last executing test programs: 3m51.120433889s ago: executing program 3 (id=231): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f00000041c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x801, 0x1}, 0x50) 3m49.699751865s ago: executing program 3 (id=234): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400010001010500000400000000000007000004"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x28}}, 0x0) fsmount(r6, 0x0, 0x80) write$cgroup_pid(r0, &(0x7f0000001c00)=r2, 0x12) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x120, 0xffff, 0x0, 0x1a, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x40000) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) 3m49.312621845s ago: executing program 3 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r4, 0x80079a0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 3m48.106432586s ago: executing program 3 (id=244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 3m47.692275636s ago: executing program 3 (id=248): r0 = creat(0x0, 0xdafbe5d6891b6c4) execve(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x28}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m47.013062014s ago: executing program 3 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) getpgid(0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f00000056c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002d00)=[{0x0}, {&(0x7f0000000740)}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8000) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) 3m47.012895074s ago: executing program 32 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) getpgid(0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f00000056c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002d00)=[{0x0}, {&(0x7f0000000740)}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8000) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) 19.925314927s ago: executing program 2 (id=1836): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.548979253s ago: executing program 2 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x2e}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 18.341187338s ago: executing program 2 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) 18.28650364s ago: executing program 2 (id=1857): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 17.300685126s ago: executing program 2 (id=1867): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x2, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r3}) 16.855451468s ago: executing program 2 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xa97, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e8}}], 0x1, 0x0, 0x0) 16.815031999s ago: executing program 33 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xa97, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e8}}], 0x1, 0x0, 0x0) 6.611458956s ago: executing program 1 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x803, {0x0, 0x0, 0x0, 0xbf5, 0x0, 0xb231, {0x0, 0x0, 0x9279, 0x0, 0x800000000, 0x4, 0x8, 0x0, 0x0, 0xc000, 0x2000, 0x0, 0x0, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 6.541358208s ago: executing program 1 (id=1963): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x7f}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000000280)=""/170, 0xaa) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) syz_usb_connect$midi(0x5, 0x38, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x9, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, [@ms_header={0x7, 0x24, 0x1, 0xac, 0x7}], [{{0x9, 0x5, 0x8f, 0x2, 0x8, 0x1a, 0xfc, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x0, 0xc, 0x8}, {0x81, 0xd, 0x0, 0x2}, {0xd3, 0x0, 0x5, 0x3}, {0x6, 0x81, 0x9, 0x3}, {0x1, 0x4, 0x0, 0x8}, {0x18, 0x1, 0x7, 0x800}, {0x2, 0x6, 0x3, 0x6}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffffffff}}}, 0x32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r12 = socket$inet6(0xa, 0x80002, 0x0) shutdown(r12, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r8, 0x1, 0x70bd27, 0x40000, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2800c804) accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 3.480027478s ago: executing program 0 (id=1981): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x1b, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x40, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100005, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x8d, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a0, 0xa9, 0xff, 0xfffffffe, 0x2, 0x2, 0x2, 0x102, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4], [0x9, 0x3, 0x2, 0x9, 0x4, 0x18000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x6, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x7, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x5, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x6, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x4643, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.433438979s ago: executing program 6 (id=1983): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 3.374350091s ago: executing program 6 (id=1984): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.373961241s ago: executing program 5 (id=1985): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="30800b242f6f", 0x6, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0xc000) fallocate(r4, 0x0, 0x0, 0x8800000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r5, r5, 0x0, 0xe3aa6ea) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 3.354452711s ago: executing program 1 (id=1986): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000008c0)={0x0, 0xba29, 0x1, 0x2, 0x29c}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 3.078198119s ago: executing program 4 (id=1989): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95\x00\x00\x00\x00\x00\x00\x00\x00me=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2be, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 3.078035809s ago: executing program 4 (id=1990): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x153042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) 3.068383949s ago: executing program 4 (id=1991): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) 2.837262995s ago: executing program 5 (id=1992): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.528070123s ago: executing program 6 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, &(0x7f0000000640)=""/117, 0x75}, 0x40000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.423853036s ago: executing program 4 (id=1994): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0xfffffffd, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000380)=[@register_looper], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000060900010073797a30000000005e000300fd02b21edf"], 0xc8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.349231878s ago: executing program 0 (id=1995): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r0, &(0x7f0000000640)=[{0x0}], 0x1, 0x4f, 0x0) 2.234153721s ago: executing program 0 (id=1996): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x7f}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000000280)=""/170, 0xaa) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) syz_usb_connect$midi(0x5, 0x38, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x9, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, [@ms_header={0x7, 0x24, 0x1, 0xac, 0x7}], [{{0x9, 0x5, 0x8f, 0x2, 0x8, 0x1a, 0xfc, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x0, 0xc, 0x8}, {0x81, 0xd, 0x0, 0x2}, {0xd3, 0x0, 0x5, 0x3}, {0x6, 0x81, 0x9, 0x3}, {0x1, 0x4, 0x0, 0x8}, {0x18, 0x1, 0x7, 0x800}, {0x2, 0x6, 0x3, 0x6}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffffffff}}}, 0x32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r12 = socket$inet6(0xa, 0x80002, 0x0) shutdown(r12, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r8, 0x1, 0x70bd27, 0x40000, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2800c804) accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 1.653878946s ago: executing program 6 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r4, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)={0x200000, 0x0, 0x5}, 0x18) sendto$inet6(r5, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.336790424s ago: executing program 4 (id=1998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r4 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.234186407s ago: executing program 5 (id=1999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 1.093226201s ago: executing program 5 (id=2000): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2a, &(0x7f0000000140), 0x4) 903.158686ms ago: executing program 0 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x4000) 845.716418ms ago: executing program 5 (id=2002): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="30800b242f6f", 0x6, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0xc000) fallocate(r4, 0x0, 0x0, 0x8800000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r5, r5, 0x0, 0xe3aa6ea) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) 845.368898ms ago: executing program 0 (id=2003): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 709.487811ms ago: executing program 6 (id=2004): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x43403d0e, &(0x7f0000000280)={{0xeb4, 0x7}, {0xeb4, 0x8007}, 0x10000004, 0x7}) 695.774751ms ago: executing program 6 (id=2005): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 478.080267ms ago: executing program 4 (id=2006): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000380)=[@register_looper], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 358.28188ms ago: executing program 5 (id=2007): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @multicast1}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xc}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 305.186381ms ago: executing program 1 (id=2008): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40000001, 0x8000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 157.545805ms ago: executing program 1 (id=2009): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x8200) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000840)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x2, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x200000000017) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x0) 17.826179ms ago: executing program 1 (id=2010): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=2011): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x7f}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000000280)=""/170, 0xaa) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) syz_usb_connect$midi(0x5, 0x38, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x9, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, [@ms_header={0x7, 0x24, 0x1, 0xac, 0x7}], [{{0x9, 0x5, 0x8f, 0x2, 0x8, 0x1a, 0xfc, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x0, 0xc, 0x8}, {0x81, 0xd, 0x0, 0x2}, {0xd3, 0x0, 0x5, 0x3}, {0x6, 0x81, 0x9, 0x3}, {0x1, 0x4, 0x0, 0x8}, {0x18, 0x1, 0x7, 0x800}, {0x2, 0x6, 0x3, 0x6}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffffffff}}}, 0x32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r12 = socket$inet6(0xa, 0x80002, 0x0) shutdown(r12, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r8, 0x1, 0x70bd27, 0x40000, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2800c804) accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) kernel console output (not intermixed with test programs): 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.998573][ T39] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 143.011642][ T39] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 143.021760][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.030969][ T39] usb 5-1: Product: syz [ 143.035526][ T39] usb 5-1: Manufacturer: syz [ 143.040846][ T39] usb 5-1: SerialNumber: syz [ 143.047482][ T39] usb 5-1: config 0 descriptor?? [ 143.053999][ T2331] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.064132][ T2331] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.144521][ T1023] usb 6-1: USB disconnect, device number 5 [ 143.249018][ T466] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.275255][ T2331] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.283533][ T2331] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 143.349878][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.429031][ T466] usb 3-1: Using ep0 maxpacket: 16 [ 143.436994][ T466] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.446167][ T466] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 143.459666][ T466] usb 3-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 143.469451][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.477569][ T466] usb 3-1: Product: syz [ 143.482105][ T466] usb 3-1: Manufacturer: syz [ 143.486752][ T466] usb 3-1: SerialNumber: syz [ 143.493098][ T2344] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 143.693890][ T39] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 143.705079][ T39] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 143.722358][ T39] asix: probe of 5-1:0.251 failed with error -61 [ 143.725509][ T466] usb 3-1: USB disconnect, device number 9 [ 143.861378][ T778] usb 1-1: USB disconnect, device number 14 [ 144.559222][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.153973][ T2380] binder: 2379:2380 ioctl c0306201 2000000003c0 returned -14 [ 145.436530][ T39] usb 5-1: USB disconnect, device number 15 [ 145.512785][ T2408] binder: 2407:2408 ioctl c0306201 200000000180 returned -22 [ 146.059093][ T466] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 146.126032][ T2419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 146.252733][ T466] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.252774][ T466] usb 6-1: no configurations [ 146.252789][ T466] usb 6-1: can't read configurations, error -22 [ 146.499278][ T308] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 146.640695][ T28] audit: type=1400 audit(1786109580.162:298): avc: denied { transfer } for pid=2442 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 146.720899][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 146.728746][ T308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.737732][ T308] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 146.751743][ T308] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 146.761616][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.770895][ T308] usb 1-1: Product: syz [ 146.775178][ T308] usb 1-1: Manufacturer: syz [ 146.779999][ T308] usb 1-1: SerialNumber: syz [ 146.822212][ T2427] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.843261][ T2450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 147.782869][ T308] usb 1-1: USB disconnect, device number 15 [ 147.809814][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.877472][ T28] audit: type=1400 audit(1786109581.392:299): avc: denied { append } for pid=2463 comm="syz.4.731" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.917906][ T2464] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.110678][ T637] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.299051][ T637] usb 3-1: Using ep0 maxpacket: 32 [ 148.306588][ T637] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 148.371617][ T637] usb 3-1: config 0 has no interface number 0 [ 148.437067][ T637] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.594427][ T637] usb 3-1: config 0 interface 85 has no altsetting 0 [ 148.603409][ T637] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 148.613114][ T637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.624527][ T637] usb 3-1: Product: syz [ 148.691001][ T637] usb 3-1: Manufacturer: syz [ 148.703100][ T637] usb 3-1: SerialNumber: syz [ 148.708800][ T637] usb 3-1: config 0 descriptor?? [ 149.132259][ T637] usb 3-1: USB disconnect, device number 10 [ 149.905961][ T2518] tipc: Started in network mode [ 149.915098][ T2519] serio: Serial port ptm1 [ 149.919775][ T2518] tipc: Node identity ae4cd9e903aa, cluster identity 4711 [ 149.927152][ T2518] tipc: Enabled bearer , priority 0 [ 149.939216][ T2518] device syzkaller0 entered promiscuous mode [ 149.959026][ T637] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 149.969299][ T2516] tipc: Resetting bearer [ 149.993312][ T2516] tipc: Disabling bearer [ 150.683899][ T637] usb 6-1: Using ep0 maxpacket: 16 [ 150.690722][ T637] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.701564][ T637] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.712973][ T637] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.722373][ T637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.730804][ T637] usb 6-1: Product: syz [ 150.735107][ T637] usb 6-1: Manufacturer: syz [ 150.740196][ T637] usb 6-1: SerialNumber: syz [ 150.757685][ T2533] usb usb8: usbfs: process 2533 (syz.4.754) did not claim interface 0 before use [ 150.958921][ T637] usb 6-1: 0:2 : does not exist [ 151.111436][ T637] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 151.133093][ T637] usb 6-1: USB disconnect, device number 8 [ 151.249078][ T1023] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 151.429011][ T1023] usb 1-1: Using ep0 maxpacket: 8 [ 151.436306][ T1023] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.446266][ T1023] usb 1-1: config 0 has no interface number 0 [ 151.453179][ T1023] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 151.464391][ T1023] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 151.475781][ T1023] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.489758][ T1023] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.499585][ T1023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.515577][ T1023] usb 1-1: config 0 descriptor?? [ 151.734500][ T637] usb 1-1: USB disconnect, device number 16 [ 151.969156][ T1023] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.159095][ T1023] usb 5-1: Using ep0 maxpacket: 16 [ 152.166165][ T1023] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 152.175651][ T1023] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 152.186595][ T1023] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 152.199832][ T1023] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 152.215123][ T1023] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.227570][ T1023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.239276][ T1023] usb 5-1: Product: syz [ 152.244236][ T1023] usb 5-1: Manufacturer: syz [ 152.255698][ T1023] usb 5-1: SerialNumber: syz [ 153.350181][ T1023] usb 5-1: 0:2 : does not exist [ 153.389504][ T28] audit: type=1400 audit(1786109586.912:300): avc: denied { ioctl } for pid=2578 comm="syz.1.772" path="socket:[36178]" dev="sockfs" ino=36178 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.539052][ T444] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 153.539397][ T1023] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 153.623249][ T1023] usb 5-1: USB disconnect, device number 16 [ 153.729017][ T466] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.740303][ T444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.750371][ T444] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 153.768418][ T444] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 153.788090][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.797906][ T444] usb 6-1: Product: syz [ 153.802692][ T444] usb 6-1: Manufacturer: syz [ 153.808305][ T444] usb 6-1: SerialNumber: syz [ 153.903556][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.922409][ T466] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.939073][ T466] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.960264][ T466] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 153.970956][ T466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.257384][ T466] usb 2-1: Product: syz [ 154.261880][ T466] usb 2-1: Manufacturer: syz [ 154.266837][ T466] usb 2-1: SerialNumber: syz [ 154.273831][ T2584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.281966][ T2584] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 154.290437][ T466] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 154.302253][ T466] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 154.313597][ T466] usbserial_generic 2-1:1.0: generic converter detected [ 154.323812][ T466] usb 2-1: generic converter now attached to ttyUSB0 [ 154.509583][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 154.519358][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 154.533161][ T1023] usb 2-1: USB disconnect, device number 9 [ 154.541805][ T1023] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 154.554910][ T1023] usbserial_generic 2-1:1.0: device disconnected [ 154.699060][ T466] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 154.879013][ T466] usb 1-1: Using ep0 maxpacket: 16 [ 154.889051][ T466] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.906939][ T466] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.917944][ T466] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.927428][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.935876][ T466] usb 1-1: Product: syz [ 154.940245][ T466] usb 1-1: Manufacturer: syz [ 154.948349][ T466] usb 1-1: SerialNumber: syz [ 155.163732][ T466] usb 1-1: 0:2 : does not exist [ 155.177967][ T466] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 155.207618][ T466] usb 1-1: USB disconnect, device number 17 [ 155.459085][ T778] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.639057][ T778] usb 2-1: Using ep0 maxpacket: 16 [ 155.646018][ T778] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 155.655165][ T778] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 155.664340][ T778] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 155.682268][ T778] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 155.707771][ T778] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.717158][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.731822][ T778] usb 2-1: Product: syz [ 155.737731][ T778] usb 2-1: Manufacturer: syz [ 155.742902][ T778] usb 2-1: SerialNumber: syz [ 156.480853][ T304] usb 6-1: USB disconnect, device number 9 [ 156.499317][ T1023] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 156.507278][ T778] usb 2-1: 0:2 : does not exist [ 156.516453][ T778] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 156.547231][ T778] usb 2-1: USB disconnect, device number 10 [ 156.740561][ T1023] usb 3-1: not running at top speed; connect to a high speed hub [ 156.762364][ T1023] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.909252][ T1023] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 157.036196][ T1023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.839504][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.299006][ T304] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 158.509847][ T304] usb 5-1: not running at top speed; connect to a high speed hub [ 158.522176][ T304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.543927][ T304] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 158.558095][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.839412][ T778] usb 3-1: USB disconnect, device number 11 [ 159.009051][ T1023] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 159.105309][ T28] audit: type=1400 audit(1786109592.622:301): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 159.229081][ T1023] usb 6-1: Using ep0 maxpacket: 16 [ 159.236636][ T1023] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.305948][ T1023] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.355903][ T1023] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.403461][ T1023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.450798][ T1023] usb 6-1: Product: syz [ 159.473821][ T1023] usb 6-1: Manufacturer: syz [ 159.501280][ T1023] usb 6-1: SerialNumber: syz [ 159.709052][ T778] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.724953][ T1023] usb 6-1: 0:2 : does not exist [ 159.732574][ T1023] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 159.744544][ T1023] usb 6-1: USB disconnect, device number 10 [ 159.899014][ T778] usb 3-1: Using ep0 maxpacket: 16 [ 159.906520][ T778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.917114][ T778] usb 3-1: config 9 has an invalid interface number: 46 but max is 0 [ 159.926259][ T778] usb 3-1: config 9 has no interface number 0 [ 159.933571][ T778] usb 3-1: config 9 interface 46 has no altsetting 0 [ 159.942706][ T778] usb 3-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=b2.e6 [ 159.952614][ T778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.961207][ T778] usb 3-1: Product: syz [ 159.965735][ T778] usb 3-1: Manufacturer: syz [ 159.970572][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.988084][ T778] usb 3-1: SerialNumber: syz [ 160.251077][ T28] audit: type=1400 audit(1786109593.772:302): avc: denied { append } for pid=2714 comm="syz.1.819" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.578994][ T444] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 160.770432][ T444] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.783003][ T444] usb 6-1: config 3 has an invalid interface number: 90 but max is 0 [ 160.798982][ T444] usb 6-1: config 3 has no interface number 0 [ 160.813321][ T444] usb 6-1: config 3 interface 90 has no altsetting 0 [ 160.828448][ T444] usb 6-1: New USB device found, idVendor=0424, idProduct=ec00, bcdDevice= 4.12 [ 160.846624][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.864163][ T444] usb 6-1: Product: syz [ 160.874014][ T444] usb 6-1: Manufacturer: syz [ 160.883284][ T444] usb 6-1: SerialNumber: syz [ 161.022302][ T637] usb 5-1: USB disconnect, device number 17 [ 161.103488][ T444] smsc95xx v2.0.0 [ 161.114090][ T444] smsc95xx 6-1:3.90 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 161.133692][ T444] smsc95xx: probe of 6-1:3.90 failed with error -22 [ 161.144064][ T444] usb 6-1: USB disconnect, device number 11 [ 162.397639][ T304] usb 3-1: USB disconnect, device number 12 [ 162.842945][ T2755] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.913856][ T2759] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 163.979027][ T778] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 164.169107][ T778] usb 3-1: Using ep0 maxpacket: 32 [ 164.171016][ T778] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 164.171087][ T778] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 164.171133][ T778] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 164.173561][ T778] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 164.173610][ T778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.173660][ T778] usb 3-1: Product: syz [ 164.173698][ T778] usb 3-1: Manufacturer: syz [ 164.173734][ T778] usb 3-1: SerialNumber: syz [ 164.293335][ T2830] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.729180][ T778] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 165.911540][ T778] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.921142][ T778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.930304][ T778] usb 5-1: config 0 descriptor?? [ 166.439031][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 166.629064][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 166.636152][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.647074][ T24] usb 6-1: config 0 has no interfaces? [ 166.652697][ T24] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 166.661822][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.671517][ T24] usb 6-1: config 0 descriptor?? [ 166.721976][ T24] usb 3-1: USB disconnect, device number 13 [ 166.968473][ T466] usb 6-1: USB disconnect, device number 12 [ 168.163502][ T28] audit: type=1400 audit(1786109601.682:303): avc: denied { write } for pid=2922 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.439045][ T304] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 168.466254][ T308] usb 5-1: USB disconnect, device number 18 [ 168.639011][ T304] usb 2-1: Using ep0 maxpacket: 16 [ 168.646857][ T304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 168.657902][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42985, setting to 1024 [ 168.670239][ T304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 168.682742][ T304] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 168.692580][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.701033][ T304] usb 2-1: Product: syz [ 168.705801][ T304] usb 2-1: Manufacturer: syz [ 168.710709][ T304] usb 2-1: SerialNumber: syz [ 168.717839][ T304] usb 2-1: config 0 descriptor?? [ 168.724014][ T2923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.732115][ T2923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.869097][ T308] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 168.962579][ T466] usb 2-1: USB disconnect, device number 11 [ 169.049199][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 169.050459][ T308] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 169.050489][ T308] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 169.050513][ T308] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 169.050534][ T308] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 169.051999][ T308] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.052031][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.052054][ T308] usb 5-1: Product: syz [ 169.052070][ T308] usb 5-1: Manufacturer: syz [ 169.052086][ T308] usb 5-1: SerialNumber: syz [ 169.256875][ T308] usb 5-1: 0:2 : does not exist [ 169.265656][ T308] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 169.279501][ T308] usb 5-1: USB disconnect, device number 19 [ 169.490048][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.829034][ T304] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.021056][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.032792][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.044963][ T304] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.055679][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.131178][ T304] usb 2-1: config 0 descriptor?? [ 170.362755][ T304] usbhid 2-1:0.0: can't add hid device: -71 [ 170.389678][ T304] usbhid: probe of 2-1:0.0 failed with error -71 [ 170.459276][ T304] usb 2-1: USB disconnect, device number 12 [ 171.080630][ T304] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 171.259104][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 171.272070][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.288717][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.318714][ T304] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 171.332459][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.398685][ T304] usb 2-1: config 0 descriptor?? [ 171.471181][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.487128][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.523735][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.574750][ T24] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 171.584663][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.594193][ T24] usb 5-1: config 0 descriptor?? [ 171.839725][ T308] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.009595][ T304] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 172.017602][ T304] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 172.034627][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 172.041004][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 172.049004][ T24] usb 5-1: USB disconnect, device number 20 [ 172.059234][ T308] usb 1-1: Using ep0 maxpacket: 8 [ 172.065779][ T308] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.073056][ T308] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 172.085235][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.097901][ T308] usb 1-1: config 0 descriptor?? [ 172.150009][ T304] input: failed to attach handler kbd to device input10, error: -5 [ 172.162942][ T304] usb 2-1: USB disconnect, device number 13 [ 172.739105][ T1023] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 173.329858][ T1023] usb 5-1: Using ep0 maxpacket: 16 [ 173.337269][ T1023] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.346637][ T1023] usb 5-1: config 9 has an invalid interface number: 46 but max is 0 [ 173.355443][ T1023] usb 5-1: config 9 has no interface number 0 [ 173.362001][ T1023] usb 5-1: config 9 interface 46 has no altsetting 0 [ 173.371060][ T1023] usb 5-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=b2.e6 [ 173.380997][ T1023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.390362][ T1023] usb 5-1: Product: syz [ 173.395203][ T1023] usb 5-1: Manufacturer: syz [ 173.400383][ T1023] usb 5-1: SerialNumber: syz [ 173.559278][ T308] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x2 [ 173.567657][ T308] hid-rmi 0003:06CB:81A7.0004: ignoring exceeding usage max [ 173.580412][ T308] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID v0.81 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 173.598334][ T308] usb 1-1: USB disconnect, device number 18 [ 173.640431][ T3011] fido_id[3011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 173.850942][ T1023] usb 5-1: USB disconnect, device number 21 [ 173.909846][ T304] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 174.389174][ T304] usb 6-1: Using ep0 maxpacket: 16 [ 174.396494][ T304] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.407239][ T304] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.418104][ T304] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.428092][ T304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.441052][ T304] usb 6-1: Product: syz [ 174.471273][ T304] usb 6-1: Manufacturer: syz [ 174.476375][ T304] usb 6-1: SerialNumber: syz [ 174.639173][ T444] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.699206][ T304] usb 6-1: 0:2 : does not exist [ 174.708485][ T304] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 174.775175][ T304] usb 6-1: USB disconnect, device number 13 [ 174.829084][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 174.829373][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.992187][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.021510][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.046384][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.099888][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 175.168054][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.204816][ T24] usb 1-1: config 0 descriptor?? [ 175.682770][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.696038][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.712306][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.796484][ T444] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 175.805311][ T444] usb 3-1: config 0 has no interface number 0 [ 175.811783][ T444] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 175.822265][ T444] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 175.878343][ T444] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 175.891064][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.899441][ T444] usb 3-1: Product: syz [ 175.903730][ T444] usb 3-1: Manufacturer: syz [ 175.908376][ T444] usb 3-1: SerialNumber: syz [ 175.915018][ T444] usb 3-1: config 0 descriptor?? [ 175.921109][ T3025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.928480][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.933848][ T3025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.935575][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.949563][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.956506][ T24] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 175.964541][ T24] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 176.277207][ T3025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.286315][ T3025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.431524][ T3064] input: syz1 as /devices/virtual/input/input11 [ 176.495600][ T444] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 177.383755][ T24] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 177.391654][ T24] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 177.541286][ T24] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 177.555871][ T24] usb 1-1: USB disconnect, device number 19 [ 177.575689][ T3089] fido_id[3089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 177.869114][ T308] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 178.049007][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 178.056205][ T308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.065794][ T308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 178.078425][ T308] usb 5-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 178.088911][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.097463][ T308] usb 5-1: Product: syz [ 178.102048][ T308] usb 5-1: Manufacturer: syz [ 178.106687][ T308] usb 5-1: SerialNumber: syz [ 178.112852][ T3091] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.189177][ T466] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 178.319278][ T444] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 178.339115][ T444] asix: probe of 3-1:0.34 failed with error -71 [ 178.356124][ T444] usb 3-1: USB disconnect, device number 14 [ 178.369878][ T466] usb 1-1: Using ep0 maxpacket: 16 [ 178.385706][ T308] usb 5-1: USB disconnect, device number 22 [ 178.397242][ T466] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 178.410212][ T466] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 178.422766][ T466] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 178.434431][ T466] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 178.450350][ T466] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.469057][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.477969][ T466] usb 1-1: Product: syz [ 178.488992][ T466] usb 1-1: Manufacturer: syz [ 178.493831][ T466] usb 1-1: SerialNumber: syz [ 178.620090][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.717731][ T466] usb 1-1: 0:2 : does not exist [ 178.726644][ T466] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 178.730793][ T28] audit: type=1400 audit(1786109612.252:304): avc: denied { wake_alarm } for pid=3107 comm="syz.1.946" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.745270][ T466] usb 1-1: USB disconnect, device number 20 [ 178.781999][ T28] audit: type=1400 audit(1786109612.302:305): avc: denied { write } for pid=3107 comm="syz.1.946" name="c_chmask" dev="configfs" ino=41609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 178.805603][ T28] audit: type=1400 audit(1786109612.302:306): avc: denied { open } for pid=3107 comm="syz.1.946" path="/202/config/usb_gadget/g1/functions/uac1.usb0/c_chmask" dev="configfs" ino=41609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 178.840990][ T28] audit: type=1400 audit(1786109612.302:307): avc: denied { create } for pid=3107 comm="syz.1.946" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 178.989663][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.189099][ T444] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 179.279095][ T466] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.369099][ T444] usb 5-1: Using ep0 maxpacket: 16 [ 179.376969][ T444] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.385961][ T444] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 179.399508][ T444] usb 5-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 179.409710][ T444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.418083][ T444] usb 5-1: Product: syz [ 179.422487][ T444] usb 5-1: Manufacturer: syz [ 179.427122][ T444] usb 5-1: SerialNumber: syz [ 179.433526][ T3118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.479005][ T466] usb 3-1: Using ep0 maxpacket: 8 [ 179.485705][ T466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.496571][ T466] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.506220][ T466] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 179.518052][ T466] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 179.529823][ T466] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.539293][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.555588][ T466] hub 3-1:1.0: bad descriptor, ignoring hub [ 179.575573][ T466] hub: probe of 3-1:1.0 failed with error -5 [ 179.582338][ T466] cdc_wdm 3-1:1.0: skipping garbage [ 179.587785][ T466] cdc_wdm 3-1:1.0: skipping garbage [ 179.595154][ T466] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 179.653146][ T444] usb 5-1: USB disconnect, device number 23 [ 179.664253][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.869155][ T637] usb 3-1: USB disconnect, device number 15 [ 179.889086][ T292] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.069875][ T292] usb 2-1: Using ep0 maxpacket: 16 [ 180.076398][ T292] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 180.085447][ T292] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 180.094568][ T292] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 180.105688][ T292] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 180.116233][ T292] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.125349][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.133970][ T292] usb 2-1: Product: syz [ 180.138245][ T292] usb 2-1: Manufacturer: syz [ 180.142920][ T292] usb 2-1: SerialNumber: syz [ 180.377234][ T292] usb 2-1: 0:2 : does not exist [ 180.499133][ T304] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 180.636033][ T292] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 180.648070][ T292] usb 2-1: USB disconnect, device number 14 [ 180.669062][ T637] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 180.690843][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.701991][ T304] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.711774][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.720824][ T304] usb 6-1: config 0 descriptor?? [ 180.849042][ T637] usb 1-1: Using ep0 maxpacket: 16 [ 180.850424][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.857553][ T637] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.879807][ T637] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 180.891501][ T637] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 180.900941][ T637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.909317][ T637] usb 1-1: Product: syz [ 180.913686][ T637] usb 1-1: Manufacturer: syz [ 180.918531][ T637] usb 1-1: SerialNumber: syz [ 180.924379][ T3145] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.935716][ T304] usbhid 6-1:0.0: can't add hid device: -71 [ 180.942092][ T304] usbhid: probe of 6-1:0.0 failed with error -71 [ 180.950105][ T304] usb 6-1: USB disconnect, device number 14 [ 181.143552][ T637] usb 1-1: USB disconnect, device number 21 [ 181.359343][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.419060][ T444] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.519091][ T304] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 181.618991][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 181.625846][ T444] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 181.634965][ T444] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 181.644509][ T444] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 181.655077][ T444] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 181.667937][ T444] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.677284][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.685584][ T444] usb 3-1: Product: syz [ 181.687180][ T3157] raw_sendmsg: syz.0.964 forgot to set AF_INET. Fix it! [ 181.689994][ T444] usb 3-1: Manufacturer: syz [ 181.701665][ T444] usb 3-1: SerialNumber: syz [ 181.710371][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.725904][ T304] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 181.735669][ T28] audit: type=1400 audit(1786109615.252:308): avc: denied { read } for pid=3158 comm="syz.0.965" name="idVendor" dev="configfs" ino=41818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 181.735980][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.769490][ T304] usb 6-1: config 0 descriptor?? [ 181.922108][ T444] usb 3-1: 0:2 : does not exist [ 181.930026][ T444] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 181.945566][ T444] usb 3-1: USB disconnect, device number 16 [ 182.149792][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.189112][ T637] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 182.369070][ T637] usb 1-1: Using ep0 maxpacket: 16 [ 182.376293][ T637] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.386443][ T637] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 182.404782][ T637] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 182.415449][ T637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.424045][ T637] usb 1-1: Product: syz [ 182.428334][ T637] usb 1-1: Manufacturer: syz [ 182.433128][ T637] usb 1-1: SerialNumber: syz [ 182.443004][ T3163] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 182.619351][ T304] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 182.632333][ T304] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 182.818839][ T637] usb 1-1: USB disconnect, device number 22 [ 182.941296][ T466] usb 6-1: USB disconnect, device number 15 [ 182.941344][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 182.989072][ T444] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.169058][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 183.176811][ T444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.185738][ T444] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 183.197420][ T444] usb 3-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 183.206978][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.215402][ T444] usb 3-1: Product: syz [ 183.219674][ T444] usb 3-1: Manufacturer: syz [ 183.224297][ T444] usb 3-1: SerialNumber: syz [ 183.230372][ T3179] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.464105][ T444] usb 3-1: USB disconnect, device number 17 [ 183.599893][ T304] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.820895][ T304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.865688][ T304] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 183.875566][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 183.886280][ T304] usb 2-1: Product: syz [ 183.891639][ T304] usb 2-1: Manufacturer: syz [ 184.152627][ T444] usb 2-1: USB disconnect, device number 15 [ 184.409742][ T28] audit: type=1400 audit(1786109617.932:309): avc: denied { write } for pid=3222 comm="syz.4.989" name="instances" dev="tracefs" ino=8994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.435093][ T28] audit: type=1400 audit(1786109617.932:310): avc: denied { add_name } for pid=3222 comm="syz.4.989" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.457200][ T28] audit: type=1400 audit(1786109617.932:311): avc: denied { create } for pid=3222 comm="syz.4.989" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 184.459182][ T637] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 184.482022][ T28] audit: type=1400 audit(1786109618.002:312): avc: denied { remove_name } for pid=3222 comm="syz.4.989" name="foo" dev="tracefs" ino=42728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.510767][ T28] audit: type=1400 audit(1786109618.002:313): avc: denied { rmdir } for pid=3222 comm="syz.4.989" name="foo" dev="tracefs" ino=42728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.669002][ T637] usb 6-1: Using ep0 maxpacket: 16 [ 184.690058][ T637] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.703341][ T637] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 184.730212][ T637] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 184.739628][ T637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.747667][ T637] usb 6-1: Product: syz [ 184.752156][ T637] usb 6-1: Manufacturer: syz [ 184.757153][ T637] usb 6-1: SerialNumber: syz [ 184.769817][ T3219] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.870585][ T3231] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 184.877637][ T383] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.989443][ T637] usb 6-1: USB disconnect, device number 16 [ 185.210285][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.969138][ T1023] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 186.057124][ T3265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.178990][ T1023] usb 5-1: Using ep0 maxpacket: 16 [ 186.188357][ T1023] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.199080][ T1023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.216636][ T1023] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.226098][ T1023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.234771][ T1023] usb 5-1: Product: syz [ 186.239509][ T1023] usb 5-1: Manufacturer: syz [ 186.244373][ T1023] usb 5-1: SerialNumber: syz [ 186.460539][ T1023] usb 5-1: 0:2 : does not exist [ 186.468384][ T1023] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 186.492499][ T1023] usb 5-1: USB disconnect, device number 24 [ 186.949079][ T3232] Bluetooth: hci0: command 0x1003 tx timeout [ 186.949252][ T373] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.139049][ T1023] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 187.339384][ T444] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 187.350423][ T1023] usb 3-1: Using ep0 maxpacket: 16 [ 187.357208][ T1023] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 187.366399][ T1023] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 187.375693][ T1023] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 187.386495][ T1023] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 187.397898][ T1023] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.410990][ T28] audit: type=1400 audit(1786109620.932:314): avc: denied { mounton } for pid=3289 comm="syz.0.1011" path="/207/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 187.416006][ T1023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.442124][ T3290] overlayfs: maximum fs stacking depth exceeded [ 187.451860][ T1023] usb 3-1: Product: syz [ 187.456185][ T1023] usb 3-1: Manufacturer: syz [ 187.461264][ T1023] usb 3-1: SerialNumber: syz [ 187.529067][ T444] usb 6-1: Using ep0 maxpacket: 16 [ 187.536057][ T444] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 187.544755][ T444] usb 6-1: config 0 has no interface number 0 [ 187.551443][ T444] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 187.561979][ T444] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 187.575780][ T444] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 187.586054][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.594567][ T444] usb 6-1: Product: syz [ 187.599001][ T444] usb 6-1: Manufacturer: syz [ 187.603625][ T444] usb 6-1: SerialNumber: syz [ 187.609249][ T444] usb 6-1: config 0 descriptor?? [ 187.614983][ T3278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.622506][ T3278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.674491][ T1023] usb 3-1: 0:2 : does not exist [ 187.682044][ T1023] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 187.695125][ T1023] usb 3-1: USB disconnect, device number 18 [ 187.832903][ T3278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.841248][ T3278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.902109][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.989040][ T466] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 188.050649][ T444] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 188.170191][ T466] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.180908][ T466] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.192081][ T466] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 188.201495][ T466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.159228][ T637] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 190.349001][ T637] usb 3-1: Using ep0 maxpacket: 16 [ 190.355470][ T637] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.366626][ T637] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.369294][ T466] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 190.380007][ T637] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.393629][ T637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.402139][ T637] usb 3-1: Product: syz [ 190.406572][ T637] usb 3-1: Manufacturer: syz [ 190.411689][ T637] usb 3-1: SerialNumber: syz [ 190.461260][ T444] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.473041][ T444] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 190.484606][ T444] asix: probe of 6-1:0.34 failed with error -71 [ 190.492180][ T444] usb 6-1: USB disconnect, device number 17 [ 190.560284][ T466] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 190.571245][ T466] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 190.588805][ T466] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 190.598681][ T466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.607321][ T466] usb 5-1: Product: syz [ 190.612059][ T466] usb 5-1: Manufacturer: syz [ 190.617232][ T466] usb 5-1: SerialNumber: syz [ 190.623166][ T466] usb 5-1: config 0 descriptor?? [ 190.629759][ T3350] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 190.637986][ T3350] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 190.645341][ T637] usb 3-1: 0:2 : does not exist [ 190.654863][ T637] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 190.667696][ T637] usb 3-1: USB disconnect, device number 19 [ 190.730978][ T304] usb 1-1: USB disconnect, device number 23 [ 190.879596][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 191.299051][ T304] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 191.319057][ T637] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.499075][ T637] usb 2-1: Using ep0 maxpacket: 16 [ 191.506461][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.518838][ T304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.529610][ T304] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 191.542810][ T304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.542914][ T637] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.569298][ T304] usb 6-1: config 0 descriptor?? [ 191.575943][ T637] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 191.593748][ T637] usb 2-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 191.605017][ T637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.614585][ T637] usb 2-1: Product: syz [ 191.619984][ T637] usb 2-1: Manufacturer: syz [ 191.624978][ T637] usb 2-1: SerialNumber: syz [ 191.631844][ T3367] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.392151][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.404729][ T637] usb 2-1: USB disconnect, device number 16 [ 192.417968][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.427592][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.438999][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.446641][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.453772][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.461315][ T304] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 192.469849][ T304] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 192.749106][ T24] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 192.949984][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.961348][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.971596][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 192.981455][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.995037][ T24] usb 3-1: config 0 descriptor?? [ 193.169097][ T839] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.280854][ T304] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 193.292316][ T304] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 193.300545][ T304] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -71 [ 193.311094][ T304] usb 6-1: USB disconnect, device number 18 [ 193.350321][ T839] usb 2-1: Using ep0 maxpacket: 32 [ 193.357570][ T839] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.372084][ T3403] fido_id[3403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 193.399411][ T839] usb 2-1: config 0 has no interface number 0 [ 193.410951][ T24] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 193.424031][ T466] usb 5-1: USB disconnect, device number 25 [ 193.427365][ T839] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.452191][ T839] usb 2-1: config 0 interface 85 has no altsetting 0 [ 193.470063][ T839] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.479501][ T839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.488218][ T839] usb 2-1: Product: syz [ 193.493715][ T839] usb 2-1: Manufacturer: syz [ 193.498603][ T839] usb 2-1: SerialNumber: syz [ 193.505920][ T839] usb 2-1: config 0 descriptor?? [ 193.610378][ T24] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 193.622579][ T24] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 193.639306][ T24] isku: probe of 0003:1E7D:319C.0007 failed with error -71 [ 193.681984][ T24] usb 3-1: USB disconnect, device number 20 [ 193.711325][ T3411] fido_id[3411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 193.951317][ T839] usb 2-1: USB disconnect, device number 17 [ 194.205205][ T3419] xt_TCPMSS: Only works on TCP SYN packets [ 195.541858][ T28] audit: type=1400 audit(1786109629.062:315): avc: denied { shutdown } for pid=3441 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.829049][ T1023] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 196.009095][ T1023] usb 3-1: Using ep0 maxpacket: 16 [ 196.017473][ T1023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.029416][ T1023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.039990][ T1023] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.053609][ T1023] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.065319][ T1023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.081710][ T1023] usb 3-1: config 0 descriptor?? [ 196.290114][ T3464] overlayfs: statfs failed on './file0' [ 196.644659][ T1023] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.652603][ T1023] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.660412][ T1023] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 196.675597][ T1023] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.689372][ T1023] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.697585][ T1023] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0 [ 197.617845][ T1023] microsoft 0003:045E:07DA.0008: implement() called with n (56) > 32! (kworker/1:9) [ 197.628917][ T1023] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0 [ 197.638599][ T1023] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 197.647403][ T1023] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 197.659594][ T1023] microsoft 0003:045E:07DA.0008: no inputs found [ 197.666594][ T1023] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 197.843111][ T1023] usb 3-1: USB disconnect, device number 21 [ 199.148081][ T3527] udc dummy_udc.0: failed to start g1: -19 [ 199.167425][ T3527] UDC core: g1: couldn't find an available UDC or it's busy [ 199.373144][ T28] audit: type=1400 audit(1786109632.892:316): avc: denied { mounton } for pid=3537 comm="syz.2.1087" path="/syzcgroup/unified/syz2/syz1/sys" dev="cgroup2" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 199.559035][ T444] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 199.849006][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 199.855511][ T444] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.878006][ T444] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.897986][ T444] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.926353][ T444] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.941973][ T444] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 199.970108][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.993554][ T444] usb 2-1: config 0 descriptor?? [ 200.410275][ T444] ntrig 0003:1B96:0012.0009: hidraw0: USB HID v0.01 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 200.609255][ T444] ntrig 0003:1B96:0012.0009: Firmware version: 1.15.25.63.3 (ff43 fb27) [ 200.815748][ T308] usb 2-1: USB disconnect, device number 18 [ 200.916800][ T3573] udc dummy_udc.0: failed to start g1: -19 [ 200.923676][ T3573] UDC core: g1: couldn't find an available UDC or it's busy [ 201.299032][ T1023] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 201.449053][ T1023] usb 6-1: device descriptor read/64, error -71 [ 201.639272][ T444] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 201.739013][ T1023] usb 6-1: device descriptor read/64, error -71 [ 201.819057][ T444] usb 2-1: Using ep0 maxpacket: 16 [ 201.826427][ T444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.836730][ T444] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 201.851299][ T444] usb 2-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 201.860782][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.869216][ T444] usb 2-1: Product: syz [ 201.873600][ T444] usb 2-1: Manufacturer: syz [ 201.878776][ T444] usb 2-1: SerialNumber: syz [ 201.888305][ T3589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.019077][ T1023] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 202.179032][ T1023] usb 6-1: device descriptor read/64, error -71 [ 202.190610][ T444] usb 2-1: USB disconnect, device number 19 [ 202.256491][ T28] audit: type=1400 audit(1786109635.772:317): avc: denied { mounton } for pid=3599 comm="syz.2.1104" path="/proc/677/task" dev="proc" ino=60032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 202.431248][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.479124][ T1023] usb 6-1: device descriptor read/64, error -71 [ 202.562066][ T3617] udc dummy_udc.0: failed to start g1: -19 [ 202.568798][ T3617] UDC core: g1: couldn't find an available UDC or it's busy [ 202.599573][ T1023] usb usb6-port1: attempt power cycle [ 202.929119][ T839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.039027][ T1023] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 203.070811][ T1023] usb 6-1: device descriptor read/8, error -71 [ 203.110926][ T839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.122422][ T839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.132700][ T839] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 203.143019][ T839] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.157840][ T839] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 203.167223][ T839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.177084][ T839] usb 3-1: Product: syz [ 203.181482][ T839] usb 3-1: Manufacturer: syz [ 203.186457][ T839] usb 3-1: SerialNumber: syz [ 203.193415][ T839] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 203.205588][ T839] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 203.217185][ T839] usbserial_generic 3-1:1.0: generic converter detected [ 203.225685][ T1023] usb 6-1: device descriptor read/8, error -71 [ 203.232741][ T839] usb 3-1: generic converter now attached to ttyUSB0 [ 203.451667][ T444] usb 3-1: USB disconnect, device number 22 [ 203.467028][ T444] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 203.477597][ T444] usbserial_generic 3-1:1.0: device disconnected [ 203.509163][ T1023] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 203.540767][ T1023] usb 6-1: device descriptor read/8, error -71 [ 203.700224][ T1023] usb 6-1: device descriptor read/8, error -71 [ 203.819151][ T1023] usb usb6-port1: unable to enumerate USB device [ 204.159058][ T444] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 204.270571][ T3649] tipc: Started in network mode [ 204.280541][ T3649] tipc: Node identity ae4ab33e898c, cluster identity 4711 [ 204.288771][ T3649] tipc: Enabled bearer , priority 0 [ 204.296961][ T3649] device syzkaller0 entered promiscuous mode [ 204.305666][ T3649] tipc: Resetting bearer [ 204.319040][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 204.340222][ T444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.343360][ T3651] udc dummy_udc.0: failed to start g1: -19 [ 204.352595][ T3648] tipc: Resetting bearer [ 204.363612][ T444] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.368257][ T3651] UDC core: g1: couldn't find an available UDC or it's busy [ 204.374311][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.390744][ T444] usb 2-1: config 0 descriptor?? [ 204.459633][ T3648] tipc: Disabling bearer [ 204.529047][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 204.536175][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.545250][ T24] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 225, using maximum allowed: 30 [ 204.556818][ T24] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 204.570662][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 244, changing to 7 [ 204.581790][ T24] usb 3-1: config 1 interface 1 has no altsetting 2 [ 204.588964][ T24] usb 3-1: config 1 interface 2 has no altsetting 0 [ 204.600133][ T444] usbhid 2-1:0.0: can't add hid device: -71 [ 204.606486][ T444] usbhid: probe of 2-1:0.0 failed with error -71 [ 204.614282][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 204.623709][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.626798][ T444] usb 2-1: USB disconnect, device number 20 [ 204.642311][ T24] usb 3-1: Product: syz [ 204.648233][ T24] usb 3-1: Manufacturer: syz [ 204.653460][ T24] usb 3-1: SerialNumber: syz [ 204.719172][ T308] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 204.912287][ T24] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 204.921111][ T24] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 204.932796][ T24] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 204.951438][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.972171][ T24] usb 3-1: USB disconnect, device number 23 [ 205.089037][ T308] usb 6-1: Using ep0 maxpacket: 16 [ 205.096048][ T308] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 205.104963][ T308] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 205.114006][ T308] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 205.124625][ T308] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 205.135716][ T308] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.145435][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.154051][ T308] usb 6-1: Product: syz [ 205.158405][ T308] usb 6-1: Manufacturer: syz [ 205.163412][ T308] usb 6-1: SerialNumber: syz [ 205.339037][ T444] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.372299][ T308] usb 6-1: 0:2 : does not exist [ 205.379767][ T308] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 205.394318][ T308] usb 6-1: USB disconnect, device number 23 [ 205.520574][ T444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.532472][ T444] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 205.541797][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.555527][ T444] usb 2-1: config 0 descriptor?? [ 205.600079][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.959136][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 206.119047][ T24] usb 3-1: device descriptor read/64, error -71 [ 206.379532][ T444] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 206.388194][ T444] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 206.398996][ T24] usb 3-1: device descriptor read/64, error -71 [ 206.679001][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 206.706042][ T444] usb 2-1: USB disconnect, device number 21 [ 206.706110][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 206.839008][ T24] usb 3-1: device descriptor read/64, error -71 [ 207.119472][ T24] usb 3-1: device descriptor read/64, error -71 [ 207.239100][ T24] usb usb3-port1: attempt power cycle [ 207.648985][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 207.700102][ T24] usb 3-1: device descriptor read/8, error -71 [ 207.870111][ T24] usb 3-1: device descriptor read/8, error -71 [ 208.149246][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 208.210153][ T24] usb 3-1: device descriptor read/8, error -71 [ 208.370168][ T24] usb 3-1: device descriptor read/8, error -71 [ 208.489117][ T24] usb usb3-port1: unable to enumerate USB device [ 211.789081][ T308] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 211.969109][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 211.976020][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.984913][ T308] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 211.997285][ T308] usb 2-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 212.008465][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.017131][ T308] usb 2-1: Product: syz [ 212.021752][ T308] usb 2-1: Manufacturer: syz [ 212.026765][ T308] usb 2-1: SerialNumber: syz [ 212.037394][ T3782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.256907][ T308] usb 2-1: USB disconnect, device number 22 [ 212.473372][ T2254] udevd[2254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.299092][ T308] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 213.489040][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 213.496795][ T308] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 213.505561][ T308] usb 2-1: config 0 has no interface number 0 [ 213.516091][ T308] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 213.527809][ T308] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 213.542543][ T308] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 213.554288][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.563134][ T308] usb 2-1: Product: syz [ 213.567831][ T308] usb 2-1: Manufacturer: syz [ 213.573128][ T308] usb 2-1: SerialNumber: syz [ 213.586520][ T308] usb 2-1: config 0 descriptor?? [ 213.593061][ T3824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.601234][ T3824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.815349][ T3824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.831374][ T3824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.049650][ T308] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 214.659034][ T466] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 214.769091][ T444] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 214.839090][ T466] usb 1-1: Using ep0 maxpacket: 32 [ 214.845899][ T466] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 214.855310][ T466] usb 1-1: config 0 has no interface number 0 [ 214.861913][ T466] usb 1-1: config 0 interface 184 has no altsetting 0 [ 214.871309][ T466] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 214.881172][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.889816][ T466] usb 1-1: Product: syz [ 214.894054][ T466] usb 1-1: Manufacturer: syz [ 214.898884][ T466] usb 1-1: SerialNumber: syz [ 214.904587][ T466] usb 1-1: config 0 descriptor?? [ 214.911109][ T466] smsc75xx v1.0.0 [ 214.949028][ T444] usb 6-1: Using ep0 maxpacket: 16 [ 214.956073][ T444] usb 6-1: unable to get BOS descriptor or descriptor too short [ 214.964825][ T444] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 214.976855][ T444] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 214.986587][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.995279][ T444] usb 6-1: Product: syz [ 214.999980][ T444] usb 6-1: Manufacturer: syz [ 215.004728][ T444] usb 6-1: SerialNumber: syz [ 215.015310][ T3861] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 215.264912][ T444] usb 6-1: USB disconnect, device number 24 [ 215.270089][ T2346] udevd[2346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.828481][ T28] audit: type=1400 audit(1786109649.342:318): avc: denied { read write } for pid=3876 comm="syz.5.1181" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 215.838743][ T444] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 215.860199][ T28] audit: type=1400 audit(1786109649.342:319): avc: denied { open } for pid=3876 comm="syz.5.1181" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 215.884398][ T444] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 215.892965][ T444] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 215.926603][ T3879] fido_id[3879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.180363][ T308] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.191198][ T308] asix: probe of 2-1:0.34 failed with error -71 [ 216.202191][ T308] usb 2-1: USB disconnect, device number 23 [ 216.368788][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 216.380817][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 216.393176][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 216.404984][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 216.422416][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 216.438838][ T466] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 216.448900][ T466] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 216.477929][ T466] usb 1-1: USB disconnect, device number 24 [ 218.482637][ T3911] xt_TCPMSS: Only works on TCP SYN packets [ 219.849226][ T839] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 220.022229][ T3957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 221.239072][ T466] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 221.419024][ T466] usb 5-1: Using ep0 maxpacket: 8 [ 221.425695][ T466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.436517][ T466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.445933][ T466] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 221.457643][ T466] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 221.469110][ T466] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 221.478264][ T466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.488749][ T466] hub 5-1:1.0: bad descriptor, ignoring hub [ 221.495187][ T466] hub: probe of 5-1:1.0 failed with error -5 [ 221.501535][ T466] cdc_wdm 5-1:1.0: skipping garbage [ 221.507061][ T466] cdc_wdm 5-1:1.0: skipping garbage [ 221.514236][ T466] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 221.782467][ T839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.790871][ T839] usb 1-1: no configurations [ 221.795928][ T839] usb 1-1: can't read configurations, error -22 [ 221.809113][ T1023] usb 5-1: USB disconnect, device number 26 [ 225.114444][ T28] audit: type=1400 audit(1786109658.632:320): avc: denied { read } for pid=4074 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.219235][ T4068] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 225.355466][ T28] audit: type=1400 audit(1786109658.872:321): avc: denied { create } for pid=4092 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.549018][ T308] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 225.730859][ T308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.742221][ T308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 225.752510][ T308] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 225.762440][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.437428][ T28] audit: type=1400 audit(1786109659.952:322): avc: denied { mount } for pid=4120 comm="syz.0.1256" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.899510][ T4143] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 227.649036][ T466] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 227.849150][ T466] usb 3-1: Using ep0 maxpacket: 16 [ 227.857525][ T466] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 227.867202][ T466] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 227.876859][ T466] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 227.888108][ T466] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 227.900601][ T466] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.911047][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.920154][ T466] usb 3-1: Product: syz [ 227.924636][ T466] usb 3-1: Manufacturer: syz [ 227.935221][ T466] usb 3-1: SerialNumber: syz [ 228.145846][ T466] usb 3-1: 0:2 : does not exist [ 228.154447][ T466] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 228.178514][ T466] usb 3-1: USB disconnect, device number 28 [ 228.295705][ T444] usb 5-1: USB disconnect, device number 27 [ 228.748981][ T444] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 228.940109][ T444] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.951526][ T444] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 228.961675][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.058522][ T28] audit: type=1400 audit(1786109662.572:323): avc: denied { mount } for pid=4197 comm="syz.0.1281" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 229.526323][ T444] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 229.537994][ T444] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 229.551362][ T444] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000B/input/input14 [ 229.891800][ T4225] device lo entered promiscuous mode [ 229.898201][ T4225] device dummy0 entered promiscuous mode [ 229.905642][ T4225] device ifb0 entered promiscuous mode [ 229.912788][ T4225] device ifb1 entered promiscuous mode [ 229.919627][ T4225] device eth0 entered promiscuous mode [ 229.926131][ T4225] device tunl0 entered promiscuous mode [ 229.932811][ T4225] device gre0 entered promiscuous mode [ 229.940123][ T4225] device gretap0 entered promiscuous mode [ 229.946185][ T4225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 229.967184][ T444] usb 5-1: USB disconnect, device number 28 [ 230.752013][ T4246] udc dummy_udc.0: failed to start g1: -19 [ 230.758510][ T4246] UDC core: g1: couldn't find an available UDC or it's busy [ 230.820906][ T28] audit: type=1400 audit(1786109664.342:324): avc: denied { unmount } for pid=1145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 232.222007][ T28] audit: type=1400 audit(1786109665.742:325): avc: denied { override_creds } for pid=4287 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.268533][ T28] audit: type=1400 audit(1786109665.772:326): avc: denied { cmd } for pid=4287 comm="syz.5.1308" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 232.489026][ T444] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 232.679012][ T444] usb 3-1: Using ep0 maxpacket: 8 [ 232.687479][ T444] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 232.697426][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.705981][ T444] usb 3-1: Product: syz [ 232.710792][ T444] usb 3-1: Manufacturer: syz [ 232.715658][ T444] usb 3-1: SerialNumber: syz [ 232.729110][ T444] usb 3-1: config 0 descriptor?? [ 232.737648][ T444] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 234.404028][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 235.235306][ T778] usb 3-1: USB disconnect, device number 29 [ 235.272627][ T28] audit: type=1400 audit(1786109668.782:327): avc: denied { append } for pid=4371 comm="syz.2.1334" name="sda" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.425057][ T637] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 235.589210][ T373] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.589336][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 236.873928][ T637] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.882692][ T637] usb 5-1: no configurations [ 236.890434][ T637] usb 5-1: can't read configurations, error -22 [ 237.159105][ T444] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 237.342080][ T444] usb 6-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 237.351823][ T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.360884][ T444] usb 6-1: Product: syz [ 237.365751][ T444] usb 6-1: Manufacturer: syz [ 237.374334][ T444] usb 6-1: SerialNumber: syz [ 237.382451][ T444] usb 6-1: config 0 descriptor?? [ 237.393719][ T444] hub 6-1:0.0: bad descriptor, ignoring hub [ 237.401247][ T444] hub: probe of 6-1:0.0 failed with error -5 [ 237.408962][ T444] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 237.419349][ T444] usb 6-1: Detected SIO [ 237.424940][ T444] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.719134][ T1023] usb 6-1: USB disconnect, device number 25 [ 237.726576][ T1023] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.737684][ T1023] ftdi_sio 6-1:0.0: device disconnected [ 238.190134][ T4412] netlink: 'syz.5.1348': attribute type 12 has an invalid length. [ 240.754358][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.761696][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.770128][ T4470] device bridge_slave_0 entered promiscuous mode [ 240.777587][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.785194][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.794023][ T4470] device bridge_slave_1 entered promiscuous mode [ 240.804105][ T383] tipc: Left network mode [ 240.860777][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.868051][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.875963][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.883409][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.912981][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.969198][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.019130][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.101545][ T4482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.249590][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.259019][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.266483][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.619388][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.628668][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.635982][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.645379][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 241.655066][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 241.666099][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 241.794165][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.803989][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.825977][ T28] audit: type=1400 audit(1786109675.342:328): avc: denied { bind } for pid=4497 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.846777][ T28] audit: type=1400 audit(1786109675.342:329): avc: denied { listen } for pid=4497 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.867638][ T28] audit: type=1400 audit(1786109675.342:330): avc: denied { setopt } for pid=4497 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.889476][ T28] audit: type=1400 audit(1786109675.342:331): avc: denied { write } for pid=4497 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.990232][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.999503][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.014118][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.023270][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.163933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.172637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.181633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.190705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.335908][ T4511] xt_TCPMSS: Only works on TCP SYN packets [ 242.360646][ T4470] device veth0_vlan entered promiscuous mode [ 242.409872][ T4470] device veth1_macvtap entered promiscuous mode [ 242.919237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.929324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.938487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.947807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.958053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.967752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.977310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.114032][ T4520] udc dummy_udc.0: failed to start g1: -19 [ 243.121309][ T4520] UDC core: g1: couldn't find an available UDC or it's busy [ 243.140916][ T4518] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 243.401835][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 243.544584][ T4553] FAULT_INJECTION: forcing a failure. [ 243.544584][ T4553] name fail_futex, interval 1, probability 0, space 0, times 1 [ 243.559344][ T4553] CPU: 0 PID: 4553 Comm: syz.1.1391 Not tainted syzkaller #0 [ 243.567570][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.578221][ T4553] Call Trace: [ 243.581814][ T4553] [ 243.584977][ T4553] __dump_stack+0x21/0x24 [ 243.589722][ T4553] dump_stack_lvl+0x110/0x170 [ 243.595070][ T4553] ? __cfi_dump_stack_lvl+0x8/0x8 [ 243.600511][ T4553] dump_stack+0x15/0x24 [ 243.604818][ T4553] should_fail_ex+0x3bf/0x510 [ 243.609726][ T4553] should_fail+0xb/0x10 [ 243.614110][ T4553] get_futex_key+0x143/0xb10 [ 243.619316][ T4553] ? preempt_schedule_thunk+0x16/0x18 [ 243.624888][ T4553] ? __cfi_get_futex_key+0x10/0x10 [ 243.631042][ T4553] futex_wake+0x150/0x8e0 [ 243.635855][ T4553] ? __cfi_futex_wake+0x10/0x10 [ 243.641245][ T4553] ? proc_fail_nth_write+0x180/0x200 [ 243.647313][ T4553] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 243.653458][ T4553] ? __cfi_selinux_file_permission+0x10/0x10 [ 243.659781][ T4553] ? vfs_write+0x3d7/0xd00 [ 243.664701][ T4553] ? vfs_write+0xa51/0xd00 [ 243.669963][ T4553] do_futex+0x2bf/0x430 [ 243.674207][ T4553] ? __cfi_do_futex+0x10/0x10 [ 243.679407][ T4553] ? __kasan_check_write+0x14/0x20 [ 243.685044][ T4553] ? mutex_unlock+0x8f/0x230 [ 243.689942][ T4553] __se_sys_futex+0x136/0x310 [ 243.694876][ T4553] ? __x64_sys_futex+0x100/0x100 [ 243.700125][ T4553] ? xfd_validate_state+0x70/0x150 [ 243.705408][ T4553] __x64_sys_futex+0xe5/0x100 [ 243.710424][ T4553] x64_sys_call+0x7ec/0x9a0 [ 243.715269][ T4553] do_syscall_64+0x4c/0xa0 [ 243.720020][ T4553] ? clear_bhb_loop+0x30/0x80 [ 243.725247][ T4553] ? clear_bhb_loop+0x30/0x80 [ 243.730330][ T4553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.736998][ T4553] RIP: 0033:0x7f8ad939e0d9 [ 243.741911][ T4553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.763569][ T4553] RSP: 002b:00007f8ada33c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.773420][ T4553] RAX: ffffffffffffffda RBX: 00007f8ad9625fa8 RCX: 00007f8ad939e0d9 [ 243.782056][ T4553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ad9625fac [ 243.790668][ T4553] RBP: 00007f8ad9625fa0 R08: 001cdc7fdc01016e R09: 0000000000000000 [ 243.799214][ T4553] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 243.807511][ T4553] R13: 00007f8ad9626038 R14: 00007ffecbf15af0 R15: 00007ffecbf15bd8 [ 243.816277][ T4553] [ 244.099779][ T383] device bridge_slave_0 left promiscuous mode [ 244.106717][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.191923][ T383] device veth0_vlan left promiscuous mode [ 244.578177][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 245.393952][ T28] audit: type=1400 audit(1786109678.912:332): avc: denied { write } for pid=4622 comm="syz.4.1416" name="tcp" dev="proc" ino=4026532586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 245.911036][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 245.945977][ T4654] cgroup: Unknown subsys name 'devices' [ 249.393207][ T28] audit: type=1400 audit(1786109682.912:333): avc: denied { read } for pid=4679 comm="syz.4.1437" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.595290][ T4693] input: syz1 as /devices/virtual/input/input17 [ 249.686881][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 249.739080][ T444] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 249.931792][ T444] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 249.941530][ T444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.950020][ T444] usb 5-1: Product: syz [ 249.954384][ T444] usb 5-1: Manufacturer: syz [ 249.959215][ T4664] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 249.966971][ T444] usb 5-1: SerialNumber: syz [ 249.980594][ T444] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 249.988707][ T444] ums-datafab 5-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 249.988707][ T444] Please send a copy of this message to and [ 250.016594][ T444] scsi host1: usb-storage 5-1:1.0 [ 250.138989][ T4664] usb 6-1: Using ep0 maxpacket: 16 [ 250.150975][ T4664] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 250.159786][ T4664] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 250.169308][ T4664] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 250.180341][ T4664] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 250.196391][ T4685] usb 5-1: USB disconnect, device number 31 [ 250.201580][ T4664] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.212033][ T4664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.220917][ T4664] usb 6-1: Product: syz [ 250.225143][ T4664] usb 6-1: Manufacturer: syz [ 250.230308][ T4664] usb 6-1: SerialNumber: syz [ 250.441366][ T4664] usb 6-1: 0:2 : does not exist [ 250.450320][ T4664] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 250.476620][ T4664] usb 6-1: USB disconnect, device number 26 [ 250.498628][ T4716] udc dummy_udc.0: failed to start g1: -19 [ 250.509524][ T4716] UDC core: g1: couldn't find an available UDC or it's busy [ 250.802307][ T28] audit: type=1400 audit(1786109684.322:334): avc: denied { read } for pid=4724 comm="syz.4.1452" name="/" dev="configfs" ino=12994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.825989][ T28] audit: type=1400 audit(1786109684.322:335): avc: denied { open } for pid=4724 comm="syz.4.1452" path="/25/config" dev="configfs" ino=12994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.121291][ T4740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1458'. [ 251.154326][ T28] audit: type=1400 audit(1786109684.672:336): avc: denied { name_bind } for pid=4745 comm="syz.4.1462" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 251.236975][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 252.027772][ T28] audit: type=1400 audit(1786109685.542:337): avc: denied { append } for pid=4763 comm="syz.2.1467" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 252.052350][ T28] audit: type=1400 audit(1786109685.552:338): avc: denied { write } for pid=4763 comm="syz.2.1467" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 252.149468][ T304] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 252.379000][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 252.386456][ T304] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 252.486962][ T304] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 252.496750][ T304] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 252.522909][ T304] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 252.822855][ T304] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.832725][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.842779][ T304] usb 1-1: Product: syz [ 252.847173][ T304] usb 1-1: Manufacturer: syz [ 252.852238][ T304] usb 1-1: SerialNumber: syz [ 252.982118][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 253.094835][ T304] usb 1-1: 0:2 : does not exist [ 253.103114][ T304] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 253.116764][ T304] usb 1-1: USB disconnect, device number 27 [ 253.213991][ T4801] udc dummy_udc.0: failed to start g1: -19 [ 253.220249][ T4801] UDC core: g1: couldn't find an available UDC or it's busy [ 253.379640][ T4666] udevd[4666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.062242][ T4831] udc dummy_udc.0: failed to start g1: -19 [ 254.071729][ T4831] UDC core: g1: couldn't find an available UDC or it's busy [ 254.390687][ T4838] device syzkaller0 entered promiscuous mode [ 254.400038][ T4838] tipc: Enabled bearer , priority 0 [ 254.411181][ T4838] tipc: Resetting bearer [ 254.449363][ T4837] tipc: Resetting bearer [ 254.529619][ T4837] tipc: Disabling bearer [ 255.879915][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 256.066077][ T28] audit: type=1400 audit(1786109689.582:339): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.147617][ T4862] binder: 4856:4862 ioctl c0306201 0 returned -14 [ 257.381638][ T28] audit: type=1400 audit(1786109690.862:340): avc: denied { create } for pid=4896 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.402576][ T28] audit: type=1400 audit(1786109690.862:341): avc: denied { setopt } for pid=4896 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 259.128526][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 259.157043][ T4967] udc dummy_udc.0: failed to start g1: -19 [ 259.170248][ T4967] UDC core: g1: couldn't find an available UDC or it's busy [ 259.187953][ T4969] binder: BINDER_SET_CONTEXT_MGR already set [ 259.194690][ T4969] binder: 4968:4969 ioctl 4018620d 200000004a80 returned -16 [ 259.223323][ T4971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1539'. [ 259.236766][ T4971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1539'. [ 260.299000][ T444] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 260.357907][ T5005] UDC core: g1: couldn't find an available UDC or it's busy [ 260.498993][ T444] usb 1-1: Using ep0 maxpacket: 16 [ 260.510468][ T444] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 260.520226][ T444] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 260.530803][ T444] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 260.541494][ T444] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 260.552883][ T444] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.563280][ T444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.571643][ T444] usb 1-1: Product: syz [ 260.575956][ T444] usb 1-1: Manufacturer: syz [ 260.582964][ T444] usb 1-1: SerialNumber: syz [ 260.791168][ T444] usb 1-1: 0:2 : does not exist [ 260.801275][ T444] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 260.820290][ T444] usb 1-1: USB disconnect, device number 28 [ 261.040084][ T4666] udevd[4666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.255382][ T28] audit: type=1400 audit(1786109694.772:342): avc: denied { ioctl } for pid=5028 comm="syz.2.1558" path="socket:[74957]" dev="sockfs" ino=74957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.318569][ T5035] udc dummy_udc.0: failed to start g1: -19 [ 261.331193][ T5037] device syzkaller0 entered promiscuous mode [ 261.335914][ T5035] UDC core: g1: couldn't find an available UDC or it's busy [ 261.346857][ T5037] tipc: Started in network mode [ 261.355015][ T5037] tipc: Node identity fae11d6e2ee9, cluster identity 4711 [ 261.366101][ T5037] tipc: Enabled bearer , priority 0 [ 261.377811][ T5037] tipc: Resetting bearer [ 261.421617][ T5036] tipc: Resetting bearer [ 261.432158][ T28] audit: type=1400 audit(1786109694.952:343): avc: denied { ioctl } for pid=5041 comm="syz.2.1564" path="socket:[75053]" dev="sockfs" ino=75053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.457884][ T28] audit: type=1400 audit(1786109694.952:344): avc: denied { bind } for pid=5041 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.490904][ T5045] tmpfs: Unknown parameter 'quota' [ 261.506838][ T5047] capability: warning: `syz.1.1566' uses deprecated v2 capabilities in a way that may be insecure [ 261.510490][ T5036] tipc: Disabling bearer [ 261.534917][ T28] audit: type=1400 audit(1786109695.052:345): avc: denied { append } for pid=5048 comm="syz.1.1567" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 261.919652][ T5072] udc dummy_udc.0: failed to start g1: -19 [ 261.920696][ T5072] UDC core: g1: couldn't find an available UDC or it's busy [ 261.983372][ T5073] device syzkaller0 entered promiscuous mode [ 262.018723][ T5073] tipc: Started in network mode [ 262.046324][ T5073] tipc: Node identity c62d56bc3d6c, cluster identity 4711 [ 262.046433][ T5073] tipc: Enabled bearer , priority 0 [ 262.048089][ T5073] tipc: Resetting bearer [ 262.099190][ T5070] tipc: Resetting bearer [ 262.179337][ T28] audit: type=1400 audit(1786109695.702:346): avc: denied { write } for pid=5080 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.211733][ T5070] tipc: Disabling bearer [ 262.376206][ T5087] device syzkaller0 entered promiscuous mode [ 262.391252][ T5087] tipc: Enabled bearer , priority 0 [ 262.412760][ T5087] tipc: Resetting bearer [ 262.459302][ T5086] tipc: Resetting bearer [ 262.599630][ T5086] tipc: Disabling bearer [ 262.783250][ T5097] xt_TCPMSS: Only works on TCP SYN packets [ 263.290877][ T5121] device syzkaller0 entered promiscuous mode [ 263.300266][ T5121] tipc: Enabled bearer , priority 0 [ 263.352119][ T5121] tipc: Resetting bearer [ 263.379468][ T5120] tipc: Resetting bearer [ 263.425294][ T28] audit: type=1400 audit(1786109696.942:347): avc: denied { ioctl } for pid=5124 comm="syz.5.1600" path="/254/trace/trace" dev="tracefs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 263.479430][ T5120] tipc: Disabling bearer [ 263.523802][ T5129] tmpfs: Unsupported parameter 'mpol' [ 263.663932][ T28] audit: type=1400 audit(1786109697.172:348): avc: denied { create } for pid=5139 comm="syz.2.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 263.703532][ T28] audit: type=1400 audit(1786109697.222:349): avc: denied { create } for pid=5145 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 263.726481][ T5148] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1612'. [ 264.580627][ T5168] xt_TCPMSS: Only works on TCP SYN packets [ 264.589693][ T28] audit: type=1400 audit(1786109698.072:350): avc: denied { mounton } for pid=5166 comm="syz.1.1620" path="/341/file0" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 264.961971][ T5178] device syzkaller0 entered promiscuous mode [ 264.977378][ T5178] tipc: Enabled bearer , priority 0 [ 265.003748][ T5178] tipc: Resetting bearer [ 265.059628][ T5177] tipc: Resetting bearer [ 265.149843][ T5177] tipc: Disabling bearer [ 266.091334][ T5208] xt_TCPMSS: Only works on TCP SYN packets [ 266.109161][ T5199] netlink: 'syz.0.1632': attribute type 34 has an invalid length. [ 266.414388][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1637'. [ 267.440995][ T5244] device syzkaller0 entered promiscuous mode [ 267.448812][ T5244] tipc: Started in network mode [ 267.460698][ T5244] tipc: Node identity 7e93037b995f, cluster identity 4711 [ 267.468309][ T5244] tipc: Enabled bearer , priority 0 [ 267.477501][ T5244] tipc: Resetting bearer [ 267.496359][ T28] audit: type=1400 audit(1786109701.012:351): avc: denied { getopt } for pid=5247 comm="syz.5.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.559343][ T5243] tipc: Resetting bearer [ 267.689871][ T5243] tipc: Disabling bearer [ 270.080704][ T5265] xt_TCPMSS: Only works on TCP SYN packets [ 270.361641][ T1023] tipc: Node number set to 3888907131 [ 270.859678][ T5323] device syzkaller0 entered promiscuous mode [ 271.416170][ T5341] xt_TCPMSS: Only works on TCP SYN packets [ 272.212022][ T28] audit: type=1400 audit(1786109705.732:352): avc: denied { write } for pid=5361 comm="syz.1.1688" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 274.616329][ T5406] xt_TCPMSS: Only works on TCP SYN packets [ 277.015822][ T28] audit: type=1400 audit(1786109710.532:353): avc: denied { sqpoll } for pid=5462 comm="syz.4.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 277.205745][ T5475] xt_TCPMSS: Only works on TCP SYN packets [ 278.000000][ T5489] syz.1.1729 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 279.430571][ T5531] xt_TCPMSS: Only works on TCP SYN packets [ 279.912882][ T5538] binder: 5535:5538 ioctl c0306201 0 returned -14 [ 280.226561][ T28] audit: type=1400 audit(1786109713.742:354): avc: denied { ioctl } for pid=5560 comm="syz.4.1754" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 280.563601][ T5574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.228986][ T1023] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 281.326836][ T5589] xt_TCPMSS: Only works on TCP SYN packets [ 281.418993][ T1023] usb 1-1: Using ep0 maxpacket: 16 [ 281.427415][ T1023] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.498234][ T1023] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 281.584243][ T1023] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 281.638715][ T1023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.656068][ T1023] usb 1-1: Product: syz [ 281.661614][ T1023] usb 1-1: Manufacturer: syz [ 281.666509][ T1023] usb 1-1: SerialNumber: syz [ 281.685519][ T5577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.753210][ T5602] binder: 5601:5602 ioctl c0306201 0 returned -14 [ 281.897346][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 281.916959][ T1023] usb 1-1: USB disconnect, device number 29 [ 282.140045][ T4667] udevd[4667]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.649545][ T5620] device syzkaller0 entered promiscuous mode [ 282.658064][ T5620] tipc: Enabled bearer , priority 0 [ 282.667434][ T5620] tipc: Resetting bearer [ 282.710580][ T5619] tipc: Resetting bearer [ 282.789261][ T5619] tipc: Disabling bearer [ 283.138974][ T5645] xt_TCPMSS: Only works on TCP SYN packets [ 283.960448][ T5652] binder: 5651:5652 ioctl c0306201 0 returned -14 [ 284.020109][ T308] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 284.384063][ T5669] device syzkaller0 entered promiscuous mode [ 284.393177][ T5669] tipc: Enabled bearer , priority 0 [ 284.402554][ T5669] tipc: Resetting bearer [ 284.439027][ T308] usb 6-1: Using ep0 maxpacket: 16 [ 284.446518][ T308] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.455940][ T308] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 284.460041][ T5668] tipc: Resetting bearer [ 284.474352][ T308] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 284.483910][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.492350][ T308] usb 6-1: Product: syz [ 284.496624][ T308] usb 6-1: Manufacturer: syz [ 284.501438][ T308] usb 6-1: SerialNumber: syz [ 284.507658][ T5648] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 284.569515][ T5668] tipc: Disabling bearer [ 284.729196][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1785'. [ 284.781079][ T308] usb 6-1: USB disconnect, device number 27 [ 284.989691][ T4672] udevd[4672]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 285.439283][ T5693] xt_TCPMSS: Only works on TCP SYN packets [ 286.365555][ T28] audit: type=1400 audit(1786109719.882:355): avc: denied { create } for pid=5725 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.394913][ T28] audit: type=1400 audit(1786109719.902:356): avc: denied { setopt } for pid=5725 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.528462][ T28] audit: type=1400 audit(1786109720.042:357): avc: denied { read } for pid=5730 comm="syz.2.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.698976][ T308] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 287.161341][ T28] audit: type=1400 audit(1786109720.682:358): avc: denied { ioctl } for pid=5743 comm="syz.4.1812" path="socket:[81220]" dev="sockfs" ino=81220 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.187101][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 287.200385][ T308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.219174][ T308] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 287.231566][ T308] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 287.241313][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.249785][ T308] usb 1-1: Product: syz [ 287.255576][ T308] usb 1-1: Manufacturer: syz [ 287.260648][ T308] usb 1-1: SerialNumber: syz [ 287.271804][ T5729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 287.481009][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 287.510745][ T308] usb 1-1: USB disconnect, device number 30 [ 287.628179][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 287.698157][ T5753] device syzkaller0 entered promiscuous mode [ 287.717858][ T5753] tipc: Enabled bearer , priority 0 [ 287.744057][ T5753] tipc: Resetting bearer [ 287.799285][ T5752] tipc: Resetting bearer [ 287.879370][ T5752] tipc: Disabling bearer [ 289.098226][ T5791] device syzkaller0 entered promiscuous mode [ 289.106214][ T5791] tipc: Enabled bearer , priority 0 [ 289.117164][ T5791] tipc: Resetting bearer [ 289.169595][ T5790] tipc: Resetting bearer [ 289.249277][ T5790] tipc: Disabling bearer [ 289.716881][ T5804] binder: 5803:5804 ioctl c0306201 200000000180 returned -14 [ 291.589351][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1849'. [ 291.650743][ T5872] device syzkaller0 entered promiscuous mode [ 291.789757][ T28] audit: type=1400 audit(1786109725.312:359): avc: denied { setopt } for pid=5881 comm="syz.5.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.436083][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 292.864130][ T28] audit: type=1400 audit(1786109726.382:360): avc: denied { create } for pid=5918 comm="syz.5.1873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.885242][ T28] audit: type=1400 audit(1786109726.382:361): avc: denied { setattr } for pid=5918 comm="syz.5.1873" name="file0" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.909503][ T28] audit: type=1400 audit(1786109726.382:362): avc: denied { write } for pid=5918 comm="syz.5.1873" name="file0" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.936234][ T28] audit: type=1400 audit(1786109726.382:363): avc: denied { open } for pid=5918 comm="syz.5.1873" path="/316/file0" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.049368][ T5934] tipc: Cannot configure node identity twice [ 293.430795][ T5944] udc dummy_udc.0: failed to start g1: -19 [ 293.437137][ T5944] UDC core: g1: couldn't find an available UDC or it's busy [ 293.502241][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.505627][ T28] audit: type=1400 audit(1786109727.022:364): avc: denied { getopt } for pid=5950 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.510568][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.538386][ T5942] device bridge_slave_0 entered promiscuous mode [ 293.545860][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.553403][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.561300][ T5942] device bridge_slave_1 entered promiscuous mode [ 293.568278][ T435] tipc: Left network mode [ 293.780613][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.787899][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.795531][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.802604][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.929910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.969080][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.009079][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.284074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.295135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.304967][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.312322][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.129112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.138149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.146842][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.154064][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.162219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.171188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.179821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.188599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.691457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.700099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.823193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.831536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.840101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.848119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.951013][ T5942] device veth0_vlan entered promiscuous mode [ 295.965118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.974348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.985585][ T5942] device veth1_macvtap entered promiscuous mode [ 296.004484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.013637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.023154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.130269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.139776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.191180][ T435] device bridge_slave_0 left promiscuous mode [ 296.197611][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.289831][ T435] device veth0_vlan left promiscuous mode [ 297.049030][ T466] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 297.135142][ T6036] udc dummy_udc.0: failed to start g1: -19 [ 297.142609][ T6036] UDC core: g1: couldn't find an available UDC or it's busy [ 297.239017][ T466] usb 7-1: Using ep0 maxpacket: 16 [ 297.246096][ T466] usb 7-1: unable to get BOS descriptor or descriptor too short [ 297.256444][ T466] usb 7-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 297.319608][ T466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.416121][ T466] usb 7-1: Product: syz [ 297.420812][ T466] usb 7-1: Manufacturer: syz [ 297.640056][ T466] usb 7-1: SerialNumber: syz [ 298.082379][ T466] usb 7-1: USB disconnect, device number 2 [ 298.319795][ T4672] udevd[4672]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.484226][ T6074] udc dummy_udc.0: failed to start g1: -19 [ 298.490958][ T6074] UDC core: g1: couldn't find an available UDC or it's busy [ 300.066111][ T28] audit: type=1326 audit(1786109733.582:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.4.1933" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bdf99e0d9 code=0x0 [ 300.208948][ T304] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 300.398995][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 300.406302][ T304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.416732][ T304] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.428040][ T304] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.437940][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.446235][ T304] usb 1-1: Product: syz [ 300.450631][ T304] usb 1-1: Manufacturer: syz [ 300.456575][ T304] usb 1-1: SerialNumber: syz [ 300.686557][ T304] usb 1-1: 0:2 : does not exist [ 300.720139][ T304] usb 1-1: unit 18 not found! [ 300.799063][ T304] usb 1-1: USB disconnect, device number 31 [ 301.049643][ T4666] udevd[4666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 301.089022][ T292] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 301.203194][ T6120] device syzkaller0 entered promiscuous mode [ 301.211140][ T6120] tipc: Enabled bearer , priority 0 [ 301.220220][ T6120] tipc: Resetting bearer [ 301.249456][ T6119] tipc: Resetting bearer [ 301.268998][ T292] usb 6-1: Using ep0 maxpacket: 16 [ 301.276281][ T292] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.286782][ T292] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 301.296334][ T292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.304608][ T292] usb 6-1: Product: syz [ 301.309079][ T292] usb 6-1: Manufacturer: syz [ 301.313828][ T292] usb 6-1: SerialNumber: syz [ 301.320057][ T6119] tipc: Disabling bearer [ 301.483367][ T6122] device syzkaller0 entered promiscuous mode [ 301.492280][ T6122] tipc: Started in network mode [ 301.497191][ T6122] tipc: Node identity c6e8d2879eb3, cluster identity 4711 [ 301.504701][ T6122] tipc: Enabled bearer , priority 0 [ 301.514505][ T6122] tipc: Resetting bearer [ 301.559325][ T6121] tipc: Resetting bearer [ 301.639821][ T6121] tipc: Disabling bearer [ 301.954701][ T292] usb 6-1: USB disconnect, device number 28 [ 302.169562][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 302.958989][ T292] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 303.138972][ T292] usb 6-1: Using ep0 maxpacket: 16 [ 303.145871][ T292] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.156943][ T292] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.183222][ T292] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.193133][ T292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.201823][ T292] usb 6-1: Product: syz [ 303.206836][ T292] usb 6-1: Manufacturer: syz [ 303.212158][ T292] usb 6-1: SerialNumber: syz [ 303.431945][ T292] usb 6-1: 0:2 : does not exist [ 303.437363][ T292] usb 6-1: unit 18 not found! [ 303.791407][ T292] usb 6-1: USB disconnect, device number 29 [ 305.797359][ T292] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 305.806268][ T292] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.604345][ T6265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.622012][ T28] audit: type=1400 audit(1786109741.132:366): avc: denied { link } for pid=6283 comm="syz.6.1993" name="#3a" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.645888][ T28] audit: type=1400 audit(1786109741.132:367): avc: denied { rename } for pid=6283 comm="syz.6.1993" name="#3b" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.948997][ T304] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 308.128994][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 308.135818][ T304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.145471][ T304] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 308.157386][ T304] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 308.167089][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.175880][ T304] usb 1-1: Product: syz [ 308.180312][ T304] usb 1-1: Manufacturer: syz [ 308.185209][ T304] usb 1-1: SerialNumber: syz [ 308.191500][ T6299] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.412348][ T304] usb 1-1: USB disconnect, device number 32 [ 309.109276][ T6315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.710322][ T28] audit: type=1400 audit(1786109743.232:368): avc: denied { create } for pid=6332 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 309.969433][ T6337] ================================================================== [ 309.977979][ T6337] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 309.985070][ T6337] Write of size 8 at addr ffff88811e93ad50 by task syz.5.2007/6337 [ 309.993085][ T6337] [ 309.995598][ T6337] CPU: 1 PID: 6337 Comm: syz.5.2007 Not tainted syzkaller #0 [ 310.003339][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.013934][ T6337] Call Trace: [ 310.017333][ T6337] [ 310.020485][ T6337] __dump_stack+0x21/0x24 [ 310.025053][ T6337] dump_stack_lvl+0x110/0x170 [ 310.029973][ T6337] ? __cfi_dump_stack_lvl+0x8/0x8 [ 310.035169][ T6337] ? mutex_lock+0x86/0x1b0 [ 310.039920][ T6337] print_address_description+0x71/0x200 [ 310.045660][ T6337] print_report+0x4a/0x60 [ 310.050032][ T6337] kasan_report+0x122/0x150 [ 310.054757][ T6337] ? mutex_lock+0x86/0x1b0 [ 310.059735][ T6337] kasan_check_range+0x249/0x2a0 [ 310.064832][ T6337] __kasan_check_write+0x14/0x20 [ 310.069786][ T6337] mutex_lock+0x86/0x1b0 [ 310.074102][ T6337] ? __cfi_mutex_lock+0x10/0x10 [ 310.079177][ T6337] ? kfree+0x6f/0xf0 [ 310.083200][ T6337] ? l2tp_session_put+0xaf/0x1a0 [ 310.088412][ T6337] ? l2tp_session_delete+0x3df/0x4d0 [ 310.093842][ T6337] pppol2tp_release+0x178/0x2b0 [ 310.099002][ T6337] sock_close+0xc9/0x220 [ 310.103541][ T6337] ? __cfi_sock_close+0x10/0x10 [ 310.108426][ T6337] __fput+0x1fd/0x8f0 [ 310.112522][ T6337] ____fput+0x15/0x20 [ 310.116918][ T6337] task_work_run+0x1e1/0x250 [ 310.121563][ T6337] ? __cfi_task_work_run+0x10/0x10 [ 310.126975][ T6337] ? __cfi___close_range+0x10/0x10 [ 310.132519][ T6337] exit_to_user_mode_loop+0x9b/0xb0 [ 310.138731][ T6337] exit_to_user_mode_prepare+0x87/0xd0 [ 310.144631][ T6337] syscall_exit_to_user_mode+0x1a/0x30 [ 310.150455][ T6337] do_syscall_64+0x58/0xa0 [ 310.155341][ T6337] ? clear_bhb_loop+0x30/0x80 [ 310.160504][ T6337] ? clear_bhb_loop+0x30/0x80 [ 310.165712][ T6337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.172032][ T6337] RIP: 0033:0x7fa8a0d9e0d9 [ 310.176608][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.198505][ T6337] RSP: 002b:00007ffcf7737488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 310.207431][ T6337] RAX: 0000000000000000 RBX: 00007ffcf7737570 RCX: 00007fa8a0d9e0d9 [ 310.215749][ T6337] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 310.223851][ T6337] RBP: 000000000004ba63 R08: 0000000000000001 R09: 0000000000000000 [ 310.231936][ T6337] R10: 0000001b32e20000 R11: 0000000000000246 R12: 00007ffcf77375b0 [ 310.240020][ T6337] R13: 00007fa8a1025fac R14: 000000000004babe R15: 00007fa8a1025fa0 [ 310.248280][ T6337] [ 310.251333][ T6337] [ 310.253690][ T6337] Allocated by task 6338: [ 310.258146][ T6337] kasan_set_track+0x4b/0x70 [ 310.262754][ T6337] kasan_save_alloc_info+0x1f/0x30 [ 310.267969][ T6337] __kasan_kmalloc+0x95/0xb0 [ 310.272597][ T6337] __kmalloc+0xb4/0x1e0 [ 310.276772][ T6337] l2tp_session_create+0x38/0xbd0 [ 310.281861][ T6337] pppol2tp_connect+0xbf5/0x1640 [ 310.287025][ T6337] __sys_connect+0x3da/0x460 [ 310.291860][ T6337] __x64_sys_connect+0x7a/0x90 [ 310.296647][ T6337] x64_sys_call+0x88d/0x9a0 [ 310.301173][ T6337] do_syscall_64+0x4c/0xa0 [ 310.305620][ T6337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.311566][ T6337] [ 310.313896][ T6337] Freed by task 6337: [ 310.317927][ T6337] kasan_set_track+0x4b/0x70 [ 310.322538][ T6337] kasan_save_free_info+0x2b/0x40 [ 310.327588][ T6337] ____kasan_slab_free+0x132/0x180 [ 310.332751][ T6337] __kasan_slab_free+0x11/0x20 [ 310.337558][ T6337] slab_free_freelist_hook+0xc2/0x190 [ 310.342958][ T6337] __kmem_cache_free+0xb7/0x1b0 [ 310.348000][ T6337] kfree+0x6f/0xf0 [ 310.352020][ T6337] l2tp_session_put+0xaf/0x1a0 [ 310.357064][ T6337] l2tp_session_delete+0x3df/0x4d0 [ 310.362287][ T6337] pppol2tp_release+0x169/0x2b0 [ 310.367427][ T6337] sock_close+0xc9/0x220 [ 310.372150][ T6337] __fput+0x1fd/0x8f0 [ 310.376431][ T6337] ____fput+0x15/0x20 [ 310.380529][ T6337] task_work_run+0x1e1/0x250 [ 310.385149][ T6337] exit_to_user_mode_loop+0x9b/0xb0 [ 310.390732][ T6337] exit_to_user_mode_prepare+0x87/0xd0 [ 310.396498][ T6337] syscall_exit_to_user_mode+0x1a/0x30 [ 310.402349][ T6337] do_syscall_64+0x58/0xa0 [ 310.406915][ T6337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.413367][ T6337] [ 310.416418][ T6337] The buggy address belongs to the object at ffff88811e93ac00 [ 310.416418][ T6337] which belongs to the cache kmalloc-512 of size 512 [ 310.431420][ T6337] The buggy address is located 336 bytes inside of [ 310.431420][ T6337] 512-byte region [ffff88811e93ac00, ffff88811e93ae00) [ 310.444941][ T6337] [ 310.447298][ T6337] The buggy address belongs to the physical page: [ 310.453936][ T6337] page:ffffea00047a4e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e938 [ 310.465188][ T6337] head:ffffea00047a4e00 order:2 compound_mapcount:0 compound_pincount:0 [ 310.473639][ T6337] flags: 0x4000000000010200(slab|head|zone=1) [ 310.480201][ T6337] raw: 4000000000010200 ffffea00044af000 dead000000000002 ffff888100042f00 [ 310.489081][ T6337] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 310.498035][ T6337] page dumped because: kasan: bad access detected [ 310.504825][ T6337] page_owner tracks the page as allocated [ 310.510837][ T6337] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4283, tgid 4282 (syz.0.1305), ts 232094878984, free_ts 217972111502 [ 310.534759][ T6337] post_alloc_hook+0x1f5/0x210 [ 310.539754][ T6337] prep_new_page+0x1c/0x110 [ 310.545161][ T6337] get_page_from_freelist+0x2ca9/0x2d20 [ 310.550834][ T6337] __alloc_pages+0x1fa/0x610 [ 310.555552][ T6337] alloc_slab_page+0x6e/0xf0 [ 310.560345][ T6337] new_slab+0x98/0x3e0 [ 310.564671][ T6337] ___slab_alloc+0x70f/0xb70 [ 310.569743][ T6337] __slab_alloc+0x5e/0xa0 [ 310.574281][ T6337] __kmem_cache_alloc_node+0x204/0x2d0 [ 310.579949][ T6337] __kmalloc_node_track_caller+0xa1/0x1e0 [ 310.585872][ T6337] __alloc_skb+0x226/0x4a0 [ 310.590469][ T6337] alloc_skb_with_frags+0xa8/0x620 [ 310.595710][ T6337] sock_alloc_send_pskb+0x87f/0x9a0 [ 310.601302][ T6337] unix_dgram_sendmsg+0x5c1/0x1710 [ 310.607323][ T6337] ____sys_sendmsg+0x5fb/0x9c0 [ 310.612207][ T6337] ___sys_sendmsg+0x2a2/0x360 [ 310.616936][ T6337] page last free stack trace: [ 310.622785][ T6337] free_unref_page_prepare+0x80c/0x820 [ 310.628487][ T6337] free_unref_page+0x93/0x530 [ 310.633477][ T6337] __free_pages+0x67/0x100 [ 310.638118][ T6337] free_pages+0x82/0x90 [ 310.642749][ T6337] kasan_depopulate_vmalloc_pte+0x6b/0x90 [ 310.648859][ T6337] __apply_to_page_range+0x8db/0xc80 [ 310.654270][ T6337] apply_to_existing_page_range+0x38/0x50 [ 310.661359][ T6337] kasan_release_vmalloc+0x97/0xb0 [ 310.666691][ T6337] __purge_vmap_area_lazy+0xf09/0x1870 [ 310.672369][ T6337] drain_vmap_area_work+0x3e/0xd0 [ 310.677622][ T6337] process_one_work+0x717/0xc30 [ 310.682784][ T6337] worker_thread+0xa4d/0x11d0 [ 310.687686][ T6337] kthread+0x281/0x320 [ 310.691931][ T6337] ret_from_fork+0x1f/0x30 [ 310.696993][ T6337] [ 310.699557][ T6337] Memory state around the buggy address: [ 310.705388][ T6337] ffff88811e93ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.714180][ T6337] ffff88811e93ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.723413][ T6337] >ffff88811e93ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.732284][ T6337] ^ [ 310.739439][ T6337] ffff88811e93ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 310.748034][ T6337] ffff88811e93ae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 310.756124][ T6337] ================================================================== [ 310.767409][ T6337] Disabling lock debugging due to kernel taint [ 310.779446][ T28] audit: type=1400 audit(1786109744.302:369): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 310.803160][ T28] audit: type=1400 audit(1786109744.302:370): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.826279][ T28] audit: type=1400 audit(1786109744.302:371): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.862180][ T28] audit: type=1400 audit(1786109744.302:372): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.883553][ T28] audit: type=1400 audit(1786109744.302:373): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.906937][ T28] audit: type=1400 audit(1786109744.302:374): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.919161][ T304] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.938986][ T28] audit: type=1400 audit(1786109744.302:375): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 311.118984][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 311.126025][ T304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 311.134826][ T304] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 311.146961][ T304] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 311.156235][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.164385][ T304] usb 1-1: Product: syz [ 311.168642][ T304] usb 1-1: Manufacturer: syz [ 311.173885][ T304] usb 1-1: SerialNumber: syz [ 311.179944][ T6343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.399812][ T304] usb 1-1: USB disconnect, device number 33 [ 311.412049][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory