last executing test programs: 3.786071119s ago: executing program 3 (id=60): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x1a, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0xb, 0x3, 0xdff1f001, 0x32, 0x7, "bea092df7d4c0ca7bfaff3690900501bb821b1"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0xb, 0x3, 0xdff1f001, 0x32, 0x7, "bea092df7d4c0ca7bfaff3690900501bb821b1"}) 3.775548829s ago: executing program 3 (id=61): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000480)={0x3, 0x2}) r2 = syz_usb_connect$uac1(0x5, 0xde, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x40, 0xe0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf420, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x6, 0x9c, 0x5, 0x6, 0x34}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x3, "92077bf2b1"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0x5}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x2}, @as_header={0x7, 0x24, 0x1, 0x38, 0x0, 0x1002}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, "74ec55ef"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x89, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5a, 0x2, 0x1, {0x7, 0x25, 0x1, 0x2, 0xc2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1ff, 0xfa33, 0x2, "5f01"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x8, 0x97, "3604d7e7ad"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xc, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc, 0x1, 0x6, {0x7, 0x25, 0x1, 0x1, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x5, 0xf7, 0x8}, 0x9d, &(0x7f0000000280)={0x5, 0xf, 0x9d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x4}, @generic={0x79, 0x10, 0xa, "1645739bc1a90d9ee8019014c1ed613e0004ec2dab4e60436b685cf8336f1723f76c60d743a7bf527a34fe4f1d3a98f00a528bbcfa37a4f6fc8a0227af2de98a4c8678795d25dfc4b25c9e86e2fb0ec06f53d71aef8d1daf9e8e0826f34f8bdf495cb749b18efd7c327d3b4f22a6c08087cfb2197666"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8a0fb6e7345ed60f, 0x64, 0xf, 0x2, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x1}]}, 0x1, [{0xf8, &(0x7f0000000340)=@string={0xf8, 0x3, "71fde0fb8395356fef239e3a523fb99ae09c47d8d35ea32b344b244bc68102fccd6b77ed87ea299d7ee556904e65b5cfed99eb521eeb9255d6eb4aded3ea4766232d8a2c23f05853e571e8bd981439ff0745adddecff2db629eb22dc1d01b02c00d99b86e790994d09105e7b4b973c8167d60b41ed9cfdc44a7204db2ec9030662345725e6439ea02155d93bd6455659aea4f675c8647e9e79e8505da6a3f147ec66b3141566d35f68de54aa0f8890ebe969c647388e60c8ca955c1b369287f03eb8aa413ee2abeccd780dbbfc6ee7c352f79cfc0b5012ed65d96ac117a25f4b9e986af956b6e198c10ad8750808dab87128ae5564ce"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "3d488d9e"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x11, 0x7d, {0x7d, 0x4, "788dfc53c7ffb1db6213d4d7a7a14c9cfd14214fe7741d2a690e2f2502d0cc408b7a34f861a08dc643a7cf9e19620ad145c2a7fc2c46ef9d3a96dc01a5d27cea89f19069a4b9ac5d593e5a80ad598a1bf72c2659585580a1c74afcc0c517d7024a14c0fe4901b80387d17e16659fe0da8eefa9a94f5190b6d7199b"}}, &(0x7f0000000580)={0x0, 0x3, 0x76, @string={0x76, 0x3, "ca4a91c3437cdbc8b86231049c14e101b34544182bcbe084f1154aea3ccf449fc629ebc5a6a5bf628373ecfb9e606c28476f1c1a87449de58ef723fd155c181dd4a15b6936cbbcb0170e12405ea3958a9fbdafb961ea9466e335b4377a9fac0549a18d553bc63fedb484cb007b96d67ab15d51d6"}}, &(0x7f0000000600)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x67, 0xf00, 0xe, [0xffff30, 0xc000, 0xf, 0x3fc7]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7f, 0xf, 0x6}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x0, 0x4, "e23ae6f9", "be4c134f"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x58, 0x1, 0x3, 0x5, 0x607}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x3, 0x67, "cd83e0637a3f60a9e53fac764c88c4e64eb7e526043bce2dcf9c496a26cdac0628704f40ba2a4612e8033d64de8e8dfdf7ead6c6fe012f39c2ee1d3db9059fa2cc34faaa0fb7223ef894aa4621647336dc28983870973e3abf6af5c6c8603b4dd2685fb1379c0a"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x100, 0x4}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8b53"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "acc8"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) bind$802154_raw(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x2}}, 0x14) 3.569694651s ago: executing program 0 (id=62): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) fspick(r0, &(0x7f0000000040)='.\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, 0x0, 0x0, 0xfffffffffffffffd}]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 3.431165269s ago: executing program 1 (id=63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000060000001042022eb"], 0xfdef) 3.273856468s ago: executing program 1 (id=64): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x70bd2c, 0x8, {{@in6=@remote, @in=@private=0xa010100}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x40000000]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) timer_create(0xb, 0x0, &(0x7f0000bbdffc)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x16, 0x0, 0xe7}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000a40)=ANY=[], 0x56d) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) shutdown(r3, 0x1) ptrace(0x8, r1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x3}}, 0x30) 3.211010032s ago: executing program 1 (id=65): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x198, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1941, 0x2a}}}}, [@NL80211_ATTR_MAC={0x2c}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x134, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x2, 0xd}}, 0x8, @default, 0x6000, @void, @void, @val={0x3, 0x1, 0x88}, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0xe, 0x1}}, [{0xdd, 0xfa, "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"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x198}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x198, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1941, 0x2a}}}}, [@NL80211_ATTR_MAC={0x2c}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x134, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x2, 0xd}}, 0x8, @default, 0x6000, @void, @void, @val={0x3, 0x1, 0x88}, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0xe, 0x1}}, [{0xdd, 0xfa, "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"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x198}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) ppoll(&(0x7f0000000040)=[{r1, 0x6}, {r1, 0x208}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x60]}, 0x8) 3.184468764s ago: executing program 1 (id=66): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000480)={&(0x7f0000000380)="bedae90e6af28a82ea160bc106e32a424e5af8c20ef22a49658f746a596bbca20159fb9b554682520094a9bf5e022b4891489c0d4b159a3275f20715e590f832c91d5be18aa5782f8184451a19baf712f3beb61c6edf12ca94f3bff53715fc75e427ac2ce432f58675d84d50cdb6973690c4c04c9c17c39caaf52aef0c2956fabdc9493b73fd4d92338b8609c35412bcab01ff8b081bbfda68ed982dd909febd4986b96c5d2cd5ea2dd172bdbf446b10803ab1ec31b96c0e519cf5f04b2179aacc6530af1e68e600e8f2f553479257a9222adb79e1aa9e0c043b823ed91794c7f91781570ebf31b2fb0a14d644fc8ae7bc7025", 0xf3}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c8670f229e0f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x51}], 0x1, 0x5a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="5ee6a7589dcc8c20303fcdaf96541ba4952d8bb6a26a6c26aecf4c263cb04a89ca3114a8a98b1d2dd5a850240314b013164f51c6835a0d972d433bbf2a1506d11d00fe92e7", 0x45, r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x16) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r6, 0x8010aebb, &(0x7f0000000040)={0x8000000, 0xd000}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.554368111s ago: executing program 1 (id=69): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xb, @string={0xb, 0x3, "d689c133dc34cfa811"}}}, 0x0) 2.487985085s ago: executing program 0 (id=70): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="46d1f4123bd08d71f21237be2f0f069aba023c9772c99a7f8fba9c0ad597ce5b12c8e714776bb1ec1b002507441564ca4c621318c1108a9942a2a80ce2074fe495fa30e98422793fd748b177ff447654faf0b0077261791b7f91dd096121e38b702813820ccff84511191eda4b91152ebaf8d9aa90e632fef4f67ceef634e0dceb68ac47f85e3c793f0a9dadd9691f8a1634f51ca999", @ANYRES16=r0, @ANYRESHEX], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000880), 0xffffffffffffffff, 0x80e00) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000008c0)={0x7, 0xa, 0x3, 0xed91, "d7485c356b74606afb6b5cad34a91909beca1774d47d0077a80fcf08ea870c03"}) (async) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) (async) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000090400000103000100092101010001220500"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000009480)={0x2020}, 0x2020) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000900), r3) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4894}, 0x20000000) (async) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e21, 0x6, @loopback, 0x6}, 0x1c) (async) syz_usb_connect$uac1(0x1, 0x95, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x0, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x4, "21288c9aaab4d783"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x80, 0x9, {0x7, 0x25, 0x1, 0x80, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0xa, "d3b62ff456"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x1, 0xa6, {0x7, 0x25, 0x1, 0x2, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0xe, 0x6, 0xb, 0xff, 0x78}, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="050f51000603100b0a1003020800be01020003100b18100a06830000001e00000008c0ff00600000000000ffecfb10010c0400040604000403100b"], 0x1, [{0xfc, &(0x7f0000000740)=@string={0xfc, 0x3, "b734a721ae3c5af9e104f42c87c35c668e5429a524fa9c84a6303a64b0cb2554b09ee1cbbc86c376f4d33194926a5518ad602880aaa78143037b3794c4e5bef47ec41108755acb5dcffcedf3fdb26a9d1872a706fce3271808ae7d2f975374a505771d53d272246b8ad19ff36121d7913e483015300df5e481184367c852e91c5d8a051c006478af394546595733837f39b4ff5b54129d46d89c3d336df1ec9e5dcaa7a877fcd70fe18a65a0b5496a720a9dce5bed48ced1571797c03fd412015ba71cf767b7ee0ccc8b8cde3ecd939fa66c91ee969e13eeacad29851cf2d7a7fb96ddcf71ac9b62104e86acaec40bce4e4284bfb7e855fe9dad"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x554dc072b3590ca6, 0x40, 0x0, 0xfffffff9, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4}, @noop]}}}}}) (async, rerun: 32) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@initdev, @dev}, &(0x7f0000000400)=0xc) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40018008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004081}, 0x0) (async) syz_open_dev$hidraw(&(0x7f00000000c0), 0x15e, 0x802) 2.177592753s ago: executing program 3 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff0200000000000000000003e8000001042022eb"], 0xfdef) 2.101154727s ago: executing program 3 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x7d, 0x4}, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="dd415cbbc2d87087cd", 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r5, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000001240)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101100, 0x80) getdents64(r6, &(0x7f00000001c0)=""/4113, 0x1011) listen(r5, 0x5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)="fc6f20936f450a8440c707bd1dae7ce7cd42d9c8d4119071e5b6a3fe1a57b9343d63b9d4f2ec29e041b0ee273b6631313528", 0x32}], 0x1}}], 0x1, 0x4008085) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.973979725s ago: executing program 3 (id=74): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000500)={0x0, 0xc, 0x4, "bde35eeb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x60, 0xd, 0x2d, {0x2d, 0xb, "75d8f6c1e104582d78d31ea593d3827e8cf89921b23b20bb3019bdf1d16eceac029adc4549c329cbcb9ce2"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x20, 0x9, 0x85, "24b2fcd0e973f0346726bafcf05a47113aca9fad431b21043632383edb122c2e5f9b25865ea6e02d39d932256dffbf1ce425f1f66523382d7bd4804e131383f4adec57598c0abbc44eed9b1e781f2c74632a11e2ec0a1c1a3de132e3db72cb54a90b02335f02c012efa199be07122b2b16a99dd2625be5f1c75be927a4768ed66c62292057"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.823796313s ago: executing program 0 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0xa, 0x3, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x14, 0xde, 0x0, 0x6, [0x7f, 0x7, 0x0, 0x7]}, @noop, @ssrr={0x89, 0xb, 0xae, [@private=0xa010100, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xa6, 0x1, 0x2, [{@multicast1, 0x7}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0xffff}, {@multicast1, 0x5}, {@local, 0x9}, {@remote, 0x1000000}]}, @rr={0x7, 0x1b, 0x8f, [@private=0xa010102, @broadcast, @remote, @multicast2, @private=0xa010102, @broadcast]}]}}}}}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r5) r6 = getuid() r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000001c0000000c00000000000000000000000c001600", @ANYRESDEC=r7], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=@acquire={0x238, 0x17, 0x400, 0x70bd2b, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0xff}, @in=@local, {@in6=@mcast2, @in6=@mcast1, 0x4e24, 0x401, 0x4e23, 0x10, 0xa, 0xa0, 0x20, 0x0, r3, r6}, {{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e22, 0x52c, 0x4e21, 0x0, 0xa, 0x80, 0x80, 0x73, r8, r9}, {0x7, 0x7f, 0x10000, 0x6, 0xd, 0x9, 0x0, 0x9}, {0x6, 0x3, 0x6, 0x5}, 0x7fffffff, 0x6e6bb9, 0x0, 0x0, 0x3}, 0x2, 0x8000, 0x7, 0x70bd2c}, [@mark={0xc, 0x15, {0x35075d, 0x1}}, @algo_comp={0xc9, 0x3, {{'lzjh\x00'}, 0x408, "c64c4b513095e3f3088c1a3b132e0962e324ba6130d12be9681ed953c5ecd9c67e92ba930fe09ebce1834cfd337db344e48d8ce817e5a453809a04fbd1694c6883f22a5ba616c1ff438370ac1d0ab252b3d993c3a2f719fddc0ad62a11472497850883391217d7caac92edbbf51e638d4036f929205aa141c672f2a1e3b22656e9"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @mark={0xc, 0x15, {0x350759, 0x8882}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @tfcpad={0x8, 0x16, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @tmpl={0x4}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x8030) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syzkaller0\x00', 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000010700c11f04000010203010902240001017f500709040009020302000809210f00060122c902040581030002040e08"], &(0x7f0000000580)={0x0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB]}) 1.264179856s ago: executing program 2 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x84b, @remote, 0x68}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x400) ioctl$USBDEVFS_RESET(r1, 0x5514) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (rerun: 32) 1.20156999s ago: executing program 2 (id=77): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="ecf6d58205d59532c96ef85207bc296981de20f434aae0a47d9034027cc0a79c8d0a4b8779394428f7959a48600e04be87950a0870728d239827570b76bb6811678c532fd1e5815a2068dd9c9b6b27e0c2a68574a790f187b0a66e2306f697c8b598dcfbbf43c8f8cf9f29710eab1681f02fd2ff60c86516bbcb9a12e54a2aaca586de99e9f8a8990a64dc28a36271ad75e6037186551e1cd8fa50f0a0b589d4803d6c13185fe5237590954e444517a5b563a2d0f318d2c2851a8a03c7e49a607d4d19a37a78a05deda8", 0xca, 0x4000000, 0x0, 0x0) timer_create(0xa00, 0x0, 0x0) (async) timer_create(0xa00, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000300)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000b00)="f610001fc837c3edc86f2800194d27a5a42cf1880bb51d15e2", 0x19}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.20109402s ago: executing program 2 (id=78): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) fspick(r0, &(0x7f0000000040)='.\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, 0x0, 0x0, 0xfffffffffffffffd}]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 773.834795ms ago: executing program 1 (id=79): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x9, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0x10, 0xc0000000, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x40, 0x8, 0xd, 0xae, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x64, 0x0, 0x72, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x18, 0x3, 0xa, [{@multicast1, 0x10000}, {@multicast1, 0xf21}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}, {@multicast2, 0x7}, {@loopback, 0xe2}]}, @noop]}}}}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x17, 0x3, "0d8f6e"}, &(0x7f0000000140)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x85, 0x3, "f9f38c"}}) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @empty, 0xb}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdr={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x0, 0x9}}}], 0x18}, 0x40050) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @initdev, 0x0}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xc8, r0, 0x100, 0x70bd27, 0x27dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff60, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000820}, 0x8880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x13, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x2202009, &(0x7f0000000180)) 539.673179ms ago: executing program 0 (id=80): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) write$selinux_validatetrans(r1, &(0x7f0000000040)={'system_u:object_r:semanage_store_t:s0', 0x20, 'system_u:object_r:usbmon_device_t:s0', 0x20, 0x4, 0x20, '/sbin/dhclient\x00'}, 0x6f) 411.016536ms ago: executing program 0 (id=81): mount$overlay(0x0, 0x0, 0x0, 0x4008, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mprotect(&(0x7f0000d9b000/0x2000)=nil, 0x2000, 0x0) (async) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000440)={0x0, 0x0}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r9) (async) write$uinput_user_dev(r9, &(0x7f00000004c0)={'syz0\x00', {0x401, 0x9, 0xe, 0x4}, 0x26, [0x800, 0x80000000, 0x0, 0x1, 0x0, 0xa27, 0xf, 0x7, 0x6, 0xffffffff, 0x3, 0x6, 0x8, 0x7, 0x6, 0x8000, 0xb, 0x3, 0x5, 0xaa, 0x2, 0x8, 0xffffc7e9, 0xf1, 0xfffff26e, 0xaa3, 0x6, 0x200, 0x5, 0x25, 0x8, 0xb8a, 0xf, 0x0, 0x4, 0x60ff, 0x8, 0x5, 0x4, 0x4, 0x7, 0x0, 0x8, 0xffffffff, 0x8, 0x81, 0x5, 0xd, 0x800, 0x1, 0xf, 0x2, 0x8, 0x9, 0x1, 0x0, 0x4, 0x1, 0x6, 0xffffff80, 0x97, 0x4, 0x1, 0xfffffffb], [0x6, 0x81, 0x6, 0x8, 0x100, 0xb45, 0x70, 0x5, 0x11e, 0x805, 0x80000000, 0x9, 0x1, 0x8, 0x1, 0x5, 0x4, 0x9, 0x0, 0x5, 0x0, 0xf8, 0x7, 0x3, 0x7ff, 0xfffffff9, 0x2, 0x6, 0xffffff21, 0x3, 0x1, 0x276bd41, 0x0, 0x1ff, 0xfffffe01, 0x10, 0x9, 0x1, 0x7, 0x1, 0xfffffffd, 0x5, 0x8, 0x6, 0x8, 0x0, 0xc49, 0x6, 0xe, 0x10001, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x1, 0x20000000, 0x39ae, 0x4, 0x8, 0x40, 0x7, 0x7, 0x8], [0x3, 0x2fc, 0x7, 0x5, 0x1, 0x10, 0x6, 0x5, 0x1, 0x8, 0x2ff, 0xc, 0x6, 0x4, 0x10001, 0xcb3, 0x1, 0x147e, 0xfffffffc, 0x10000, 0x400, 0x7, 0x8, 0x3, 0x0, 0x5028, 0x1, 0xc4e2, 0x8a, 0x10, 0x1000, 0x9, 0xfffffffc, 0x8, 0xe64, 0x56, 0xbf14, 0x1, 0x8c, 0xa, 0x9, 0xe3c1, 0x1, 0x7, 0xffffffc0, 0x1, 0xf, 0xf, 0xea91, 0x4, 0x6, 0x5, 0x4ad36589, 0x434, 0x6, 0xfffffffd, 0x7, 0x4, 0x80000000, 0x1, 0x4, 0x200000, 0xd4, 0x2], [0xdc, 0x8, 0x0, 0x6, 0x17, 0x5, 0x6, 0x5, 0x7ff, 0x0, 0x1, 0x6, 0xf171ae7b, 0x159a, 0x4, 0x80000001, 0x7, 0xfffffff3, 0x1, 0x7, 0x7b3cd5cc, 0x75, 0x6, 0x6, 0x8f4, 0x3, 0x1, 0x1824, 0x2, 0x5, 0x5, 0x9, 0xdcb, 0x4, 0x9, 0x9, 0x96d, 0x81, 0x1, 0x9, 0xffffffff, 0x8, 0xd1, 0xfffffff8, 0x4, 0xb, 0x4, 0x0, 0x3ff, 0x9, 0x3, 0x5, 0x21b35e69, 0x527, 0x1, 0x7, 0x6, 0x4, 0xc436, 0x7, 0xc, 0x7, 0x0, 0x8]}, 0x45c) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4800) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r12 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r12], 0x20}}, 0x40803) (async) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010005}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x64}) (async) close_range(r0, r0, 0x0) (async) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x24) ioctl$KVM_CAP_VM_TYPES(r13, 0x4068aea3, &(0x7f0000000140)={0xeb, 0x0, 0x3}) 397.435117ms ago: executing program 0 (id=82): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0xb, "aa5b09e8e96f1e736b73438b57f6415b"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 5.69312ms ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@private, @rand_addr, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', r2, 0x7800, 0x10, 0x5, 0x1, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x2f, 0x1, [{0x7, 0x6, "ae923f38"}, {0x0, 0xa, "11d3ac578e38a2e1"}, {0x1, 0xc, "253ff38b0cf947d8471a"}, {0x0, 0xd, "a6baa0cb3f0741ff9895a0"}]}, @timestamp_prespec={0x44, 0xc, 0xc8, 0x3, 0x0, [{@rand_addr=0x64010102, 0xb0b}]}]}}}}}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) 5.23789ms ago: executing program 2 (id=84): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) dup3(r0, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x1, 0x5f3e, 0x81, 0xee, 0xaf, 0x80, 0x5, 0xc, 0x7f, 0x200, 0x6, 0x3, 0x9, 0xa3, 0x3ad3, [0x1ff, 0xcbc]}}) 5.05335ms ago: executing program 2 (id=85): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8c, 0x8, 0x7}}}}}]}}]}}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, 0x0, 0x7) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x10) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200c06"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=86): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x34}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20044804) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000580)={0x0, &(0x7f0000000040)=[@code={0xa, 0x75, {"0f904f0066673666430f3803aed5380000c4a10816ab007000000f01d8400f01cf66baf80cb842210d8eef66bafc0c66b8007066ef650fc76f698f8910968f00000000c7442400ce000000c7442402abfdae8dff2c24b9800000c00f3235004000000f30"}}], 0x75}) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x2, 0x7, 0xfffffffffffffff7, 0x2, 0x7, 0x1, 0x55e, 0x9, 0x3, 0x7fffffffffffffff, 0x2617000000, 0x5, 0x6, 0x0, 0x5], 0x60000, 0x80080}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. [ 20.291835][ T36] audit: type=1400 audit(1770652175.670:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.292883][ T282] cgroup: Unknown subsys name 'net' [ 20.314598][ T36] audit: type=1400 audit(1770652175.670:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.341772][ T36] audit: type=1400 audit(1770652175.710:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.342145][ T282] cgroup: Unknown subsys name 'devices' [ 20.504492][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.510183][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.662077][ T36] audit: type=1400 audit(1770652176.040:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.685274][ T36] audit: type=1400 audit(1770652176.040:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.693710][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.710134][ T36] audit: type=1400 audit(1770652176.040:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.739823][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.741606][ T36] audit: type=1400 audit(1770652176.110:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.775977][ T36] audit: type=1400 audit(1770652176.110:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.801737][ T36] audit: type=1400 audit(1770652176.120:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.827395][ T36] audit: type=1400 audit(1770652176.120:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.015182][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.022253][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.035523][ T289] bridge_slave_0: entered allmulticast mode [ 22.041865][ T289] bridge_slave_0: entered promiscuous mode [ 22.072536][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.079581][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.086660][ T289] bridge_slave_1: entered allmulticast mode [ 22.092814][ T289] bridge_slave_1: entered promiscuous mode [ 22.156699][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.163809][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.170851][ T293] bridge_slave_0: entered allmulticast mode [ 22.177185][ T293] bridge_slave_0: entered promiscuous mode [ 22.183648][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.190684][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.197787][ T293] bridge_slave_1: entered allmulticast mode [ 22.204027][ T293] bridge_slave_1: entered promiscuous mode [ 22.242850][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.249889][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.256982][ T294] bridge_slave_0: entered allmulticast mode [ 22.263163][ T294] bridge_slave_0: entered promiscuous mode [ 22.269489][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.276540][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.283597][ T294] bridge_slave_1: entered allmulticast mode [ 22.289809][ T294] bridge_slave_1: entered promiscuous mode [ 22.315868][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.322917][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.329952][ T295] bridge_slave_0: entered allmulticast mode [ 22.336214][ T295] bridge_slave_0: entered promiscuous mode [ 22.345015][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.352043][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.359102][ T295] bridge_slave_1: entered allmulticast mode [ 22.365418][ T295] bridge_slave_1: entered promiscuous mode [ 22.478967][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.486044][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.493401][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.500854][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.520136][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.527191][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.534478][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.541498][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.557215][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.564276][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.571551][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.578599][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.587644][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.594684][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.601943][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.608995][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.645022][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.652364][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.660096][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.667343][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.675315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.682589][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.689996][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.697309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.713898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.720933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.728595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.735637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.744692][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.751720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.766680][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773891][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.795103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.802135][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.810050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.817088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.835675][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.842729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.850262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.857291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.887507][ T289] veth0_vlan: entered promiscuous mode [ 22.910567][ T294] veth0_vlan: entered promiscuous mode [ 22.917881][ T295] veth0_vlan: entered promiscuous mode [ 22.932156][ T293] veth0_vlan: entered promiscuous mode [ 22.939635][ T289] veth1_macvtap: entered promiscuous mode [ 22.955107][ T294] veth1_macvtap: entered promiscuous mode [ 22.964426][ T295] veth1_macvtap: entered promiscuous mode [ 22.971997][ T293] veth1_macvtap: entered promiscuous mode [ 23.024058][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.145905][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.342494][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.352521][ T66] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.472840][ T352] syzkaller0: entered allmulticast mode [ 23.490435][ T352] syzkaller0: entered promiscuous mode [ 23.493540][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.507396][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.517630][ T351] syzkaller0: left promiscuous mode [ 23.523710][ T351] syzkaller0: left allmulticast mode [ 23.529383][ T31] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 23.538608][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.547415][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 23.558554][ T66] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 23.561316][ T354] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 23.569161][ T31] usb 3-1: config 0 descriptor?? [ 23.583185][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.587141][ T354] rust_binder: 11: no such ref 3 [ 23.592050][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 23.593697][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 23.597552][ T354] rust_binder: 11: no such ref 1 [ 23.610753][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.620545][ T354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 23.624101][ T66] usb 4-1: Product: 姿㎭晎婪⠸ᬑ폢꼏톍⢈ꖚ괝黡㢤夽悩㛺橯㪨흱墸蠀⟒犋✃ጎ聱貪醧咙ᐏ [ 23.655359][ T66] usb 4-1: Manufacturer: ⤙赢秊쯛蜉隓胥款৸⒋༪蜽춝蝥ᴀ馐끵䖥螕춄槒ꁷ澄⎆豝흧魓봇⺏Ꙝ肫軽ɴ♥珃䲜鍭Ѫᝋ浰왘谍훛ꣶݾ犚轱엢℄둽䳩䆒릌퀊ʛᮟᢌ喫ꔡ⩷㼪감鐛鷣ӌ福쌔괵榖娄Ꙣ쫷꜀౼섊姏곲ᮝ⥍컈݋䅉鮑짊㻒輪㥕뢍嬟 [ 23.685848][ T66] usb 4-1: SerialNumber: Ў [ 23.712250][ T361] netlink: 'syz.1.9': attribute type 14 has an invalid length. [ 23.911503][ T66] usb 4-1: 0:2 : does not exist [ 23.919542][ T66] usb 4-1: USB disconnect, device number 2 [ 23.992504][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.996680][ T31] hid-led 0003:0FC5:B080.0001: unknown main item tag 0x0 [ 24.142459][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 24.148710][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 24.157490][ T10] usb 1-1: string descriptor 0 read error: -71 [ 24.163731][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 24.172869][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.181814][ T10] usb 1-1: can't set config #1, error -71 [ 24.188762][ T10] usb 1-1: USB disconnect, device number 2 [ 24.472545][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.632613][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 24.638876][ T66] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 24.648117][ T66] usb 2-1: config 0 has no interface number 0 [ 24.654235][ T66] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 24.663326][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.672821][ T66] usb 2-1: config 0 descriptor?? [ 24.679302][ T66] usb 2-1: NDI device with a latency value of 1 [ 24.692473][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.704200][ T10] usb 3-1: USB disconnect, device number 2 [ 24.760114][ T378] netlink: 'syz.0.14': attribute type 13 has an invalid length. [ 24.835789][ T382] Zero length message leads to an empty skb [ 24.844549][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 24.851015][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.862526][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.872666][ T31] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 24.885628][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 24.892294][ T66] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 24.901413][ T66] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 24.908513][ T31] usb 4-1: string descriptor 0 read error: -22 [ 24.914973][ T66] usb 2-1: USB disconnect, device number 2 [ 24.921027][ T66] ftdi_sio 2-1:0.255: device disconnected [ 24.926906][ T31] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 24.936224][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.149628][ T66] usb 4-1: USB disconnect, device number 3 [ 25.182496][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.332693][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 25.339007][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.349950][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.362875][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 25.371900][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.380469][ T45] usb 1-1: config 0 descriptor?? [ 25.402049][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 25.402079][ T36] audit: type=1400 audit(1770652180.780:135): avc: denied { create } for pid=392 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 25.428013][ T36] audit: type=1400 audit(1770652180.780:136): avc: denied { create } for pid=392 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.454311][ T36] audit: type=1400 audit(1770652180.840:137): avc: denied { mount } for pid=395 comm="syz.1.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 25.482457][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.506634][ T36] audit: type=1400 audit(1770652180.890:138): avc: denied { name_bind } for pid=395 comm="syz.1.22" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.529946][ T36] audit: type=1400 audit(1770652180.910:139): avc: denied { node_bind } for pid=395 comm="syz.1.22" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.551338][ T36] audit: type=1400 audit(1770652180.910:140): avc: denied { bind } for pid=395 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.571095][ T36] audit: type=1400 audit(1770652180.910:141): avc: denied { getopt } for pid=395 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.652020][ T31] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 25.663048][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.669694][ T31] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 25.678970][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.691852][ T31] usb 3-1: config 0 descriptor?? [ 25.697406][ T391] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 25.745670][ T36] audit: type=1400 audit(1770652181.120:142): avc: denied { getopt } for pid=398 comm="syz.3.23" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.795680][ T45] logitech-djreceiver 0003:046D:C537.0002: hidraw0: USB HID v0.05 Device [HID 046d:c537] on usb-dummy_hcd.0-1/input0 [ 26.012460][ T332] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.062509][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.107314][ T31] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 26.114460][ T31] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 26.121492][ T31] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 26.130153][ T31] samsung 0003:0419:0001.0003: hidraw1: USB HID v0.02 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 26.162476][ T332] usb 4-1: Using ep0 maxpacket: 32 [ 26.168766][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.179699][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.189444][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.202245][ T332] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 26.211318][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.225802][ T332] usb 4-1: config 0 descriptor?? [ 26.235539][ T36] audit: type=1400 audit(1770652181.620:143): avc: denied { write } for pid=386 comm="syz.0.18" laddr=fe80::4446:a9ff:fe3b:cffc lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.260457][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 26.268533][ T10] usb 2-1: config 0 has no interface number 0 [ 26.274656][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.285657][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.295406][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 26.304517][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.316875][ T36] audit: type=1400 audit(1770652181.700:144): avc: denied { mounton } for pid=390 comm="syz.2.20" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.316896][ T391] devpts: called with bogus options [ 26.317186][ T10] usb 2-1: config 0 descriptor?? [ 26.342966][ T31] usb 3-1: USB disconnect, device number 3 [ 26.367825][ T66] usb 1-1: USB disconnect, device number 3 [ 26.632599][ T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.641136][ T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.651209][ T332] hid (null): invalid report_size 33680186 [ 26.657173][ T332] hid (null): unknown global tag 0xc [ 26.669217][ T332] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input4 [ 26.681901][ T332] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0004/input/input5 [ 26.695504][ T332] kye 0003:0458:5011.0004: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 26.759365][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0005/input/input6 [ 26.824864][ T10] holtek_kbd 0003:04D9:A055.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 26.912968][ T10] usb 4-1: USB disconnect, device number 4 [ 26.956442][ T364] usb 2-1: USB disconnect, device number 3 [ 27.112500][ T332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.262483][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 27.268777][ T332] usb 3-1: config 0 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 27.279550][ T332] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.290480][ T332] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.303392][ T332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.309991][ T332] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 27.319033][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.327697][ T332] usb 3-1: config 0 descriptor?? [ 27.430434][ T432] fuse: Bad value for 'fd' [ 27.435233][ T433] fuse: Unknown parameter '9t0x0000000000000003' [ 27.533700][ T448] capability: warning: `syz.1.37' uses deprecated v2 capabilities in a way that may be insecure [ 27.792494][ T364] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.802565][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.945008][ T364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.954177][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.962177][ T364] usb 4-1: Product: syz [ 27.966834][ T364] usb 4-1: Manufacturer: syz [ 27.971450][ T364] usb 4-1: SerialNumber: syz [ 27.976433][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.986697][ T10] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 27.996043][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.005263][ T10] usb 2-1: config 0 descriptor?? [ 28.011050][ T10] usb 2-1: unsupported MDLM descriptors [ 28.212319][ T10] usb 2-1: USB disconnect, device number 4 [ 28.741516][ T461] syzkaller1: entered promiscuous mode [ 28.747217][ T461] syzkaller1: entered allmulticast mode [ 29.009441][ T364] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 29.042515][ T332] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.182482][ T332] usb 2-1: device descriptor read/64, error -71 [ 29.422488][ T332] usb 2-1: device descriptor read/64, error -71 [ 29.436762][ T364] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.449208][ T364] usb 4-1: USB disconnect, device number 5 [ 29.455391][ T364] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 29.662467][ T332] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.792477][ T332] usb 2-1: device descriptor read/64, error -71 [ 29.876369][ T31] usb 3-1: USB disconnect, device number 4 [ 30.032498][ T332] usb 2-1: device descriptor read/64, error -71 [ 30.142586][ T332] usb usb2-port1: attempt power cycle [ 30.182471][ T66] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 30.232488][ T364] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.333488][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.344545][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.354287][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.367088][ T66] usb 4-1: New USB device found, idVendor=045e, idProduct=789d, bcdDevice= 0.4f [ 30.376354][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.385348][ T66] usb 4-1: config 0 descriptor?? [ 30.393620][ T364] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 30.405021][ T364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.411636][ T364] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 30.420766][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.429415][ T364] usb 1-1: config 0 descriptor?? [ 30.482504][ T332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 30.503717][ T332] usb 2-1: device descriptor read/8, error -71 [ 30.633487][ T332] usb 2-1: device descriptor read/8, error -71 [ 30.792749][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 30.798737][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.807584][ T66] usb 4-1: USB disconnect, device number 6 [ 30.846973][ T364] elecom 0003:056E:00FB.0006: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.0-1/input0 [ 30.872482][ T332] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.884128][ T492] ======================================================= [ 30.884128][ T492] WARNING: The mand mount option has been deprecated and [ 30.884128][ T492] and is ignored by this kernel. Remove the mand [ 30.884128][ T492] option from the mount to silence this warning. [ 30.884128][ T492] ======================================================= [ 30.885836][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 30.885851][ T36] audit: type=1400 audit(1770652186.270:168): avc: denied { watch } for pid=491 comm="syz.2.52" path="/11" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.933637][ T332] usb 2-1: device descriptor read/8, error -71 [ 30.946558][ T36] audit: type=1400 audit(1770652186.270:169): avc: denied { setattr } for pid=491 comm="syz.2.52" name="/" dev="incremental-fs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.946588][ T36] audit: type=1400 audit(1770652186.270:170): avc: denied { read } for pid=491 comm="syz.2.52" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.998289][ T36] audit: type=1400 audit(1770652186.270:171): avc: denied { open } for pid=491 comm="syz.2.52" path="/11/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.022421][ T36] audit: type=1400 audit(1770652186.270:172): avc: denied { mounton } for pid=491 comm="syz.2.52" path="/11/file0" dev="incremental-fs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.045538][ T36] audit: type=1400 audit(1770652186.310:173): avc: denied { ioctl } for pid=491 comm="syz.2.52" path="/11/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.047622][ T480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.072704][ T36] audit: type=1400 audit(1770652186.390:174): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.079612][ T480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.112379][ T331] usb 1-1: USB disconnect, device number 4 [ 31.120587][ T332] usb 2-1: device descriptor read/8, error -71 [ 31.222240][ T504] EXT4-fs: dax option not supported [ 31.232612][ T332] usb usb2-port1: unable to enumerate USB device [ 31.279487][ T36] audit: type=1326 audit(1770652186.670:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.2.56" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32999af79 code=0x0 [ 31.373352][ T36] audit: type=1400 audit(1770652186.760:176): avc: denied { write } for pid=509 comm="syz.3.58" path="socket:[4093]" dev="sockfs" ino=4093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.397481][ T36] audit: type=1400 audit(1770652186.780:177): avc: denied { create } for pid=503 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.417568][ T514] rust_binder: Write failure EFAULT in pid:43 [ 31.702490][ T331] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.862468][ T364] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.872583][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 31.878791][ T331] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.889997][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.896656][ T331] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 31.905770][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.914952][ T331] usb 4-1: config 0 descriptor?? [ 31.990734][ T534] netlink: 'syz.1.65': attribute type 11 has an invalid length. [ 31.990759][ T535] netlink: 'syz.1.65': attribute type 11 has an invalid length. [ 31.990850][ T535] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 32.013527][ T364] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 32.022975][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.023746][ T534] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 32.032114][ T364] usb 1-1: config 0 descriptor?? [ 32.042004][ T534] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 32.078254][ T539] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 32.100898][ T539] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 32.108535][ T539] netlink: 'syz.2.67': attribute type 5 has an invalid length. [ 32.116290][ T537] kvm: emulating exchange as write [ 32.116388][ T539] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.67'. [ 32.134348][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.143626][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.248478][ T364] usbhid 1-1:0.0: can't add hid device: -71 [ 32.254553][ T364] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 32.264418][ T364] usb 1-1: USB disconnect, device number 5 [ 32.314068][ T546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.355067][ T331] smartjoyplus 0003:6666:8804.0007: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0 [ 32.366859][ T331] smartjoyplus 0003:6666:8804.0007: no output reports found [ 32.554565][ T364] usb 4-1: USB disconnect, device number 7 [ 32.922506][ T66] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 32.992509][ T332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.072838][ T484] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.081804][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.092006][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.102433][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.111528][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.119591][ T66] usb 2-1: Product: syz [ 33.123852][ T66] usb 2-1: Manufacturer: syz [ 33.128483][ T66] usb 2-1: SerialNumber: syz [ 33.144301][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.155310][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.165156][ T332] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 33.174367][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.183227][ T332] usb 1-1: config 0 descriptor?? [ 33.224146][ T484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.235166][ T484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.245136][ T484] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 33.254243][ T484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.263021][ T484] usb 3-1: config 0 descriptor?? [ 33.390295][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.398842][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.411798][ T332] usbhid 1-1:0.0: can't add hid device: -71 [ 33.419135][ T332] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.428516][ T332] usb 1-1: USB disconnect, device number 6 [ 33.462482][ T364] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.470289][ T484] usb 3-1: string descriptor 0 read error: -71 [ 33.478189][ T484] usbhid 3-1:0.0: can't add hid device: -71 [ 33.484484][ T484] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.493205][ T484] usb 3-1: USB disconnect, device number 5 [ 33.537278][ T66] usb 2-1: 0:2 : does not exist [ 33.612524][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 33.618768][ T364] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.626980][ T364] usb 4-1: config 0 has no interface number 0 [ 33.633107][ T364] usb 4-1: config 0 interface 184 has no altsetting 0 [ 33.641374][ T364] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.650458][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.658482][ T364] usb 4-1: Product: syz [ 33.662670][ T364] usb 4-1: Manufacturer: syz [ 33.667260][ T364] usb 4-1: SerialNumber: syz [ 33.672577][ T364] usb 4-1: config 0 descriptor?? [ 33.678538][ T364] smsc75xx v1.0.0 [ 33.732469][ T332] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.882514][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 33.889029][ T332] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.897692][ T332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.907977][ T332] usb 1-1: config 1 interface 0 altsetting 9 has an invalid endpoint descriptor of length 4, skipping [ 33.918971][ T332] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.931770][ T332] usb 1-1: config 1 interface 0 has no altsetting 0 [ 33.939916][ T332] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 33.942229][ T331] usb 2-1: USB disconnect, device number 9 [ 33.949016][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.963091][ T332] usb 1-1: Product: syz [ 33.967261][ T332] usb 1-1: Manufacturer: syz [ 33.971879][ T332] usb 1-1: SerialNumber: syz [ 34.182267][ T332] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 34.191065][ T332] usb 1-1: USB disconnect, device number 7 [ 34.282537][ T430] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.453536][ T430] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 34.462754][ T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.471610][ T430] usb 3-1: config 0 descriptor?? [ 34.481120][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 34.492045][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.680858][ T430] usbhid 3-1:0.0: can't add hid device: -71 [ 34.686887][ T430] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 34.695927][ T430] usb 3-1: USB disconnect, device number 6 [ 34.702902][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 34.702907][ T332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 34.702929][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 34.732335][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 34.743162][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 34.752624][ T364] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 34.768386][ T364] usb 4-1: USB disconnect, device number 8 [ 34.865137][ T332] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.876736][ T332] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.887814][ T332] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 34.899113][ T332] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 34.908187][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.917275][ T577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 35.257596][ T596] ------------[ cut here ]------------ [ 35.263160][ T596] WARNING: CPU: 0 PID: 596 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 35.272583][ T596] Modules linked in: [ 35.276509][ T596] CPU: 0 UID: 0 PID: 596 Comm: syz.3.86 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 35.287808][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 35.297937][ T596] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 35.303970][ T596] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a b4 0b 06 00 0f 85 c2 00 00 00 c6 05 fd b3 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 35.323655][ T596] RSP: 0018:ffffc9000e66f560 EFLAGS: 00010246 [ 35.329758][ T596] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 35.337762][ T596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e66f618 [ 35.345767][ T596] RBP: ffffc9000e66f6a0 R08: ffffc9000e66f617 R09: 0000000000000000 [ 35.353813][ T596] R10: ffffc9000e66f600 R11: fffff52001ccdec3 R12: ffffc9000e66f5a0 [ 35.361783][ T596] R13: dffffc0000000000 R14: 1ffff92001ccdeb0 R15: 0000000000000000 [ 35.369828][ T596] FS: 00007f4681c7a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.378775][ T596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.385408][ T596] CR2: 000020000000f000 CR3: 000000011a540000 CR4: 00000000003526b0 [ 35.393409][ T596] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 35.401376][ T596] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.410072][ T596] Call Trace: [ 35.413565][ T596] [ 35.416495][ T596] ? vfs_write+0x3c8/0xf90 [ 35.420899][ T596] ? ksys_write+0x145/0x260 [ 35.425424][ T596] ? x64_sys_call+0x271c/0x2ee0 [ 35.430286][ T596] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 35.436017][ T596] ? hashtab_init+0xdb/0x1f0 [ 35.440609][ T596] ___kmalloc_large_node+0x81/0x210 [ 35.445844][ T596] ? hashtab_init+0xdb/0x1f0 [ 35.450445][ T596] __kmalloc_large_node_noprof+0x1e/0xd0 [ 35.456117][ T596] ? hashtab_init+0xdb/0x1f0 [ 35.460714][ T596] __kmalloc_noprof+0x326/0x500 [ 35.465580][ T596] ? kasan_save_alloc_info+0x40/0x50 [ 35.470866][ T596] hashtab_init+0xdb/0x1f0 [ 35.475301][ T596] ? common_read+0x175/0x490 [ 35.479899][ T596] symtab_init+0x44/0x70 [ 35.484170][ T596] common_read+0x1e6/0x490 [ 35.488589][ T596] ? hashtab_init+0xdb/0x1f0 [ 35.493215][ T596] ? __cfi_common_read+0x10/0x10 [ 35.498157][ T596] ? hashtab_init+0x105/0x1f0 [ 35.502863][ T596] policydb_read+0xabb/0x28b0 [ 35.507544][ T596] ? __kasan_kmalloc+0x96/0xb0 [ 35.512299][ T596] ? __cfi_policydb_read+0x10/0x10 [ 35.517421][ T596] ? security_load_policy+0x130/0x12d0 [ 35.522912][ T596] security_load_policy+0x16a/0x12d0 [ 35.528198][ T596] ? irqentry_exit+0x4a/0x60 [ 35.532818][ T596] ? asm_exc_page_fault+0x2b/0x30 [ 35.537938][ T596] ? __cfi_security_load_policy+0x10/0x10 [ 35.543678][ T596] ? rep_movs_alternative+0x4a/0xa0 [ 35.548894][ T596] sel_write_load+0x2a7/0x5f0 [ 35.553588][ T596] ? __cfi_sel_write_load+0x10/0x10 [ 35.558784][ T596] ? bpf_lsm_file_permission+0xd/0x20 [ 35.564192][ T596] ? __cfi_sel_write_load+0x10/0x10 [ 35.569387][ T596] vfs_write+0x3c8/0xf90 [ 35.573649][ T596] ? __cfi_vfs_write+0x10/0x10 [ 35.578419][ T596] ? __kasan_check_write+0x18/0x20 [ 35.583552][ T596] ? mutex_lock+0x97/0x1d0 [ 35.587987][ T596] ? __cfi_mutex_lock+0x10/0x10 [ 35.592853][ T596] ? __fget_files+0x2c5/0x340 [ 35.597535][ T596] ksys_write+0x145/0x260 [ 35.601850][ T596] ? __cfi_ksys_write+0x10/0x10 [ 35.606712][ T596] ? __kasan_check_write+0x18/0x20 [ 35.611820][ T596] ? fpregs_restore_userregs+0x11c/0x260 [ 35.617458][ T596] __x64_sys_write+0x7f/0x90 [ 35.622045][ T596] x64_sys_call+0x271c/0x2ee0 [ 35.626744][ T596] do_syscall_64+0x57/0xf0 [ 35.631166][ T596] ? clear_bhb_loop+0x50/0xa0 [ 35.635864][ T596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.641756][ T596] RIP: 0033:0x7f4680d9af79 [ 35.646211][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.665843][ T596] RSP: 002b:00007f4681c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.674278][ T596] RAX: ffffffffffffffda RBX: 00007f4681015fa0 RCX: 00007f4680d9af79 [ 35.682248][ T596] RDX: 000000000000ffbd RSI: 0000200000000000 RDI: 0000000000000003 [ 35.690251][ T596] RBP: 00007f4680e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 35.698284][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.706271][ T596] R13: 00007f4681016038 R14: 00007f4681015fa0 R15: 00007fffddb3d0a8 [ 35.714265][ T596] [ 35.717272][ T596] ---[ end trace 0000000000000000 ]--- [ 35.723019][ T596] SELinux: failed to load policy [ 35.852509][ T364] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 35.933873][ T332] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 35.941372][ T332] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 35.951375][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 35.951389][ T36] audit: type=1400 audit(1770652191.330:198): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=519 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.955970][ T332] usb 2-1: USB disconnect, device number 10 [ 35.957532][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 35.994200][ T36] audit: type=1400 audit(1770652191.330:199): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=519 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.017453][ T36] audit: type=1400 audit(1770652191.330:200): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=519 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.045112][ T364] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.058111][ T364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.064756][ T364] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 36.073800][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.082331][ T364] usb 3-1: config 0 descriptor?? [ 36.690632][ T364] usbhid 3-1:0.0: can't add hid device: -71 [ 36.696624][ T364] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.705305][ T364] usb 3-1: USB disconnect, device number 7