last executing test programs: 9m7.595853203s ago: executing program 2 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x42040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x738}) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x40, 0xb, 0x83, {0x83, 0x9, "1350c415588eee87a60f2ca7c268fd4ac57f3fa8081809786865f41d3323cd04a91bf41274393042a794ebd1744b6e0dc082f391b55ad9b671d47742030000007e871eb529d61b20b8d45bf88e68e78c1bcd739f613a8c8b2b075439fc7c49706f75b78d741c071a038dcb7246c5db497d3df6315562c5a91b751485c59e018e10"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000008c0)={0x2c, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x38, 0x93, 0x6}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x0, 0x6, 0x0, "559c4406", "b56ec0f2"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x7, 0x13, 0x7, 0x3dd2, 0x8}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="4007980000002e71a09f16537d28cce532f4c71a4df3c1de778006068be75f87daa790955f7067a9823d04826a69dbcacede4a745c489b0a356862a2e1c16bb04da1de14e40c30d039fd5e4db93775ffeeb9c043543231982b746d20d97b2c7c8ffdc0434781be617b8440976d3f11e0c7578d6a66ec6bc9288112b11d99bb44a380efb9b37d9f5bdcafb492865507fd938e7c0a7ead729ee2cfc180a9da"], &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2c}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "76d0"}, &(0x7f0000000b80)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) (async) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x9, 0x6, 0x3, 0x3, 0x8001, 0x3}]}) 9m6.060291489s ago: executing program 2 (id=104): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) (async) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={0x0, 0xa89a, 0x0, 0x1}) (rerun: 64) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)={{r1}, {@val={r2}, @actul_num={@void, 0x80000001, 0x54}}}) unshare(0x22020400) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0xfffffffffffff61b, r3, 0x0, 0x4, 0x0) (async, rerun: 64) r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) (async) fallocate(r5, 0x20, 0x1, 0x4) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) recvmsg(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40002140) 9m6.060002549s ago: executing program 2 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0x9}) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x22) linkat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x8000, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x90}}, {0x2, 0x4e24, @private}, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8}) 9m6.059108119s ago: executing program 2 (id=106): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x3, 0x31, @loopback, @loopback, 0x80, 0x1, 0x1, 0x2}}) 9m6.042399221s ago: executing program 2 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000000180)=@ethtool_flash={0x33, 0xfffffffb, './file0\x00'}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000045d637b8b486fd14da27419d632e0d3b398dd4c9942d173bc7336a769ab8b26f9c92f2df58125487db07a2a0a8cdbc11ddda1951", @ANYRES16=r4, @ANYBLOB="010600000000fedbdf25090000002c0004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000000000)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m5.981093836s ago: executing program 2 (id=108): socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file1/file0\x00', 0x182) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x4}}, 0x29) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r1, 0x1) (async) listen(r1, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) (async) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000200)={0xd13, 0x200, 0x4, 0xadeb, 0x7, "ea710000000000f9000000024200", 0x4000000, 0xfffffffb}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmsg$unix(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 8m50.736070701s ago: executing program 32 (id=108): socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file1/file0\x00', 0x182) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x4}}, 0x29) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r1, 0x1) (async) listen(r1, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) (async) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000200)={0xd13, 0x200, 0x4, 0xadeb, 0x7, "ea710000000000f9000000024200", 0x4000000, 0xfffffffb}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001280)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmsg$unix(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 8m45.878590823s ago: executing program 4 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001500000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", '&N7'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x61, 0x36, 0x64, 0x35, 0x65, 0x33], 0x2d, [0x66, 0x37, 0x37, 0x66], 0x2d, [0x35, 0x0, 0x61, 0x33], 0x2d, [0x33, 0x32, 0x32, 0x66], 0x2d, [0x38, 0x35, 0x32, 0x31, 0x63, 0x2, 0x32, 0x64]}}}]}) 8m45.304199955s ago: executing program 4 (id=230): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r1, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x1, 0x0, 0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8m42.287629563s ago: executing program 4 (id=240): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "9f29509b"}, @local]}}, 0x0}, 0x0) 8m41.76250235s ago: executing program 4 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1a1482, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f0000000380), 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)={0x10000000000000f9, 0x0, [{0x248, 0x0, 0xffffffffff}]}) r5 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x501200, 0xe6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x8090) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, 0x0) 8m41.518003831s ago: executing program 4 (id=245): mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0xf, 0x0, 0xa, 0x0, 0x0, 0x69, 0x4, 0x8, 0x0, 0x0, 0xc0, 0x7, 0x0, 0xfe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="780000000201010300000000000000000100000408001540000000010800170000000007080003"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x8000, 0x3, 0x6}) 8m41.356408576s ago: executing program 4 (id=246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40816) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x40, 0x25, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x826}]}, 0x10) fstat(r0, &(0x7f0000000100)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="24530012010006", 0x7) 8m41.299714451s ago: executing program 33 (id=246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40816) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x40, 0x25, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x826}]}, 0x10) fstat(r0, &(0x7f0000000100)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="24530012010006", 0x7) 6m35.819735279s ago: executing program 3 (id=919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0xfffff94e, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@phonet={0x23, 0x6, 0xf7, 0x3}, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)="d8fab71d0afa187f31bdf967bacc410e5e066c8ccf88eddaf8e3542c0b0a7158cbc1b7de9c2536112c0ab65e908fdf560b0a134ac3ea2b0a31af5d9290eceabed9326c682162da8ad4dcbfc97cfa5fab09db389773ca6ac14384b8f5c633ea2b2e11300424a56186ee061b08e20a7b4eb7e8d78c86508081aded7b77a33ff520419aeb65541132b90d12de34592ee6a5add87cacdd683b9425351e068ec24228e5e04f4b88349aefbc9813ac8811087d1eaf205c81061579f3e59c1114a3ec35", 0xc0}, {&(0x7f0000000000)="a7c58eec1e956735d32305f3bded881437a2f5aa1788b58b047f02c645076d1e05f9ad4fe8605383035ed4f6cabcd9bcd94623c755", 0x35}, {&(0x7f0000000500)="9f5466a20fe2b98f772c59b4ecbedac4955a43dcb9d3e324ebc1ea096ab02a9a34f315a0e8164747547232fc2e8812f020ac205e3200274df774ffe71acc712c7d675788020b9f508da2e512ffd7126887da4148577463e36e9b834a51808b73484b341152b0cbd4ad2e128c9542e6dd24276fa12870471ea8440139ca66dc03a3dc5c98fd8e913918746b3152fba76bf8e62d2da1b13e1c4da53d27124dc9281ada3f291893cdde975342a13763305e8bd3a44f754a59eda9a5539d9594023f865fb6e2bd70b73ac973357006eaab310b896dc29751fe8047e19a71871e627961f7a3c59bc468177d6bea7a86047150ed7656daefa01a8835a850dd1cceeae5fa6ef355dfde6ab9c7337127a6c144a5248bcb697a7ce6913d365b1736513945442232a21fb6814b19a92914accad03fae5cb31ff70baf75ce7f1441db488d4dd8c4b3dfd407dd838b6276f701b7b1d7d04cfbe7f2044769f9e7c63860975bf475ee770221512b81ed68b4037c0f7af22e148d4270581c57a3361bec85789713e92e99c76de92725bacd7b1366d51d3a9332bbb2a307a1dcfd039f7562015839fce4d1ec06d41ea63eaf80c7fbef0c93a4143aea32f3cc645162bd04e4bc1b2525bfbecf7d877b5e124f06d98b9cb00b2290db049aa54843c019f4b61df36623d44b7e8e03313c63d45814547f99fc97d390de4872734114f5e5a77e9fbc2277dfb0b97ebfcfef65116a42409ab5e1966e0b7670748effc63bcd49ea1b8b5d55b9c77800016eb28d57cb227aad9e860d684916ef8fa8cbb8ee0e54409d6256d4bfb123f9266529b46f7ccefda22ecb90acacbb7d9badc3b6caaf29cb4a7703512c37ee0bc9ab94bf95529bb2f73a5bf14fb8ca30d504761742d8711eb4a7aaaee643b57559b7a071cad5334a749768b7bf0a8dccc894361e99bab596e0d8019aa2ebbbbebe43582e7ee2169f4c756adf133e2d28606ab78c42c1f9d148876355ded8268c9afec7799363ef5246cb99404c9560e63fc4a524a21489d140689f53e77f29d8922bdf61b82b4b46b2c45f5f0902782040424e8909127f27a148c1167112b9f6dc4052d8683887dee2d01aae4b83ff2ec918bd990b6507d8d49cf467f624ee33e12bc8c83a703d4fd5c7bd69df27890f5200eef96ff13daa981017e8050b0fb1b4f7bf4823d888da440fb3444b158b129a40ee5f5cc05aeacc8c14c6fe9f019a5c06678bea3bd7cf8d8e1d27dcf8a06888b03dd1f5f069d203317fa013825aeae756508fc06bed1ee984e6590b9a63ac81082d6ff0df170e9202e4417c72e961d3a518c28010b1b64d92b0d2e79ed3adc305ac5116441b7636a86adfce8a404e798ceba5f5f6c576e1c27a91696b1b96e5b7556bb0af5074cbdede826ee65ccecf67ea60f21e27efa65da23386a331cddf3307dc6458a1ae470afd5b43daee7ff45ee98c3989da7b16aedb662babfceceaa8a5a43b253c6c9bfef53f6d09537db64576cfe8113f937485a717f8d12888d9296f88e22e275b433cea92b45db58d408e64c3528446bc4394a7ea78e3548125f50cb52ecb572897678793f404944ae18aa600c99f00f49fad2382d2751075295bcda2593425f25bebe4d7ee54f9a2d73a3e949d186a17708a3ee7ea2971e992b20f3e9e15ac8b803f58a50a2e938912aabd9cebbfdcba3d5e9390ed37f0850e975ce272aadcfb2e50e3dd09d5a99d5857c541a3b1f713b1919aba9899ba1653efa32d7d6615791d8c7160d51fe1744d85292041e3f9c40b33959d8cfbb225630685831aa8b508c8a8f8451f4162ef10386286be7bf7ee23b2ea119a71034fe9aceb2c4e335b22037904ba3f513897eab22238082b788337343e42d4ceef92415b6a19e372e37ffb13d88f9622a9bab4b88a27b42d74d91fa39bf4952d7df6cf8f186dd5d2abe80505ab19fd32da30c278ce74edb6aa39f8b116d216f3325d639f23b265d177d590941519a6c0a9f1a1f12407139784fbb91955c3ff78644ba2c534ae85dbc20228887243f3f9db25e152fb331727f0f19a3483a3bb95412dca00091a5d45a9a94652249230efd24c8b7622471e497a698a4b78bfd5aa3e314d9629ba320d84fb443032ae3cf283a26da47f64996a85fefd04e57cfa39cc627d7af51aff58f28cc7f0751210755c85ca7bc90694cc5e029a787bdfe3f2ee25f5bd8978cadaf22d968e92b89bdac07cdbd551e02313a93ce57d0b6d265ae71d4f401dd2e758a0446116b7ac28319cbffa2cbb5c380b6289dd9e465e32c8ef89eebb95ef8055dbbce41dffdfce84ad7254b91c51f7af4ec296e06bd6c5f91ec5d9671c099a29224538edf183db6970e9a3da6e0cc3a465ec5a38ac0eeacf49831b117a06353bf2c838a4ac0a21b405a5d906898732cb970697cf73eb27477b011aed0729fe6e4f875821c778a750e022b77101d3ba5d39495669d4f7074065fba858187c7c443cd6546e236614cf4d156c8c2ac7d39c25f58583181cd8addc16547ce21d7946f5063e55aaefaa8dc3de0d3b17e0d9dc122feb5a80624a00fb6b1c275e3cb170c78d527d5585b58d8f477dbaff2d2ac2eda3bf31482a5156f1136c7e03cf47388cc7c956dee18d07cf35a378605fb6e01dac78f7b443a8da56ffc67fb0d605ed132a31d5e365a094b800c15041546a7743ff6ece2e9950d1d3961e3fe56a8452d1513b9b9aab28fd910877fc9f243513ac5a797630c652cbfcb2440df4527ea72360ff33c74331948afd3ca5382e34aa15116bd39841379eabd534f1745e59ddb49c0b42e8701d02783d79e862f4dfa8a848386ff3de6bdaad44c1da2366a43233cade6c837bb8b13207edcd5f2c13003ff6efa93222de791aefdba03ab0a2959f4d7df8c70b15b3d3bd6850affa446937903ac2f96585ebbb8edf175574268385598110ecb0521c4d86e23f6f7d852bd951d9cb3d2b2ff3bedddea675313aaebd32d4f1df841cd4f85eb8ece39d3acc3789cbaed2d81a596a4cb098925fb8a86de49ced09c4b90560217b8f8644a264f0aea3adb4c7588fbaaebe4bc90c2e5ca5da8d0187c973104eaf6c7020087e2e8fb7cf4708c005101be04895cf867cd5570d71302358f8ef8bf6de006a2d5ee03000ff4691fa0c201d78b9d194b9841066f92f6ab267c5e410ff8e50436b0da79f4b7d7719ad6a3bc751a495f2fd1e02ede0362af2cf47dcc3511e30e7e70a091e8e028b7a6d4b01344d1867d4956705c8779b9bb453d7e41ef4f664276c7c3a9c361cf1e3ee5390b5edaa7079ae6894f090b1023aa0b6650e72ffe0ea10d260cddcc35607f4f1b818f6defabbebc1c2012ec0fc3152fa7c092b69086e48ce5fa342b5ec0db732f8eb4dda9a095ce330d276df759d7d66dd377787c7796c3ccad8583e1d5053c5b4717c49dacb37b46af1432bf8326954e8d73768bd78f3cf1c00640bd62bd8206524bb2e6f3f67410bf5580dad2895c8d546bf59a8f485679981cf052574cc334fef51768fd76f1b720b62d6e3ac328fc421dfc9fb25ff30c810d5c85d030339997b2f3f74bbc8bedff9dbe6182242abfc443f4e44b92710ca5c675766f0459a448f085e1383668f2e6a1ec1caceab01d5ff71f25196083f7c17334b33ddebf182b953e66bc3814a30d7a879056201f1cbcd2ed60d65595611dd29ffa4e0a67b64aad04d23468f42052bab4846d2bfa623bf05c33e27ceec01b9f1d8f21f10cb156ce4cca3b811de6eac213b7cf8236b05b6549d8a944ec61ac00d38d8db2369216b178edd3ba0efc1245a682bcea270133a53bbb95751628ebcca0e6824625d13c5b5dedeefb3a18c4ed456eb5a48ad18c3dca7110c7a337994c006e08643ef3322f657ec08ac2ed47e1ebc0eea2dd193716ae0fdd37ad30b20ae0f8bab05c14972e02b9208545cd5a39dd64f2777148848e79f5f7d39f64d96c922efd92853c6dd8cd51dca36fd68d8cd987abfe935253b6e08c841e147bf2f6a6553c4dbcc1f4eb942870a1b19a576469dfe9aa2d0028248a42ad6d029e97b552093b3cd3cb81d72c4c90a835c44f21353f27428833fb5c901340b519861942d36c3b41dc1db70d76c97d38ed3b479548c8c45f6f5ea0a6349f410344b7ba5c9131e6b4bb321f260c41738fde3b7ab710f7379918977936bf779ee0d00bc9ee8b07020bf5a8809194e77a4181464bd7dc740ba1fdf663e2fbd4c27be1245cf04c164a28c4198669e77b16ef0aa06ef7436a45dec2126aba9bdd1584477062dbc3b0c62b0e24210ba45ac3488e4c54e4ca742f4ffed9880db9ea385d7705c3aae73022847dc38437657dfc6be44eba5a3764b85a2fe99853635caa232d07f37ddf30c46f2382476b1fde0385c545222054d1285539feefe18b567863ae3297b3ea4a101d43b4b32c1bc60f294b023c5616d43d65ec980f86bb67ef11b4db8ab497944370e6c124713dc849b9a80037f55f7056fb5f3c04c632803a0120bebe8c48869783779ae3df1ce0c755a6423231fce751f5c17814fc96e29718f0fc0e0aa16f01af4f53348e18f3e0830132c68e62e832fc6e31a8dcd577545911acd55966fe75186354b4a0bd3755e052dbf670a81b9870e91f7ec04290c00340a6a13284c11c7c60e8c3e3a87f97148069c6096e80aafd3c31d95cc739dfe9717a1905db4cca45213b34d5fb98e562764bf31919ace4ad5609f15ea876359fa37d9acac84fd8e74d5208fdd233e77d1074e9df4ecde3a1886a98f57aed05a0c6874003291f817479c12cf2aaabdbce31086c6518ecb18165c8433d1213a99e8e246ece850476b2925a60dcd8981b4ee83268644c4392d6c34a88050dc1d66e25aaf6de5a9bce03cd4417a8eeb331eb9b8813186c2220c483afbf7e21ba4dd9f44df7843b381435c1535f3139278accdd301d3349c8a189d33aafc49169a90a191a7599faae2a0f0a154f1fa642b0419469322e223b5de467040ae94ffe3a9a981d2887b29ec053b2f8458b11c610ae3ecb5dc239cc6a2503ea2f836b375067204a484110608c90a5bcc36e44318b612fcd41e589d6feb83b852e20aace14c696d33c4f2f53d5a8c6ec73d8d9cf6530301274ee250e1eab09b80ca4dae7c83efd7340bd9014f8e1c5b9664d403e3593ed1b6c0a87486f804df1dee6dcd30952c404b353a54b613f44e9ffa8ab1e8f8ded487ea6333d5e969c2aadd43972cb3846dba037a500b2c6691ab597d30157aba347cb5bbf72f0f802bd35a2ff6726e02e233c0d627c4f748946cbdb4420d398dc20941e58689e00cdd0da0aa928393fa867f4b4d78d49985b07bbed9cdb13510a511fd51a4199893b1edb81afe053d0f042e57aa4c9bed57f4ae317da0753d0ecca4f156f148491cbc7f4dc6da8df119a4cc60f313b6bb988486838775bca61a9e6c8bb39435cfad24e9998e5988aad0e0516b8e3feef620cf035db5800ae77a28d53d45ac7d4bec835acb67999c2a5e6e144f9af418a8f83cd9ba514620c4898b38caf3e3b022513af062d871027b70e06213757419d80bb82d7ca8fb2458f9ec71dcd0089f8c7494648a82ed0ae330b880346e60c249bf8a528801810efdbbd30baff0588b24b2102002084e8a21e22f35af46b40e76ab93fafd04edb2557e89a9844fa23fda53ccc73edfeedcf61bd3aff1912cf2b205b2ebda2a2b467217200dc30f87a641ce2d30cb9bf7349490c013f6a70d85556dd52b7ca34d1dbef59136b41acd58e42753ec914d217e1481ed44e7a4d834a55e51af93e03f875ac41a7801fc7e2c54ef", 0x1000}, {&(0x7f0000000280)="9a22055d38c2f80b35963526700116e4feb95ea2f06302348e441e3467617e975d992ab3684cb0516732b1b87b70db0be7c8a37f17144b38eb619669e69b340f6ec74d93c92e104ad1fcadbb7e1d70d5a5f127147745febab1e55f9d905e9b382889488ec52db164d20d632bfa3bd1f12678410ee457066385504a72e53f549f377d04fdd4efdee5b03fe6a87f4874f506eca8c9f399f0de24ccac1356c88167cb3582df95cabfe3d905b53329f3c651efc7e7bbcba3bd122567165c75af902e7256dfcbe0d22487141bb30dd27987", 0xcf}, {&(0x7f0000000380)="71eec90d76ceeed61d0680402f5b7316bb1fa128520cdbdfc4a1789311a0d35b5b0bd78b2e2a6d2eb940826bf2592563d381e14465c67ad017b1046a015a9d4b58160349bf4ab04e2fc9d75eb931e204f76da61ebbad802a3175291593fb38d2d638800c3e0742af7cce74fabea2e675babd24e3743e4ca11c2fed6c1fbc842a6d673136b9c4df06cb5ae067b7ff2e2e9bf8f5c9b18dfa9fdc806c94bb50b83270c2b69b6bf7114f5850ae5507398bc2a3", 0xb1}, {&(0x7f0000001500)="a6a1579df843afbefaa5e557428e890dbad1c8616237e26fab4d67086718a956ad66523da5b8cc83452963f08d7ccc07a78fec78912ac78e7d493ffaab17734bd72c73e7b1d5e6c73891b080539a9feb8114df9f3f651df27c90fd86d2541dfebcbd82fc4dc8997a3e3448256b3aa94aada1ae1bb9186d40d2f08eaf5276de867cc05760e0bef36e461c856cd6eaa1ee07754d2012e6df34359d51d1e0e8d61640675836a49c9f03db5d7fff", 0xac}], 0x6, &(0x7f0000001680)=[{0x1010, 0x29, 0x7, "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"}, {0x68, 0x10c, 0xbf, "1c83d50c586c233b1e55887225dc511d3e4a14728017feb7e5e7d0c71e44870e6ef1473d72208a055c8039d72f88de35854d8b54e7f5d6b0ad0d65eb47298a4e5be223de3a788e8f9ea18b6aa61b34b48490001e49"}, {0xe8, 0x29, 0x800, "8b2ea520d832dcb2a05f37380caa4a62cd43b670d0620826603418cf0e8edc3c9efaf3668d40514fe20929213e03c87ad1adadcbaa8b0ebd77bfccd35a3abeacb3ad3931e1ead831cd1d29d0de7e35dca1645f46235f03503f856eee5d84ab63cf5c97db5a351bb3882a759b61dab318bbbc56b71f17f0ed359bf85c9c07d349bc984e9a6c767e757be9f5114c6c690ab81edd394292130ae8fccc86b88cd736f1118dd705d38bb858077b61ce077f52e8b0552c692cb9134171188d2c43519112f1599474982e53c237290acdc9cf856840e776"}, {0x50, 0x10e, 0x5, "41ae34daf596b1ed4242a6974043e397a34b1ce8da92d1bbbcccc7d71477564bd5d7a43b5856c7e212f7325c206f0cd22d11e8c7e5e2ee71cbe2293803"}, {0xc0, 0x88, 0x9, "b5d5da937dca887d21afa1ffb0b185cac990e06b9b1c4028648fb97bd6567ae3f417277b943e54fbb689a5bebb9118a54b19105f0464c9652feef3c984914750c7ef9da31a81244dab387c41917588d93258cb5e32d87e0bd2967998b7bd2ee19572f18f80a979c6bfe19db3545045b8b3ffa685209add08e0208ccf612181ee5cc4cc3dd196ec0454f321e7b98484217a42488e7a92b232e81dcf91417e7967d0f52237714d049d55e213015d073e2d"}, {0xa8, 0x11, 0xfff, "c342f79ffe3bb432575e4333bf6fd2aacada6b02c6bebef25939b42720284146b60cda11543afdf0c873891feb16bb6f547ec7f9c8fa7b64f71a411f582639056df4cd4b1b00688c6ae4f37fd81aca51456063e33f7fc5f313cb7d91c5deeb2a145a68326bd6413875dde820ba9a20106e90d64b2644ee293d508b15d464db694a81fdb970963d7174b092bc3780f562a959ed50d2"}], 0x1318}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 6m34.890394852s ago: executing program 3 (id=921): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0xfffffffe, 0x9}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)=ANY=[@ANYBLOB="7403616e733d66642c720867c76664", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001180)=@req={0x4, 0x4db, 0x5, 0xbf3}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a00150000000000000000ff8d41de78061a23755a1a0000"], 0x1c}], 0x1}, 0x4000080) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a00150000000000000000ff8d41de78061a23755a1a0000"], 0x1c}], 0x1}, 0x4000080) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x3f}, &(0x7f0000002c40)=0x0) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) futex_waitv(&(0x7f0000000c80)=[{0x1, &(0x7f0000000200)=0x1, 0x82}, {0xffff, &(0x7f0000000240)=0x8, 0x82}, {0xffff, &(0x7f0000000280)=0x1000, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x3ff, 0x82}, {0x3, &(0x7f0000000380)=0x54a2, 0x2}, {0xb020, &(0x7f00000003c0)=0x75a8, 0x82}, {0x9e, &(0x7f0000000400)=0xfffffffffffffff4, 0x2}, {0x5, &(0x7f0000000440)=0x10001, 0x2}, {0x4bd, &(0x7f0000000480)=0x4, 0x82}, {0xffff, &(0x7f00000004c0)=0x1, 0x2}, {0x8, &(0x7f0000000500)=0x14bb5644, 0x82}, {0x6, &(0x7f0000000540)=0xffffffff0000, 0x8e356442ef328d9e}, {0x5, &(0x7f0000000580)=0x6, 0x82}, {0x80000000, &(0x7f00000005c0)=0x8, 0x2}, {0xfffffffffffffff9, &(0x7f0000000600)=0xd609, 0x2}, {0xe3d1, &(0x7f0000000640)=0x5, 0x82}, {0x5, &(0x7f0000000680)=0x10001, 0x82}, {0x3cab60d3, &(0x7f00000006c0)=0x4, 0x2}, {0xb506, &(0x7f0000000700)=0xf07b, 0x82}, {0x1, &(0x7f0000000740)=0xfffffffffffeffff, 0x2}, {0x2, &(0x7f0000000780)=0x5, 0x82}, {0x4, &(0x7f00000007c0)=0x4, 0x2}, {0x110a, &(0x7f0000000800), 0x2}, {0x8, &(0x7f0000000840)=0x9, 0x82}, {0x100000001, &(0x7f0000000880)=0x2, 0x2}, {0x2, &(0x7f00000008c0)=0x2, 0x82}, {0x8001, &(0x7f0000000900)=0xc, 0x2}, {0xb, &(0x7f0000000940)=0x1, 0x82}, {0xf0a, &(0x7f0000000980)=0x1, 0x2}, {0xb78, &(0x7f00000009c0)=0x80000000, 0x82}, {0x7, &(0x7f0000000a00)=0x6, 0x2}, {0x5, &(0x7f0000000a40)=0x1, 0x4}, {0xea44, &(0x7f0000000a80)=0x6, 0x82}, {0x100000001, &(0x7f0000000ac0)=0x100000001, 0x82}, {0xc9, &(0x7f0000000b00)=0x3, 0x2}, {0xb, &(0x7f0000000b40), 0x82}, {0x4, &(0x7f0000000b80)=0xbb, 0x82}, {0x8, &(0x7f0000000bc0)=0x5074ec03, 0x2}, {0x11, &(0x7f0000000c00)=0x8, 0x82}, {0x2, &(0x7f0000000c40)=0x7fffffff, 0x2}], 0x28, 0x0, &(0x7f0000001080)={r6, r7+60000000}, 0x0) (async) futex_waitv(&(0x7f0000000c80)=[{0x1, &(0x7f0000000200)=0x1, 0x82}, {0xffff, &(0x7f0000000240)=0x8, 0x82}, {0xffff, &(0x7f0000000280)=0x1000, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x3ff, 0x82}, {0x3, &(0x7f0000000380)=0x54a2, 0x2}, {0xb020, &(0x7f00000003c0)=0x75a8, 0x82}, {0x9e, &(0x7f0000000400)=0xfffffffffffffff4, 0x2}, {0x5, &(0x7f0000000440)=0x10001, 0x2}, {0x4bd, &(0x7f0000000480)=0x4, 0x82}, {0xffff, &(0x7f00000004c0)=0x1, 0x2}, {0x8, &(0x7f0000000500)=0x14bb5644, 0x82}, {0x6, &(0x7f0000000540)=0xffffffff0000, 0x8e356442ef328d9e}, {0x5, &(0x7f0000000580)=0x6, 0x82}, {0x80000000, &(0x7f00000005c0)=0x8, 0x2}, {0xfffffffffffffff9, &(0x7f0000000600)=0xd609, 0x2}, {0xe3d1, &(0x7f0000000640)=0x5, 0x82}, {0x5, &(0x7f0000000680)=0x10001, 0x82}, {0x3cab60d3, &(0x7f00000006c0)=0x4, 0x2}, {0xb506, &(0x7f0000000700)=0xf07b, 0x82}, {0x1, &(0x7f0000000740)=0xfffffffffffeffff, 0x2}, {0x2, &(0x7f0000000780)=0x5, 0x82}, {0x4, &(0x7f00000007c0)=0x4, 0x2}, {0x110a, &(0x7f0000000800), 0x2}, {0x8, &(0x7f0000000840)=0x9, 0x82}, {0x100000001, &(0x7f0000000880)=0x2, 0x2}, {0x2, &(0x7f00000008c0)=0x2, 0x82}, {0x8001, &(0x7f0000000900)=0xc, 0x2}, {0xb, &(0x7f0000000940)=0x1, 0x82}, {0xf0a, &(0x7f0000000980)=0x1, 0x2}, {0xb78, &(0x7f00000009c0)=0x80000000, 0x82}, {0x7, &(0x7f0000000a00)=0x6, 0x2}, {0x5, &(0x7f0000000a40)=0x1, 0x4}, {0xea44, &(0x7f0000000a80)=0x6, 0x82}, {0x100000001, &(0x7f0000000ac0)=0x100000001, 0x82}, {0xc9, &(0x7f0000000b00)=0x3, 0x2}, {0xb, &(0x7f0000000b40), 0x82}, {0x4, &(0x7f0000000b80)=0xbb, 0x82}, {0x8, &(0x7f0000000bc0)=0x5074ec03, 0x2}, {0x11, &(0x7f0000000c00)=0x8, 0x82}, {0x2, &(0x7f0000000c40)=0x7fffffff, 0x2}], 0x28, 0x0, &(0x7f0000001080)={r6, r7+60000000}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1006}, 0x4) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001100010000000000ffdbdf25100000000400000008001e00", @ANYRES32, @ANYBLOB="c50a9e1c552f4fb2e2ae693d40dd429f55d3f7ec3f9dd485f8faa9ac8ee324b92aea76e0a14d41cb8bd8a76a3b72883d741fd55332563ecf51edcdc018c222f0fc9636f4cd97ce0b32dc5ec08ff590de05533e81134491ebeac1830900983c96170a"], 0x20}], 0x1}, 0x400c0) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x3, 0x56, "4f80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4006fbe4c5f1ebde"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r10, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="4006fbe4c5f1ebde"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000040)={0x0, 0x10, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000040)={0x0, 0x10, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x40, 0xfe00, 0x0, 0x9, 0xff00, 0x3, 0xaad, 0x0, 0x4, 0xcc, 0x800, 0x7fff}}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x2}, 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x4, 0x81, 0x3, 0x3}]}, 0x10) 6m32.481681786s ago: executing program 3 (id=937): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x20, 0x8000, 0x4, 0x10000300}}) socketpair(0xf, 0xa, 0xd1c2, &(0x7f0000000300)) 6m32.344219609s ago: executing program 3 (id=939): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000002000)=""/4096) unshare(0x22020400) r4 = syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack\x00') pread64(r4, 0x0, 0x0, 0x7ffffffffffff7) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000000000000800120002000200bb6b6e000000000006003200000000000000000000000000fe88db09cc9900000000000000000001fc01000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000400030006000000040000000000000009000000000000000400000000000000"], 0xc0}}, 0x0) preadv(r2, 0x0, 0x0, 0xf44, 0x2) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x341000, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000000)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x11) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) setsockopt(r8, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a00002b4000", 0x10) lstat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), 0x30c414, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@fscache}, {@version_9p2000}, {@cache_fscache}, {@version_L}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_loose}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/input/event#\x00'}}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) 6m32.164241385s ago: executing program 3 (id=941): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x891f, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) fcntl$setstatus(r0, 0x4, 0x400) fcntl$setstatus(r0, 0x4, 0x4000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x7f, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0xb, 0x30, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a7"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x6, 0x9a}, {0x6, 0x24, 0x1a, 0xfd9, 0x19}, [@acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x2b68, 0x5, 0x7, 0x6, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x5, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x8, 0x48}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x40, 0x71, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x5, 0x0, 0x1, 0x10, 0xa}, 0x48, &(0x7f0000000580)={0x5, 0xf, 0x48, 0x6, [@generic={0x1d, 0x10, 0x3, "ecc904930ec35e0b309657af2495e1aac7054f387ab1acba8c64"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0xc0, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x0, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4c}]}, 0x6, [{0x9, &(0x7f0000000600)=@string={0x9, 0x3, "97b8e861c83924"}}, {0x21, &(0x7f0000000640)=@string={0x21, 0x3, "9d706308f9322e72382c237820b56c295eabd2b13fa9bef4a3b2c0eb5c6c47"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x457}}, {0xd2, &(0x7f00000006c0)=@string={0xd2, 0x3, "4a9a13d5c26d0dd8798c303481af60d3c2a48acea423318c6bbbb388e5e936589fa6bfd926158504ab3b01e4c12ef7c95b8235c1ff3c4fd91753f395584351cdd7b39d75aef0d4b429cc21c3e905b5e6aa33c7cb9336892e60eeede4ccd9b33dfb34de65aad81e79d98743b1f2431ae0253e426c93473ede00bb5b52386d46d1716488a7f810cbe5e709f67018e8c59cf309ef7d296cebc32887d1d0e6e54b3e5f2d256f1b1a053be18425163cf0ed267b630a7743e8c488df4e57f9bb316b4af93e469de21385746859f05398e1650e"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x6c, &(0x7f0000000800)=@string={0x6c, 0x3, "10e25b5479f2a339ce6f028e4407bcb175212287962d3cac2efdc0544cb565888667ac5b81be3caf1a941a0c44bb857bca498a617597e5982ffaa88a601bd6f67927f019772b329e28e7ee95e6ff23782474d6c75af0a192fa05d6b950702d344404be19e69149196202"}}]}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000200)={{&(0x7f000021b000/0x3000)=nil, 0x3000}, 0x2000000}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x18}, 0x1c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220a00000035e046670a1b948ae1ac"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0x23, 0x2c, {0x2c, 0x6, "7d441f066d7ec87a46b10b2a894c2ec0fe294913ebcd005dc00979460529797fc1f338e458b41ab7f29c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x20, 0x11, 0xb6, "6864b1f8f19d0eef9320b336fa6029b992cd49260e0fe511b92dcfae559bb026165e2ea94e61dec59a5c6df1234fb8fb55774fef3a61c8289589e2756c5a9178b1bd163130564ba3a251336b8223a67bedb563ba018d5f128b53ad135b13487c90d9d907dade6c95e30519f6fc1e9f40bf968145849025451e74ddf6bc8b3382003879726237a77b9d211f054f27fc949bb31904c8821d1fc7b86fa914748bfa9a535b7e18d5c9bb0815bc0c378326f052867a71014c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x7b, {0x79, "b184b4d5fc947eb14769c252746abdf0508a4ded09e519e3e945d1251bf9e0869d36feb4336d7bc2bff26098f461fcafb410ff9c2732fcf715601200388cac573557bf0acb71b21c8d608b5dec547f5e5623b0f3643e16fa29e7eb253913008bf9844f5284a335b18cc12811b672321f1e26d8c2770d889855"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0xe}}) 6m30.323835968s ago: executing program 3 (id=950): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0xffff) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340), 0x2, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000679a105b800d9c089ddcd3fc00", @ANYRES16=r3, @ANYBLOB="0500000000400000000022000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004805}, 0x280888d4) mount$9p_fd(0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@posixacl}, {@access_client}, {@ignoreqv}, {@version_9p2000}, {@access_user}], [{@uid_lt={'uid<', 0xee01}}]}}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}], [], 0x6b}}) 6m14.061796414s ago: executing program 34 (id=950): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0xffff) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340), 0x2, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000679a105b800d9c089ddcd3fc00", @ANYRES16=r3, @ANYBLOB="0500000000400000000022000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004805}, 0x280888d4) mount$9p_fd(0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@posixacl}, {@access_client}, {@ignoreqv}, {@version_9p2000}, {@access_user}], [{@uid_lt={'uid<', 0xee01}}]}}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}], [], 0x6b}}) 4m34.128382034s ago: executing program 1 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010301010000000000000000000000000c000200fffffffe"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a43fd80}]}]}, 0x20}}, 0x4000004) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x2e4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x415c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff00}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcc4a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x322}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd4c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3513}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5abc8bf08c32569a16ad91c146b3b1518097e187ee5e2c6e9e3e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd9}, @TIPC_NLA_NODE_ID={0x49, 0x3, "248420ce73eccbb7c7c81fd8cd185485a90c4c6e86c1040724660a949d2ef87da4fcec6582758d4f65a3027a259cf5aee6e1c95341e5612f4e698f35d69305b16391012d39"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x40500c0}, 0x80) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x208000) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) 4m34.019999543s ago: executing program 1 (id=1512): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'pim6reg0\x00', {}, 0xdd80}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4100, 0x1004}, {&(0x7f0000001640)=""/88, 0x58}], 0x5}, 0x9a}], 0x4, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021d00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 4m33.977284407s ago: executing program 1 (id=1514): socket$packet(0x11, 0x2, 0x300) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff100000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0x21, 0x49, {0x49, 0x21, "4a7ed0398fc8b5f58e3c1163572bf9bde9b9459f91ea712917f607291ce61cd235359624e36223bd1efb78254b00dbac57e476ca21bee799f8d70f40742016de9ffa6c974a9d4f"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000096e8d1774a000000000000"], &(0x7f0000000100)={0x0, 0xf, 0x87, {0x5, 0xf, 0x87, 0x2, [@generic={0x78, 0x10, 0xb, "37acd6a2f96bf0c190193ae451e2b04471802c8956ca83dcd4d49486c1c9939dd0e969b54c99944a9cc8147e4590f6cd91ffd4de3724d137ea5948ece3ce76033e5f6e193483ebe58a4b25699c431483486354d1eed06bcdbd67f4252cbdef880a25040c7be1fbfe35977f53709965ac78db5f09d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x2, 0x22f}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0xd, 0x9, "040ec6f8", "4fc1b573"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x80, 0x10, 0x6, 0x5f, 0x2, 0x7}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x3, 0xc3, "2903272e120c1992c079b86fe669802c5978fc5c08390c3c791f1a1fbb195025b26079919d183d8a465927eb921eca11468e5187ea1bb1cef923af32ff4ede785e864fe672782c016e7a1dfa8762fd1e2eb4cc14f5f83724d54692b45c4fe7ccd80b1828d2aeba8b583a29e30493bf3688fb913891f456ff6f95423abbb8547fd23e58da313c27d5d6a8a3d1f12ddf7e1194b74e5998df6fdb5f14b8fa1380b4e56bac69300c6a40fc88563c005aaa4fb79b9f3d03aca9175c387e200103a5b3dc9daa"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf0}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x110, 0x1, [0xf00f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, 'a{'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x617b}, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "61a1"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xa}}) 4m30.714402217s ago: executing program 1 (id=1527): r0 = socket(0x10, 0x3, 0xfffffffd) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006ac0)={0x2020}, 0x2020) futimesat(r5, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)={{0x77359400}, {0x77359400}}) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x1e048d, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') mount$bind(&(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a4e30, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x5) 4m30.405657055s ago: executing program 1 (id=1529): r0 = socket$key(0xf, 0x3, 0x2) getcwd(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x20, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0xfffffffb}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x5, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x10, 0x8, 0x3c0, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268c"}]}, 0x100}, 0x1, 0x7}, 0x14) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x20, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0xfffffffb}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x5, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x10, 0x8, 0x3c0, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268c"}]}, 0x100}, 0x1, 0x7}, 0x14) 4m29.954887585s ago: executing program 1 (id=1532): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003094000000940dc9fba35ce24daa1da4899ddcea71683f8069a6743bdbbb9f38c2567a735a6b2d6b102c58026288bb996a834550dadc3fbfc0d318c79ff2fe5ac3c391755567f66a978f553e5090bde6154c86bfe3fb851c21e94590ddedc21247111cecb9721d1e254f317b7ea784914e00f79cdd36d399cabf99769258860beecc651f8e82f3cdbad97bde65d9b00d57239b5848b9880000008bc429436299a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m29.837113096s ago: executing program 35 (id=1532): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003094000000940dc9fba35ce24daa1da4899ddcea71683f8069a6743bdbbb9f38c2567a735a6b2d6b102c58026288bb996a834550dadc3fbfc0d318c79ff2fe5ac3c391755567f66a978f553e5090bde6154c86bfe3fb851c21e94590ddedc21247111cecb9721d1e254f317b7ea784914e00f79cdd36d399cabf99769258860beecc651f8e82f3cdbad97bde65d9b00d57239b5848b9880000008bc429436299a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m28.147900671s ago: executing program 0 (id=2128): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setregs(0xd, 0x0, 0x4, &(0x7f00000002c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab602000000ee8100e2838c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x1}, 0x5c) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000007c0)="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", 0x17c}, {&(0x7f00000005c0)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xeb}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0x80}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec", 0x43}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d87045", 0x98}, {&(0x7f00000002c0)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae19833da1ace561825cbfeea56ad000c37ab71cda386724e04604ba52fc1e53818577ae43f65ec3bfda42c277b2a52146c0f908fe72fa0ee5b6919443d628c3a8ca6d4e459a310eaf14b17eb8629e374e3c829b87e2708000000e500"/137, 0x89}, {&(0x7f0000000b00)="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", 0x176}], 0x7, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket(0x2, 0x2, 0x0) r7 = epoll_create1(0x80000) io_setup(0x7f, &(0x7f0000001440)=0x0) r9 = syz_io_uring_setup(0x51c5, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0xce}, &(0x7f0000000180), &(0x7f0000000100)) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r10, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_submit(r8, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r9, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0xe000200c}) splice(r0, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) fchown(r11, 0x0, 0x0) 2m27.201954005s ago: executing program 0 (id=2130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x1000009, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x50) 2m27.160600929s ago: executing program 0 (id=2131): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x7fff, {0x2, 0x9, 0x9d6, 0x2, 0xe}}) 2m27.084317506s ago: executing program 0 (id=2132): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40816) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="00010002020000002cbd700000000000"], 0x10}, 0x19}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x1418) (async) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r8) (async) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, &(0x7f0000000100)=0xfffffffffffffdea) 2m27.081299946s ago: executing program 0 (id=2133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x400142, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), 0x0, 0x0, 0x1) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7b9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}, 0x0, 0x1}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x40) vmsplice(r2, 0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 2m27.03914224s ago: executing program 0 (id=2135): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x80000000, 0x149a02) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x43) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) (async) setreuid(0xffffffffffffffff, 0xee01) (async) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) 2m10.801641624s ago: executing program 36 (id=2135): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x80000000, 0x149a02) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x43) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) (async) setreuid(0xffffffffffffffff, 0xee01) (async) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) 2m9.863220628s ago: executing program 8 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x10000, 0x3000, {0x3}}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a72e30ffd9e065d0000000000000000000000000005600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d186000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff0000000000001a490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}}) 1m53.183280661s ago: executing program 37 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x10000, 0x3000, {0x3}}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a72e30ffd9e065d0000000000000000000000000005600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d186000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff0000000000001a490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}}) 16.822982023s ago: executing program 6 (id=2791): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x806, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x2000840) 16.668504127s ago: executing program 6 (id=2794): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x24004004) 16.545879398s ago: executing program 6 (id=2797): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)="23923aa57dde02e1707d7fcaa386ad3876ba908b1085d334", 0x18}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 16.324802118s ago: executing program 6 (id=2800): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c040000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) sendto(r1, &(0x7f0000000100)="12000000442a076d2c7c515c0000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f0000000a00)=""/4094, 0xffe}, {&(0x7f0000000800)=""/153, 0x99}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000580)=""/274, 0x112}], 0x8}, 0xc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xd6}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 15.581665804s ago: executing program 6 (id=2804): set_tid_address(&(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x21, 0xbc, 0x3) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7b2"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42a}}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) 12.303710695s ago: executing program 6 (id=2831): sync() sync() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x31, 0x1, 0x1, 0x7ae5, 0x3, 0x0, [{0x5b8, 0x8, 0x5bf, '\x00', 0x258e}, {0x3, 0x9, 0x0, '\x00', 0x1}, {0x7, 0x4, 0x1, '\x00', 0x120b}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66ba2100edc4a1e55c00400f01cb48b800000000000000000f23c00f21f83502000e000f23f8410fc75d9bc462adbeaf0050000066bad104b000ee440f20c0350a000000440f22c066b8b5008ec8d9ec", 0x50}], 0x1, 0x60, &(0x7f0000000100)=[@flags={0x3, 0x8}, @cr4={0x1, 0x94}], 0x10000000000002dd) sync() sync() sync() sync() sync() sync() prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008a}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r6, r6, 0x0, 0xe3aa6ea) sync() sync() 6.807930454s ago: executing program 9 (id=2864): write(0xffffffffffffffff, 0x0, 0x0) getpid() io_setup(0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10) io_destroy(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000016c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.63319818s ago: executing program 9 (id=2865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="440f20c0350d000000440f22c0b9800000c00f3235000400000f30c7442400b1950000c744240200400000c7442406000000000f01142448b844000000000000000f23c80f21f8350800b0000f23f8440f20c0350b000000440f22c0b8010000000f01c1430f017e09640f97f4c744240002010000c7442402dc940000ff1c2466baf80cb82ccebf8aef66bafc0c66b8050066ef", 0x94}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000a98000/0x400000)=nil) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0xc00, 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"]) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, 0x0}) 6.308361878s ago: executing program 9 (id=2866): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f00000004c0)={0x40, 0x11, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x0, 0x14, 0x2, "3eda"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.089167606s ago: executing program 7 (id=2874): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x22940) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r0, 'id0\x00'}) (async) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x9c95dcb7abd0d607, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x8) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) fcntl$getownex(r4, 0x10, &(0x7f0000000300)) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000003c0)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x7b228b72, 0x22, &(0x7f0000000340)="d6e897c8ac72e12cc4d0", 0xa, 0x3, 0x4, 0x0, 0xffff, 0xab, &(0x7f0000000380)="b928d41b14db5bc73f3dcf9fd6eeefb3566dfb7b43df88f6bf0fae8f1919"}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) (rerun: 64) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008840}, 0x80) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) (async) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000780)) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x14) ioctl$KDSETLED(r3, 0x4b32, 0x3) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048845}, 0x800) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x50a4940}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) r11 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64) r12 = geteuid() (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x118020, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname={'aname', 0x3d, '.&\\+'}}, {@privport}, {@access_any}, {@msize={'msize', 0x3d, 0x7}}, {@aname={'aname', 0x3d, '\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@version_L}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq}, {@subj_user}, {@fowner_lt={'fowner<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r12}}, {@subj_type={'subj_type', 0x3d, '('}}, {@appraise}]}}) (async) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r9, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c001}, 0x8000) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x7, 0xd, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x40, 0x9, 0xaa}}) sendmsg$ETHTOOL_MSG_EEE_GET(r11, &(0x7f0000001480)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x174, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb0bb9c6aa0ff1b51}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000004}, 0x8c0) 3.992221515s ago: executing program 7 (id=2875): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0xbc) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x4, r0, 0x0, 0x0, 0x3000}]) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() r3 = syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) setpgid(r3, r3) waitid(0x2, r3, 0x0, 0x4, 0x0) syz_clone3(&(0x7f0000001400)={0x200800100, &(0x7f00000004c0), &(0x7f0000000700), &(0x7f0000000740), {0x27}, &(0x7f0000001880)=""/4096, 0x1000, &(0x7f00000011c0)=""/201, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, r3, 0x0, r2, r3], 0x8, {r0}}, 0x58) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3000, 0x2}) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x21, 0x0, &(0x7f0000000000)) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000780)={0x40, 0x1, 0x5, "b4cfe74c21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000980)={0x2c, &(0x7f0000000600)={0x40, 0xa, 0x2, {0x2, 0x10}}, &(0x7f0000000640)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "0f6058feb1fc0926696d1477fac19879b32419f4dea57b6572ab8385a9b610f43a2163da564731e3e1d684c2d3e403c10a5c12521658dc6a3bc90200dd920d9147ae6fe83510fa03abee1af4e66afdb3eb6f82c71302196a54036e17e679fe0f059ebd20bb94916d37acd7a41f2db3e0ac0524ac4d99d863104351685125d3229f82016c7712e8559fd3fe047c731e11a6af041fabf72b22d0b21a3ca94b"}}, &(0x7f00000007c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x6, [@generic={0x7b, 0x10, 0x0, "c3ff1462623144daf4e4797c3105fbc6a4df76fe6a00046aaeacb8e6fdb1c98010912f4f9a87ac4c0c5a349dc93b6badc61b98657df407e99f5d06dffe1890ea866a474acabac93186564445deb33e2799a128d9c24e59bf989ad9d64bff216f11b43af64df1280e6686b944cfe9ff47f1425e21859b5e54"}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "efd307bbade1a4c4ae6eb281880eec7e"}, @ssp_cap={0x20, 0x10, 0xa, 0xbe, 0x5, 0xa, 0xf00, 0x82df, [0xc0, 0x0, 0xffc00f, 0x400ea9edb303cc3e, 0xffff00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x29, 0x40, 0xa, 0xb, 0xf}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x4c, 0xff, "03b3aa4c", "83effab7"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x60, 0x7, 0x0, 0x23, 0x7, 0xff}}}, &(0x7f0000001100)={0x84, &(0x7f0000000b40)={0x0, 0x17, 0xcb, "c5c82c28d57f2cfda125c11c15b6261637ddf8e08a28ea1f0dd23e8daea89e3736811b0391af53da1afa66ee7ffbd38ef36d90b182946a1cc07b41d5ed6f8040c20e33a1b339c09dc5642e1a5dca3003ba829a4d0046ece16bdebbf3c43f2178b969589b17b5ab859724f5f7074468081d384d57186c6f9f91834d2dcc74afd02f0ecf71c72bd5546c0588a3c8f59774dc5da27d89fa6e2a1dd6f208d95cec0b5860f393e477958279ccff174adfb3c32477cc39dba7c48c8c9cc1c9ad219d1aba5e867256c4bb7b02d9c5"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x61}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x22d}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "b5bb"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "fef9"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x62}}) syz_usb_control_io(r5, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0x5f, {0x5f, 0x10, "10ca604bf62617e0442032190afd081a0e4538eb83dc883e86aefc4bea71377943769c5b5d82e63a3f8867793de776352a3f4f2de91c74fe270c84ebbf411f0d5d652a73188c38037c1a0758b520352c38e4c9d227ac4a2cc6fded5f1f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "aeeb7659"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x40, 0xf, 0xcf, "a9fa9301dcbd309a7261a66b4e5e059ced6aa24a945c3a562a0aa8706426241088c4d94a6cfa20628fb8eade3c6dc2c030176ac4105e083235de5e10540bc09926e5f1f9353ff493ad3d08865cbc70d584274f64b77ec2e5661eecb3f6b04c3d3ace59314777392d0cb60af1de899707103f3c860d61a0cc0df5400628ed7764746c99e5d14214c401fcde0146c07b132b432d6e71c2578409738982764abe77c90bef8ac52548475a4a921ea975383d5d27b5ebb7b751e9293b09f0fde9684e6b49e6f75490b0831dd6cc4ac22c79"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x401}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "bf32c228db5dbe2a1b84c5a7bd17214436afb0fdb2b68efce2464ddeb0ef48cac8997173ea6afff183669aaa052bbd"}}) syz_usb_control_io(r5, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x0, 0x14, 0x5, "3eda880358"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.697125491s ago: executing program 9 (id=2876): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d0000000000000005090290000301038000090400000001"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) syz_usb_connect(0x0, 0x3f8, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x29, 0x1c, 0x78, 0x8, 0x1bc7, 0x10a9, 0x79e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e6, 0x1, 0x6, 0x4, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x6, 0x94, 0x20, 0x85, 0x81, [], [{{0x9, 0x5, 0xa, 0xc, 0x618, 0x8, 0x62, 0x8, [@generic={0xe3, 0x11, "23aaf2e63f077869c9b2a12c78bb8af74e866be9305b5bd55d02c28507486d84d626fb7415b9583e27bcc8debde5ae395d334e14914c7d90f166f701fcefb2ce986a6f4753fb5eebe50e90207f61589613150e0d7fef4d20e818a28d43674c2c917d521dfb5608eb5aa1685b4421a5ea13a711b9791ba7a52b6124695c34bfd46d12727ee194fb747a8ece7ef232f629df71c2a050d8247c1a912b8e4364ea695adbd05a5db7e904b1d5fcce00eb5ce3f5b681563f635482c20082b662eebeb4a4aeccd2b0b14a4ff3f1c25febe6d989d11eeb858e0fc0dda321939fb62bfc8203"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x9, 0x3, 0x2, [@generic={0x7a, 0x31, "4550725a7706065f80086afb9a7423c25a0c39b010b48cfb44b15a01ba4711dc7d475b29ce85b80dfefac6b985d9a3cb6dfccd86677487ca2b5c7edfc75df10a8501c897e3cd28449e43e49139416b64c7bb79a6bee8da4a66b16702909eba2e0e5d9737f5ecb0ac676f6ab2a1f1bc4f874e922a43cacf47"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x240, 0xa, 0x6, 0xac, [@generic={0x8e, 0x24, "91dff4b7a9a11ec26c9da7abc8e81583dd1ff2d4f899fdc8e5dc69aef4cdc2dc772ff2b9aba17111867623316ee637c75d81ca199f532da12ced75294889a4073d520f52a5e9568eac39e136f7b001857a409447c4f3b5e80c5f4343f9ae70034dc07202363c6f517cd760d37a07fdc2911d026e39a1611666b4a00aa63408b00fc3b65fd61e2ac51a24b8b6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x40, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7, 0xb8a2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xb, 0x6, 0x7, [@generic={0xcc, 0x9, "a4cc55751c2d9652296dde8f2df38ad3fbbef836d833d5eee8da6bff1f14866d6fea360e97550ba98281fa10ee4b53e9efc5a61ef101dd7f874d181a3fe8db8ced23270f746807d9545c15e061467f98e9a21303e2ac42eb50480bd14957809db0167a20ad2121ce7d9e960ad4bfe8880a3c94ae9905374f3c6247b04f99ddc2e099825d02f2c54e43296425fb24f52ba432842c524cb583df625a207aeae885a02699b5f5e65330565616021bacc88211f33d73ba1bec867c36669088c142a0ddae2f8206957d0a79f3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x6, 0x6, [@generic={0xe0, 0x6, "e0263a0bbba16d72688778c460ed6df8273db1da4284b491237060f035b2f4a4013e0ffc8d0da695ed59ea55daf06c5270c86f5eef9ab6379ff4c10d1f5599416d90bdcfb57ccc826d048306b810f1ebadb2df08a2713e58d162bbd025e31951ea3f943e945117c2c4b4609a74bcf3d63ad1cad2f63e241c5bf3c205fbd7ee0f8944a1b85d54cf5fae443e0115852640b4cc405d9033d224a9317724292335fc457834754771d56645397922b807eecad636819a195c1219bbf3afce7f9c7fb588c1a7d85daee9af3dbd32386283fc3f6c91c7e5aab909a43ef8355b80cd"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x101, 0x31, 0x1, 0xbb, 0x10}, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "d83b31dce67909c6dcd488c88d645845"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x438}}, {0xd2, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20306116c585b0c076db113cf5cfd265bbc3aa27928af7c5b8996340634676fe2f4ccbc857579577379e97fa9c3e429f7c0660e46433acd42684b059103f5c11de360a68cdef14ab2c3e19b83042e5c9dceb4365af58fc9b0eed543ee2e9ecb0f27488adef60450e883967f372e001f294d56daf115aa0ff6ac763c4f3c2e54c1636a98e4dbad415376141cce2c1cb61a84bb7015fb68359a1ec8a851ffdf4244887328095d5fdf01b6001906142c7a4fefe64db715f179b55656011e66345e934ca3981971d52b40916c64000000000000"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}, {0xb9, &(0x7f0000000640)=@string={0xb9, 0x3, "3c8c1de9d477c3a29373bb12bfaaf9b767a76ec371b8af1030f427b7581cdf9a4f9e1628a53b94db4c57de527e5dd046ebb0b3b9d92af270aa23d01ea48ff231cbdbae45a126bf5a4cce4cff39b766152d6f732a83623f240ced3eb860e6e1a6e774be6c7c74f731b6a42a03f55cef06cf13f24e2b89f694e6c94625a230340b4c738d4b3885ecd64fb69ce9068817b17eec6d808cf4caf7e27a0a08f875822ce90d08c29a8baeab53d17a34dac5c7268ed06ce8127a2c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) timer_create(0x7, &(0x7f0000002c00)={0x0, 0x25}, &(0x7f0000002c40)=0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000004c0)=0x8123) ioctl$USBDEVFS_RESET(r3, 0x5514) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000c00)=ANY=[@ANYBLOB="400203000000030034a8d7cc09be6e31720dd73195a1979f9958d3d74e9c60f486dd40ced254890a83c20bf7e8b56959a9cde05b69ae2a9dc7d685ab6dd8b604aa87e4470cacdbabc9772c9021c70455ef478f63b9e3657a97bd270160c6ab1e96bbea65482f8d197c7a"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000500)={0x3, 0x3, "e0ff88c0a78798e3ba20fc4a61d403dbb30b30903118d7767b4e279eb01a5271083c2332920f2d89febd1a8df6dc72f8722ae3affb3841b13d6c1ef446005870ae1c48a26e939f22e1aeb8ad52b3b40697509753374ce295498e9ccb5d4b3153c389ef65582047822f46231af94e8ab7069f90c44eccdd6f39a490be0afc742fedc1e3edc229a78d03af6ba41d17e52389448b40807b10c9bca8b70993c8fb665be4e33e5dcf498b406136fd455da9e34b6c62d9257d13da5d81344dcff78eb7ccf41a40fefbcbfddd88f874f87277837823ad2fb828eb0f23c7c17e83a11487161232d727dcf341ba5364a30a5d0316f87c746c3011499f62afb6dece0a757a"}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000a98000/0x400000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000000)={0x0, 0x7}) r7 = open(&(0x7f0000000700)='./file0\x00', 0x800, 0x80) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000c80)={0x2, 0x0, [{0xbf1, 0x0, 0x15}, {0xc0000103}]}) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) fcntl$addseals(r0, 0x409, 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x334}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, 0x0}) 3.157306409s ago: executing program 5 (id=2881): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [], 0xa, "46396d830cae856f82f1df262bb4a03c915314e11520749f7b33d61e0e7d1c904561bbeb0f119c52c7ea4a2039"}, 0x31) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1000) 2.92802616s ago: executing program 5 (id=2882): write(0xffffffffffffffff, 0x0, 0x0) getpid() io_setup(0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10) io_destroy(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000016c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.685056101s ago: executing program 5 (id=2883): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100033064ae08010203010902120001020a0006000000000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f0000000040)=0x18) 1.992352013s ago: executing program 9 (id=2884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') sendfile(r2, r2, 0x0, 0x3ff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81006e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 1.985333233s ago: executing program 9 (id=2885): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x12, 0xa, 0x5d, 0x20, 0x2c7c, 0x901, 0xe4b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x99, 0x5, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.387379626s ago: executing program 5 (id=2886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="9a000000006e000f01c9c4e1cd5d810020000083800f9800009db80e0000000f23d80f21f835c00000700f23f80f7869e80fc719650f01c96667660f205166baf80cb8b2debe83ef66bafc0c66b8050066ef", 0x52}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x7000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.204317372s ago: executing program 5 (id=2887): openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.12418436s ago: executing program 5 (id=2888): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f0000000600)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x13, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0x80000007}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\a]'], 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = dup(r10) write$P9_RAUTH(r12, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x20, 0x4, 0x5}}, 0x14) preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 596.871037ms ago: executing program 7 (id=2889): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xd, 0x0, &(0x7f0000000340)="126a7a794edcd57d84a5ad7af3"}) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001280004600000a60c6eec00be00442cfffe800000000000000000000000d65eaaff020000000000000000000000000001", @ANYRES16=r2], 0xfdef) 221.31583ms ago: executing program 7 (id=2890): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [], 0xa, "46396d830cae856f82f1df262bb4a03c915314e11520749f7b33d61e0e7d1c904561bbeb0f119c52c7ea4a2039"}, 0x31) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) 94.557462ms ago: executing program 7 (id=2891): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2020) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10, r1, 0x6) ioctl$TCFLSH(r1, 0x540b, 0x1) 0s ago: executing program 7 (id=2892): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000003c0)=0xe, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000180)=0x80177, 0x4) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4c20, 0x80000, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4c20, 0x80000, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60040, 0x1c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy_type={0xa}]}, 0x5c}}, 0x20006804) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy_type={0xa}]}, 0x5c}}, 0x20006804) fcntl$setlease(r3, 0x400, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r5, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x49}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) (async) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r5, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x49}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): king state [ 495.953411][ T7608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.012973][ T7935] syz.9.2369: attempt to access beyond end of device [ 496.012973][ T7935] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 496.111205][ T7940] kvm: pic: single mode not supported [ 496.111226][ T7940] kvm: pic: level sensitive irq not supported [ 496.127677][ T7915] veth0_vlan: entered promiscuous mode [ 496.140044][ T7940] kvm: pic: level sensitive irq not supported [ 496.140168][ T7940] kvm: pic: single mode not supported [ 496.147655][ T7940] kvm: pic: single mode not supported [ 496.153079][ T7940] kvm: pic: level sensitive irq not supported [ 496.171158][ T36] kauditd_printk_skb: 296 callbacks suppressed [ 496.171197][ T36] audit: type=1400 audit(1788200814.623:38384): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.173379][ T7940] kvm: pic: single mode not supported [ 496.186946][ T36] audit: type=1400 audit(1788200814.623:38385): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.206552][ T7940] kvm: pic: level sensitive irq not supported [ 496.232589][ T36] audit: type=1400 audit(1788200814.623:38386): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.275749][ T36] audit: type=1400 audit(1788200814.623:38387): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.297634][ T36] audit: type=1400 audit(1788200814.633:38388): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.319626][ T36] audit: type=1400 audit(1788200814.661:38389): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.326008][ T7915] veth1_macvtap: entered promiscuous mode [ 496.341305][ T36] audit: type=1400 audit(1788200814.661:38390): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.368578][ T36] audit: type=1400 audit(1788200814.661:38391): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.390037][ T36] audit: type=1400 audit(1788200814.680:38392): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.411528][ T36] audit: type=1400 audit(1788200814.680:38393): avc: denied { sys_module } for pid=7915 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 496.511838][ T7943] netlink: 'syz.9.2371': attribute type 29 has an invalid length. [ 496.519937][ T7943] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2371'. [ 496.786572][ T7947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 496.786602][ T7947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:94 [ 496.977546][ T7955] sit0: entered promiscuous mode [ 496.991739][ T374] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 496.996358][ T7955] netlink: 'syz.9.2375': attribute type 1 has an invalid length. [ 497.007718][ T7955] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2375'. [ 497.160139][ T374] usb 6-1: unable to get BOS descriptor or descriptor too short [ 497.169489][ T374] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 497.178305][ T374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.188566][ T374] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 497.205401][ T374] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.214593][ T374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.222727][ T374] usb 6-1: Product: syz [ 497.227243][ T374] usb 6-1: Manufacturer: syz [ 497.238660][ T374] usb 6-1: SerialNumber: syz [ 497.502237][ T7961] x_tables: duplicate underflow at hook 2 [ 497.547723][ T374] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 497.562375][ T7964] netlink: 'syz.7.2379': attribute type 29 has an invalid length. [ 497.570349][ T7964] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2379'. [ 497.573257][ T374] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 497.617702][ T374] usb 6-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 497.633132][ T374] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 497.650742][ T374] usb 6-1: USB disconnect, device number 94 [ 497.756677][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 498.259652][ T7978] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2384'. [ 498.446700][ T370] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 498.501236][ T7989] netlink: 'syz.9.2388': attribute type 29 has an invalid length. [ 498.509210][ T7989] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2388'. [ 498.622440][ T370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.648949][ T370] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 498.669118][ T370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.692139][ T370] usb 6-1: config 0 descriptor?? [ 498.874738][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2395'. [ 498.901123][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2395'. [ 498.934241][ T8009] netlink: 'syz.9.2396': attribute type 11 has an invalid length. [ 498.942240][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2396'. [ 499.103410][ T8017] netlink: 'syz.9.2398': attribute type 29 has an invalid length. [ 499.111704][ T8017] netlink: 38698 bytes leftover after parsing attributes in process `syz.9.2398'. [ 499.155448][ T370] konepure 0003:1E7D:2DB4.0061: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 499.448375][ T370] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 499.610759][ T370] usb 10-1: config index 0 descriptor too short (expected 7768, got 18) [ 499.619192][ T370] usb 10-1: config 0 has an invalid interface number: 115 but max is 0 [ 499.627474][ T370] usb 10-1: config 0 has no interface number 0 [ 499.633720][ T370] usb 10-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 499.645079][ T370] usb 10-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 499.658661][ T370] usb 10-1: config 0 interface 115 has no altsetting 0 [ 499.665617][ T370] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 499.674811][ T370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.684689][ T370] usb 10-1: config 0 descriptor?? [ 499.694274][ T370] ftdi_sio 10-1:0.115: FTDI USB Serial Device converter detected [ 499.702532][ T370] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 499.973450][ T374] usb 10-1: USB disconnect, device number 12 [ 499.980057][ T374] ftdi_sio 10-1:0.115: device disconnected [ 501.047183][ T332] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 501.223710][ T332] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 501.249709][ T332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.260976][ T332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.270891][ T332] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.286103][ T332] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.296145][ T332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.307519][ T332] usb 10-1: config 0 descriptor?? [ 501.389237][ T67] usb 6-1: USB disconnect, device number 95 [ 501.495301][ T8044] netlink: 'syz.5.2407': attribute type 29 has an invalid length. [ 501.503247][ T8044] netlink: 38698 bytes leftover after parsing attributes in process `syz.5.2407'. [ 501.533131][ T36] kauditd_printk_skb: 597 callbacks suppressed [ 501.533151][ T36] audit: type=1400 audit(1788200819.652:38991): avc: denied { ioctl } for pid=8035 comm="syz.9.2404" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.583838][ T36] audit: type=1400 audit(1788200819.680:38992): avc: denied { ioctl } for pid=8035 comm="syz.9.2404" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.619828][ T36] audit: type=1400 audit(1788200819.727:38993): avc: denied { read write } for pid=7915 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 501.659282][ T36] audit: type=1400 audit(1788200819.727:38994): avc: denied { read write open } for pid=7915 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 501.687427][ T36] audit: type=1400 audit(1788200819.727:38995): avc: denied { ioctl } for pid=7915 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 501.718680][ T36] audit: type=1400 audit(1788200819.821:38996): avc: denied { create } for pid=8045 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 501.740047][ T36] audit: type=1400 audit(1788200819.821:38997): avc: denied { ioctl } for pid=8045 comm="syz.5.2408" path="socket:[61184]" dev="sockfs" ino=61184 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 501.765708][ T36] audit: type=1400 audit(1788200819.821:38998): avc: denied { ioctl } for pid=8045 comm="syz.5.2408" path="socket:[61184]" dev="sockfs" ino=61184 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 501.801162][ T332] plantronics 0003:047F:FFFF.0062: unknown main item tag 0xd [ 501.812334][ T332] plantronics 0003:047F:FFFF.0062: No inputs registered, leaving [ 501.820213][ T36] audit: type=1400 audit(1788200819.830:38999): avc: denied { create } for pid=8045 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 501.845326][ T332] plantronics 0003:047F:FFFF.0062: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 501.868678][ T36] audit: type=1400 audit(1788200819.830:39000): avc: denied { write } for pid=8045 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.071251][ T67] usb 10-1: USB disconnect, device number 13 [ 502.085457][ T8051] fido_id[8051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 502.614297][ T67] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 502.777687][ T67] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 502.794815][ T67] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 502.807435][ T67] usb 6-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 502.834695][ T67] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.851586][ T67] usb 6-1: New USB device strings: Mfr=0, Product=28, SerialNumber=1 [ 502.861282][ T67] usb 6-1: Product: syz [ 502.865554][ T67] usb 6-1: SerialNumber: syz [ 503.036290][ T8071] netlink: 'syz.6.2416': attribute type 29 has an invalid length. [ 503.044308][ T8071] netlink: 38698 bytes leftover after parsing attributes in process `syz.6.2416'. [ 503.094863][ T67] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 503.113343][ T67] usb 6-1: USB disconnect, device number 96 [ 503.127748][ T370] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 503.299094][ T370] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 503.313997][ T370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.334925][ T370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.353807][ T370] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.367844][ T370] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.377985][ T370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.388862][ T370] usb 10-1: config 0 descriptor?? [ 503.839152][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.846722][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.855438][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.863859][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.871310][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.879313][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.886855][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.894431][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.901942][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.909512][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.917012][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.924507][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.931958][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.939654][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.947111][ T370] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 503.954679][ T370] plantronics 0003:047F:FFFF.0063: No inputs registered, leaving [ 503.966035][ T370] plantronics 0003:047F:FFFF.0063: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 503.967787][ T67] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 504.122374][ T370] usb 10-1: USB disconnect, device number 14 [ 504.163021][ T67] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.173808][ T67] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.184134][ T67] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 504.194174][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.210210][ T67] usb 6-1: config 0 descriptor?? [ 504.746205][ T8092] netlink: 'syz.7.2425': attribute type 29 has an invalid length. [ 504.754789][ T8092] netlink: 38698 bytes leftover after parsing attributes in process `syz.7.2425'. [ 504.928396][ T8095] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 505.194273][ T31] usb 6-1: USB disconnect, device number 97 [ 505.303853][ T8115] bridge0: port 3(erspan0) entered blocking state [ 505.328913][ T8115] bridge0: port 3(erspan0) entered disabled state [ 505.347359][ T8115] erspan0: entered allmulticast mode [ 505.353406][ T8115] erspan0: entered promiscuous mode [ 505.360160][ T8115] bridge0: port 3(erspan0) entered blocking state [ 505.366662][ T8115] bridge0: port 3(erspan0) entered forwarding state [ 505.393614][ T8118] netlink: 'syz.9.2432': attribute type 1 has an invalid length. [ 505.422413][ T8118] netlink: 'syz.9.2432': attribute type 3 has an invalid length. [ 505.593882][ T8130] netlink: 'syz.9.2434': attribute type 29 has an invalid length. [ 505.601847][ T8130] netlink: 38698 bytes leftover after parsing attributes in process `syz.9.2434'. [ 505.786998][ T8132] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 505.897982][ T8138] netlink: 'syz.9.2437': attribute type 4 has an invalid length. [ 506.155359][ T8138] cgroup: release_agent respecified [ 506.218019][ T8142] tipc: Started in network mode [ 506.222967][ T8142] tipc: Node identity 4, cluster identity 4711 [ 506.229274][ T8142] tipc: Node number set to 4 [ 506.866886][ T36] kauditd_printk_skb: 742 callbacks suppressed [ 506.866909][ T36] audit: type=1400 audit(1788200824.625:39446): avc: denied { name_bind } for pid=8153 comm="syz.6.2443" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 506.927153][ T36] audit: type=1400 audit(1788200824.625:39447): avc: denied { node_bind } for pid=8153 comm="syz.6.2443" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 506.949876][ T36] audit: type=1400 audit(1788200824.634:39448): avc: denied { create } for pid=8153 comm="syz.6.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 507.047204][ T36] audit: type=1400 audit(1788200824.634:39449): avc: denied { setopt } for pid=8153 comm="syz.6.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 507.076712][ T36] audit: type=1400 audit(1788200824.653:39450): avc: denied { read write } for pid=3635 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.111110][ T8164] netlink: 'syz.9.2447': attribute type 4 has an invalid length. [ 507.120738][ T36] audit: type=1400 audit(1788200824.653:39451): avc: denied { read write open } for pid=3635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.148012][ T8164] netlink: 'syz.9.2447': attribute type 4 has an invalid length. [ 507.179746][ T36] audit: type=1400 audit(1788200824.653:39452): avc: denied { ioctl } for pid=3635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.228594][ T36] audit: type=1400 audit(1788200824.690:39453): avc: denied { read write } for pid=5343 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.258431][ T36] audit: type=1400 audit(1788200824.690:39454): avc: denied { read write open } for pid=5343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.296699][ T36] audit: type=1400 audit(1788200824.690:39455): avc: denied { ioctl } for pid=5343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.890137][ T370] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 508.049992][ T370] usb 10-1: Using ep0 maxpacket: 16 [ 508.057604][ T370] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 508.067534][ T370] usb 10-1: config 1 has no interface number 1 [ 508.074255][ T370] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.086629][ T370] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 508.099695][ T370] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.114135][ T370] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.123318][ T370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.131443][ T370] usb 10-1: Product: syz [ 508.135743][ T370] usb 10-1: Manufacturer: syz [ 508.140496][ T370] usb 10-1: SerialNumber: syz [ 508.370225][ T370] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 508.378284][ T370] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 508.396733][ T370] usb 10-1: USB disconnect, device number 15 [ 508.453668][ T3299] udevd[3299]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 508.881365][ T370] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 509.030557][ T370] usb 6-1: device descriptor read/64, error -71 [ 509.307670][ T370] usb 6-1: device descriptor read/64, error -71 [ 509.372304][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.380847][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.563547][ T370] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 509.616775][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 509.712719][ T370] usb 6-1: device descriptor read/64, error -71 [ 509.776652][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 509.784359][ T9] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 509.792551][ T9] usb 10-1: config 0 has no interface number 0 [ 509.798800][ T9] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 509.809799][ T9] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 509.822239][ T9] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 509.831515][ T9] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 509.839763][ T9] usb 10-1: Product: syz [ 509.844156][ T9] usb 10-1: SerialNumber: syz [ 509.851097][ T9] usb 10-1: config 0 descriptor?? [ 510.000492][ T370] usb 6-1: device descriptor read/64, error -71 [ 510.080600][ T9] usb 10-1: USB disconnect, device number 16 [ 510.121347][ T370] usb usb6-port1: attempt power cycle [ 510.480140][ T370] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 510.516037][ T370] usb 6-1: device descriptor read/8, error -71 [ 510.558091][ T8203] netlink: 'syz.7.2460': attribute type 29 has an invalid length. [ 510.566045][ T8203] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2460'. [ 510.670661][ T370] usb 6-1: device descriptor read/8, error -71 [ 510.938441][ T370] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 510.976200][ T370] usb 6-1: device descriptor read/8, error -71 [ 511.124052][ T370] usb 6-1: device descriptor read/8, error -71 [ 511.215573][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 511.248858][ T370] usb usb6-port1: unable to enumerate USB device [ 511.375474][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 511.383414][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.394584][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.404594][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 511.415819][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 511.428872][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 511.438004][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.448131][ T9] usb 10-1: config 0 descriptor?? [ 511.897305][ T9] hid (null): invalid report_size 829317484 [ 511.923662][ T9] input: HID 0458:500f as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:500F.0064/input/input88 [ 511.939227][ T9] input: HID 0458:500f as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:500F.0064/input/input89 [ 511.958697][ T9] kye 0003:0458:500F.0064: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.9-1/input0 [ 512.111614][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.147137][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.172136][ T370] usb 10-1: USB disconnect, device number 17 [ 512.208526][ T36] kauditd_printk_skb: 402 callbacks suppressed [ 512.208546][ T36] audit: type=1400 audit(1788200829.672:39858): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1725 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.264954][ T36] audit: type=1400 audit(1788200829.700:39859): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1725 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.294761][ T8223] fido_id[8223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 512.319101][ T36] audit: type=1400 audit(1788200829.700:39860): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1725 ioctlcmd=0x4524 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.361563][ T36] audit: type=1400 audit(1788200829.700:39861): avc: denied { read } for pid=8222 comm="syz.5.2468" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.385186][ T36] audit: type=1400 audit(1788200829.700:39862): avc: denied { read open } for pid=8222 comm="syz.5.2468" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.409896][ T36] audit: type=1400 audit(1788200829.710:39863): avc: denied { ioctl } for pid=8222 comm="syz.5.2468" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.435339][ T36] audit: type=1400 audit(1788200829.766:39864): avc: denied { read write } for pid=8222 comm="syz.5.2468" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.459861][ T36] audit: type=1400 audit(1788200829.766:39865): avc: denied { read write open } for pid=8222 comm="syz.5.2468" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.494386][ T36] audit: type=1400 audit(1788200829.766:39866): avc: denied { ioctl } for pid=8222 comm="syz.5.2468" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 512.520616][ T36] audit: type=1400 audit(1788200829.935:39867): avc: denied { read write } for pid=8222 comm="syz.5.2468" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.773014][ T8228] netlink: 'syz.9.2469': attribute type 29 has an invalid length. [ 512.781167][ T8228] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2469'. [ 513.068143][ T8239] SELinux: policydb string length 1836477231 does not match expected length 8 [ 513.077273][ T8239] SELinux: failed to load policy [ 513.086436][ T8239] can0: slcan on ptm0. [ 513.098277][ T8239] netlink: 'syz.9.2473': attribute type 4 has an invalid length. [ 513.158033][ T8238] can0 (unregistered): slcan off ptm0. [ 513.244647][ T8243] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2474'. [ 513.476487][ T8255] rust_binder: 231: no such ref 0 [ 513.699699][ T8266] netlink: 'syz.6.2478': attribute type 29 has an invalid length. [ 513.707601][ T8266] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2478'. [ 514.460560][ T8295] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 514.474020][ T8295] rust_binder: Write failure EINVAL in pid:521 [ 514.722293][ T67] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 514.785147][ T8310] netlink: 'syz.7.2488': attribute type 29 has an invalid length. [ 514.793313][ T8310] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2488'. [ 514.907442][ T67] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.924811][ T67] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.943317][ T67] usb 10-1: config 0 interface 0 has no altsetting 0 [ 514.950252][ T67] usb 10-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 514.965461][ T67] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.978431][ T67] usb 10-1: config 0 descriptor?? [ 515.204263][ T67] lenovo 0003:17EF:60EE.0065: unknown main item tag 0x0 [ 515.211312][ T67] lenovo 0003:17EF:60EE.0065: unknown main item tag 0x0 [ 515.234017][ T67] lenovo 0003:17EF:60EE.0065: unknown main item tag 0x0 [ 515.244583][ T67] lenovo 0003:17EF:60EE.0065: unknown main item tag 0x0 [ 515.253483][ T67] lenovo 0003:17EF:60EE.0065: unknown main item tag 0x0 [ 515.280902][ T67] lenovo 0003:17EF:60EE.0065: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.9-1/input0 [ 515.313802][ T67] lenovo 0003:17EF:60EE.0065: Failed to switch middle button: -71 [ 515.332335][ T67] lenovo 0003:17EF:60EE.0065: Fn-lock setting failed: -71 [ 515.342409][ T67] lenovo 0003:17EF:60EE.0065: Sensitivity setting failed: -71 [ 515.393798][ T67] usb 10-1: USB disconnect, device number 18 [ 515.523774][ T8318] fido_id[8318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 515.712798][ T8328] overlay: Unknown parameter 'fsmagic' [ 515.905428][ T67] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 516.077269][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 516.086181][ T67] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 516.095670][ T67] usb 6-1: config 0 has no interface number 0 [ 516.104173][ T67] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 516.119719][ T67] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 516.129473][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.137598][ T67] usb 6-1: Product: syz [ 516.143316][ T67] usb 6-1: Manufacturer: syz [ 516.148034][ T67] usb 6-1: SerialNumber: syz [ 516.156073][ T67] usb 6-1: config 0 descriptor?? [ 516.173986][ T8327] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 516.414935][ T8327] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 516.688108][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2495'. [ 516.846557][ T8340] netlink: 'syz.9.2497': attribute type 29 has an invalid length. [ 516.854646][ T8340] netlink: 51850 bytes leftover after parsing attributes in process `syz.9.2497'. [ 517.171728][ T8349] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2501'. [ 517.532054][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.540696][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.546963][ T370] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 517.560382][ T36] kauditd_printk_skb: 803 callbacks suppressed [ 517.560401][ T36] audit: type=1400 audit(1788200834.691:40671): avc: denied { ioctl } for pid=8326 comm="syz.5.2493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.591682][ T36] audit: type=1400 audit(1788200834.691:40672): avc: denied { ioctl } for pid=8326 comm="syz.5.2493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.618071][ T36] audit: type=1400 audit(1788200834.691:40673): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.643633][ T36] audit: type=1400 audit(1788200834.701:40674): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.668802][ T36] audit: type=1400 audit(1788200834.701:40675): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.693973][ T36] audit: type=1400 audit(1788200834.766:40676): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.749374][ T370] usb 10-1: Using ep0 maxpacket: 16 [ 517.755451][ T36] audit: type=1400 audit(1788200834.870:40677): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.763525][ T370] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 517.780800][ T36] audit: type=1400 audit(1788200834.870:40678): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.797970][ T370] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.814805][ T36] audit: type=1400 audit(1788200834.870:40679): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.827415][ T370] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.850083][ T36] audit: type=1400 audit(1788200834.870:40680): avc: denied { ioctl } for pid=8355 comm="syz.9.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.871836][ T370] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.892660][ T370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.900895][ T370] usb 10-1: Product: syz [ 517.905195][ T370] usb 10-1: Manufacturer: syz [ 517.909981][ T370] usb 10-1: SerialNumber: syz [ 518.144340][ T8360] netlink: 'syz.7.2506': attribute type 29 has an invalid length. [ 518.152444][ T8360] netlink: 51850 bytes leftover after parsing attributes in process `syz.7.2506'. [ 518.219320][ T8362] rust_binder: Error while translating object. [ 518.219406][ T8362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 518.225668][ T8362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 518.359110][ T370] usb 10-1: 0:2 : does not exist [ 518.385893][ T370] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 518.402168][ T370] usb 10-1: USB disconnect, device number 19 [ 518.494417][ T3299] udevd[3299]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 518.736093][ T8373] netlink: 'syz.7.2511': attribute type 1 has an invalid length. [ 518.747381][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2511'. [ 518.836273][ T8378] 9pnet_fd: Insufficient options for proto=fd [ 518.964683][ T8382] netlink: 'syz.9.2515': attribute type 29 has an invalid length. [ 518.972710][ T8382] netlink: 51850 bytes leftover after parsing attributes in process `syz.9.2515'. [ 519.284272][ T635] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 519.433444][ T635] usb 10-1: device descriptor read/64, error -71 [ 519.689234][ T635] usb 10-1: device descriptor read/64, error -71 [ 519.770104][ T67] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 519.780433][ T67] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 519.796067][ T67] asix 6-1:0.188: probe with driver asix failed with error -71 [ 519.817964][ T67] usb 6-1: USB disconnect, device number 102 [ 519.955750][ T635] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 520.094331][ T635] usb 10-1: device descriptor read/64, error -71 [ 520.350101][ T635] usb 10-1: device descriptor read/64, error -71 [ 520.488018][ T635] usb usb10-port1: attempt power cycle [ 520.529034][ T8392] netlink: 'syz.6.2520': attribute type 11 has an invalid length. [ 520.862158][ T635] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 520.896639][ T635] usb 10-1: device descriptor read/8, error -71 [ 520.957626][ T370] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 521.045498][ T635] usb 10-1: device descriptor read/8, error -71 [ 521.138819][ T370] usb 6-1: Using ep0 maxpacket: 16 [ 521.146304][ T370] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 521.155628][ T370] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.165777][ T370] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.179721][ T370] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.189366][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.198960][ T370] usb 6-1: Product: syz [ 521.203203][ T370] usb 6-1: Manufacturer: syz [ 521.207848][ T370] usb 6-1: SerialNumber: syz [ 521.298727][ T635] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 521.333714][ T635] usb 10-1: device descriptor read/8, error -71 [ 521.472738][ T635] usb 10-1: device descriptor read/8, error -71 [ 521.483815][ T8424] netlink: 'syz.6.2533': attribute type 29 has an invalid length. [ 521.491774][ T8424] netlink: 51850 bytes leftover after parsing attributes in process `syz.6.2533'. [ 521.546736][ T8428] overlayfs: lower data-only dirs require metacopy support. [ 521.587092][ T635] usb usb10-port1: unable to enumerate USB device [ 521.678210][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.685531][ T370] usb 6-1: 0:2 : does not exist [ 521.690669][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.698073][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.706088][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.713837][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.721361][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.729402][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 521.746622][ T370] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 521.770787][ T370] usb 6-1: USB disconnect, device number 103 [ 521.829952][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 521.854926][ T8433] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.862759][ T8433] IPv6: NLM_F_REPLACE set, but no existing node found! [ 522.280520][ T8439] overlay: ./file0 is not a directory [ 522.401428][ T8443] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 522.560548][ T8448] netlink: 'syz.5.2542': attribute type 29 has an invalid length. [ 522.568603][ T8448] netlink: 'syz.5.2542': attribute type 3 has an invalid length. [ 522.588435][ T8448] netlink: 'syz.5.2542': attribute type 4 has an invalid length. [ 522.600901][ T8448] netlink: 'syz.5.2542': attribute type 6 has an invalid length. [ 522.615354][ T8448] netlink: 'syz.5.2542': attribute type 7 has an invalid length. [ 522.624021][ T8448] netlink: 'syz.5.2542': attribute type 5 has an invalid length. [ 522.632616][ T8448] netlink: 'syz.5.2542': attribute type 15 has an invalid length. [ 522.640579][ T8448] netlink: 60942 bytes leftover after parsing attributes in process `syz.5.2542'. [ 522.865556][ T67] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 522.940626][ T36] kauditd_printk_skb: 510 callbacks suppressed [ 522.940647][ T36] audit: type=1400 audit(1788200839.739:41191): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.025411][ T67] usb 10-1: Using ep0 maxpacket: 16 [ 523.031500][ T36] audit: type=1400 audit(1788200839.823:41192): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.043284][ T67] usb 10-1: config 0 has an invalid interface number: 14 but max is 0 [ 523.056772][ T36] audit: type=1400 audit(1788200839.823:41193): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.066137][ T67] usb 10-1: config 0 has no interface number 0 [ 523.097635][ T67] usb 10-1: too many endpoints for config 0 interface 14 altsetting 144: 226, using maximum allowed: 30 [ 523.108950][ T67] usb 10-1: config 0 interface 14 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 523.124232][ T67] usb 10-1: config 0 interface 14 has no altsetting 0 [ 523.124930][ T36] audit: type=1400 audit(1788200839.833:41194): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.146865][ T67] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 523.168192][ T67] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.176380][ T67] usb 10-1: Product: syz [ 523.181071][ T67] usb 10-1: Manufacturer: syz [ 523.185861][ T67] usb 10-1: SerialNumber: syz [ 523.191845][ T36] audit: type=1400 audit(1788200839.833:41195): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.205247][ T67] r8152-cfgselector 10-1: Unknown version 0x0000 [ 523.219565][ T36] audit: type=1400 audit(1788200839.833:41196): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.236037][ T67] r8152-cfgselector 10-1: config 0 descriptor?? [ 523.251186][ T36] audit: type=1400 audit(1788200839.861:41197): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.280516][ T36] audit: type=1400 audit(1788200839.917:41198): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.305685][ T36] audit: type=1400 audit(1788200839.917:41199): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.331912][ T36] audit: type=1400 audit(1788200839.917:41200): avc: denied { ioctl } for pid=8449 comm="syz.9.2543" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.498127][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.506866][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.525925][ T67] hub 10-1:0.14: bad descriptor, ignoring hub [ 523.532335][ T67] hub 10-1:0.14: probe with driver hub failed with error -5 [ 523.570053][ T67] r8152-cfgselector 10-1: USB disconnect, device number 24 [ 523.633001][ T9] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 523.792871][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 523.800785][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.811041][ T9] usb 6-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.824338][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 523.832583][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 523.841745][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=11 [ 523.849939][ T9] usb 6-1: SerialNumber: syz [ 523.856662][ T9] usb 6-1: config 0 descriptor?? [ 524.113630][ T8458] Invalid ELF header len 16 [ 524.154360][ T8461] : renamed from vlan0 (while UP) [ 524.411042][ T31] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 524.574128][ T31] usb 10-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 524.584733][ T31] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 524.599592][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.608852][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 524.617170][ T31] usb 10-1: SerialNumber: syz [ 524.626235][ T31] cdc_ether 10-1:1.0: skipping garbage [ 524.631840][ T31] usb 10-1: bad CDC descriptors [ 525.273852][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.282601][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.581542][ T370] usb 6-1: USB disconnect, device number 104 [ 526.937168][ T370] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 527.097060][ T370] usb 6-1: Using ep0 maxpacket: 8 [ 527.104906][ T370] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 527.113182][ T370] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.123371][ T370] usb 6-1: config 0 has no interface number 0 [ 527.132681][ T370] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 527.141866][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.149887][ T370] usb 6-1: Product: syz [ 527.154142][ T370] usb 6-1: Manufacturer: syz [ 527.158780][ T370] usb 6-1: SerialNumber: syz [ 527.165797][ T370] usb 6-1: config 0 descriptor?? [ 527.352608][ T67] usb 10-1: USB disconnect, device number 25 [ 527.528656][ T8475] netlink: 'syz.9.2552': attribute type 29 has an invalid length. [ 527.536939][ T8475] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2552'. [ 528.077652][ T67] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 528.237614][ T67] usb 10-1: Using ep0 maxpacket: 16 [ 528.245467][ T67] usb 10-1: config 253 has an invalid interface number: 71 but max is 0 [ 528.253990][ T67] usb 10-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 528.264412][ T67] usb 10-1: config 253 has no interface number 0 [ 528.271883][ T67] usb 10-1: config 253 interface 71 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.285083][ T67] usb 10-1: config 253 interface 71 has no altsetting 0 [ 528.292103][ T67] usb 10-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=42.cd [ 528.301295][ T67] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.316954][ T36] kauditd_printk_skb: 215 callbacks suppressed [ 528.316975][ T36] audit: type=1400 audit(1788200844.777:41416): avc: denied { ioctl } for pid=8480 comm="syz.9.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.379772][ T36] audit: type=1400 audit(1788200844.777:41417): avc: denied { ioctl } for pid=8480 comm="syz.9.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.405856][ T36] audit: type=1400 audit(1788200844.777:41418): avc: denied { ioctl } for pid=8480 comm="syz.9.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.431937][ T36] audit: type=1400 audit(1788200844.777:41419): avc: denied { ioctl } for pid=8480 comm="syz.9.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.483457][ T36] audit: type=1400 audit(1788200844.815:41420): avc: denied { read write } for pid=3635 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.507773][ T36] audit: type=1400 audit(1788200844.815:41421): avc: denied { read write open } for pid=3635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.533439][ T36] audit: type=1400 audit(1788200844.815:41422): avc: denied { ioctl } for pid=3635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 528.559418][ T36] audit: type=1400 audit(1788200844.908:41423): avc: denied { read write } for pid=8482 comm="syz.6.2556" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.583335][ T67] usb 10-1: string descriptor 0 read error: -71 [ 528.590750][ T36] audit: type=1400 audit(1788200844.908:41424): avc: denied { read write open } for pid=8482 comm="syz.6.2556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.616999][ T67] usb 10-1: USB disconnect, device number 26 [ 528.625128][ T36] audit: type=1400 audit(1788200844.908:41425): avc: denied { ioctl } for pid=8482 comm="syz.6.2556" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.153779][ T8487] input: syz0 as /devices/virtual/input/input91 [ 529.425791][ T8497] netlink: 'syz.9.2561': attribute type 29 has an invalid length. [ 529.433912][ T8497] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2561'. [ 529.740411][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 529.822611][ T31] usb 6-1: USB disconnect, device number 105 [ 529.890248][ T9] usb 10-1: device descriptor read/64, error -71 [ 530.145447][ T9] usb 10-1: device descriptor read/64, error -71 [ 530.273338][ T31] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 530.401285][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 530.443932][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 530.451629][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 530.460537][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.470713][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.482961][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.492986][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.501073][ T31] usb 6-1: Product: syz [ 530.505272][ T31] usb 6-1: Manufacturer: syz [ 530.510057][ T31] usb 6-1: SerialNumber: syz [ 530.539883][ T9] usb 10-1: device descriptor read/64, error -71 [ 530.795640][ T9] usb 10-1: device descriptor read/64, error -71 [ 530.913019][ T9] usb usb10-port1: attempt power cycle [ 530.954789][ T31] usb 6-1: 0:2 : does not exist [ 530.964384][ T31] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 530.987570][ T31] usb 6-1: USB disconnect, device number 106 [ 531.022800][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 531.275300][ T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 531.298890][ T9] usb 10-1: device descriptor read/8, error -71 [ 531.437582][ T9] usb 10-1: device descriptor read/8, error -71 [ 531.701588][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 531.735096][ T9] usb 10-1: device descriptor read/8, error -71 [ 531.877056][ T9] usb 10-1: device descriptor read/8, error -71 [ 532.006821][ T9] usb usb10-port1: unable to enumerate USB device [ 532.016874][ T8521] netlink: 'syz.5.2570': attribute type 29 has an invalid length. [ 532.025333][ T8521] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2570'. [ 532.373101][ T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 532.535695][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.545932][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.556698][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.565971][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.574005][ T9] usb 6-1: SerialNumber: syz [ 532.812837][ T9] usb 6-1: 0:2 : does not exist [ 532.828803][ T9] usb 6-1: unit 5: unexpected type 0x0d [ 532.840867][ T8527] tipc: Started in network mode [ 532.847922][ T9] usb 6-1: USB disconnect, device number 107 [ 532.864274][ T8527] tipc: Node identity 82bc3c36606e, cluster identity 4711 [ 532.873117][ T8527] tipc: Enabled bearer , priority 10 [ 532.923701][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 533.225809][ T332] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 533.388170][ T332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.399335][ T332] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.409242][ T332] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 533.418504][ T332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.428722][ T332] usb 10-1: config 0 descriptor?? [ 533.658422][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 533.658443][ T36] audit: type=1400 audit(1788200849.787:41774): avc: denied { read write } for pid=8528 comm="syz.9.2573" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.666836][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.694399][ T36] audit: type=1400 audit(1788200849.787:41775): avc: denied { read write open } for pid=8528 comm="syz.9.2573" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.711073][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.731587][ T36] audit: type=1400 audit(1788200849.787:41776): avc: denied { ioctl } for pid=8528 comm="syz.9.2573" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.747062][ T332] usbhid 10-1:0.0: can't add hid device: -71 [ 533.764557][ T36] audit: type=1400 audit(1788200849.787:41777): avc: denied { ioctl } for pid=8528 comm="syz.9.2573" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.784854][ T332] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 533.804131][ T36] audit: type=1400 audit(1788200849.825:41778): avc: denied { ioctl } for pid=8530 comm="syz.5.2574" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.818345][ T332] usb 10-1: USB disconnect, device number 31 [ 533.843988][ T31] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 533.867085][ T36] audit: type=1400 audit(1788200849.872:41779): avc: denied { create } for pid=8528 comm="syz.9.2573" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.888988][ T36] audit: type=1400 audit(1788200849.900:41780): avc: denied { create } for pid=8528 comm="syz.9.2573" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.910997][ T36] audit: type=1400 audit(1788200849.900:41781): avc: denied { ioctl } for pid=8528 comm="syz.9.2573" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64157 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.937772][ T36] audit: type=1400 audit(1788200849.900:41782): avc: denied { ioctl } for pid=8528 comm="syz.9.2573" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64157 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.965346][ T36] audit: type=1400 audit(1788200849.900:41783): avc: denied { create } for pid=8528 comm="syz.9.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.046515][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 534.054404][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 534.063240][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.068043][ T332] tipc: Node number set to 3805428790 [ 534.073453][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.092398][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.101540][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.109591][ T31] usb 6-1: Product: syz [ 534.113834][ T31] usb 6-1: Manufacturer: syz [ 534.118469][ T31] usb 6-1: SerialNumber: syz [ 534.563461][ T31] usb 6-1: 0:2 : does not exist [ 534.570847][ T31] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 534.589927][ T31] usb 6-1: USB disconnect, device number 108 [ 534.633702][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 535.197880][ T8544] netlink: 'syz.7.2579': attribute type 29 has an invalid length. [ 535.205904][ T8544] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2579'. [ 535.625768][ T8557] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 535.755977][ T8562] tmpfs: Unknown parameter '18446744073709551615' [ 535.772342][ T8562] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 535.818456][ T8565] x_tables: duplicate entry at hook 1 [ 535.866223][ T8567] netlink: 'syz.7.2588': attribute type 29 has an invalid length. [ 535.874207][ T8567] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2588'. [ 536.121866][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2590'. [ 536.133289][ T8572] veth1_macvtap: left promiscuous mode [ 536.405056][ T8581] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 536.604743][ T374] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 536.777740][ T374] usb 10-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 536.787014][ T374] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.797606][ T374] usb 10-1: config 0 descriptor?? [ 536.903073][ T31] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 537.062908][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 537.070622][ T31] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 537.079022][ T31] usb 6-1: config 179 has no interface number 0 [ 537.085405][ T31] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 537.096595][ T31] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 537.107947][ T31] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 537.119185][ T31] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 537.130641][ T31] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 537.143937][ T31] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 537.153130][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.165447][ T8589] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 537.332322][ T374] usbhid 10-1:0.0: can't add hid device: -71 [ 537.338545][ T374] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 537.348017][ T374] usb 10-1: USB disconnect, device number 32 [ 537.408533][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.417277][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.907052][ T8592] netlink: 'syz.9.2597': attribute type 29 has an invalid length. [ 537.915017][ T8592] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2597'. [ 538.298333][ T8604] incfs: Options parsing error. -22 [ 538.316776][ T8604] incfs: mount failed -22 [ 539.052203][ T36] kauditd_printk_skb: 345 callbacks suppressed [ 539.052249][ T36] audit: type=1400 audit(1788200854.853:42129): avc: denied { unmount } for pid=7584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 539.080303][ T36] audit: type=1400 audit(1788200854.881:42130): avc: denied { unmount } for pid=7584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 539.115306][ T36] audit: type=1400 audit(1788200854.910:42131): avc: denied { read write } for pid=7584 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.159030][ T36] audit: type=1400 audit(1788200854.938:42132): avc: denied { read write open } for pid=7584 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.184755][ T36] audit: type=1400 audit(1788200854.938:42133): avc: denied { ioctl } for pid=7584 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.216397][ T36] audit: type=1400 audit(1788200855.013:42134): avc: denied { create } for pid=8607 comm="syz.9.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.255651][ T8608] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 539.257584][ T36] audit: type=1400 audit(1788200855.032:42135): avc: denied { create } for pid=8607 comm="syz.9.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.308137][ T36] audit: type=1400 audit(1788200855.032:42136): avc: denied { setopt } for pid=8607 comm="syz.9.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.334957][ T36] audit: type=1400 audit(1788200855.032:42137): avc: denied { read } for pid=8607 comm="syz.9.2603" name="binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 539.388988][ T36] audit: type=1400 audit(1788200855.032:42138): avc: denied { read open } for pid=8607 comm="syz.9.2603" path="/dev/binderfs/binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 539.505523][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2605'. [ 539.626319][ T8614] netlink: 'syz.9.2606': attribute type 29 has an invalid length. [ 539.634497][ T8614] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2606'. [ 539.857647][ T9] usb 6-1: USB disconnect, device number 109 [ 539.857669][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 539.872138][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 539.990928][ T8621] input: syz0 as /devices/virtual/input/input92 [ 540.463187][ T374] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 540.476362][ T8630] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 540.622189][ T374] usb 6-1: device descriptor read/64, error -71 [ 540.778625][ T8636] netlink: 'syz.9.2615': attribute type 29 has an invalid length. [ 540.786714][ T8636] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.2615'. [ 540.853484][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2616'. [ 540.900087][ T374] usb 6-1: device descriptor read/64, error -71 [ 541.155932][ T374] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 541.305127][ T374] usb 6-1: device descriptor read/64, error -71 [ 541.326431][ T31] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 541.475667][ T31] usb 10-1: device descriptor read/64, error -71 [ 541.567362][ T374] usb 6-1: device descriptor read/64, error -71 [ 541.699992][ T374] usb usb6-port1: attempt power cycle [ 541.752751][ T31] usb 10-1: device descriptor read/64, error -71 [ 542.029933][ T31] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 542.061937][ T374] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 542.085898][ T374] usb 6-1: device descriptor read/8, error -71 [ 542.168762][ T31] usb 10-1: device descriptor read/64, error -71 [ 542.224566][ T374] usb 6-1: device descriptor read/8, error -71 [ 542.424284][ T31] usb 10-1: device descriptor read/64, error -71 [ 542.477652][ T374] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 542.501510][ T374] usb 6-1: device descriptor read/8, error -71 [ 542.547561][ T31] usb usb10-port1: attempt power cycle [ 542.640296][ T374] usb 6-1: device descriptor read/8, error -71 [ 542.670036][ T8655] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 542.754797][ T374] usb usb6-port1: unable to enumerate USB device [ 542.914574][ T31] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 542.939155][ T31] usb 10-1: device descriptor read/8, error -71 [ 543.077908][ T31] usb 10-1: device descriptor read/8, error -71 [ 543.340938][ T31] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 543.367805][ T31] usb 10-1: device descriptor read/8, error -71 [ 543.418739][ T8661] netlink: 'syz.5.2624': attribute type 29 has an invalid length. [ 543.427195][ T8661] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2624'. [ 543.524975][ T31] usb 10-1: device descriptor read/8, error -71 [ 543.661277][ T31] usb usb10-port1: unable to enumerate USB device [ 544.098534][ T8665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 544.356135][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2629'. [ 544.399961][ T36] kauditd_printk_skb: 396 callbacks suppressed [ 544.399982][ T36] audit: type=1400 audit(1788200859.873:42535): avc: denied { read write } for pid=7915 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.443526][ T36] audit: type=1400 audit(1788200859.873:42536): avc: denied { read write open } for pid=7915 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.469551][ T36] audit: type=1400 audit(1788200859.882:42537): avc: denied { ioctl } for pid=7915 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.511577][ T36] audit: type=1400 audit(1788200859.901:42538): avc: denied { create } for pid=8674 comm="syz.9.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.532926][ T36] audit: type=1400 audit(1788200859.901:42539): avc: denied { bind } for pid=8674 comm="syz.9.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.554045][ T36] audit: type=1400 audit(1788200859.901:42540): avc: denied { write } for pid=8674 comm="syz.9.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.575177][ T36] audit: type=1400 audit(1788200859.901:42541): avc: denied { nlmsg_write } for pid=8674 comm="syz.9.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.596849][ T36] audit: type=1400 audit(1788200859.901:42542): avc: denied { create } for pid=8674 comm="syz.9.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 544.628208][ T36] audit: type=1400 audit(1788200859.910:42543): avc: denied { create } for pid=8674 comm="syz.9.2630" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 544.632024][ T8677] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 544.653777][ T36] audit: type=1400 audit(1788200859.910:42544): avc: denied { ioctl } for pid=8674 comm="syz.9.2630" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66142 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 544.747930][ T8681] netlink: 'syz.5.2633': attribute type 29 has an invalid length. [ 544.761714][ T8681] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2633'. [ 544.889782][ T8687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 545.035961][ T8694] netlink: 'syz.5.2637': attribute type 4 has an invalid length. [ 545.056956][ T635] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 545.208221][ T635] usb 10-1: device descriptor read/64, error -71 [ 545.303901][ T8705] netlink: 'syz.5.2642': attribute type 29 has an invalid length. [ 545.312009][ T8705] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2642'. [ 545.462007][ T635] usb 10-1: device descriptor read/64, error -71 [ 545.589067][ T8718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 545.717842][ T635] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 545.815862][ T8724] overlayfs: workdir and upperdir must reside under the same mount [ 545.856388][ T635] usb 10-1: device descriptor read/64, error -71 [ 546.118561][ T635] usb 10-1: device descriptor read/64, error -71 [ 546.243657][ T635] usb usb10-port1: attempt power cycle [ 546.506559][ T332] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 546.583682][ T8743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.623810][ T635] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 546.647679][ T635] usb 10-1: device descriptor read/8, error -71 [ 546.658977][ T332] usb 6-1: device descriptor read/64, error -71 [ 546.785973][ T635] usb 10-1: device descriptor read/8, error -71 [ 546.911581][ T332] usb 6-1: device descriptor read/64, error -71 [ 547.039529][ T635] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 547.063143][ T635] usb 10-1: device descriptor read/8, error -71 [ 547.167369][ T332] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 547.202148][ T635] usb 10-1: device descriptor read/8, error -71 [ 547.305965][ T332] usb 6-1: device descriptor read/64, error -71 [ 547.316695][ T635] usb usb10-port1: unable to enumerate USB device [ 547.561773][ T332] usb 6-1: device descriptor read/64, error -71 [ 547.679125][ T332] usb usb6-port1: attempt power cycle [ 548.052062][ T332] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 548.075940][ T332] usb 6-1: device descriptor read/8, error -71 [ 548.214528][ T332] usb 6-1: device descriptor read/8, error -71 [ 548.467751][ T332] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 548.491540][ T332] usb 6-1: device descriptor read/8, error -71 [ 548.630324][ T332] usb 6-1: device descriptor read/8, error -71 [ 548.745065][ T332] usb usb6-port1: unable to enumerate USB device [ 549.650852][ T9] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 549.736690][ T36] kauditd_printk_skb: 411 callbacks suppressed [ 549.736709][ T36] audit: type=1400 audit(1788200864.883:42956): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.821413][ T36] audit: type=1400 audit(1788200864.901:42957): avc: denied { create } for pid=8772 comm="syz.5.2667" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 549.821456][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 549.849683][ T9] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 549.880265][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.881031][ T36] audit: type=1400 audit(1788200864.901:42958): avc: denied { ioctl } for pid=8772 comm="syz.5.2667" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66512 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 549.933415][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.984383][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.999445][ T36] audit: type=1400 audit(1788200864.901:42959): avc: denied { ioctl } for pid=8772 comm="syz.5.2667" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66512 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 550.003878][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.051329][ T9] usb 10-1: Product: syz [ 550.055688][ T9] usb 10-1: Manufacturer: syz [ 550.073045][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.077373][ T36] audit: type=1400 audit(1788200864.958:42960): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.098625][ T9] usb 10-1: SerialNumber: syz [ 550.141751][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.165969][ T36] audit: type=1400 audit(1788200864.958:42961): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.184102][ T332] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 550.202340][ T36] audit: type=1400 audit(1788200864.958:42962): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.229112][ T36] audit: type=1400 audit(1788200864.958:42963): avc: denied { ioctl } for pid=8772 comm="syz.5.2667" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66512 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 550.255639][ T36] audit: type=1400 audit(1788200864.977:42964): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.280930][ T36] audit: type=1400 audit(1788200864.977:42965): avc: denied { ioctl } for pid=8762 comm="syz.9.2663" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.389365][ T332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.403238][ T332] usb 6-1: config 0 has no interfaces? [ 550.412805][ T332] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.423078][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.439967][ T332] usb 6-1: config 0 descriptor?? [ 550.626115][ T9] usb 10-1: 0:2 : does not exist [ 550.792475][ T332] usb 6-1: string descriptor 0 read error: -71 [ 550.807334][ T332] usb 6-1: USB disconnect, device number 118 [ 551.697324][ T370] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 551.857193][ T370] usb 6-1: Using ep0 maxpacket: 16 [ 551.864965][ T370] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 551.874777][ T370] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.884947][ T370] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.897469][ T370] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.906828][ T370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.915056][ T370] usb 6-1: Product: syz [ 551.919345][ T370] usb 6-1: Manufacturer: syz [ 551.924127][ T370] usb 6-1: SerialNumber: syz [ 551.930925][ T9] usb 10-1: 1:0: cannot get min/max values for control 6 (id 1) [ 551.964713][ T9] usb 10-1: USB disconnect, device number 41 [ 552.383103][ T370] usb 6-1: 0:2 : does not exist [ 552.859275][ T8788] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 552.867589][ T8788] overlayfs: missing 'lowerdir' [ 553.247210][ T370] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 553.277075][ T370] usb 6-1: USB disconnect, device number 119 [ 553.421135][ T3299] udevd[3299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 554.095559][ T9] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 554.191483][ T370] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 554.277348][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 554.285837][ T9] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 554.295818][ T9] usb 6-1: config 0 has no interface number 0 [ 554.302860][ T9] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 554.318087][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 554.328648][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.337584][ T9] usb 6-1: Product: syz [ 554.342817][ T9] usb 6-1: Manufacturer: syz [ 554.347574][ T9] usb 6-1: SerialNumber: syz [ 554.362613][ T9] usb 6-1: config 0 descriptor?? [ 554.369510][ T370] usb 10-1: Using ep0 maxpacket: 16 [ 554.377034][ T8814] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 554.395225][ T370] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 554.404114][ T370] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.415277][ T370] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.429191][ T370] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.439123][ T370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.448796][ T370] usb 10-1: Product: syz [ 554.453234][ T370] usb 10-1: Manufacturer: syz [ 554.458016][ T370] usb 10-1: SerialNumber: syz [ 554.609413][ T8814] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 554.832555][ T8814] incfs: Options parsing error. -22 [ 554.837867][ T8814] incfs: mount failed -22 [ 554.844253][ T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 554.854596][ T9] asix 6-1:0.188: probe with driver asix failed with error -61 [ 554.913381][ T370] usb 10-1: 0:2 : does not exist [ 555.132432][ T36] kauditd_printk_skb: 370 callbacks suppressed [ 555.132452][ T36] audit: type=1400 audit(1788200869.940:43336): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.163718][ T36] audit: type=1400 audit(1788200869.940:43337): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.348010][ T36] audit: type=1400 audit(1788200870.137:43338): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.373255][ T36] audit: type=1400 audit(1788200870.137:43339): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.434103][ T36] audit: type=1400 audit(1788200870.221:43340): avc: denied { append } for pid=8813 comm="syz.5.2681" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.457275][ T36] audit: type=1400 audit(1788200870.221:43341): avc: denied { append open } for pid=8813 comm="syz.5.2681" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.485308][ T36] audit: type=1400 audit(1788200870.221:43342): avc: denied { ioctl } for pid=8813 comm="syz.5.2681" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.510258][ T36] audit: type=1400 audit(1788200870.268:43343): avc: denied { ioctl } for pid=8813 comm="syz.5.2681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.563239][ T36] audit: type=1400 audit(1788200870.343:43344): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 555.588326][ T36] audit: type=1400 audit(1788200870.343:43345): avc: denied { ioctl } for pid=8810 comm="syz.9.2680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.219523][ T370] usb 10-1: 1:0: cannot get min/max values for control 6 (id 1) [ 556.238127][ T370] usb 10-1: USB disconnect, device number 42 [ 556.339965][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 556.672475][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.685985][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.174856][ T8840] kvm: emulating exchange as write [ 557.676869][ T370] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 557.858606][ T370] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.889789][ T370] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.923338][ T370] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.933821][ T370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.942076][ T370] usb 10-1: SerialNumber: syz [ 558.004991][ T9] usb 6-1: USB disconnect, device number 120 [ 558.185306][ T370] usb 10-1: 0:2 : does not exist [ 558.195520][ T370] usb 10-1: USB disconnect, device number 43 [ 558.301670][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 558.334428][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2702'. [ 559.666727][ T8907] netlink: 'syz.5.2709': attribute type 2 has an invalid length. [ 559.927440][ T374] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 560.131252][ T374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.142313][ T374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.152187][ T374] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 560.161348][ T374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.172287][ T9] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 560.182261][ T374] usb 6-1: config 0 descriptor?? [ 560.357076][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.367947][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.379598][ T9] usb 10-1: config 1 has no interface number 0 [ 560.387570][ T9] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.399547][ T9] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 560.413877][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.434014][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.445285][ T9] usb 10-1: Product: syz [ 560.450440][ T9] usb 10-1: Manufacturer: syz [ 560.455177][ T9] usb 10-1: SerialNumber: syz [ 560.474035][ T36] kauditd_printk_skb: 497 callbacks suppressed [ 560.474056][ T36] audit: type=1400 audit(1788200874.950:43843): avc: denied { ioctl } for pid=8909 comm="syz.9.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.523161][ T36] audit: type=1400 audit(1788200874.950:43844): avc: denied { ioctl } for pid=8909 comm="syz.9.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.535427][ T8920] netlink: 'syz.7.2715': attribute type 27 has an invalid length. [ 560.552835][ T36] audit: type=1400 audit(1788200874.950:43845): avc: denied { ioctl } for pid=8909 comm="syz.9.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.581402][ T36] audit: type=1400 audit(1788200874.950:43846): avc: denied { ioctl } for pid=8909 comm="syz.9.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.621496][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.628878][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.658680][ T36] audit: type=1400 audit(1788200875.118:43847): avc: denied { ioctl } for pid=8906 comm="syz.5.2709" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.689693][ T36] audit: type=1400 audit(1788200875.118:43848): avc: denied { ioctl } for pid=8906 comm="syz.5.2709" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.717216][ T36] audit: type=1400 audit(1788200875.184:43849): avc: denied { create } for pid=8909 comm="syz.9.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.742075][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.750818][ T36] audit: type=1400 audit(1788200875.203:43850): avc: denied { create } for pid=8909 comm="syz.9.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.771421][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.780751][ T36] audit: type=1400 audit(1788200875.203:43851): avc: denied { read } for pid=8909 comm="syz.9.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.802424][ T36] audit: type=1400 audit(1788200875.203:43852): avc: denied { read write } for pid=8909 comm="syz.9.2711" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.896860][ T8923] tmpfs: Invalid uid '0x00000000ffffffff' [ 561.331531][ T8907] cgroup: fork rejected by pids controller in /syz5 [ 561.795114][ T9] cdc_ncm 10-1:1.1: failed GET_NTB_PARAMETERS [ 561.801553][ T9] cdc_ncm 10-1:1.1: bind() failure [ 561.818362][ T9] usb 10-1: USB disconnect, device number 44 [ 562.863808][ T332] usb 6-1: USB disconnect, device number 121 [ 563.023298][ T330] erspan0: left allmulticast mode [ 563.032474][ T330] erspan0: left promiscuous mode [ 563.037577][ T330] bridge0: port 3(erspan0) entered disabled state [ 563.061262][ T330] bridge_slave_1: left allmulticast mode [ 563.067147][ T330] bridge_slave_1: left promiscuous mode [ 563.091567][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.103794][ T330] bridge_slave_0: left allmulticast mode [ 563.109535][ T330] bridge_slave_0: left promiscuous mode [ 563.115279][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.211347][ T330] veth0_vlan: left promiscuous mode [ 563.347218][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.354367][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.361510][ T8952] bridge_slave_0: entered allmulticast mode [ 563.367803][ T8952] bridge_slave_0: entered promiscuous mode [ 563.375912][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.383061][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.390359][ T8952] bridge_slave_1: entered allmulticast mode [ 563.396671][ T8952] bridge_slave_1: entered promiscuous mode [ 563.484739][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.491836][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.499210][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.506276][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.560899][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.568343][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.583242][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.590380][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.601316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.608441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.693612][ T8952] veth0_vlan: entered promiscuous mode [ 563.732191][ T8952] veth1_macvtap: entered promiscuous mode [ 563.872912][ T8965] netlink: 'syz.5.2727': attribute type 29 has an invalid length. [ 563.881207][ T8965] netlink: 51850 bytes leftover after parsing attributes in process `syz.5.2727'. [ 563.937979][ T8967] netlink: 'syz.9.2729': attribute type 4 has an invalid length. [ 563.954902][ T8967] netlink: 3581 bytes leftover after parsing attributes in process `syz.9.2729'. [ 564.180972][ T8980] input: syz1 as /devices/virtual/input/input94 [ 564.241654][ T8980] new mount options do not match the existing superblock, will be ignored [ 564.745387][ T9000] FAULT_INJECTION: forcing a failure. [ 564.745387][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.780868][ T9000] CPU: 1 UID: 0 PID: 9000 Comm: syz.6.2742 Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3 [ 564.780906][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.780922][ T9000] Call Trace: [ 564.780930][ T9000] [ 564.780941][ T9000] __dump_stack+0x21/0x30 [ 564.780977][ T9000] dump_stack_lvl+0x140/0x1c0 [ 564.781004][ T9000] ? __cfi_dump_stack_lvl+0x10/0x10 [ 564.781034][ T9000] dump_stack+0x19/0x20 [ 564.781061][ T9000] should_fail_ex+0x3d7/0x530 [ 564.781085][ T9000] should_fail+0xf/0x20 [ 564.781106][ T9000] should_fail_usercopy+0x1e/0x30 [ 564.781132][ T9000] _copy_from_iter+0x1a9/0x1510 [ 564.781161][ T9000] ? __virt_addr_valid+0x2a6/0x380 [ 564.781184][ T9000] ? __cfi__copy_from_iter+0x10/0x10 [ 564.781211][ T9000] ? __check_object_size+0x527/0x830 [ 564.781238][ T9000] ? __cfi___check_object_size+0x10/0x10 [ 564.781264][ T9000] ? __kmalloc_noprof+0x1d0/0x500 [ 564.781300][ T9000] ? kernfs_fop_write_iter+0x162/0x510 [ 564.781322][ T9000] kernfs_fop_write_iter+0x1ad/0x510 [ 564.781347][ T9000] vfs_write+0x764/0xf90 [ 564.781375][ T9000] ? __cfi_vfs_write+0x10/0x10 [ 564.781401][ T9000] ? __cfi_mutex_lock+0x10/0x10 [ 564.781432][ T9000] ksys_write+0x145/0x260 [ 564.781458][ T9000] ? xfd_validate_state+0x68/0x140 [ 564.781485][ T9000] ? __cfi_ksys_write+0x10/0x10 [ 564.781514][ T9000] ? __kasan_check_read+0x15/0x20 [ 564.781541][ T9000] __x64_sys_write+0x7f/0x90 [ 564.781568][ T9000] x64_sys_call+0x271c/0x2ee0 [ 564.781598][ T9000] do_syscall_64+0x57/0xf0 [ 564.781620][ T9000] ? clear_bhb_loop+0x50/0xa0 [ 564.781642][ T9000] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 564.781676][ T9000] RIP: 0033:0x7f616059c629 [ 564.781696][ T9000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.781715][ T9000] RSP: 002b:00007f6161517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.781740][ T9000] RAX: ffffffffffffffda RBX: 00007f6160815fa0 RCX: 00007f616059c629 [ 564.781757][ T9000] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000004 [ 564.781773][ T9000] RBP: 00007f6161517090 R08: 0000000000000000 R09: 0000000000000000 [ 564.781787][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.781801][ T9000] R13: 00007f6160816038 R14: 00007f6160815fa0 R15: 00007ffca1d816e8 [ 564.781821][ T9000] [ 565.044160][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 565.222009][ T9007] netlink: 'syz.6.2745': attribute type 12 has an invalid length. [ 565.681593][ T332] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 565.818217][ T36] kauditd_printk_skb: 416 callbacks suppressed [ 565.818238][ T36] audit: type=1400 audit(1788200879.960:44269): avc: denied { name_bind } for pid=9031 comm="syz.9.2753" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 565.857799][ T36] audit: type=1400 audit(1788200879.988:44270): avc: denied { node_bind } for pid=9031 comm="syz.9.2753" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 565.900003][ T332] usb 6-1: Using ep0 maxpacket: 16 [ 565.915693][ T332] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.930856][ T36] audit: type=1400 audit(1788200880.016:44271): avc: denied { create } for pid=9031 comm="syz.9.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 565.937581][ T332] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.990633][ T332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.001306][ T36] audit: type=1400 audit(1788200880.016:44272): avc: denied { read write } for pid=9031 comm="syz.9.2753" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.033503][ T332] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.046132][ T9040] netlink: 'syz.7.2756': attribute type 12 has an invalid length. [ 566.047599][ T36] audit: type=1400 audit(1788200880.016:44273): avc: denied { read write open } for pid=9031 comm="syz.9.2753" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.067275][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.088991][ T332] usb 6-1: Product: syz [ 566.093258][ T332] usb 6-1: Manufacturer: syz [ 566.100891][ T332] usb 6-1: SerialNumber: syz [ 566.106131][ T36] audit: type=1400 audit(1788200880.016:44274): avc: denied { read write } for pid=9031 comm="syz.9.2753" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.132134][ T36] audit: type=1400 audit(1788200880.016:44275): avc: denied { read write open } for pid=9031 comm="syz.9.2753" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.158850][ T36] audit: type=1400 audit(1788200880.016:44276): avc: denied { ioctl } for pid=9031 comm="syz.9.2753" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf7b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.187000][ T36] audit: type=1400 audit(1788200880.035:44277): avc: denied { ioctl } for pid=9031 comm="syz.9.2753" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf7b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 566.260066][ T36] audit: type=1400 audit(1788200880.035:44278): avc: denied { read write } for pid=5343 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.567572][ T9057] cgroup: Setting release_agent not allowed [ 566.633892][ T332] usb 6-1: 0:2 : does not exist [ 567.101214][ T9071] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2768'. [ 567.710560][ T332] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 567.733240][ T332] usb 6-1: USB disconnect, device number 122 [ 567.771663][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 568.379597][ T12] tipc: Subscription rejected, illegal request [ 568.502751][ T9092] netlink: 'syz.9.2777': attribute type 4 has an invalid length. [ 568.847186][ T332] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 569.009632][ T332] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 569.019561][ T332] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 569.029621][ T332] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.046467][ T332] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 569.056187][ T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.064356][ T332] usb 10-1: Product: syz [ 569.068648][ T332] usb 10-1: Manufacturer: syz [ 569.073517][ T332] usb 10-1: SerialNumber: syz [ 569.088349][ T332] hub 10-1:1.0: bad descriptor, ignoring hub [ 569.122318][ T332] hub 10-1:1.0: probe with driver hub failed with error -5 [ 569.173581][ T9101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:989 [ 569.315235][ T332] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 569.540323][ T748] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 569.566195][ T9096] kvm: kvm [9095]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006f) = 0x6 [ 569.742562][ T748] usb 6-1: Using ep0 maxpacket: 16 [ 569.750178][ T748] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 569.758983][ T748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.769159][ T748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.781459][ T748] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.790661][ T748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.798966][ T748] usb 6-1: Product: syz [ 569.803205][ T748] usb 6-1: Manufacturer: syz [ 569.807883][ T748] usb 6-1: SerialNumber: syz [ 569.838562][ T635] usb 10-1: USB disconnect, device number 45 [ 569.846628][ T635] usblp0: removed [ 570.248296][ T748] usb 6-1: 0:2 : does not exist [ 570.936284][ T31] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 571.106830][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 571.126094][ T31] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 571.145268][ T31] usb 10-1: config 0 has no interface number 0 [ 571.160116][ T31] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 571.171406][ T36] kauditd_printk_skb: 510 callbacks suppressed [ 571.171425][ T36] audit: type=1400 audit(1788200884.988:44789): avc: denied { read write } for pid=5343 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.204993][ T31] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 571.217632][ T36] audit: type=1400 audit(1788200884.988:44790): avc: denied { read write open } for pid=5343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.234844][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.271492][ T31] usb 10-1: Product: syz [ 571.276648][ T36] audit: type=1400 audit(1788200884.988:44791): avc: denied { ioctl } for pid=5343 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 571.280101][ T31] usb 10-1: Manufacturer: syz [ 571.329447][ T36] audit: type=1400 audit(1788200885.007:44792): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.341466][ T31] usb 10-1: SerialNumber: syz [ 571.358597][ T36] audit: type=1400 audit(1788200885.007:44793): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.390106][ T36] audit: type=1400 audit(1788200885.007:44794): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.398921][ T31] usb 10-1: config 0 descriptor?? [ 571.419830][ T36] audit: type=1400 audit(1788200885.016:44795): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.446734][ T36] audit: type=1400 audit(1788200885.016:44796): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.465561][ T9133] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 571.475738][ T748] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 571.500734][ T36] audit: type=1400 audit(1788200885.016:44797): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.533212][ T748] usb 6-1: USB disconnect, device number 123 [ 571.550257][ T36] audit: type=1400 audit(1788200885.016:44798): avc: denied { ioctl } for pid=9132 comm="syz.9.2795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.705655][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 571.736663][ T9133] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 571.822522][ T9161] tipc: Enabling of bearer rejected, failed to enable media [ 571.971569][ T9165] fuse: Unknown parameter 'rootmode940000000000000000040000' [ 572.428512][ T374] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 572.591548][ T374] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 572.600625][ T374] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 572.613085][ T374] usb 6-1: config 220 has no interface number 2 [ 572.619450][ T374] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 572.652906][ T374] usb 6-1: config 220 interface 0 has no altsetting 0 [ 572.659895][ T374] usb 6-1: config 220 interface 76 has no altsetting 0 [ 572.666919][ T374] usb 6-1: config 220 interface 1 has no altsetting 0 [ 572.678141][ T374] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 572.698252][ T374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.716311][ T374] usb 6-1: Product: syz [ 572.726926][ T374] usb 6-1: Manufacturer: syz [ 572.737617][ T374] usb 6-1: SerialNumber: syz [ 572.968550][ T374] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 572.975139][ T374] usb 6-1: No valid video chain found. [ 572.980816][ T374] usb 6-1: selecting invalid altsetting 0 [ 572.992802][ T374] usb 6-1: USB disconnect, device number 124 [ 573.003237][ T9191] veth0_to_team: entered promiscuous mode [ 573.803548][ T748] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 573.967347][ T748] usb 6-1: not running at top speed; connect to a high speed hub [ 573.986973][ T748] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 573.998529][ T748] usb 6-1: config 1 interface 0 has no altsetting 0 [ 574.811914][ T31] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 574.822368][ T31] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 574.833716][ T31] asix 10-1:0.188: probe with driver asix failed with error -71 [ 574.855302][ T31] usb 10-1: USB disconnect, device number 46 [ 576.095150][ T332] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 576.254971][ T332] usb 10-1: Using ep0 maxpacket: 16 [ 576.263807][ T332] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 576.274716][ T332] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.286699][ T332] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.301764][ T332] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.311659][ T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.320540][ T332] usb 10-1: Product: syz [ 576.326532][ T332] usb 10-1: Manufacturer: syz [ 576.332401][ T332] usb 10-1: SerialNumber: syz [ 576.568955][ T36] kauditd_printk_skb: 410 callbacks suppressed [ 576.568976][ T36] audit: type=1400 audit(1788200890.055:45209): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 576.600688][ T36] audit: type=1400 audit(1788200890.055:45210): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 576.739552][ T748] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 576.762990][ T36] audit: type=1400 audit(1788200890.223:45211): avc: denied { read write } for pid=8952 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.787555][ T748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.802259][ T748] usb 6-1: Product: syz [ 576.815970][ T748] usb 6-1: can't set config #1, error -71 [ 576.817141][ T36] audit: type=1400 audit(1788200890.223:45212): avc: denied { read write open } for pid=8952 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.841728][ T748] usb 6-1: USB disconnect, device number 125 [ 576.858640][ T36] audit: type=1400 audit(1788200890.223:45213): avc: denied { ioctl } for pid=8952 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.905247][ T36] audit: type=1400 audit(1788200890.270:45214): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 576.948341][ T36] audit: type=1400 audit(1788200890.270:45215): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 576.974468][ T36] audit: type=1400 audit(1788200890.270:45216): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.000562][ T36] audit: type=1400 audit(1788200890.270:45217): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.027110][ T36] audit: type=1400 audit(1788200890.270:45218): avc: denied { ioctl } for pid=9237 comm="syz.9.2834" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.053380][ T332] usb 10-1: 0:2 : does not exist [ 577.074360][ T332] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 577.095414][ T332] usb 10-1: USB disconnect, device number 47 [ 577.144505][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 577.630094][ T31] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 577.800468][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 577.808732][ T31] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 577.820798][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 577.827662][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 577.836994][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.854088][ T31] usb 6-1: config 0 descriptor?? [ 578.310168][ T31] wacom 0003:056A:4004.0067: unknown main item tag 0x0 [ 578.317819][ T31] wacom 0003:056A:4004.0067: unknown main item tag 0x0 [ 578.341559][ T31] wacom 0003:056A:4004.0067: unknown main item tag 0x0 [ 578.352183][ T31] wacom 0003:056A:4004.0067: hidraw0: USB HID v7.02 Device [HID 056a:4004] on usb-dummy_hcd.5-1/input0 [ 578.376055][ T9264] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 578.429349][ T635] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 578.546766][ T374] usb 6-1: USB disconnect, device number 126 [ 578.612158][ T635] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.631229][ T635] usb 10-1: config 0 has no interface number 0 [ 578.641964][ T635] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.695043][ T635] usb 10-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.717963][ T635] usb 10-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.734485][ T635] usb 10-1: config 0 interface 1 has no altsetting 0 [ 578.742927][ T635] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 578.752323][ T635] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.765415][ T635] usb 10-1: config 0 descriptor?? [ 579.009134][ T9261] netlink: 'syz.9.2840': attribute type 16 has an invalid length. [ 579.103076][ T9281] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 579.238244][ T635] usbhid 10-1:0.1: can't add hid device: -71 [ 579.252819][ T635] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 579.253124][ T9285] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 579.287161][ T635] usb 10-1: USB disconnect, device number 48 [ 580.017505][ T635] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 580.135726][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2862'. [ 580.198711][ T635] usb 6-1: Using ep0 maxpacket: 16 [ 580.207416][ T635] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 580.218090][ T635] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.235624][ T635] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.284745][ T635] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.293980][ T635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.326525][ T635] usb 6-1: Product: syz [ 580.337330][ T635] usb 6-1: Manufacturer: syz [ 580.342082][ T635] usb 6-1: SerialNumber: syz [ 580.502587][ T9315] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 581.100336][ T635] usb 6-1: 0:2 : does not exist [ 581.116773][ T635] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 581.135386][ T635] usb 6-1: USB disconnect, device number 127 [ 581.136829][ T373] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 581.185497][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 581.307301][ T373] usb 10-1: Using ep0 maxpacket: 16 [ 581.315078][ T373] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 581.323962][ T373] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.334203][ T373] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.346665][ T373] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.355991][ T373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.364216][ T373] usb 10-1: Product: syz [ 581.368505][ T373] usb 10-1: Manufacturer: syz [ 581.373256][ T373] usb 10-1: SerialNumber: syz [ 581.816043][ T373] usb 10-1: 0:2 : does not exist [ 582.035139][ T36] kauditd_printk_skb: 395 callbacks suppressed [ 582.035161][ T36] audit: type=1400 audit(1788200895.177:45614): avc: denied { ioctl } for pid=9320 comm="syz.9.2866" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 582.067192][ T36] audit: type=1400 audit(1788200895.215:45615): avc: denied { ioctl } for pid=9320 comm="syz.9.2866" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 582.124025][ T36] audit: type=1400 audit(1788200895.262:45616): avc: denied { read write } for pid=8952 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.181209][ T36] audit: type=1400 audit(1788200895.262:45617): avc: denied { read write open } for pid=8952 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.207648][ T36] audit: type=1400 audit(1788200895.262:45618): avc: denied { ioctl } for pid=8952 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 582.234288][ T36] audit: type=1400 audit(1788200895.299:45619): avc: denied { create } for pid=9322 comm="syz.5.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.254899][ T36] audit: type=1400 audit(1788200895.299:45620): avc: denied { ioctl } for pid=9322 comm="syz.5.2867" path="socket:[73993]" dev="sockfs" ino=73993 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.280963][ T36] audit: type=1400 audit(1788200895.299:45621): avc: denied { ioctl } for pid=9322 comm="syz.5.2867" path="socket:[73993]" dev="sockfs" ino=73993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.306673][ T36] audit: type=1400 audit(1788200895.299:45622): avc: denied { sys_module } for pid=9322 comm="syz.5.2867" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 582.328735][ T36] audit: type=1400 audit(1788200895.299:45623): avc: denied { ioctl } for pid=9322 comm="syz.5.2867" path="socket:[73993]" dev="sockfs" ino=73993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.962814][ T373] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 582.993004][ T373] usb 10-1: USB disconnect, device number 49 [ 583.056331][ T9340] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 583.079397][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 583.822656][ T31] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 583.846556][ T9359] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 584.012103][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.035870][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.052193][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.067814][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.100330][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.121285][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.133615][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.153493][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.176020][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.195707][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.204751][ T31] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 584.227735][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.395879][ T9367] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 584.476271][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.502110][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.528015][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.547704][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.589894][ T9351] usb usb7: selecting invalid altsetting 7 [ 584.829768][ T31] usb 10-1: string descriptor 0 read error: -71 [ 584.837518][ T31] usb 10-1: USB disconnect, device number 50 [ 585.101747][ T635] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 585.261591][ T635] usb 6-1: Using ep0 maxpacket: 8 [ 585.272133][ T635] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.291179][ T635] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 585.299561][ T635] usb 6-1: can't read configurations, error -71 [ 585.485496][ T860] usb 10-1: new low-speed USB device number 51 using dummy_hcd [ 585.645300][ T860] usb 10-1: Invalid ep0 maxpacket: 32 [ 585.783881][ T860] usb 10-1: new low-speed USB device number 52 using dummy_hcd [ 585.944381][ T860] usb 10-1: Invalid ep0 maxpacket: 32 [ 585.950495][ T860] usb usb10-port1: attempt power cycle [ 586.108032][ T9382] devtmpfs: Too few inodes for current use [ 586.316808][ T860] usb 10-1: new low-speed USB device number 53 using dummy_hcd [ 586.339195][ T860] usb 10-1: Invalid ep0 maxpacket: 32 [ 586.476710][ T635] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 586.484284][ T860] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 586.510060][ T860] usb 10-1: Invalid ep0 maxpacket: 32 [ 586.516076][ T860] usb usb10-port1: unable to enumerate USB device [ 586.647224][ T635] usb 6-1: Using ep0 maxpacket: 32 [ 586.655776][ T635] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 586.665804][ T635] usb 6-1: config 0 has no interface number 0 [ 586.672803][ T635] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 586.683847][ T635] usb 6-1: config 0 interface 196 has no altsetting 0 [ 586.696081][ T635] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 586.706656][ T635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.715615][ T635] usb 6-1: Product: syz [ 586.719917][ T635] usb 6-1: Manufacturer: syz [ 586.725849][ T635] usb 6-1: SerialNumber: syz [ 586.741876][ T635] usb 6-1: config 0 descriptor?? [ 586.749334][ T9382] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 587.190950][ T37] INFO: task udevd:375 blocked for more than 122 seconds. [ 587.201306][ T37] Not tainted syzkaller #0 [ 587.207551][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.217288][ T37] task:udevd state:D stack:0 pid:375 tgid:375 ppid:111 flags:0x00000000 [ 587.228738][ T37] Call Trace: [ 587.232102][ T37] [ 587.235726][ T37] __schedule+0x134f/0x1ea0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.241930][ T37] ? __sched_text_start+0x10/0x10 [ 587.254614][ T37] ? __kasan_check_write+0x18/0x20 [ 587.274095][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 587.280471][ T37] ? __kasan_check_write+0x18/0x20 [ 587.285680][ T37] ? trace_contention_begin+0xc0/0xc0 [ 587.302016][ T37] schedule+0xc5/0x240 [ 587.306188][ T37] schedule_preempt_disabled+0x14/0x30 [ 587.326765][ T37] __mutex_lock+0x960/0x1bb0 [ 587.339693][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 587.346624][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 587.352500][ T37] ? __kasan_check_write+0x18/0x20 [ 587.357664][ T37] ? _raw_spin_lock+0x92/0x120 [ 587.362501][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 587.367751][ T37] ? __asan_memcpy+0x5a/0x80 [ 587.372400][ T37] __mutex_lock_slowpath+0xe/0x20 [ 587.377550][ T37] mutex_lock+0x113/0x1d0 [ 587.381920][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 587.386843][ T37] ? disk_block_events+0xaf/0x120 [ 587.391911][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 587.397243][ T37] bdev_open+0xd5/0xd60 [ 587.401438][ T37] blkdev_open+0x3d1/0x560 [ 587.405915][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 587.410893][ T37] do_dentry_open+0x97b/0x1510 [ 587.415741][ T37] vfs_open+0x86/0x240 [ 587.419841][ T37] ? __cfi_vfs_open+0x10/0x10 [ 587.424546][ T37] ? may_open+0x352/0x430 [ 587.428934][ T37] path_openat+0x2bb1/0x34f0 [ 587.433569][ T37] ? stack_depot_save_flags+0x38/0x800 [ 587.439074][ T37] ? kasan_save_track+0x3e/0x80 [ 587.443973][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 587.449319][ T37] ? do_sys_openat2+0xda/0x1d0 [ 587.454134][ T37] ? __x64_sys_openat+0x13a/0x170 [ 587.459208][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 587.464012][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 587.470153][ T37] ? do_filp_open+0x440/0x440 [ 587.474879][ T37] do_filp_open+0x1f5/0x440 [ 587.479434][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 587.484493][ T37] ? alloc_fd+0x4e6/0x5a0 [ 587.488864][ T37] do_sys_openat2+0x134/0x1d0 [ 587.493580][ T37] ? do_sys_open+0x100/0x100 [ 587.498198][ T37] __x64_sys_openat+0x13a/0x170 [ 587.503180][ T37] x64_sys_call+0xe69/0x2ee0 [ 587.507833][ T37] do_syscall_64+0x57/0xf0 [ 587.512293][ T37] ? clear_bhb_loop+0x50/0xa0 [ 587.517003][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 587.522949][ T37] RIP: 0033:0x7f9899aa7407 [ 587.527386][ T37] RSP: 002b:00007ffdff881bc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 587.535878][ T37] RAX: ffffffffffffffda RBX: 00007f989a18e880 RCX: 00007f9899aa7407 [ 587.543895][ T37] RDX: 00000000000a0800 RSI: 000055f054791320 RDI: ffffffffffffff9c [ 587.551894][ T37] RBP: 000055f05453e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 587.559926][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f054780f70 [ 587.567948][ T37] R13: 000055f05477f0f0 R14: 0000000000000000 R15: 000055f054780f70 [ 587.575964][ T37] [ 587.580823][ T37] INFO: task syz.0.2135:7233 blocked for more than 123 seconds. [ 587.581398][ T635] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 587.596030][ T37] Not tainted syzkaller #0 [ 587.601092][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.609822][ T37] task:syz.0.2135 state:D stack:0 pid:7233 tgid:7232 ppid:5008 flags:0x00004004 [ 587.620072][ T37] Call Trace: [ 587.623380][ T37] [ 587.626340][ T37] __schedule+0x134f/0x1ea0 [ 587.630897][ T37] ? __sched_text_start+0x10/0x10 [ 587.635957][ T37] ? kasan_save_track+0x4f/0x80 [ 587.640907][ T37] ? kasan_save_track+0x3e/0x80 [ 587.645794][ T37] ? kasan_save_free_info+0x4a/0x60 [ 587.651046][ T37] ? __kasan_slab_free+0x5f/0x80 [ 587.656021][ T37] ? kfree+0x158/0x440 [ 587.660188][ T37] ? bdev_disk_changed+0x825/0x1610 [ 587.665427][ T37] ? loop_reread_partitions+0x64/0x110 [ 587.670939][ T37] ? loop_configure+0x1068/0x13a0 [ 587.675994][ T37] ? lo_ioctl+0xa8b/0x2070 [ 587.680450][ T37] ? blkdev_ioctl+0x54b/0x690 [ 587.685183][ T37] ? __se_sys_ioctl+0x135/0x1b0 [ 587.690085][ T37] ? __kasan_check_write+0x18/0x20 [ 587.695290][ T37] schedule+0xc5/0x240 [ 587.699402][ T37] io_schedule+0x88/0xe0 [ 587.703821][ T37] folio_wait_bit_common+0x6d8/0x950 [ 587.709148][ T37] ? folio_wait_bit+0x50/0x50 [ 587.713887][ T37] ? __filemap_get_folio+0x938/0xba0 [ 587.719208][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 587.724900][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 587.730739][ T37] ? efi_partition+0x450/0x3280 [ 587.735651][ T37] do_read_cache_folio+0x14d/0x4c0 [ 587.740789][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 587.746306][ T37] read_cache_folio+0x54/0x90 [ 587.751060][ T37] read_part_sector+0xcc/0x250 [ 587.755873][ T37] msdos_partition+0x116/0x2fd0 [ 587.760762][ T37] ? __cfi_efi_partition+0x10/0x10 [ 587.765914][ T37] ? vsnprintf+0x19ef/0x1ad0 [ 587.770572][ T37] ? snprintf+0xe9/0x140 [ 587.774861][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 587.780219][ T37] ? __cfi_snprintf+0x10/0x10 [ 587.784941][ T37] ? bdev_disk_changed+0x501/0x1610 [ 587.790247][ T37] bdev_disk_changed+0x825/0x1610 [ 587.795333][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 587.800873][ T37] ? __kasan_check_write+0x18/0x20 [ 587.806020][ T37] ? mutex_unlock+0x90/0x240 [ 587.810666][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 587.815728][ T37] loop_reread_partitions+0x64/0x110 [ 587.821061][ T37] loop_configure+0x1068/0x13a0 [ 587.825946][ T37] ? __cfi_loop_configure+0x10/0x10 [ 587.831213][ T37] ? stack_trace_save+0xaa/0x100 [ 587.836179][ T37] ? __kasan_check_write+0x18/0x20 [ 587.841349][ T37] lo_ioctl+0xa8b/0x2070 [ 587.845616][ T37] ? kasan_save_track+0x4f/0x80 [ 587.850502][ T37] ? kasan_save_track+0x3e/0x80 [ 587.855418][ T37] ? common_lsm_audit+0x14fe/0x18e0 [ 587.860650][ T37] ? slow_avc_audit+0x19f/0x220 [ 587.865542][ T37] ? avc_has_extended_perms+0x8e1/0xe70 [ 587.871117][ T37] ? ioctl_has_perm+0x39a/0x500 [ 587.876032][ T37] ? selinux_file_ioctl+0x732/0x1480 [ 587.881348][ T37] ? security_file_ioctl+0x87/0x110 [ 587.886583][ T37] ? __se_sys_ioctl+0x53/0x1b0 [ 587.891385][ T37] ? __x64_sys_ioctl+0x7f/0xa0 [ 587.896252][ T37] ? x64_sys_call+0x1878/0x2ee0 [ 587.901228][ T37] ? do_syscall_64+0x57/0xf0 [ 587.905862][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 587.911971][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 587.916718][ T37] ? __kasan_slab_free+0x6a/0x80 [ 587.921686][ T37] ? kmem_cache_free+0x1bd/0x4f0 [ 587.926680][ T37] ? __wake_up+0x169/0x190 [ 587.931133][ T37] ? audit_log_end+0x1f1/0x240 [ 587.935938][ T37] ? audit_log_end+0x1f1/0x240 [ 587.940755][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 587.946771][ T37] ? common_lsm_audit+0x14fe/0x18e0 [ 587.952012][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 587.958036][ T37] ? __cfi_common_lsm_audit+0x10/0x10 [ 587.963458][ T37] ? __kasan_slab_free+0x6a/0x80 [ 587.968432][ T37] ? kmem_cache_free+0x1bd/0x4f0 [ 587.973424][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 587.979089][ T37] ? avc_node_kill+0x29e/0x2f0 [ 587.983929][ T37] ? slow_avc_audit+0x19f/0x220 [ 587.988813][ T37] ? __cfi_slow_avc_audit+0x10/0x10 [ 587.994107][ T37] ? avc_denied+0x112/0x180 [ 587.998642][ T37] ? avc_has_extended_perms+0x8e1/0xe70 [ 588.004230][ T37] ? avc_has_extended_perms+0x962/0xe70 [ 588.009807][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 588.015053][ T37] ? do_vfs_ioctl+0x182d/0x2010 [ 588.019945][ T37] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 588.025683][ T37] ? schedule+0xc5/0x240 [ 588.029991][ T37] ? futex_unqueue+0x136/0x160 [ 588.034809][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 588.040040][ T37] ? blkdev_common_ioctl+0x11d8/0x2730 [ 588.045540][ T37] ? blkdev_bszset+0x230/0x230 [ 588.050330][ T37] ? __kasan_check_read+0x15/0x20 [ 588.055410][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 588.060371][ T37] ? futex_wait+0x2ac/0x7b0 [ 588.064921][ T37] ? __cfi_do_futex+0x10/0x10 [ 588.069629][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 588.074350][ T37] blkdev_ioctl+0x54b/0x690 [ 588.078899][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 588.083954][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 588.088948][ T37] ? security_file_ioctl+0x3e/0x110 [ 588.094172][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 588.099241][ T37] __se_sys_ioctl+0x135/0x1b0 [ 588.103958][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 588.108591][ T37] x64_sys_call+0x1878/0x2ee0 [ 588.113302][ T37] do_syscall_64+0x57/0xf0 [ 588.117756][ T37] ? clear_bhb_loop+0x50/0xa0 [ 588.122492][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 588.128424][ T37] RIP: 0033:0x7f377359c629 [ 588.132885][ T37] RSP: 002b:00007f3774527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.141348][ T37] RAX: ffffffffffffffda RBX: 00007f3773815fa0 RCX: 00007f377359c629 [ 588.149355][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 588.157415][ T37] RBP: 00007f3773632b39 R08: 0000000000000000 R09: 0000000000000000 [ 588.165437][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.173531][ T37] R13: 00007f3773816038 R14: 00007f3773815fa0 R15: 00007fff01a2a0f8 [ 588.181561][ T37] [ 588.214093][ T37] NMI backtrace for cpu 1 [ 588.214116][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3 [ 588.214147][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.214161][ T37] Call Trace: [ 588.214170][ T37] [ 588.214179][ T37] __dump_stack+0x21/0x30 [ 588.214213][ T37] dump_stack_lvl+0x140/0x1c0 [ 588.214242][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 588.214272][ T37] dump_stack+0x19/0x20 [ 588.214297][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 588.214339][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 588.214367][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 588.214401][ T37] ? sched_show_task+0x371/0x530 [ 588.214428][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 588.214453][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 588.214481][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 588.214508][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 588.214544][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 588.214571][ T37] watchdog+0xdad/0xf00 [ 588.214602][ T37] ? __kasan_check_write+0x18/0x20 [ 588.214632][ T37] ? __cfi_watchdog+0x10/0x10 [ 588.214662][ T37] ? __kasan_check_read+0x15/0x20 [ 588.214687][ T37] ? __kthread_parkme+0x137/0x180 [ 588.214720][ T37] ? schedule+0xc5/0x240 [ 588.214744][ T37] kthread+0x2c9/0x370 [ 588.214765][ T37] ? __cfi_watchdog+0x10/0x10 [ 588.214797][ T37] ? __cfi_kthread+0x10/0x10 [ 588.214818][ T37] ret_from_fork+0x67/0xa0 [ 588.214847][ T37] ? __cfi_kthread+0x10/0x10 [ 588.214866][ T37] ret_from_fork_asm+0x1a/0x30 [ 588.214897][ T37] [ 588.214905][ T37] Sending NMI from CPU 1 to CPUs 0: [ 588.380514][ C0] NMI backtrace for cpu 0 [ 588.380543][ C0] CPU: 0 UID: 0 PID: 8950 Comm: syz-executor Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3 [ 588.380567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.380578][ C0] RIP: 0010:unmap_page_range+0xf39/0x3fa0 [ 588.380608][ C0] Code: 00 00 48 8b 44 24 40 4c 8d 70 18 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 e8 e7 11 10 00 <4d> 8b 3e 41 83 e7 01 31 ff 4c 89 fe e8 76 3d b8 ff 48 8b 44 24 68 [ 588.380623][ C0] RSP: 0018:ffffc9000ae9f540 EFLAGS: 00000246 [ 588.380639][ C0] RAX: dffffc0000000000 RBX: 1ffffd40008f9dd3 RCX: ffff888114651300 [ 588.380653][ C0] RDX: 0000000000000000 RSI: 0000000000032000 RDI: 0000000000001000 [ 588.380664][ C0] RBP: ffffc9000ae9f770 R08: ffffea00047cee87 R09: 1ffffd40008f9dd0 [ 588.380679][ C0] R10: dffffc0000000000 R11: fffff940008f9dd1 R12: ffffea00047cee80 [ 588.380691][ C0] R13: 1ffff11021cca3c9 R14: ffffea00047cee98 R15: 0000000000032000 [ 588.380704][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 588.380718][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.380730][ C0] CR2: 000055556833e948 CR3: 0000000126dc4000 CR4: 00000000003526b0 [ 588.380745][ C0] DR0: 0000000000000000 DR1: 0000000000000044 DR2: 0000000000000000 [ 588.380756][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 588.380767][ C0] Call Trace: [ 588.380773][ C0] [ 588.380785][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 588.380807][ C0] ? uprobe_munmap+0x181/0x490 [ 588.380830][ C0] unmap_vmas+0x2d2/0x3f0 [ 588.380850][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 588.380871][ C0] ? __kasan_check_write+0x18/0x20 [ 588.380891][ C0] exit_mmap+0x29c/0xbc0 [ 588.380913][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 588.380935][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 588.380957][ C0] ? uprobe_clear_state+0x2cd/0x340 [ 588.380980][ C0] __mmput+0x93/0x320 [ 588.381002][ C0] ? mmput+0x4d/0x170 [ 588.381016][ C0] mmput+0x55/0x170 [ 588.381030][ C0] do_exit+0x93f/0x2650 [ 588.381050][ C0] ? __cfi_do_exit+0x10/0x10 [ 588.381067][ C0] ? _raw_read_unlock+0x16/0x40 [ 588.381082][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 588.381098][ C0] ? remove_wait_queue+0x132/0x150 [ 588.381124][ C0] ? __kasan_check_write+0x18/0x20 [ 588.381142][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 588.381157][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 588.381173][ C0] do_group_exit+0x229/0x2f0 [ 588.381190][ C0] ? __kasan_check_write+0x18/0x20 [ 588.381210][ C0] get_signal+0x1398/0x14e0 [ 588.381231][ C0] arch_do_signal_or_restart+0xbc/0x760 [ 588.381257][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 588.381281][ C0] ? __kasan_check_read+0x15/0x20 [ 588.381299][ C0] syscall_exit_to_user_mode+0x57/0xb0 [ 588.381322][ C0] do_syscall_64+0x63/0xf0 [ 588.381336][ C0] ? clear_bhb_loop+0x50/0xa0 [ 588.381352][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 588.381377][ C0] RIP: 0033:0x7f385b157817 [ 588.381390][ C0] Code: Unable to access opcode bytes at 0x7f385b1577ed. [ 588.381399][ C0] RSP: 002b:00007ffdc86e9250 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 588.381415][ C0] RAX: fffffffffffffe00 RBX: 000055557dcc8500 RCX: 00007f385b157817 [ 588.381427][ C0] RDX: 0000000040000000 RSI: 00007ffdc86e92ac RDI: ffffffffffffffff [ 588.381440][ C0] RBP: 00007ffdc86e92ac R08: 0000000000000000 R09: 0000000000000000 [ 588.381450][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 588.381460][ C0] R13: 0000000000000003 R14: 00007ffdc86e9508 R15: 0000000000000000 [ 588.381473][ C0] [ 588.748042][ T635] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 588.776778][ T635] usb 6-1: USB disconnect, device number 4 [ 588.878959][ T635] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 589.009836][ T36] kauditd_printk_skb: 392 callbacks suppressed [ 589.016178][ T36] audit: type=1400 audit(1788200901.716:46016): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 589.082413][ T36] audit: type=1400 audit(1788200901.791:46017): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 589.106277][ T330] bridge_slave_1: left allmulticast mode [ 589.112050][ T330] bridge_slave_1: left promiscuous mode [ 589.117715][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.125800][ T330] bridge_slave_0: left allmulticast mode [ 589.131944][ T330] bridge_slave_0: left promiscuous mode [ 589.137619][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.314609][ T330] veth1_macvtap: left promiscuous mode [ 589.320144][ T330] veth0_vlan: left promiscuous mode [ 589.579938][ T330] bridge_slave_1: left allmulticast mode [ 589.585621][ T330] bridge_slave_1: left promiscuous mode [ 589.591327][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.599705][ T330] bridge_slave_0: left allmulticast mode [ 589.605411][ T330] bridge_slave_0: left promiscuous mode [ 589.612232][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.620455][ T330] tipc: Resetting bearer [ 589.638832][ T330] tipc: Disabling bearer [ 589.836521][ T330] tipc: Left network mode [ 589.841875][ T330] veth1_macvtap: left promiscuous mode [ 589.847507][ T330] veth0_vlan: left promiscuous mode [ 592.354702][ T111] udevd[111]: worker [375] /devices/virtual/block/loop8 is taking a long time