219.686315][ T316] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 219.801153][ T3690] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 219.809288][ T3690] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 219.846300][ T316] usb 1-1: Invalid ep0 maxpacket: 64 [ 219.976311][ T316] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 220.009252][ T36] audit: type=1400 audit(2000000021.929:544): avc: denied { write } for pid=3691 comm="syz.3.987" name="file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.031635][ T36] audit: type=1400 audit(2000000021.929:545): avc: denied { open } for pid=3691 comm="syz.3.987" path="/198/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.126363][ T316] usb 1-1: Invalid ep0 maxpacket: 64 [ 220.131799][ T316] usb usb1-port1: attempt power cycle [ 220.176320][ T45] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 220.326303][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 220.332950][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.341296][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 220.352107][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.362964][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.374609][ T45] usb 2-1: string descriptor 0 read error: -22 [ 220.380844][ T45] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 220.389891][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.486289][ T316] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 220.506615][ T316] usb 1-1: Invalid ep0 maxpacket: 64 [ 220.601420][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 220.610896][ T3690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.619544][ T3690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.646318][ T316] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 220.666592][ T316] usb 1-1: Invalid ep0 maxpacket: 64 [ 220.671966][ T316] usb usb1-port1: unable to enumerate USB device [ 220.828635][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 220.841458][ T45] usb 2-1: USB disconnect, device number 111 [ 221.027409][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.035900][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.046047][ T3712] syzkaller1: entered promiscuous mode [ 221.051546][ T3712] syzkaller1: entered allmulticast mode [ 221.058425][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.066914][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.176309][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 221.306314][ T9] usb 4-1: device descriptor read/64, error -71 [ 221.556332][ T9] usb 4-1: device descriptor read/64, error -71 [ 221.606308][ T45] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 221.767405][ T45] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 221.778590][ T45] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.791377][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.797991][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 221.806290][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 221.807019][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.823127][ T45] usb 2-1: config 0 descriptor?? [ 221.936319][ T9] usb 4-1: device descriptor read/64, error -71 [ 222.176297][ T9] usb 4-1: device descriptor read/64, error -71 [ 222.230392][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x2 [ 222.237346][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.244205][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.251098][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.257972][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.264840][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.271734][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.278609][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.285449][ T45] wacom 0003:056A:0314.002B: unknown main item tag 0x0 [ 222.292520][ T45] wacom 0003:056A:0314.002B: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 222.296415][ T9] usb usb4-port1: attempt power cycle [ 222.303648][ T45] wacom 0003:056A:0314.002B: hidraw0: USB HID v0.04 Device [HID 056a:0314] on usb-dummy_hcd.1-1/input0 [ 222.319154][ T45] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0314.002B/input/input44 [ 222.461494][ T310] usb 2-1: USB disconnect, device number 112 [ 222.646320][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 222.667307][ T9] usb 4-1: device descriptor read/8, error -71 [ 222.776305][ T45] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 222.797320][ T9] usb 4-1: device descriptor read/8, error -71 [ 222.927426][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.937165][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.946824][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.960933][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.969993][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.978091][ T45] usb 1-1: Product: syz [ 222.981780][ T3728] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 222.982403][ T45] usb 1-1: Manufacturer: syz [ 222.996910][ T36] audit: type=1400 audit(2000000024.919:546): avc: denied { relabelto } for pid=3727 comm="syz.1.998" name="190" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 223.023242][ T45] usb 1-1: SerialNumber: syz [ 223.024326][ T36] audit: type=1400 audit(2000000024.919:547): avc: denied { associate } for pid=3727 comm="syz.1.998" name="190" dev="tmpfs" ino=1017 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 223.055078][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 223.055169][ T36] audit: type=1400 audit(2000000024.919:548): avc: denied { ioctl } for pid=3705 comm="syz.3.991" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.087438][ T9] usb 4-1: device descriptor read/8, error -71 [ 223.087743][ T36] audit: type=1400 audit(2000000024.919:549): avc: denied { write } for pid=296 comm="syz-executor" name="190" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 223.094729][ T3736] netlink: 'syz.1.1001': attribute type 28 has an invalid length. [ 223.120080][ T36] audit: type=1400 audit(2000000024.919:550): avc: denied { remove_name } for pid=296 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 223.154964][ T36] audit: type=1400 audit(2000000024.919:551): avc: denied { rmdir } for pid=296 comm="syz-executor" name="190" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 223.181195][ T36] audit: type=1400 audit(2000000024.989:552): avc: denied { create } for pid=3729 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 223.200798][ T36] audit: type=1400 audit(2000000025.049:553): avc: denied { read write } for pid=3735 comm="syz.1.1001" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.224349][ T36] audit: type=1400 audit(2000000025.049:554): avc: denied { open } for pid=3735 comm="syz.1.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.225378][ T9] usb 4-1: device descriptor read/8, error -71 [ 223.249289][ T45] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.356367][ T9] usb usb4-port1: unable to enumerate USB device [ 223.460322][ T45] usb 1-1: USB disconnect, device number 112 [ 223.469010][ T45] usblp0: removed [ 223.906303][ T45] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 223.977006][ T3749] fuse: Unknown parameter 'dootmode' [ 224.028268][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.036752][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.057653][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.065653][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 224.073466][ T45] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 224.082429][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.090195][ T45] usb 2-1: can't read configurations, error -61 [ 224.100440][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.108924][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.124420][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.134395][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.166799][ T3764] overlayfs: missing 'lowerdir' [ 224.226347][ T45] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 224.246307][ T316] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 224.377639][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.385628][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 224.393722][ T45] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 224.401489][ T316] usb 1-1: Using ep0 maxpacket: 8 [ 224.406560][ T66] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 224.415150][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.422764][ T45] usb 2-1: can't read configurations, error -61 [ 224.429030][ T316] usb 1-1: config 154 has an invalid interface number: 116 but max is 0 [ 224.437460][ T45] usb usb2-port1: attempt power cycle [ 224.442861][ T316] usb 1-1: config 154 has no interface number 0 [ 224.449355][ T316] usb 1-1: config 154 interface 116 has no altsetting 0 [ 224.458271][ T316] usb 1-1: string descriptor 0 read error: -22 [ 224.464458][ T316] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=f2.e0 [ 224.473513][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.557357][ T66] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.569001][ T66] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.580071][ T66] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 224.591810][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 224.600877][ T66] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.608883][ T66] usb 4-1: Manufacturer: syz [ 224.614398][ T3764] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 224.686409][ T316] usb 1-1: USB disconnect, device number 113 [ 224.742320][ T36] audit: type=1400 audit(2000000026.659:555): avc: denied { setcurrent } for pid=3765 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 224.786336][ T45] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 224.825016][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.833114][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 224.841071][ T45] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 224.856550][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.864162][ T45] usb 2-1: can't read configurations, error -61 [ 224.911665][ T3786] No source specified [ 225.006332][ T45] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 225.008938][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.022554][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.037814][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.045791][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 225.053754][ T45] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 225.062537][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 225.070270][ T45] usb 2-1: can't read configurations, error -61 [ 225.080584][ T45] usb usb2-port1: unable to enumerate USB device [ 225.203991][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.212469][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.436349][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 225.436526][ T66] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 225.451471][ T66] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input47 [ 225.463159][ T66] usb 4-1: USB disconnect, device number 105 [ 225.469196][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 225.591155][ T3796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1021'. [ 225.597415][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 225.608377][ T3796] gretap0: entered promiscuous mode [ 225.609505][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 225.629423][ T10] usb 1-1: config 220 has no interface number 2 [ 225.635423][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.635734][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 225.648028][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.658416][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 225.671637][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 225.678509][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 225.686676][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 225.695710][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.703700][ T10] usb 1-1: Product: syz [ 225.707899][ T10] usb 1-1: Manufacturer: syz [ 225.712483][ T10] usb 1-1: SerialNumber: syz [ 225.758192][ T3803] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 225.786302][ T66] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 225.923192][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 225.929615][ T10] usb 1-1: No valid video chain found. [ 225.935092][ T10] usb 1-1: selecting invalid altsetting 0 [ 225.937679][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.944964][ T10] usb 1-1: USB disconnect, device number 114 [ 225.952708][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 225.962177][ T66] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 225.970851][ T66] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 225.978413][ T66] usb 2-1: can't read configurations, error -61 [ 226.106313][ T66] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 226.277742][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.285740][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 226.293504][ T66] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 226.302222][ T66] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 226.309972][ T66] usb 2-1: can't read configurations, error -61 [ 226.316353][ T66] usb usb2-port1: attempt power cycle [ 226.656327][ T66] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 226.677762][ T66] usb 2-1: device descriptor read/8, error -71 [ 226.816901][ T66] usb 2-1: device descriptor read/8, error -71 [ 226.846302][ T9] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 226.997732][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.005707][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 227.014129][ T9] usb 4-1: config 74 has an invalid interface number: 193 but max is 0 [ 227.022532][ T9] usb 4-1: config 74 has an invalid descriptor of length 244, skipping remainder of the config [ 227.032944][ T9] usb 4-1: config 74 has no interface number 0 [ 227.039131][ T9] usb 4-1: config 74 interface 193 altsetting 5 has an endpoint descriptor with address 0x1F, changing to 0xF [ 227.050787][ T9] usb 4-1: config 74 interface 193 altsetting 5 endpoint 0xF has invalid maxpacket 22752, setting to 64 [ 227.061912][ T9] usb 4-1: config 74 interface 193 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.074958][ T9] usb 4-1: config 74 interface 193 has no altsetting 0 [ 227.083155][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=d3.89 [ 227.092212][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.100201][ T9] usb 4-1: Product: syz [ 227.104354][ T9] usb 4-1: Manufacturer: syz [ 227.108946][ T9] usb 4-1: SerialNumber: syz [ 227.276303][ T316] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 227.315878][ T9] usb 4-1: bad CDC descriptors [ 227.320809][ T9] cdc_acm 4-1:74.193: Zero length descriptor references [ 227.327775][ T9] cdc_acm 4-1:74.193: probe with driver cdc_acm failed with error -22 [ 227.337003][ T9] usb 4-1: USB disconnect, device number 106 [ 227.427591][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.437735][ T316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.447304][ T316] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.456373][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.464359][ T316] usb 1-1: SerialNumber: syz [ 227.676523][ T316] usb 1-1: invalid UAC_HEADER (v1) [ 227.683053][ T316] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 227.692783][ T316] usb 1-1: USB disconnect, device number 115 [ 227.699709][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 228.026320][ T66] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 228.066323][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 228.180540][ T66] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.188908][ T66] usb 2-1: config 0 has no interface number 0 [ 228.194997][ T66] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.205951][ T66] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.215700][ T66] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 228.224792][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.226273][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 228.233720][ T66] usb 2-1: config 0 descriptor?? [ 228.240803][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.252944][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.262012][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 228.273012][ T9] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.286488][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.296121][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 228.304130][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 228.313500][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.321505][ T9] usb 4-1: Product: syz [ 228.325665][ T9] usb 4-1: Manufacturer: syz [ 228.330291][ T9] usb 4-1: SerialNumber: syz [ 228.416310][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 228.537547][ T9] usb 4-1: selecting invalid altsetting 0 [ 228.577323][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.587482][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.597135][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.606190][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.614306][ T10] usb 1-1: Manufacturer: syz [ 228.619532][ T10] usb 1-1: config 0 descriptor?? [ 228.655887][ T66] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.002C/input/input48 [ 228.729422][ T66] holtek_kbd 0003:04D9:A055.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 228.751703][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.760276][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.773731][ T9] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 228.774655][ T3829] overlayfs: missing 'lowerdir' [ 228.853563][ T10] usb 2-1: USB disconnect, device number 121 [ 228.949904][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.958608][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.983903][ T3824] syzkaller0: refused to change device tx_queue_len [ 229.092844][ T9] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -861704163 [ 229.324230][ T66] usb 4-1: USB disconnect, device number 107 [ 229.475146][ T3857] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 229.490006][ T3862] overlayfs: missing 'lowerdir' [ 229.513800][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.522361][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.076283][ T66] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 230.149903][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.158495][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.202621][ T3893] overlayfs: missing 'lowerdir' [ 230.208410][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.217041][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.237921][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.246343][ T66] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 230.258902][ T66] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 230.267966][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.275955][ T66] usb 4-1: Product: syz [ 230.280130][ T66] usb 4-1: Manufacturer: 朔⮬駫ר쎳︂㳴㻏외ꄬ䶒咪苔ⅽᬚ㣓῰䰊輆䉼찬횅倧ﻠإ痤k斄佺퀽㾓颖꘾닼둂嫴糾梾ꚤ鬺곢︦妀ӓ薳棈﹥赪㒽忯诐蚶躕ਈﲼ앦ꯌቭ䪙쎹멳珤⁆霶蘹듆鬁냌ᶩ垿锖㽖ӉⒽ忼未뱘忩謀빐␕ᒧ๨ﷵ鯟㖽┫৑㿚璅啀˥樅붢 [ 230.311204][ T66] usb 4-1: SerialNumber: syz [ 230.366303][ T316] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 230.518926][ T316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.528270][ T66] usb 4-1: unit 4 not found! [ 230.532938][ T316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.543287][ T316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.568241][ T316] usb 2-1: string descriptor 0 read error: -22 [ 230.574427][ T316] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 230.584572][ T66] usb 4-1: USB disconnect, device number 108 [ 230.591302][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.593710][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 230.618112][ T316] usb 2-1: selecting invalid altsetting 1 [ 230.624080][ T316] usb 2-1: unit 6 not found! [ 231.136598][ T3906] kvm: user requested TSC rate below hardware speed [ 231.144026][ T3906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 231.161915][ T3906] netlink: 'syz.3.1056': attribute type 4 has an invalid length. [ 231.195780][ T10] usb 1-1: USB disconnect, device number 116 [ 231.238087][ T3916] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 231.252347][ T3916] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 231.297606][ T3929] syzkaller1: entered promiscuous mode [ 231.303120][ T3929] syzkaller1: entered allmulticast mode [ 231.323532][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 231.323548][ T36] audit: type=1400 audit(2000000033.239:559): avc: denied { mounton } for pid=3932 comm="syz.3.1065" path="/215/file0" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.329239][ T3934] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1065'. [ 231.329660][ T3933] fuse: Bad value for 'user_id' [ 231.353052][ T36] audit: type=1400 audit(2000000033.249:560): avc: denied { nlmsg_read } for pid=3932 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.362861][ T3933] fuse: Bad value for 'user_id' [ 231.381408][ T3938] raw_sendmsg: syz.0.1066 forgot to set AF_INET. Fix it! [ 231.406067][ T36] audit: type=1400 audit(2000000033.319:561): avc: denied { map } for pid=3937 comm="syz.0.1066" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 231.429752][ T3938] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=3938 comm=syz.0.1066 [ 231.442679][ T3938] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=3938 comm=syz.0.1066 [ 231.599245][ T3954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1072'. [ 231.610317][ T3954] SELinux: failed to load policy [ 231.639001][ T3958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.647532][ T3958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.649301][ T316] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 231.668430][ T36] audit: type=1400 audit(2000000033.589:562): avc: denied { create } for pid=3957 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 231.669117][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 231.696294][ T310] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 231.868267][ T316] usb 2-1: USB disconnect, device number 122 [ 231.868762][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.884401][ T310] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 231.893463][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.901942][ T310] usb 4-1: config 0 descriptor?? [ 231.907652][ T310] usb 4-1: unsupported MDLM descriptors [ 232.107655][ T310] usb 4-1: USB disconnect, device number 109 [ 232.266539][ T3965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.275024][ T3965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.356313][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 232.506293][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 232.512549][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 232.520754][ T10] usb 1-1: config 0 has no interface number 0 [ 232.526855][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 232.536850][ T10] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.546861][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.557242][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 232.565253][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 232.574298][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.582287][ T10] usb 1-1: Product: syz [ 232.586440][ T10] usb 1-1: Manufacturer: syz [ 232.591022][ T10] usb 1-1: SerialNumber: syz [ 232.596051][ T10] usb 1-1: config 0 descriptor?? [ 232.601271][ T3961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.626321][ T316] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 232.726839][ T36] audit: type=1326 audit(2000000034.649:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.3.1078" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54c5b9ce59 code=0x0 [ 232.776280][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 232.782708][ T3971] : renamed from lo (while UP) [ 232.787743][ T316] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.797961][ T316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.808359][ T316] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.817447][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.825457][ T316] usb 2-1: Product: syz [ 232.829838][ T316] usb 2-1: Manufacturer: syz [ 232.834472][ T316] usb 2-1: SerialNumber: syz [ 232.892075][ T36] audit: type=1400 audit(2000000034.809:564): avc: denied { map } for pid=3974 comm="syz.2.1079" path="socket:[29069]" dev="sockfs" ino=29069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.931234][ T3978] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 232.972616][ T3989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.981157][ T3989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.041513][ T316] usb 2-1: 0:2 : does not exist [ 233.046491][ T316] usb 2-1: unit 9 not found! [ 233.052698][ T316] usb 2-1: USB disconnect, device number 123 [ 233.061291][ T2221] udevd[2221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 233.210449][ T10] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 233.221206][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 233.230418][ T10] usb 1-1: USB disconnect, device number 117 [ 233.296598][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 233.466092][ T3991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 233.528519][ T3991] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1084'. [ 233.537651][ T3991] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.554790][ T3997] netlink: 'syz.1.1086': attribute type 16 has an invalid length. [ 233.562771][ T3997] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.1086'. [ 233.574665][ T36] audit: type=1400 audit(2000000035.489:565): avc: denied { link } for pid=3996 comm="syz.1.1086" name="#1c" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.773984][ T4004] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1089'. [ 233.836300][ T66] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 233.844894][ T36] audit: type=1400 audit(2000000035.759:566): avc: denied { create } for pid=4005 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 233.845608][ T4006] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 233.915806][ T4013] overlayfs: missing 'lowerdir' [ 233.921609][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.930133][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.986306][ T66] usb 2-1: device descriptor read/64, error -71 [ 234.126300][ T316] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 234.226567][ T66] usb 2-1: device descriptor read/64, error -71 [ 234.256312][ T316] usb 1-1: device descriptor read/64, error -71 [ 234.476301][ T66] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 234.496308][ T316] usb 1-1: device descriptor read/64, error -71 [ 234.606373][ T66] usb 2-1: device descriptor read/64, error -71 [ 234.736330][ T316] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 234.856299][ T66] usb 2-1: device descriptor read/64, error -71 [ 234.866311][ T316] usb 1-1: device descriptor read/64, error -71 [ 234.966439][ T66] usb usb2-port1: attempt power cycle [ 235.106302][ T316] usb 1-1: device descriptor read/64, error -71 [ 235.216383][ T316] usb usb1-port1: attempt power cycle [ 235.302010][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.306291][ T66] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 235.311164][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.331923][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.340461][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.347149][ T66] usb 2-1: device descriptor read/8, error -71 [ 235.477382][ T66] usb 2-1: device descriptor read/8, error -71 [ 235.566339][ T316] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 235.587275][ T316] usb 1-1: device descriptor read/8, error -71 [ 235.716346][ T66] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 235.725000][ T316] usb 1-1: device descriptor read/8, error -71 [ 235.737281][ T66] usb 2-1: device descriptor read/8, error -71 [ 235.867289][ T66] usb 2-1: device descriptor read/8, error -71 [ 235.910263][ T4021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.918809][ T4021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.966301][ T316] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 235.976381][ T66] usb usb2-port1: unable to enumerate USB device [ 235.987268][ T316] usb 1-1: device descriptor read/8, error -71 [ 236.117381][ T316] usb 1-1: device descriptor read/8, error -71 [ 236.226423][ T316] usb usb1-port1: unable to enumerate USB device [ 236.481150][ T36] audit: type=1400 audit(2000000038.399:567): avc: denied { map } for pid=4031 comm="syz.2.1099" path="socket:[28339]" dev="sockfs" ino=28339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 236.482029][ T4034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.512632][ T4034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.543182][ T4045] overlayfs: missing 'lowerdir' [ 236.549054][ T4045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.557531][ T4045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.621602][ T4049] can: request_module (can-proto-3) failed. [ 236.630067][ T4049] syz_tun (unregistering): left allmulticast mode [ 236.906609][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 236.931246][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.939846][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.016318][ T316] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 237.056305][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 237.062372][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 237.075411][ T10] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 237.084609][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.093690][ T10] usb 4-1: config 0 descriptor?? [ 237.106516][ T4068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.115611][ T4068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.124034][ T4068] 9pnet_fd: p9_fd_create_tcp (4068): problem binding to privport [ 237.167528][ T316] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.178556][ T316] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.188310][ T316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 237.194923][ T316] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 237.203979][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.212642][ T316] usb 2-1: config 0 descriptor?? [ 237.296300][ T66] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 237.303970][ T10] greenasia 0003:0E8F:0012.002D: unknown main item tag 0x2 [ 237.304004][ T10] greenasia 0003:0E8F:0012.002D: bogus close delimiter [ 237.311225][ T36] audit: type=1326 audit(2000000039.219:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.3.1106" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54c5b9ce59 code=0x0 [ 237.318536][ T10] greenasia 0003:0E8F:0012.002D: item 0 0 2 10 parsing failed [ 237.361299][ T10] greenasia 0003:0E8F:0012.002D: parse failed [ 237.367557][ T10] greenasia 0003:0E8F:0012.002D: probe with driver greenasia failed with error -22 [ 237.386391][ T10] usb 4-1: USB disconnect, device number 110 [ 237.497564][ T66] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.510549][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.517399][ T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 237.526479][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.535220][ T66] usb 1-1: config 0 descriptor?? [ 237.620966][ T316] hid-steam 0003:28DE:1102.002E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 237.671961][ T36] audit: type=1400 audit(2000000039.589:569): avc: denied { accept } for pid=4084 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.677330][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.700738][ T316] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' connected [ 237.701959][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.716454][ T316] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.002E/input/input49 [ 237.734176][ T316] hid-steam 0003:28DE:1102.002F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 237.816291][ T10] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 237.826783][ T316] usb 2-1: USB disconnect, device number 2 [ 237.836123][ T316] hid-steam 0003:28DE:1102.002E: Steam Controller 'XXXXXXXXXX' disconnected [ 237.947493][ T66] usbhid 1-1:0.0: can't add hid device: -71 [ 237.954612][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.963745][ T66] usb 1-1: USB disconnect, device number 122 [ 238.337705][ T4090] overlayfs: missing 'lowerdir' [ 238.576298][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 238.727325][ T66] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.738988][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.750342][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 238.763971][ T66] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 238.773439][ T66] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.774495][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.781622][ T66] usb 2-1: Manufacturer: syz [ 238.791728][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.798572][ T4090] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 238.876280][ T316] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 239.006307][ T316] usb 1-1: device descriptor read/64, error -71 [ 239.246286][ T316] usb 1-1: device descriptor read/64, error -71 [ 239.414246][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.422828][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.441253][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.449959][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.496296][ T316] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 239.616493][ T66] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 239.624091][ T66] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input50 [ 239.633286][ T316] usb 1-1: device descriptor read/64, error -71 [ 239.641959][ T66] usb 2-1: USB disconnect, device number 3 [ 239.642009][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 239.876291][ T316] usb 1-1: device descriptor read/64, error -71 [ 239.928891][ T36] audit: type=1400 audit(2000000041.849:570): avc: denied { ioctl } for pid=4107 comm="syz.1.1124" path="socket:[29671]" dev="sockfs" ino=29671 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.929101][ T4108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1124'. [ 239.971158][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.980321][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.996386][ T316] usb usb1-port1: attempt power cycle [ 240.040788][ T36] audit: type=1400 audit(2000000041.959:571): avc: denied { setcheckreqprot } for pid=4114 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 240.229023][ T4129] overlayfs: missing 'lowerdir' [ 240.336283][ T316] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 240.357280][ T316] usb 1-1: device descriptor read/8, error -71 [ 240.466473][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 240.487341][ T316] usb 1-1: device descriptor read/8, error -71 [ 240.617337][ T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.628986][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.640129][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 240.651939][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 240.661017][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.669012][ T9] usb 2-1: Manufacturer: syz [ 240.674481][ T4129] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.726312][ T316] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 240.747271][ T316] usb 1-1: device descriptor read/8, error -71 [ 240.846291][ T10] usb 4-1: device descriptor read/64, error -71 [ 240.877310][ T316] usb 1-1: device descriptor read/8, error -71 [ 240.986359][ T316] usb usb1-port1: unable to enumerate USB device [ 241.107379][ T10] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.118715][ T10] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.131586][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.138203][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 241.147232][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.155679][ T10] usb 4-1: config 0 descriptor?? [ 241.356350][ T4138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.365475][ T4138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.486466][ T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 241.494117][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input52 [ 241.506708][ T9] usb 2-1: USB disconnect, device number 4 [ 241.512649][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 241.526068][ T4140] FAT-fs (rnullb0): bogus number of reserved sectors [ 241.532929][ T4140] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 241.567609][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.575807][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.583944][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.592070][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.600215][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.608401][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.616563][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.624669][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.632766][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.640892][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.649049][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.657158][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.665245][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.673358][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.677742][ T4148] Invalid logical block size (3601) [ 241.681490][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.695038][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.703175][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.711318][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.719557][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.727670][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.735777][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.743940][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.752049][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.760165][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.768278][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.776398][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.784545][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.797526][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.805651][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.813805][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.823281][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.831534][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.839742][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.847900][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.856638][ T10] logitech-djreceiver 0003:046D:C52F.0030: unknown main item tag 0x0 [ 241.869385][ T10] usb 4-1: USB disconnect, device number 111 [ 241.891874][ T36] audit: type=1400 audit(2000000043.809:572): avc: denied { lock } for pid=4165 comm="syz.1.1144" path="socket:[29744]" dev="sockfs" ino=29744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 241.945177][ T4180] overlayfs: missing 'lowerdir' [ 241.950991][ T4180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.960215][ T4180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.061493][ T4186] SELinux: syz.1.1152 (4186) set checkreqprot to 1. This is no longer supported. [ 242.306358][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 242.436313][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.479857][ T4195] : renamed from vlan0 (while UP) [ 242.492498][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.501048][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.535476][ T4202] netlink: 'syz.2.1158': attribute type 19 has an invalid length. [ 242.576581][ T316] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 242.646442][ T4202] usb usb8: usbfs: process 4202 (syz.2.1158) did not claim interface 0 before use [ 242.656682][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.665162][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.676290][ T10] usb 2-1: device descriptor read/64, error -71 [ 242.706314][ T66] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 242.727744][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.736101][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.746219][ T316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.757001][ T316] usb 4-1: string descriptor 0 read error: -22 [ 242.763164][ T316] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 242.772212][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.783449][ T316] usb 4-1: selecting invalid altsetting 1 [ 242.789363][ T316] usb 4-1: unit 6 not found! [ 242.856295][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 242.862392][ T66] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 242.870705][ T66] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 242.878829][ T66] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 242.887711][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 242.898582][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.909810][ T66] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 242.918885][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.926890][ T66] usb 1-1: Product: syz [ 242.931056][ T66] usb 1-1: Manufacturer: syz [ 242.935637][ T66] usb 1-1: SerialNumber: syz [ 242.936290][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.941645][ T66] usb 1-1: config 0 descriptor?? [ 242.953824][ T66] hub 1-1:0.0: bad descriptor, ignoring hub [ 242.959780][ T66] hub 1-1:0.0: probe with driver hub failed with error -5 [ 242.967662][ T66] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input53 [ 243.076298][ T10] usb 2-1: device descriptor read/64, error -71 [ 243.157193][ T9] usb 1-1: USB disconnect, device number 127 [ 243.183304][ T36] audit: type=1400 audit(2000000045.099:573): avc: denied { read } for pid=4206 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.316352][ T10] usb 2-1: device descriptor read/64, error -71 [ 243.426398][ T10] usb usb2-port1: attempt power cycle [ 243.766321][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.787297][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.789607][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 243.797818][ T4218] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1162'. [ 243.809629][ T316] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.917328][ T10] usb 2-1: device descriptor read/8, error -71 [ 243.988881][ T66] usb 4-1: USB disconnect, device number 112 [ 244.022361][ T4227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.030857][ T4227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.156297][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.177226][ T10] usb 2-1: device descriptor read/8, error -71 [ 244.246289][ T316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 244.307277][ T10] usb 2-1: device descriptor read/8, error -71 [ 244.396276][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 244.402397][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.415228][ T316] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 244.424278][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.426406][ T10] usb usb2-port1: unable to enumerate USB device [ 244.432968][ T316] usb 1-1: config 0 descriptor?? [ 244.505997][ T4229] overlayfs: missing 'lowerdir' [ 244.746312][ T66] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 244.847203][ T316] wacom 0003:056A:032F.0031: unknown main item tag 0x7 [ 244.854109][ T316] wacom 0003:056A:032F.0031: unknown main item tag 0x0 [ 244.861115][ T316] wacom 0003:056A:032F.0031: unknown main item tag 0x1 [ 244.868088][ T316] wacom 0003:056A:032F.0031: unknown main item tag 0xd [ 244.875559][ T316] wacom 0003:056A:032F.0031: hidraw0: USB HID v0.77 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0 [ 244.907320][ T66] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.918990][ T66] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 244.930061][ T66] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 244.941828][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 244.950927][ T66] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.958930][ T66] usb 4-1: Manufacturer: syz [ 244.964221][ T4229] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 245.049494][ T874] usb 1-1: USB disconnect, device number 2 [ 245.098837][ T4249] tipc: Started in network mode [ 245.103718][ T4249] tipc: Node identity ca0b5f5e1e39, cluster identity 4711 [ 245.111029][ T4249] tipc: Enabled bearer , priority 0 [ 245.366282][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.517588][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.525967][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.536090][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.546880][ T9] usb 2-1: string descriptor 0 read error: -22 [ 245.553048][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 245.562098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.573220][ T9] usb 2-1: selecting invalid altsetting 1 [ 245.580217][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.588418][ T9] usb 2-1: unit 6 not found! [ 245.588819][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.776482][ T66] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 245.784099][ T66] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input57 [ 245.795278][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 245.803532][ T66] usb 4-1: USB disconnect, device number 113 [ 246.122189][ T36] audit: type=1400 audit(2000000048.039:574): avc: denied { module_load } for pid=4269 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 246.122213][ T4270] Invalid ELF header type: 2 != 1 [ 246.222562][ T4276] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 246.230584][ T66] tipc: Node number set to 3560071006 [ 246.237026][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 246.246821][ T4276] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 246.263836][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.272367][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.336344][ T316] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 246.488654][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.497375][ T316] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 246.504934][ T316] usb 4-1: can't read configurations, error -71 [ 246.575778][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.577471][ T2238] udevd[2238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 246.656318][ T874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 246.775462][ T9] usb 2-1: USB disconnect, device number 9 [ 246.806272][ T874] usb 1-1: Using ep0 maxpacket: 32 [ 246.812407][ T874] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 246.823657][ T874] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.836438][ T874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.843018][ T874] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 246.852049][ T874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.860546][ T874] usb 1-1: config 0 descriptor?? [ 246.876096][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.884639][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.893608][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.902212][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.912267][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.920747][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.013391][ T4292] ip6_vti0: entered allmulticast mode [ 247.366300][ T316] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 247.426797][ T874] usbhid 1-1:0.0: can't add hid device: -71 [ 247.432786][ T874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 247.441909][ T874] usb 1-1: USB disconnect, device number 3 [ 247.483759][ T598] usb 3-1: USB disconnect, device number 41 [ 247.527656][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.536033][ T316] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 247.549712][ T316] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 247.567808][ T316] usb 4-1: config 63 has no interface number 0 [ 247.573994][ T316] usb 4-1: config 63 interface 66 has no altsetting 0 [ 247.582728][ T316] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 247.592201][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.601135][ T316] usb 4-1: Product: syz [ 247.606533][ T316] usb 4-1: Manufacturer: syz [ 247.611143][ T316] usb 4-1: SerialNumber: syz [ 247.636279][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.707863][ T433] tipc: Left network mode [ 247.713505][ T433] veth1_macvtap: left promiscuous mode [ 247.719421][ T433] veth0_vlan: left promiscuous mode [ 247.793790][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.796296][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 247.800960][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.807452][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.813242][ T4306] bridge_slave_0: entered allmulticast mode [ 247.823097][ T66] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.827019][ T4306] bridge_slave_0: entered promiscuous mode [ 247.837802][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.845189][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.851465][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.858900][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.876723][ T4306] bridge_slave_1: entered allmulticast mode [ 247.883121][ T4306] bridge_slave_1: entered promiscuous mode [ 247.892170][ T316] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 247.906398][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.918109][ T316] usb 4-1: No valid video chain found. [ 247.926462][ T316] usb 4-1: USB disconnect, device number 115 [ 247.932547][ T66] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 247.949948][ T66] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.963257][ T66] usb 2-1: config 1 interface 1 has no altsetting 0 [ 247.977825][ T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.979482][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.987214][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.993892][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.002301][ T66] usb 2-1: Product: syz [ 248.013300][ T66] usb 2-1: Manufacturer: syz [ 248.018038][ T66] usb 2-1: SerialNumber: syz [ 248.034056][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.041128][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.049912][ T433] ------------[ cut here ]------------ [ 248.055404][ T433] WARNING: CPU: 1 PID: 433 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 248.065460][ T433] Modules linked in: [ 248.066883][ T4306] veth0_vlan: entered promiscuous mode [ 248.069398][ T433] CPU: 1 UID: 0 PID: 433 Comm: kworker/u8:46 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 248.086562][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.096686][ T433] Workqueue: netns cleanup_net [ 248.099894][ T4306] veth1_macvtap: entered promiscuous mode [ 248.101478][ T433] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 248.113322][ T433] Code: e8 c1 fc d2 fc 4b 83 3c 3e 00 75 19 e8 a5 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 97 5a 7a fc 49 83 c7 08 eb c9 e8 8c 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 248.132986][ T433] RSP: 0018:ffffc9000dc37b90 EFLAGS: 00010293 [ 248.139093][ T433] RAX: ffffffff850d6c44 RBX: ffff888120038000 RCX: ffff8881155e5f00 [ 248.147125][ T433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881037b87f0 [ 248.155120][ T433] RBP: ffffc9000dc37bb0 R08: 0000000000000003 R09: 0000000000000004 [ 248.163663][ T433] R10: dffffc0000000000 R11: fffff52001b86f04 R12: dffffc0000000000 [ 248.171711][ T433] R13: dffffc0000000000 R14: ffff8881037b8000 R15: 00000000000007f0 [ 248.179717][ T433] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 248.186256][ T36] audit: type=1400 audit(2000000050.069:575): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[3000]" dev="pipefs" ino=3000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 248.188677][ T433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.218261][ T433] CR2: 00007fdee75ea540 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 248.226352][ T433] Call Trace: [ 248.229648][ T433] [ 248.232596][ T433] cleanup_net+0x6bd/0xc90 [ 248.237049][ T433] ? __cfi_cleanup_net+0x10/0x10 [ 248.242009][ T433] process_scheduled_works+0x7d4/0x1020 [ 248.247596][ T433] worker_thread+0xc51/0x1370 [ 248.252295][ T433] kthread+0x2c9/0x370 [ 248.256405][ T433] ? __cfi_worker_thread+0x10/0x10 [ 248.261537][ T433] ? __cfi_kthread+0x10/0x10 [ 248.266135][ T433] ret_from_fork+0x67/0xa0 [ 248.270605][ T433] ? __cfi_kthread+0x10/0x10 [ 248.275205][ T433] ret_from_fork_asm+0x1a/0x30 [ 248.279998][ T433] [ 248.283047][ T433] ---[ end trace 0000000000000000 ]--- [ 248.289990][ T433] ------------[ cut here ]------------ [ 248.295613][ T433] WARNING: CPU: 1 PID: 433 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 248.305725][ T433] Modules linked in: [ 248.309675][ T433] CPU: 1 UID: 0 PID: 433 Comm: kworker/u8:46 Tainted: G W syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 248.322882][ T433] Tainted: [W]=WARN [ 248.326713][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.336785][ T433] Workqueue: netns cleanup_net [ 248.341555][ T433] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 248.347657][ T433] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 5a 7a fc 49 81 ff f8 07 00 00 74 1b e8 42 5a 7a fc 49 83 c7 08 eb c5 e8 37 5a 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 5a 7a fc 5b 41 5c 41 5e 41 [ 248.367301][ T433] RSP: 0018:ffffc9000dc37b90 EFLAGS: 00010293 [ 248.373352][ T433] RAX: ffffffff850d6c99 RBX: ffff8881037b8800 RCX: ffff8881155e5f00 [ 248.381330][ T433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881037b8808 [ 248.389313][ T433] RBP: ffffc9000dc37bb0 R08: 0000000000000003 R09: 0000000000000004 [ 248.397301][ T433] R10: dffffc0000000000 R11: fffff52001b86f04 R12: dffffc0000000000 [ 248.405266][ T433] R13: dffffc0000000000 R14: ffff8881037b8000 R15: 0000000000000008 [ 248.413248][ T433] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 248.422196][ T433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.428786][ T433] CR2: 00007fdee75ea540 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 248.436774][ T433] Call Trace: [ 248.440044][ T433] [ 248.442952][ T433] cleanup_net+0x6bd/0xc90 [ 248.447369][ T433] ? __cfi_cleanup_net+0x10/0x10 [ 248.452304][ T433] process_scheduled_works+0x7d4/0x1020 [ 248.457854][ T433] worker_thread+0xc51/0x1370 [ 248.462525][ T433] kthread+0x2c9/0x370 [ 248.466615][ T433] ? __cfi_worker_thread+0x10/0x10 [ 248.471719][ T433] ? __cfi_kthread+0x10/0x10 [ 248.476313][ T433] ret_from_fork+0x67/0xa0 [ 248.480724][ T433] ? __cfi_kthread+0x10/0x10 [ 248.485292][ T433] ret_from_fork_asm+0x1a/0x30 [ 248.490062][ T433] [ 248.493072][ T433] ---[ end trace 0000000000000000 ]--- [ 248.498989][ T66] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 248.505768][ T66] cdc_ncm 2-1:1.0: bind() failure [ 248.512794][ T66] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 248.521800][ T66] usb 2-1: USB disconnect, device number 10 [ 248.553249][ T433] ------------[ cut here ]------------ [ 248.558770][ T433] WARNING: CPU: 1 PID: 433 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 248.568292][ T433] Modules linked in: [ 248.572188][ T433] CPU: 1 UID: 0 PID: 433 Comm: kworker/u8:46 Tainted: G W syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 248.585433][ T433] Tainted: [W]=WARN [ 248.589248][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.599332][ T433] Workqueue: netns cleanup_net [ 248.604116][ T433] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 248.609707][ T433] Code: 3c 20 00 74 08 48 89 df e8 8f d7 ed fc 48 8b 3b e8 d7 de d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 35 95 fc <0f> 0b e9 b0 fd ff ff e8 56 35 95 fc 0f 0b e9 18 fe ff ff e8 4a 35 [ 248.629351][ T433] RSP: 0018:ffffc9000dc37b70 EFLAGS: 00010293 [ 248.635426][ T433] RAX: ffffffff84f2916e RBX: ffff888120038000 RCX: ffff8881155e5f00 [ 248.643449][ T433] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881155e5f00 [ 248.651444][ T433] RBP: ffffc9000dc37b98 R08: ffffffff87d49987 R09: 1ffffffff0fa9330 [ 248.659463][ T433] R10: dffffc0000000000 R11: fffffbfff0fa9331 R12: 1ffffffff0fa9080 [ 248.667452][ T433] R13: dffffc0000000000 R14: ffff888120038c00 R15: dffffc0000000000 [ 248.675421][ T433] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 248.684403][ T433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.691013][ T433] CR2: 00007fdee75ea540 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 248.699056][ T433] Call Trace: [ 248.702340][ T433] [ 248.705274][ T433] xfrm_net_exit+0x31/0x80 [ 248.710007][ T433] cleanup_net+0x6bd/0xc90 [ 248.714440][ T433] ? __cfi_cleanup_net+0x10/0x10 [ 248.719449][ T433] process_scheduled_works+0x7d4/0x1020 [ 248.725007][ T433] worker_thread+0xc51/0x1370 [ 248.729741][ T433] kthread+0x2c9/0x370 [ 248.733815][ T433] ? __cfi_worker_thread+0x10/0x10 [ 248.738956][ T433] ? __cfi_kthread+0x10/0x10 [ 248.743555][ T433] ret_from_fork+0x67/0xa0 [ 248.747999][ T433] ? __cfi_kthread+0x10/0x10 [ 248.752596][ T433] ret_from_fork_asm+0x1a/0x30 [ 248.757412][ T433] [ 248.760432][ T433] ---[ end trace 0000000000000000 ]--- [ 248.907984][ T433] erspan0: left allmulticast mode [ 248.913053][ T433] erspan0: left promiscuous mode [ 248.918317][ T433] bridge0: port 3(erspan0) entered disabled state [ 248.924997][ T433] bridge_slave_1: left allmulticast mode [ 248.930681][ T433] bridge_slave_1: left promiscuous mode [ 248.936312][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.943647][ T433] bridge_slave_0: left allmulticast mode [ 248.949478][ T433] bridge_slave_0: left promiscuous mode [ 248.955100][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.097396][ T433] tipc: Left network mode [ 249.102418][ T433] veth1_macvtap: left promiscuous mode [ 249.107967][ T433] veth0_vlan: left promiscuous mode [ 249.296974][ T433] bridge_slave_1: left allmulticast mode [ 249.302619][ T433] bridge_slave_1: left promiscuous mode [ 249.308457][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.315812][ T433] bridge_slave_0: left allmulticast mode [ 249.321490][ T433] bridge_slave_0: left promiscuous mode [ 249.327150][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.407734][ T433] veth1_macvtap: left promiscuous mode [ 249.413235][ T433] veth0_vlan: left promiscuous mode