last executing test programs: 1m1.526425823s ago: executing program 0 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="6459df536e39c72401df00e39f31561fde3bb80bac686827534cf60be8fdefc76c65806bb8f09878182b793929e034a5d78a57a18afda3cde2fb36d45d4b1c694bd33c71c03a84cfaa054b08ac9b4f99e2b4f30bcc790e5bd6bfba9ce11e0c2241efba8011007d326dcaf100b6f5ae6c7b9c955ea7cc53d43ac1f963551de75d47", 0x81, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x38ea}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) shutdown(r0, 0x1) 1m1.526130913s ago: executing program 0 (id=122): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x5, 0x51, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x187c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xe7, &(0x7f0000000300)=@string={0xe7, 0x3, "c06958869b91d2ea9eb5fc0b6064a8dc90ff61d3764c7e386ae7e74b7cece0027b737393a2d83f1ef90a6aea2eaeabc8f13853b06ba775f0cc7db7e02c6060eeb8da07d55235fc92e143ef529efd23576e9f59c34a202f6f04e7f498d9019e3df3ca8b6e65f00a00ccee2324c7cb7923d372acd6752b2eec543bcbc40f45d981daae529ae700f211af3833688a8083c79f581576fbb5d85af429eb02c613b0161a016119f7f9b3e778c32ced16befacb765e3454c0a39e1ca7bd73ebff2506aa1b9fd80bb2ca6447d36e391092814fca7682adf42fc2e84465ba8d55f7c2c92095c5033785"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x47, &(0x7f0000000600)=@string={0x47, 0x3, "69bc357296d931df89d71341bf5b2e26cb708f4d90db5040b74191ca8bafcfb4239d8dfe2a69f8d46789ac2c516a27246b70cfa63ac29bd004775ad187704f29c0d83d47c1"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x23, &(0x7f0000000280)=ANY=[@ANYBLOB="2303ac9aad5a8435831b7cecfaa6e536e20651e87e445d8b848933a4a36d61489179d019b94fd6"]}]}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000001c0)={0x8, 'bond_slave_0\x00', {'pim6reg1\x00'}, 0x9}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', r4, 0x10, 0x7, 0x5, 0x7, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) 58.488768137s ago: executing program 0 (id=143): mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x80, 0x1) io_setup(0x7, &(0x7f0000000300)=0x0) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xfffd, r1, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x2a, {0x2a, 0xd, "5a88856eac9b4287cec170bdc49f434a60584a65915a315708111dbbefd06433edf37db164ec1a0b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0x5, 0x70, "9d8d37338311c057717e701527b6ae3f93876ef3f52b26575174cdbd767746018e95ebf9797498dcacb29de65c8e6e45f7d57d841f675b0b487a0a858825f1d85609cd67f15f78b256edc622a420e4448836e2f6911233fe877c008b8f9dbae89c14928829418b30c5475678a0bcf0c6"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "f307d6cf4aed7ee465870cc6e2e58b44df6a4461216d4dcaa5ad1334bdd64191a55ffa12c0dceb82bb9f9bb93b6b3c"}}) 56.615070065s ago: executing program 0 (id=159): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0xf3) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008090}, 0x4004811) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x1000) mlock2(&(0x7f000043c000/0x3000)=nil, 0x3000, 0x0) r5 = syz_clone(0x0, 0x0, 0xfffffdf4, 0x0, 0x0, 0x0) ptrace(0x4206, r5) ptrace(0x8, r5) 56.584402486s ago: executing program 0 (id=160): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpeername(r0, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffa705222f9483caa5a84f028100400086dd638fb630001800ff2001000000000000000000008000000200000000000000000000ffff640101006702000000000005"], 0x56) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0x1, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x80000001, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x45c, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x800008, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x100000, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0xc, 0x80000000, 0xffff, 0x9, 0x2, 0x4, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ef, 0xfffffffd, 0xeb6, 0x0, 0xab5, 0x10000, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0xb4, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x3, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0xfffffffe, 0x18000, 0x10, 0x1000, 0x6, 0x2002, 0x80, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x7, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x4, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x2, 0x8, 0x8000, 0x10004, 0x9, 0x8, 0x8, 0x5, 0x8, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0xb, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0xfffffffe, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x10007fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x80001, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x2, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x8d0f, 0x3, 0xffffa9b4, 0x1, 0x5, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x8d, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x4, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x3, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x5, 0x5, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x4007, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0xffff0001, 0x23, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x3, 0x2, 0x7, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0x10000, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x4, 0x1, 0x2, 0x3fd, 0x1df, 0x2006, 0x6, 0xfffffff6, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xfffffffc, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0x400000b, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x5cb, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0x40, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xa00000, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x20c47, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0xfffffdab, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x4, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xfffffff7, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8001, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x8, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)="8c5561561a81000000000000001138d0d1ed4532e9fd992c5d41a8a341b3ba", 0x1f}], 0x1}, 0x4) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000201e63324000010203010902600003f40c80040904000000010100000a240105000a0002010209040100000102000009040101010102000009050109ff0303050a072501040704a00904020000010200000814657430cc6a9b00093deb092000bf060807250100ac0400"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00"], 0x28}], 0x1}, 0x14008010) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3) sendfile(r8, r9, 0x0, 0x110003) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000b69000/0x4000)=nil, &(0x7f0000b9e000/0x3000)=nil, 0x4000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000443000/0x1000)=nil) socket$inet(0x2, 0x2, 0x0) 56.426118141s ago: executing program 0 (id=161): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @loopback, 0x401}, 0x1c) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xaff4c009bd43638c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0x360, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1b9, 0x2a, [@cf={0x4, 0x6, {0x4, 0xf1, 0xa4, 0x40}}, @fast_bss_trans={0x37, 0x9c, {0x6, 0x3, "00a838caf77b2e775368aaef9089d6ac", "e663b09a69b27f0e7f47aff5c508aad43f21ab3f84a2aaaf4007e1346c68e8f1", "6b907c18f2288099b1a7bcc12d49b82c69e1e6bd36291d9fa729108ce114d63b", [{0x4, 0x9, "d1251a3f07f5ba5422"}, {0x4, 0x25, "7ad798113e3012a50c142746bba6a6cb4ae4eb6d9486ada51914b5a2dd6a831c6a6509ab0a"}, {0x2, 0x16, "520b21b4042fef3ec2bb88d24e0550e3be94136491b4"}]}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @fast_bss_trans={0x37, 0xb6, {0x3, 0x4, "8777ded6671bf0388fe198bf2312aa27", "d93e197ce6779a66cc3352e42fafa337a19bbc7dc1e74027a1059fcea105be1e", "167c2848e9b35955971000bc50b248c8141f9ce70b3f3373caad89f99a4a22b2", [{0x1, 0x1b, "10051a14afd72a3aaddd5c751fc48a6b7da3e910f9ce2c6da063c0"}, {0x1}, {0x4, 0x1e, "4bc12168aea35341d6b85ff6c771a4a9feaf635ee32480f2335950f55e53"}, {0x2, 0x23, "375724028cc5d83c63e3edd98da8be5b64f9c97e5bdf27c7b8912dc060806c1b28b5a2"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x6, @device_a, 0x6, @value=@device_b, 0x2, 0x0, @device_a, 0x2}}, @dsss={0x3, 0x1, 0x80}, @channel_switch={0x25, 0x3, {0x0, 0x38, 0xa}}, @link_id={0x65, 0x12, {@random="4216509703d5", @broadcast, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x108, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x55}, 0x4, 0x2, @device_a, 0x2, 0xef0, 0x2}}, @link_id={0x65, 0x12, {@random="6f3f3b0facef", @broadcast, @device_b}}, @random_vendor={0xdd, 0x96, "cea020de0187d2c4075a603d33d36ef68a8a1a0870effbffec129fd03a1e522ea32ad278430edf404aac2acb4e4a7556c0544cdeb41fc21c38226d3afc6289b6f271221175d6f1eb58f4756c08b863a19e72def3a00d94e65114f12bb05ae12b9622c8d33df5b44572ed0a9fae07d660ebc446e087b484fcc76ee2a1b9a17457a7c52425d9a0318c343196a2b5dbbb44f9aa15019655"}, @random={0x23, 0x18, "ceb21954bef588da510e71eb9a21b526c39280f26121a570"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x6f, @device_a, 0x7, @value, 0x9, 0xe, @device_a, 0x5}}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@preq={0x82, 0x51, {{0x0, 0x0, 0x1}, 0x4, 0x5, 0xb, @device_a, 0x6, @void, 0x3, 0xa947, 0x5, [{{0x1}, @device_a, 0x8}, {{}, @device_a, 0xe2f}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_b, 0x2}, {{0x1}, @broadcast}]}}, @channel_switch={0x25, 0x3, {0x0, 0x68, 0x8}}, @mesh_chsw={0x76, 0x6, {0x6, 0x40, 0x9, 0x8001}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20000815}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000011}, 0x20044000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x294, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT={0x1a8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x98b8}]}, 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x24001081) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r5, 0x21, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8001, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000004) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20000050) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x420020}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r6, 0x302, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xfa, 0x2, 0x33, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, 0x10, 0x1, 0x401, 0xfffffff9}}) getpeername$packet(r4, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001300)={'veth0\x00', &(0x7f00000012c0)=@ethtool_dump={0x40, 0x37, 0x7a583368, 0x1b, "7d003398491ea4c80677a3c7bc7383c17ce4f727586e317f2682e3"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000001340)={[0xffffffff, 0xd5d90000, 0x8000000, 0x2], 0x3, 0x21, 0x1c00000}) r12 = creat(&(0x7f00000013c0)='./file0\x00', 0x80) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, &(0x7f0000001400)="dee4c4c2adb70a360f380ac1b9800000c00f3235000100000f309a060000009d0066ba210066ed600f0666ba2100ecc7f853000000", 0x35}], 0x1, 0x10, &(0x7f0000001480)=[@dstype3={0x7, 0x5}, @flags={0x3, 0x12800}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f14bc2754d4e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x48880}, 0x40000) 56.425753621s ago: executing program 32 (id=161): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @loopback, 0x401}, 0x1c) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xaff4c009bd43638c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0x360, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1b9, 0x2a, [@cf={0x4, 0x6, {0x4, 0xf1, 0xa4, 0x40}}, @fast_bss_trans={0x37, 0x9c, {0x6, 0x3, "00a838caf77b2e775368aaef9089d6ac", "e663b09a69b27f0e7f47aff5c508aad43f21ab3f84a2aaaf4007e1346c68e8f1", "6b907c18f2288099b1a7bcc12d49b82c69e1e6bd36291d9fa729108ce114d63b", [{0x4, 0x9, "d1251a3f07f5ba5422"}, {0x4, 0x25, "7ad798113e3012a50c142746bba6a6cb4ae4eb6d9486ada51914b5a2dd6a831c6a6509ab0a"}, {0x2, 0x16, "520b21b4042fef3ec2bb88d24e0550e3be94136491b4"}]}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @fast_bss_trans={0x37, 0xb6, {0x3, 0x4, "8777ded6671bf0388fe198bf2312aa27", "d93e197ce6779a66cc3352e42fafa337a19bbc7dc1e74027a1059fcea105be1e", "167c2848e9b35955971000bc50b248c8141f9ce70b3f3373caad89f99a4a22b2", [{0x1, 0x1b, "10051a14afd72a3aaddd5c751fc48a6b7da3e910f9ce2c6da063c0"}, {0x1}, {0x4, 0x1e, "4bc12168aea35341d6b85ff6c771a4a9feaf635ee32480f2335950f55e53"}, {0x2, 0x23, "375724028cc5d83c63e3edd98da8be5b64f9c97e5bdf27c7b8912dc060806c1b28b5a2"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x6, @device_a, 0x6, @value=@device_b, 0x2, 0x0, @device_a, 0x2}}, @dsss={0x3, 0x1, 0x80}, @channel_switch={0x25, 0x3, {0x0, 0x38, 0xa}}, @link_id={0x65, 0x12, {@random="4216509703d5", @broadcast, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x108, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x55}, 0x4, 0x2, @device_a, 0x2, 0xef0, 0x2}}, @link_id={0x65, 0x12, {@random="6f3f3b0facef", @broadcast, @device_b}}, @random_vendor={0xdd, 0x96, "cea020de0187d2c4075a603d33d36ef68a8a1a0870effbffec129fd03a1e522ea32ad278430edf404aac2acb4e4a7556c0544cdeb41fc21c38226d3afc6289b6f271221175d6f1eb58f4756c08b863a19e72def3a00d94e65114f12bb05ae12b9622c8d33df5b44572ed0a9fae07d660ebc446e087b484fcc76ee2a1b9a17457a7c52425d9a0318c343196a2b5dbbb44f9aa15019655"}, @random={0x23, 0x18, "ceb21954bef588da510e71eb9a21b526c39280f26121a570"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x6f, @device_a, 0x7, @value, 0x9, 0xe, @device_a, 0x5}}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@preq={0x82, 0x51, {{0x0, 0x0, 0x1}, 0x4, 0x5, 0xb, @device_a, 0x6, @void, 0x3, 0xa947, 0x5, [{{0x1}, @device_a, 0x8}, {{}, @device_a, 0xe2f}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_b, 0x2}, {{0x1}, @broadcast}]}}, @channel_switch={0x25, 0x3, {0x0, 0x68, 0x8}}, @mesh_chsw={0x76, 0x6, {0x6, 0x40, 0x9, 0x8001}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20000815}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000011}, 0x20044000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x294, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT={0x1a8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x98b8}]}, 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x24001081) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r5, 0x21, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8001, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000004) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20000050) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x420020}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r6, 0x302, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xfa, 0x2, 0x33, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, 0x10, 0x1, 0x401, 0xfffffff9}}) getpeername$packet(r4, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001300)={'veth0\x00', &(0x7f00000012c0)=@ethtool_dump={0x40, 0x37, 0x7a583368, 0x1b, "7d003398491ea4c80677a3c7bc7383c17ce4f727586e317f2682e3"}}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000001340)={[0xffffffff, 0xd5d90000, 0x8000000, 0x2], 0x3, 0x21, 0x1c00000}) r12 = creat(&(0x7f00000013c0)='./file0\x00', 0x80) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, &(0x7f0000001400)="dee4c4c2adb70a360f380ac1b9800000c00f3235000100000f309a060000009d0066ba210066ed600f0666ba2100ecc7f853000000", 0x35}], 0x1, 0x10, &(0x7f0000001480)=[@dstype3={0x7, 0x5}, @flags={0x3, 0x12800}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f14bc2754d4e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x48880}, 0x40000) 7.518447517s ago: executing program 4 (id=536): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x40800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)=0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000004540)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/65, 0x41}, {&(0x7f0000001500)=""/49, 0x31}, {&(0x7f0000001540)=""/192, 0xc0}, {&(0x7f0000001600)=""/26, 0x1a}], 0x9, &(0x7f0000001700)=""/216, 0xd8}, 0x2}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/161, 0xa1}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000002980)=@nl=@unspec, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/127, 0x7f}], 0x2, &(0x7f0000003ac0)=""/179, 0xb3}}, {{&(0x7f0000003b80)=@alg, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c00)=""/217, 0xd9}, {&(0x7f0000003d00)=""/135, 0x87}, {&(0x7f0000003dc0)=""/81, 0x51}, {&(0x7f0000003e40)=""/200, 0xc8}], 0x4, &(0x7f0000003f80)=""/214, 0xd6}, 0x1000}, {{&(0x7f0000004080)=@generic, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004100)=""/101, 0x65}, {&(0x7f0000004180)=""/12, 0xc}], 0x2, &(0x7f0000004200)=""/17, 0x11}, 0x3}, {{&(0x7f0000004240)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004440)=[{&(0x7f00000042c0)=""/102, 0x66}, {&(0x7f0000004340)=""/240, 0xf0}], 0x2, &(0x7f0000004480)=""/142, 0x8e}, 0x3751}], 0x6, 0x2000, &(0x7f00000046c0)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000004740), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000004900)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004980), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000049c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000004ac0)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x4c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9a2, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008850) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000004b00), &(0x7f0000004b40)=0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000004b80), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000004bc0)={'veth1_vlan\x00', @random="14eeb5ede518"}) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000004c00)) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000004c40)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000004d40)={&(0x7f0000004c80)={0x1d, r10}, 0x10, &(0x7f0000004d00)={&(0x7f0000004cc0)=@can={{0x3}, 0x6, 0x3, 0x0, 0x0, "134cfcdca16b3715"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000004e40)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4048040) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000005200)={{&(0x7f0000004e80)=[{0x800, 0xfff, 0x8, {0x2, 0xb79}, 0xdb29, 0x4, 0x6}, {0x8, 0x7b2cab91, 0xffffffff, {0x9, 0x9}, 0x0, 0x7fff, 0x6}, {0xfffe000000000000, 0x2, 0x95, {0x7, 0xffffffffffffffff}, 0x794f, 0x7, 0x4}, {0x7fffffff, 0x9, 0x5, {0x5a2f, 0x9}, 0x80000000, 0x8, 0x4}, {0x3, 0xffffffffffffffff, 0x3, {0x400, 0x7e601f4a}, 0xfffffffffffffff4, 0x7, 0x9}], 0x5, 0x40, 0x4, 0xc}, {&(0x7f0000004fc0)=[{0x9, 0x5}, {0x10001, 0x3ff}, {0x6, 0x3}, {0x4, 0x4}, {0x8, 0xb}, {0x8, 0x7}], 0x6, 0x10, 0x4, 0x3}, {&(0x7f0000005040)=[0x10, 0x9acc, 0x2, 0xe1c], 0x4, 0x8, 0x98f8, 0x9}, {&(0x7f0000005080)=[{0x10001, 0x1, 0x1, 0x400, 0x7fff}, {0x40, 0x5, 0xd, 0x3, 0x6}, {0x0, 0x8, 0xd1, 0x80000001, 0x9}, {0x80000000, 0x8, 0x5, 0x401, 0xc3}, {0x101, 0x1, 0x1, 0x5, 0x6d}, {0x10001, 0x13, 0x8168, 0x6, 0x4}, {0x8, 0x10000, 0x8000000000000000, 0x3, 0x1000}, {0x0, 0x3, 0x81, 0x3, 0x40}], 0x8, 0x28, 0xfffe}, {&(0x7f00000051c0)=[0x3, 0x2, 0xfffffffffffffffd, 0xfffffffffffffff7, 0xf1, 0x80], 0x6, 0x8, 0xfff}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000005280)={{{@in6=@initdev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000005380)=0xe8) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000005400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000005500)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x5175ff20ed7b7aa8}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x4c, r12, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xcc880}, 0x40000) r13 = open(&(0x7f0000005540)='./file0\x00', 0x200000, 0x60) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000005580)={r13, 0x1, 0xfffff000, 0x4000}) 7.472331658s ago: executing program 4 (id=538): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket(0x11, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r1, 0x0, &(0x7f00000001c0)=0xfffffffffffffe26) 7.41927999s ago: executing program 4 (id=540): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x30, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x7f}}}}}]}}, 0x0) 4.450609752s ago: executing program 4 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000007f", @ANYRESHEX=r3], 0x48}}, 0xc0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a40)={[0xa, 0x6, 0xb, 0xd6c00000000001, 0x464, 0x8000040000000001, 0xb3, 0x8, 0x3, 0x7, 0xfff, 0x2081, 0x7, 0x1ff, 0xe6, 0x6], 0x4, 0x240410}) stat(&(0x7f0000002040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003040)) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x4147) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2958428, &(0x7f0000000280)={[{@mode}]}) 4.367192364s ago: executing program 4 (id=571): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x29d, 0x0, 0x3}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x90400) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r2, 0xe7fb, 0x400000000001, 0x9}) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000002c0)={{r2}, "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"}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000408c0d010240000102030109028b00030107600b080b010101ff200509040000000101200009240101800b1500070c24030501035d02008b0003090401000001022000090401010101022e0006240201003e102401050103030000000309000000cd090501090800040c1d08250181330ffeff"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x9, 0x6, 0x73, 0x3, 0xbc, 0x5, 0xa, 0x1, 0x44, 0x9, 0x3, 0x103}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0xd, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x3, 0x1a, 0x3, 0x19, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x80000001, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.600211299s ago: executing program 4 (id=585): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000d00)={0x1c, &(0x7f0000000200)={0x60, 0x31, 0x6, "943e47eb4391"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.112476914s ago: executing program 3 (id=587): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000000838ec1317000000000001090224000100008000090c00000903000600092181000901222800090581032000002bfe"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x39, 0x0, 0x101}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000300)="d8df7e23b3b9ce0f0d73aa00b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0020c8220000b801000000b9a6080000c4e3390f893f920000940f01c50f30ba000000000f300f3085c79d5351bf16d09bd09be16dc301012202", 0x6e}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x8000000000000001, 0x5, 0x1, 0xa, 0x7ffffffb, 0x4, 0x4000000000000, 0xa, 0x48, 0x7, 0x3, 0x120000, 0xb5a, 0x9, 0x80000006, 0x7], 0x4000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0x80, 0x9, {0x8, 0xb, 0x41, 0x1, 0x1, 0x6, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x8, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x181, 0x3f, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x1, 0xe, {0x8, 0x25, 0x1, 0x3, 0xf, 0x3, 0x69}}}}}}}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0xbe, {0xbe, 0xb, "f70ba381030001000080000000cb4fdcc2560fb30d546fc93f0808251f000000000000000000410c45d9989fffb2f5fc2a1d0a5fb46634819eb727db410106a706d13bf41db5060000006b0d48e37e19cf8d03759f3f6a860a6c3fea4a8cb2d00701c301dab8c935e992d7571fffb2ab3eccbe2af6863844119a525b4c9e3c498c888c54ce720c4507c8d89235d585b553a081dc1b9d60a0df5e5b0ff34eb211eab114a0099adccae7775478ab39d929024c1a326f81d0fdcb8b8092"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.92245006s ago: executing program 1 (id=589): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f23e1f8440f014a000f2221c7c4c3fd01ce0020c4636d06060024f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x49}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000440)='cgroup.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0xa, 0x6c8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) lsm_list_modules(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.60006128s ago: executing program 3 (id=590): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x7fff, 0x0, 0x4, 0xffffffff}, 0x10) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x4}}], 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) (async) close_range(0xffffffffffffffff, r0, 0x2) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000200)={@remote, @rand_addr=0x64010100, 0x1, "dc2b15edccd66f2ec43ecc6f59f0bb71398c18be7376666c7312c4787c0ce9f4", 0x1000, 0x0, 0x6, 0x1}, 0x3c) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000240)=0x1, 0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x200}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x52}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, ']@/,.!\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffb2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000500)='wg0\x00', 0x4) (async) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000005c0)=0xcd0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000600)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000006c0)={@dev, @multicast2, 0x0}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0xd, 0xce, 0xfd8e, 0x76, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x4, 0xc1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1e0, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x157f1c2d690bf92b) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000b40)) r8 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000bc0)=0x1000) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000c00)=0x3) 1.573092141s ago: executing program 3 (id=591): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 1.518285303s ago: executing program 3 (id=592): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1800000026000305000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x18}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x11, r2, 0x5, &(0x7f0000000480)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, 0x0, 0x2}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00032300000023035d95b5db2648b0c56db3094885239e187f30232fb4711d740fabfa519a4ffeef1c"], 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) close_range(r5, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000000c0), &(0x7f0000000200)={'L+', 0xfffffffffffff8e9}, 0x16, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x4, 0x2}, 0x10) 1.307421179s ago: executing program 2 (id=597): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x1000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x3ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9fd7, r3, &(0x7f0000000380), 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0xa, r3, 0x0, 0x0, 0x9, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xe5d, 0xffffffffffffffff, &(0x7f00000006c0)="f2a42120e789060000000000000094a1cb318f085800cb4c7b2355cacfff9582c3d7bdb503e150f5611c78ce2a6d4700000000000000000000000000006112958c72444649c085353d98c4424e9ae03fb18a71d0cc9d447b636d4e7bbb3ddc867dde62b444d9f28a93751d40a6cce25b7d58250588bbfb47", 0x78, 0x8, 0x0, 0x2}, 0x0]) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xa, 0x2, 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40b00) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x636080, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x60, 0x4, 0x3c, 0x10, 0x2}, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xf3, 0x0}]}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.028458138s ago: executing program 3 (id=598): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400000000000000000000000000001800", [0x800, 0xffffffffffffffff]}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) fsmount(r4, 0x0, 0x4) madvise(&(0x7f000027c000/0x4000)=nil, 0x4000, 0x3) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x8001, 0xb, 0x59, "ea7102000000f900edffff0900000500", 0x800, 0x3}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) ioctl$KDSETLED(r0, 0x4b32, 0x1) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0xa0, {0xa0, 0x31, "e66fe94f5dd1daef6f1e5353efe23ca122aba956db7f93ed6253fd30be54925c6364f94bf8bfa9bb697b770f37a3da37104b538a1c602d73688ac12cdd6ec6fc3dac92a7bfb8d270313960fca57cf0e7090619131e80bae84b392882f2a015d37ebb0f7a1284b0c815e0354d3d91fc4c05147750d51f1fa94c32e9c055a6d7945e00cd4e79c4eb3877dab4bff0f8ac843b30c3778fd68164fa3274b09e4a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000140)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x4, 0x52ba}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0x78f, 0x1, [0xc01e, 0xff7fb0, 0xff0000, 0x50]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x2, 0x7, 0x2}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa8, 0x10c, 0x2, 0xc, "cedd032a", "dd570653"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1b, 0x9, 0x0, 0xf2, 0x7, 0xdb72}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x0, 0x8, 0xc3, "1e790c1b43e2f0997d71af9b2aab66e39ef9dfd33b162cfa13c93ea530be2f5e58c7e7a7034f6653dfd27d97f955d874eff460a65cc27dba9f813140528b2aed64cbb1f549a310b09e23184da16f9596ef30a02c2418513165b63cf40979aefcb47153d48ef905553aba7a98ab03fa49e72277940436b17baee975df017ccf20ea7f97cd04598399ce173f2a0b77f49257b838588e16214ed017dd9a33eefee673ccf90c6f2534789a879a37bf0d3735800e00a3df73e8ac77307fe8caaea404b062ae"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x80, 0x80, [0xf]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b418"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="c75672bf0a66"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "bf74"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x74}}) 682.399589ms ago: executing program 2 (id=599): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) (async) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) (async) 682.052359ms ago: executing program 2 (id=600): syz_usb_connect$uac3(0x0, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa1, &(0x7f0000000000)=@string={0xa1, 0x3, "32023cf8deb5ae0e39c9ad8577f37a3d827a439f0143c186a4158e00ca7eb1aa05f47374d01418a626e384f6dd50f0e6190583279b217f9335560a2b5fd6f478808a0a731efa2bdc90f2951ff9d0fda296c6ef9d1bc4d5199a0a20c501bcd37608b24e538aae04d6ba8ed4672b6b1d20244c47549b8558395a336c1271c0eba40ff4aeed5e17147005a488e5384123059d3b4c3cb75e8480a4b7265b9e7512"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa0, &(0x7f0000000140)=@string={0xa0, 0x3, "552b550b03bd11eb2706f47f36cf3de777336c9948a4cd748aceb87e19e2c29688f8d6501ab35ae47d58b5795ca989f58158a157b9027308beadced4835a7fc4cccac10f57f01e78df89bb106dfa0d17e1e6a00d2c81c4b77a39302fb7fd396bc2c0e1abf219f0b619de5f475150e8a2c6da50f41c62565d53cb96ac7eb57e1b3ffde72ddf664f40892085720a8dc88e89b5f10a2023021bb86df776f5e8"}}, {0x6a, &(0x7f0000000200)=@string={0x6a, 0x3, "50cac4da8cb15d43706807a0346f41af273086daa7ae7cbe1e95d3153238be18639b1325260029581e9e7d17b2390328d17ab42077ca88965fe50700c392588fecbf29ee1155e0a75cfb4655a1da2bbe418479e6f8a39d10d0ad96794343e6d89456e4e2224c9670"}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0xa6, {0x9, 0x21, 0xfff, 0xa, 0x1, {0x22, 0xa3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x40, 0x6, 0x7, 0x10, 0xa}, 0x29, &(0x7f00000004c0)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0xb, 0xf1e, 0x80, [0x3f00, 0xc000, 0xc000, 0xc000, 0xff0f, 0xff0000]}]}, 0x7, [{0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "f6085f46cb97426cfeaaa7d1c67efe4df34cb9743db04357b1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4802}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x413}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "43ed18ac64de2af77708cab40026787522819d895d7620107776328209134eaa2fca8455eb8ea7a7223a2d741a44feaf15a10af351548697d94fc54c3b5a24e6789346c5afcc823d79da14dc382d85fddcd022c9e7449582cc98e9535dcb3d00a0b90f4c8c7c3a90851ccd5bc288c36ed3eb2f479cb9a33e85bdd61070a999f61ac57f358bfaab362e8d28d060ab9d1f8d123ef220c5f06bc9bbc35a6763847e919607ce99231ce0e8931970e9bbbe1af92a2266b6ee093c9397fda99b9cb481a6e53f3db7db3bbd08b3d81582064de5e8b0706f6821b5f5360bf2cf0d1fa6dd6446de44b65041c8fef5139cc056af49dc352f42"}}, {0x64, &(0x7f00000006c0)=@string={0x64, 0x3, "132906726bb6b8b2bde48d6084d2d64f6619d89f4bd8eee261a3a18056f6e34dfead9b965f43eaeec76f8382cb44bebdfb100557f8fff5fb8d1b35f6704ca1e16764a8f30ccf8ee0f5b3f845c75d85b0236a19eb51ff012e7761abac635db273d7f5"}}, {0x34, &(0x7f0000000740)=@string={0x34, 0x3, "838b3bf31d29491589222134b8a7e1412b06ffde25ccc943e73ff3c0fd320f81395f19d2ea15cf39e684ea9e1a8439c1175d"}}, {0xe3, &(0x7f0000000780)=@string={0xe3, 0x3, "636ec75ffdb3c96ca28e77e7d333f14803c7cabaa19a321d2d8e43caae313f88a95e715ba6454681968760e34d6c22c4b5fef5d9957426ef8b68ca71638857c8b0126ab4805a017d0de818c47f163af9cacb6e1f7b3438107638dc517ebbb7be39d75f3a84bc9d17d83d75ec0961f34d6b6866da8dc16d3360248c76992e1920a26976c8fc2f18aff30528142c3f8681ccb5062265919ebe89b6850adb822c7315843cf95df9a4b17332acd173e75b89622a076bb81183543bc56cd10c3d391793440bf1ff53830c42ef4624c589d75ad4bb3d8cf67ea9d7dc172015996a3e39c1"}}]}) syz_usb_connect$uac3(0x0, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xa1, &(0x7f0000000000)=@string={0xa1, 0x3, "32023cf8deb5ae0e39c9ad8577f37a3d827a439f0143c186a4158e00ca7eb1aa05f47374d01418a626e384f6dd50f0e6190583279b217f9335560a2b5fd6f478808a0a731efa2bdc90f2951ff9d0fda296c6ef9d1bc4d5199a0a20c501bcd37608b24e538aae04d6ba8ed4672b6b1d20244c47549b8558395a336c1271c0eba40ff4aeed5e17147005a488e5384123059d3b4c3cb75e8480a4b7265b9e7512"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x421}}, {0xa0, &(0x7f0000000140)=@string={0xa0, 0x3, "552b550b03bd11eb2706f47f36cf3de777336c9948a4cd748aceb87e19e2c29688f8d6501ab35ae47d58b5795ca989f58158a157b9027308beadced4835a7fc4cccac10f57f01e78df89bb106dfa0d17e1e6a00d2c81c4b77a39302fb7fd396bc2c0e1abf219f0b619de5f475150e8a2c6da50f41c62565d53cb96ac7eb57e1b3ffde72ddf664f40892085720a8dc88e89b5f10a2023021bb86df776f5e8"}}, {0x6a, &(0x7f0000000200)=@string={0x6a, 0x3, "50cac4da8cb15d43706807a0346f41af273086daa7ae7cbe1e95d3153238be18639b1325260029581e9e7d17b2390328d17ab42077ca88965fe50700c392588fecbf29ee1155e0a75cfb4655a1da2bbe418479e6f8a39d10d0ad96794343e6d89456e4e2224c9670"}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0xa6, {0x9, 0x21, 0xfff, 0xa, 0x1, {0x22, 0xa3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x40, 0x6, 0x7, 0x10, 0xa}, 0x29, &(0x7f00000004c0)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0xb, 0xf1e, 0x80, [0x3f00, 0xc000, 0xc000, 0xc000, 0xff0f, 0xff0000]}]}, 0x7, [{0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "f6085f46cb97426cfeaaa7d1c67efe4df34cb9743db04357b1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4802}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x413}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "43ed18ac64de2af77708cab40026787522819d895d7620107776328209134eaa2fca8455eb8ea7a7223a2d741a44feaf15a10af351548697d94fc54c3b5a24e6789346c5afcc823d79da14dc382d85fddcd022c9e7449582cc98e9535dcb3d00a0b90f4c8c7c3a90851ccd5bc288c36ed3eb2f479cb9a33e85bdd61070a999f61ac57f358bfaab362e8d28d060ab9d1f8d123ef220c5f06bc9bbc35a6763847e919607ce99231ce0e8931970e9bbbe1af92a2266b6ee093c9397fda99b9cb481a6e53f3db7db3bbd08b3d81582064de5e8b0706f6821b5f5360bf2cf0d1fa6dd6446de44b65041c8fef5139cc056af49dc352f42"}}, {0x64, &(0x7f00000006c0)=@string={0x64, 0x3, "132906726bb6b8b2bde48d6084d2d64f6619d89f4bd8eee261a3a18056f6e34dfead9b965f43eaeec76f8382cb44bebdfb100557f8fff5fb8d1b35f6704ca1e16764a8f30ccf8ee0f5b3f845c75d85b0236a19eb51ff012e7761abac635db273d7f5"}}, {0x34, &(0x7f0000000740)=@string={0x34, 0x3, "838b3bf31d29491589222134b8a7e1412b06ffde25ccc943e73ff3c0fd320f81395f19d2ea15cf39e684ea9e1a8439c1175d"}}, {0xe3, &(0x7f0000000780)=@string={0xe3, 0x3, "636ec75ffdb3c96ca28e77e7d333f14803c7cabaa19a321d2d8e43caae313f88a95e715ba6454681968760e34d6c22c4b5fef5d9957426ef8b68ca71638857c8b0126ab4805a017d0de818c47f163af9cacb6e1f7b3438107638dc517ebbb7be39d75f3a84bc9d17d83d75ec0961f34d6b6866da8dc16d3360248c76992e1920a26976c8fc2f18aff30528142c3f8681ccb5062265919ebe89b6850adb822c7315843cf95df9a4b17332acd173e75b89622a076bb81183543bc56cd10c3d391793440bf1ff53830c42ef4624c589d75ad4bb3d8cf67ea9d7dc172015996a3e39c1"}}]}) (async) 541.674023ms ago: executing program 1 (id=601): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0xdb9f9000) (async) socket(0x1d, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup3(r4, r0, 0x80000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000013740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xe}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xdb5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x20008054) (async) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/126) close_range(0xffffffffffffffff, r5, 0x0) 531.243813ms ago: executing program 1 (id=602): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x9, 0x6, 0x73, 0x3, 0xbc, 0x5, 0xa, 0x1, 0x44, 0x9, 0x3, 0x103}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0xd, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x3, 0x1a, 0x3, 0x19, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x80000001, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 480.798855ms ago: executing program 1 (id=603): r0 = getpgid(0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2, 0x6, @tid=r0}, &(0x7f0000000040)) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0x400, 0x1ff, 0x53, 0xfffffffd, 0x1, 0xffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) (async) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async, rerun: 32) ioctl$UBLK_U_CMD_DEL_DEV(r2, 0xc0207505, &(0x7f00000001c0)={0x0}) (rerun: 32) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000240)={r3, 0xffff, 0x0, 0x0, r0}) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f00000002c0)={0x0, 0x1, 0x6}) syz_clone(0x1000, &(0x7f0000000300)="0fc2f5140bab1224298e00bcf1a23b961d377595093abeeecfe2a58842e2d60e1e93c3ac625dc53084e9e6d2073ee95bc7d414e779a5e303e586c4123eb3e861c8030cf584c2d1c9d869e38c6530a0019dbb2f2052cacb83afb6f68b5f53a03783f8be963f67508df5c8faf51984591ee5a81ac16319072fa1b0342246f3e13d43ef88bc4aa07bf4e3b4c49f8b0959df1e31eeee7894790f24a69475630a98e0dbb80dff46368fcb9469d191fe34bb2e6b9f73715b8d3888394e555872eefc0db549d2a047df1abe712213c4597fc5a166a81a625aa3659fd2a96dd1818201", 0xdf, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="09b7c02ac8568387035c34ada6e89ccbb64ccf93d2ff741bdab4950d98f021f738e6db8754d2093689afb9e115e6302f8b704f886f11279181c7655ffd82e72edbf367d080bcf920a05e9190529300b4aa9ba0656785d5365841ba228d0626d7ad406f8c24831c359924b2b465ae1d4b6479845591e56869fc14925fcdc38f5965fcc88ca14d0546dd4577e2978af6") ptrace$pokeuser(0x6, r4, 0xa3, 0x3) (async, rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000540)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000640)={0x3, 0x14, 0xf, 0xfff8, 0x83, 0x0, &(0x7f0000000580)="409e6bf52ed579a8daf1a2016637a777f0b63bdd883a2d441f55d3198130f36e0ab81ad41ebfec12ee2b2c8c05bec6598a6556465b21ef2c7c71cee26d8551f492abcae0be90e0bcd0af226a18d49a3f402908c729ddfd7dae65af284d83c6960884196eb31487335228eca5033d1ad72c3d80e186ab49b1700b756dc545330ef40e82"}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(r5, &(0x7f0000006000)=[{{&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/122, 0x7a}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x6}, {{&(0x7f0000001c00)=@qipcrtr, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c80)=""/88, 0x58}], 0x1, &(0x7f0000001d40)=""/234, 0xea}, 0xc}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e40)=""/54, 0x36}, {&(0x7f0000001e80)=""/66, 0x42}, {&(0x7f0000001f00)=""/178, 0xb2}], 0x3, &(0x7f0000002000)=""/194, 0xc2}, 0x401}, {{&(0x7f0000002100)=@l2tp6, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/223, 0xdf}, {&(0x7f0000002280)=""/136, 0x88}, {&(0x7f0000002340)=""/93, 0x5d}], 0x3, &(0x7f0000002400)=""/59, 0x3b}, 0x2}, {{&(0x7f0000002440)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @netrom, @null, @rose, @bcast]}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000024c0)=""/232, 0xe8}, {&(0x7f00000025c0)=""/71, 0x47}, {&(0x7f0000002640)=""/208, 0xd0}, {&(0x7f0000002740)=""/131, 0x83}, {&(0x7f0000002800)=""/54, 0x36}, {&(0x7f0000002840)=""/78, 0x4e}, {&(0x7f00000028c0)=""/34, 0x22}, {&(0x7f0000002900)=""/84, 0x54}, {&(0x7f0000002980)=""/149, 0x95}], 0x9, &(0x7f0000002b00)}, 0x8}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000002b40)=""/116, 0x74}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/170, 0xaa}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/30, 0x1e}, {&(0x7f0000004cc0)=""/164, 0xa4}], 0x6, &(0x7f0000004e00)=""/227, 0xe3}, 0x7fff}, {{&(0x7f0000004f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004f80)=""/56, 0x38}], 0x1, &(0x7f0000005000)=""/4096, 0x1000}, 0x7fff}], 0x7, 0x1, 0x0) (async, rerun: 64) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000061c0), &(0x7f0000006200)=0x8) (rerun: 64) ptrace$pokeuser(0x6, r4, 0x8000, 0x9) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006240), r6) ioctl$UBLK_U_CMD_GET_PARAMS(r1, 0x80207509, &(0x7f0000006300)={0x0, 0xffff, 0x70, &(0x7f0000006280)={0x70}}) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000063c0), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000006400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f00000064c0)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006480)={&(0x7f0000006440)={0x30, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000005) (async) ptrace$peekuser(0x3, r0, 0x10) (async, rerun: 32) read$FUSE(r2, &(0x7f0000006500)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r1, &(0x7f0000008540)={0x50, 0x0, r9, {0x7, 0x2d, 0xfb11, 0x8, 0x98eb, 0x5ff4, 0x4, 0x2, 0x0, 0x0, 0x10, 0x6}}, 0x50) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000008680)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000008640)={&(0x7f0000008600)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000086c0)='dctcp', 0x5) 479.679855ms ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044145}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x42d}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x57d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4880}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24020811) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000540)={0x2020}, 0x2020) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002600)={'ip6gre0\x00', &(0x7f0000002580)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x0, 0x7, 0x0, @private1, @loopback, 0x40, 0x20, 0x4, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x5, 0x4, 0x500, 0xc15f, 0x1000010, r10}) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r11, 0x4008af13, &(0x7f0000002700)={0x2, 0x8}) r12 = syz_open_dev$hiddev(&(0x7f0000002740), 0x248, 0x474301) ioctl$HIDIOCAPPLICATION(r12, 0x4802, 0x56) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000027c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x6c, r13, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r15, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b00)={&(0x7f00000029c0)={0x12c, r16, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f8000}, @TIPC_NLA_NODE_ID={0x69, 0x3, "93f9fc98ffcde6d824f04911ff49b3dab4394c90913646979aaac2bfa0de74884273598b3dfd8f7d0209311058b3c23191325dbabb752eeecf550db20b297356db3f47e2f285cb5304fd9df0c32af4a3fe02ba98972a2a162b25512551758eef6f40d8870a"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "09ab3a33652269b2fccbaf0427805cd850c705d0118d0c93ae78176113a115451471d7"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8f}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d13}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000840}, 0x22004840) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008804) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000002cc0)={0x0, "112d7f3d3115c11dd3b8ada1b1092ed1"}) ioctl$BTRFS_IOC_SCRUB(r11, 0xc400941b, &(0x7f0000003cc0)={r17, 0x180000000000000, 0xfd8}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000040c0)) 479.366135ms ago: executing program 1 (id=605): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0xc4}], 0x1}, 0xcc000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002f00)=ANY=[], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f00000027c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x0, 0xd, 0x0, 0x92}, {0x9, 0x5, 0x1, 0x2, 0x420, 0x7f, 0x6, 0x1}, {0x9, 0x5, 0x1, 0x3, 0x20, 0x8, 0xe9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000002880)={0x14, &(0x7f0000002800)={0x0, 0xf, 0x5, {0x5, 0x2, '`lb'}}, &(0x7f0000002840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000002ec0)={0x1c, &(0x7f0000002900)={0x20, 0x15, 0xff, "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"}, &(0x7f0000002a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000002e80)={0x21, 0x0, 0x2, "20b0"}}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000002f00)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r4, 0x5, &(0x7f0000002f80)=0x2) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000002700)) syz_usb_connect$uac2(0x1, 0x105, &(0x7f00000023c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x1, 0x10, 0x9, {0x8, 0xb, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x2b}, [@processing_unit={0xd, 0x24, 0x8, 0x4, 0x1, [0x2, 0x0, 0x0, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x0, 0x1, 0x2}, @extension_unit={0xd, 0x24, 0x9, 0x3, 0x0, 0x4, "d03f3bd8dab1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0x6, 0x0, 0x1002, 0xa4, 0x3b, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf, 0x9, "c6268c", "664b9b"}, @as_header={0x10, 0x24, 0x1, 0x2, 0xe, 0x0, 0x5, 0x8, 0x401, 0x49}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x81, 0x0, 0x6, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x2, {0x8, 0x25, 0x1, 0x82, 0x30, 0x5, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xcc, 0x45, 0x0, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xcf9, 0x6, 0x6, "c50223abd2"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xb, 0x2, 0x3, 0x8, "935303", '^NM'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfc, 0x0, 0x9, {0x8, 0x25, 0x1, 0x81, 0x2b, 0x6, 0x5}}}}}}}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0xd, 0x1, 0x0, 0x8, 0x3}, 0x10e, &(0x7f0000002540)=ANY=[@ANYBLOB="050f0e010202100af8f986277d57e4d3e5db5f9a6907be46c248947ab45fec65f4a2d1e31dc72016e9dc36549902c67b5ef6c0d8ca6c804869dc407decc84d42efd2462ef448e502760026f633f6c06ef66db7acd1cf677f7c7a076adb305f00c028ba9c3d065cf3a792e8fb39494a8bbccf139e9fa33544fb26564d5b409cbbf06ac5c696e3f95f2cad37baf8c12b7c145e81ab5d9e02c6145ea554990710cf963b6efb3badc8b5d2e338a6458a4104000000000000005f81c782b10a413875b69ed9396ade91cd51b30663e3425e30f172a39210551932bdba633942ca83386c5e8d9038dcccc3d18c4f14ff8073946f13460deda809dd83942b8693d8d5b783763e82980169071002049a0600"], 0x1, [{0xe, &(0x7f0000002680)=@string={0xe, 0x3, "867cc8acca5a749ec378975c"}}]}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000028c0), 0x4011, &(0x7f00000021c0)=ANY=[@ANYBLOB="4e4a1a0000004da8ac81ec0d14026600127ec0b9c2c080ea445590a7ef4dfede56e86f4b1b733c9dd1313b7c9c40aa", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000080)) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000000)={0x14}, 0x14) r6 = socket(0x10, 0x3, 0x0) syz_usb_ep_read(r1, 0x4, 0x5c, &(0x7f0000002740)=""/92) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x9) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) 54.060428ms ago: executing program 3 (id=606): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x2, "5e033d33"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}, 0xc) clock_getres(0xe6c120c6abd66ccb, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f0000000140)="f716dfa81d47100ba0c2f19a65c5f5715e61327dd4281da71ad5be58f6bd8f18cf07e1af7d7a37f33e89474f4e149f533f8f80d7d4bf80f88ff16269fcc70bed1e2160718fa556ecbbe615024c806a0beadea2d29f3c4a786832e8f3c7c8538152250af816d51cfe386375f0db03d55a8493bfe005cb7bf8c51638d08fa9ec73c74988b7c83c3e386fba92338a8ff02fa7eb7f749264", 0x96) 10.479059ms ago: executing program 2 (id=607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 9.901739ms ago: executing program 2 (id=608): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x420840, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 2 (id=609): flock(0xffffffffffffffff, 0x8) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@set_irq_handler={0xc8, 0x20, {0x4d, 0x1}}, @wrmsr={0x65, 0x20, {0x0, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000780)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x90, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffff89d4}}]}) kernel console output (not intermixed with test programs): ng dummy_hcd [ 50.721617][ T354] usb 5-1: USB disconnect, device number 2 [ 50.727503][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 50.736198][ T313] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.744639][ T313] usb 4-1: config 0 has no interface number 0 [ 50.750753][ T313] usb 4-1: config 0 interface 184 has no altsetting 0 [ 50.759255][ T313] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.768368][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.776520][ T313] usb 4-1: Product: syz [ 50.780684][ T313] usb 4-1: Manufacturer: syz [ 50.785380][ T313] usb 4-1: SerialNumber: syz [ 50.790453][ T313] usb 4-1: config 0 descriptor?? [ 50.796779][ T313] smsc75xx v1.0.0 [ 50.845191][ T924] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 51.271545][ T438] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 51.397283][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 51.408237][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.432571][ T438] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 51.441329][ T438] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.451530][ T438] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.460695][ T438] usb 2-1: config 1 has no interface number 0 [ 51.466810][ T438] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 51.477583][ T438] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 51.492071][ T438] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.501139][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.509175][ T438] usb 2-1: Product: syz [ 51.513418][ T441] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.520946][ T438] usb 2-1: Manufacturer: syz [ 51.525637][ T438] usb 2-1: SerialNumber: syz [ 51.671491][ T441] usb 5-1: Using ep0 maxpacket: 16 [ 51.677732][ T441] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 51.686533][ T441] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.696646][ T441] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.706932][ T441] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.716005][ T441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.724059][ T441] usb 5-1: Product: syz [ 51.728235][ T441] usb 5-1: Manufacturer: syz [ 51.732883][ T441] usb 5-1: SerialNumber: syz [ 51.755854][ T934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 51.818735][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 51.829628][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 51.839295][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 51.849587][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 51.859224][ T313] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 51.945854][ T941] futex_wake_op: syz.4.179 tries to shift op by -1; fix this program [ 51.971541][ T62] usb 2-1: USB disconnect, device number 19 [ 52.014675][ T947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.177002][ T62] usb 4-1: USB disconnect, device number 17 [ 52.245000][ T954] PM: Enabling pm_trace changes system date and time during resume. [ 52.245000][ T954] PM: Correct system time has to be restored manually after resume. [ 52.561611][ T62] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 52.733269][ T62] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.742492][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.750593][ T62] usb 4-1: Product: syz [ 52.754883][ T62] usb 4-1: Manufacturer: syz [ 52.759608][ T62] usb 4-1: SerialNumber: syz [ 52.791527][ T438] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 52.931066][ T961] overlay: ./bus is not a directory [ 52.937176][ T961] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.961487][ T438] usb 2-1: Using ep0 maxpacket: 32 [ 53.058954][ T438] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.067364][ T438] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.075993][ T438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.084977][ T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.094726][ T438] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.104401][ T438] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.117396][ T438] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.126541][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.135258][ T438] usb 2-1: config 0 descriptor?? [ 53.341881][ T438] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.354312][ T438] usb 2-1: USB disconnect, device number 20 [ 53.361047][ T438] usblp0: removed [ 53.699534][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 53.699552][ T36] audit: type=1400 audit(1781980276.130:265): avc: denied { rmdir } for pid=294 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 53.710514][ T963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.810485][ T963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.861504][ T62] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 54.011520][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 54.018720][ T62] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.027353][ T62] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.036121][ T62] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.045186][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.054916][ T62] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.064583][ T62] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.077599][ T62] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.086678][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.095774][ T62] usb 2-1: config 0 descriptor?? [ 54.302202][ T62] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.333361][ T441] usb 5-1: 0:2 : does not exist [ 54.346882][ T441] usb 5-1: USB disconnect, device number 3 [ 54.365199][ T36] audit: type=1400 audit(1781980276.800:266): avc: denied { rename } for pid=966 comm="syz.4.188" name="file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.387426][ T36] audit: type=1400 audit(1781980276.820:267): avc: denied { create } for pid=968 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 54.407537][ T36] audit: type=1400 audit(1781980276.820:268): avc: denied { ioctl } for pid=968 comm="syz.2.190" path="socket:[8165]" dev="sockfs" ino=8165 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.447942][ T36] audit: type=1400 audit(1781980276.880:269): avc: denied { write } for pid=971 comm="syz.2.191" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.471789][ T36] audit: type=1326 audit(1781980276.880:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=971 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6a679ce59 code=0x0 [ 54.503819][ T36] audit: type=1400 audit(1781980276.940:271): avc: denied { read write } for pid=957 comm="syz.1.185" name="lp0" dev="devtmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.504430][ T354] usb 2-1: USB disconnect, device number 21 [ 54.536225][ T354] usblp0: removed [ 54.541747][ T36] audit: type=1400 audit(1781980276.940:272): avc: denied { open } for pid=957 comm="syz.1.185" path="/dev/usb/lp0" dev="devtmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.252386][ T354] usb 4-1: USB disconnect, device number 18 [ 55.288682][ T978] binder: Bad value for 'stats' [ 55.313910][ T36] audit: type=1400 audit(1781980277.750:273): avc: denied { map } for pid=979 comm="syz.4.194" path="socket:[8664]" dev="sockfs" ino=8664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.423354][ T983] sit0: entered promiscuous mode [ 55.430275][ T983] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 55.472172][ T983] netlink: 1 bytes leftover after parsing attributes in process `syz.3.195'. [ 55.486929][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.497910][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.507724][ T36] audit: type=1400 audit(1781980277.940:274): avc: denied { getattr } for pid=988 comm="syz.2.197" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.533867][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.552665][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.801523][ T438] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 55.831519][ T471] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.964647][ T438] usb 4-1: unable to get BOS descriptor or descriptor too short [ 55.965170][ T994] overlay: ./file0 is not a directory [ 55.973007][ T438] usb 4-1: not running at top speed; connect to a high speed hub [ 55.983984][ T471] usb 5-1: New USB device found, idVendor=0582, idProduct=001b, bcdDevice= 0.40 [ 55.994769][ T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.996388][ T438] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 56.002936][ T471] usb 5-1: Product: syz [ 56.015773][ T438] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 56.019715][ T471] usb 5-1: Manufacturer: syz [ 56.024339][ T438] usb 4-1: Product: syz [ 56.028957][ T471] usb 5-1: SerialNumber: syz [ 56.033187][ T438] usb 4-1: Manufacturer: syz [ 56.044319][ T438] usb 4-1: SerialNumber: syz [ 56.052940][ T438] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 56.090046][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.143050][ T1003] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 56.160544][ T1003] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4231850318 (270838420352 ns) > initial count (246216653120 ns). Using initial count to start timer. [ 56.249303][ T471] usb 5-1: USB disconnect, device number 4 [ 56.258814][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.031506][ T471] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.189432][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.198874][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.199353][ T471] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 57.214705][ T471] usb 5-1: can't read configurations, error -22 [ 57.341539][ T471] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.492824][ T471] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 57.500785][ T471] usb 5-1: can't read configurations, error -22 [ 57.507186][ T471] usb usb5-port1: attempt power cycle [ 57.785551][ T769] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.861639][ T471] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 57.883115][ T471] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 57.891085][ T471] usb 5-1: can't read configurations, error -22 [ 58.021531][ T471] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 58.043309][ T471] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 58.051273][ T471] usb 5-1: can't read configurations, error -22 [ 58.057707][ T471] usb usb5-port1: unable to enumerate USB device [ 58.404472][ T471] usb 4-1: USB disconnect, device number 19 [ 58.861555][ T471] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.012516][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.023490][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.033263][ T471] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 59.042329][ T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.050841][ T471] usb 4-1: config 0 descriptor?? [ 59.381511][ T314] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.458246][ T471] steelseries 0003:1038:12B6.000D: unknown main item tag 0x7 [ 59.466362][ T471] steelseries 0003:1038:12B6.000D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 59.532720][ T314] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 59.543730][ T314] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 59.557086][ T314] usb 2-1: New USB device found, idVendor=0499, idProduct=103d, bcdDevice= 0.40 [ 59.566196][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.574340][ T314] usb 2-1: Product: syz [ 59.578508][ T314] usb 2-1: Manufacturer: syz [ 59.583121][ T314] usb 2-1: SerialNumber: syz [ 59.657863][ T471] steelseries 0003:1038:12B6.000D: hid_hw_raw_request() failed with -71 [ 59.668662][ T471] usb 4-1: USB disconnect, device number 20 [ 59.792317][ T314] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 59.806241][ T314] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 59.823053][ T314] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 59.833556][ T314] usb 2-1: USB disconnect, device number 22 [ 59.850916][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.851498][ T1021] Bluetooth: hci0: command 0x1003 tx timeout [ 59.872681][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.895844][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.895860][ T36] audit: type=1400 audit(1781980282.330:279): avc: denied { mount } for pid=1042 comm="syz.2.217" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.928003][ T36] audit: type=1400 audit(1781980282.360:280): avc: denied { mounton } for pid=1042 comm="syz.2.217" path="/64/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 59.954440][ T36] audit: type=1400 audit(1781980282.390:281): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.975768][ T1040] syzkaller1: entered promiscuous mode [ 59.981342][ T1040] syzkaller1: entered allmulticast mode [ 59.983463][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.995808][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.006370][ T36] audit: type=1400 audit(1781980282.440:282): avc: denied { setopt } for pid=1044 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.301656][ T314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 60.422202][ T471] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 60.453387][ T1047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.461944][ T1047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.470331][ T1047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 60.520596][ T1053] netlink: 'syz.2.222': attribute type 12 has an invalid length. [ 60.529829][ T36] audit: type=1400 audit(1781980282.960:283): avc: denied { write } for pid=1052 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.549374][ T438] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 60.581380][ T1079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.593298][ T1079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.601540][ T471] usb 4-1: config 9 has an invalid interface number: 235 but max is 0 [ 60.609742][ T471] usb 4-1: config 9 has no interface number 0 [ 60.617076][ T471] usb 4-1: config 9 interface 235 has no altsetting 0 [ 60.625491][ T471] usb 4-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=c6.b8 [ 60.634817][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.643033][ T471] usb 4-1: Product: syz [ 60.647264][ T471] usb 4-1: Manufacturer: syz [ 60.652136][ T471] usb 4-1: SerialNumber: syz [ 60.680118][ T314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 60.688341][ T314] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 60.696054][ T314] usb 5-1: can't read configurations, error -71 [ 60.701494][ T438] usb 2-1: Using ep0 maxpacket: 16 [ 60.708447][ T438] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 60.716613][ T438] usb 2-1: config 0 has no interface number 0 [ 60.722738][ T438] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 60.732785][ T438] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 60.744315][ T438] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 60.753547][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.761611][ T438] usb 2-1: Product: syz [ 60.765781][ T438] usb 2-1: Manufacturer: syz [ 60.770363][ T438] usb 2-1: SerialNumber: syz [ 60.775679][ T438] usb 2-1: config 0 descriptor?? [ 60.781022][ T1051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.788381][ T1051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.863199][ T1049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.871857][ T1049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.880577][ T471] ftdi_sio 4-1:9.235: FTDI USB Serial Device converter detected [ 60.888579][ T471] ftdi_sio ttyUSB0: unknown device type: 0xc6b8 [ 60.997553][ T1051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 61.004775][ T1051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 61.081870][ T471] usb 4-1: USB disconnect, device number 21 [ 61.088137][ T471] ftdi_sio 4-1:9.235: device disconnected [ 61.193247][ T36] audit: type=1400 audit(1781980283.630:284): avc: denied { write } for pid=1083 comm="syz.4.224" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.216231][ T438] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 61.219085][ T36] audit: type=1400 audit(1781980283.630:285): avc: denied { map } for pid=1083 comm="syz.4.224" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.229538][ T1087] tipc: Can't bind to reserved service type 1 [ 61.257339][ T36] audit: type=1400 audit(1781980283.690:286): avc: denied { connect } for pid=1086 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.277112][ T36] audit: type=1400 audit(1781980283.690:287): avc: denied { connect } for pid=1086 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.345208][ T1090] rust_binder: 1089:1090 transaction to 0 failed: ENOENT [ 61.731405][ T36] audit: type=1400 audit(1781980284.160:288): avc: denied { cmd } for pid=1104 comm="iou-wrk-1105" path="socket:[10017]" dev="sockfs" ino=10017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.818613][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.827646][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.018242][ T1051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.026830][ T1051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.035602][ T1051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.044273][ T1051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.052771][ T438] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 62.063019][ T438] asix 2-1:0.34: probe with driver asix failed with error -71 [ 62.071414][ T438] usb 2-1: USB disconnect, device number 23 [ 62.353461][ T1141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.362063][ T1141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.371317][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.379932][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.391611][ T1147] netlink: 'syz.4.240': attribute type 10 has an invalid length. [ 62.674254][ T1186] input: syz0 as /devices/virtual/input/input11 [ 62.811665][ T314] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 62.841510][ T62] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 62.910591][ T1190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.919383][ T1190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.962549][ T314] usb 2-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 62.973955][ T314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.984214][ T314] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 62.993346][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.001358][ T314] usb 2-1: Product: syz [ 63.005601][ T314] usb 2-1: Manufacturer: syz [ 63.010234][ T314] usb 2-1: SerialNumber: syz [ 63.015644][ T62] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.026798][ T62] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.039733][ T62] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.046481][ T62] usb 5-1: New USB device found, idVendor=056a, idProduct=0332, bcdDevice= 0.00 [ 63.055605][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.064605][ T62] usb 5-1: config 0 descriptor?? [ 63.247726][ T314] usb 2-1: unit 4 not found! [ 63.254271][ T314] usb 2-1: USB disconnect, device number 24 [ 63.262334][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.437522][ T1192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.446140][ T1192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.482228][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x2 [ 63.489330][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.496437][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.503901][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.511342][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.518548][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.525604][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.534410][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.541361][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.548770][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.556202][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.565506][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.572850][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.579830][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.586843][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.593898][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.600802][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.608057][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.615024][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.622115][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.629045][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.636200][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.643151][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.650407][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.660792][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.667826][ T62] wacom 0003:056A:0332.000E: unknown main item tag 0x0 [ 63.675058][ T62] wacom 0003:056A:0332.000E: Unknown device_type for 'HID 056a:0332'. Ignoring. [ 63.680331][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.693349][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.697435][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.710196][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.718677][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.727383][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.735542][ T62] usb 5-1: USB disconnect, device number 11 [ 63.976880][ T1221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 64.003322][ T1221] team_slave_1: entered promiscuous mode [ 64.009059][ T1221] team_slave_1: entered allmulticast mode [ 64.121487][ T354] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 64.281527][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 64.288056][ T354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.296434][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.306580][ T354] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.322376][ T354] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 64.331798][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.339832][ T354] usb 4-1: Product: syz [ 64.344091][ T354] usb 4-1: Manufacturer: syz [ 64.348695][ T354] usb 4-1: SerialNumber: syz [ 64.563534][ T354] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.574863][ T354] usb 4-1: USB disconnect, device number 22 [ 64.585040][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.616893][ T1257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 64.873195][ T748] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.031524][ T354] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 65.182523][ T354] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 65.190834][ T354] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 65.199218][ T354] usb 2-1: config 162 has no interface number 0 [ 65.205493][ T354] usb 2-1: config 162 has no interface number 1 [ 65.211767][ T354] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 65.224947][ T354] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 65.235841][ T354] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 65.246928][ T354] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 65.258114][ T354] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 65.269962][ T354] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 65.282108][ T354] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 65.292270][ T354] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 65.305623][ T354] usb 2-1: config 162 interface 79 has no altsetting 0 [ 65.312520][ T354] usb 2-1: config 162 interface 183 has no altsetting 0 [ 65.320826][ T354] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 65.321495][ T62] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.329951][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.345508][ T354] usb 2-1: Product: syz [ 65.349647][ T354] usb 2-1: Manufacturer: syz [ 65.354257][ T354] usb 2-1: SerialNumber: syz [ 65.481478][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 65.487636][ T62] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 65.499938][ T62] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 65.509017][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.517063][ T62] usb 4-1: Product: syz [ 65.521244][ T62] usb 4-1: Manufacturer: syz [ 65.525899][ T62] usb 4-1: SerialNumber: syz [ 65.531480][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 65.560875][ T354] pl2303 2-1:162.79: required endpoints missing [ 65.568475][ T354] pl2303 2-1:162.183: pl2303 converter detected [ 65.575205][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 65.583993][ T354] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 65.592589][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 65.601233][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 65.609705][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 65.618155][ T354] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 65.626815][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 65.635188][ T354] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 65.643587][ T354] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 65.652248][ T354] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 65.660790][ T354] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 65.670305][ T354] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 65.679570][ T354] usb 2-1: USB disconnect, device number 25 [ 65.685630][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 65.693073][ T354] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 65.701176][ T354] pl2303 2-1:162.183: device disconnected [ 65.707008][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 65.715771][ T10] usb 5-1: config 0 has no interface number 0 [ 65.722170][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 65.732577][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 65.736386][ T62] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 65.743765][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 65.751119][ T62] usb 4-1: USB disconnect, device number 23 [ 65.762129][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.770495][ T10] usb 5-1: Product: syz [ 65.774925][ T10] usb 5-1: Manufacturer: syz [ 65.779552][ T10] usb 5-1: SerialNumber: syz [ 65.784838][ T10] usb 5-1: config 0 descriptor?? [ 65.790074][ T1286] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 66.131144][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 66.131161][ T36] audit: type=1400 audit(1781980288.560:318): avc: denied { read } for pid=1287 comm="syz.1.276" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.161480][ T36] audit: type=1400 audit(1781980288.560:319): avc: denied { open } for pid=1287 comm="syz.1.276" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.186044][ T36] audit: type=1400 audit(1781980288.560:320): avc: denied { ioctl } for pid=1287 comm="syz.1.276" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.381483][ T354] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 66.412939][ T10] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 66.421696][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 66.501490][ T62] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 66.532580][ T354] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 66.540879][ T354] usb 2-1: config 127 has no interface number 0 [ 66.547199][ T354] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 66.559662][ T354] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 66.568751][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.576799][ T354] usb 2-1: Product: syz [ 66.581059][ T354] usb 2-1: Manufacturer: syz [ 66.585716][ T354] usb 2-1: SerialNumber: syz [ 66.591627][ T1292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.614243][ C1] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 66.651512][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 66.658290][ T62] usb 4-1: config 3 has an invalid interface number: 224 but max is 0 [ 66.666547][ T62] usb 4-1: config 3 has no interface number 0 [ 66.672682][ T62] usb 4-1: config 3 interface 224 has no altsetting 0 [ 66.680863][ T62] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=ce.f6 [ 66.689965][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.697991][ T62] usb 4-1: Product: syz [ 66.702181][ T62] usb 4-1: Manufacturer: syz [ 66.706825][ T62] usb 4-1: SerialNumber: syz [ 66.814763][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.823363][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.836259][ T438] usb 5-1: USB disconnect, device number 12 [ 66.872396][ T1313] netlink: 'syz.4.279': attribute type 4 has an invalid length. [ 66.880198][ T1313] netlink: 17 bytes leftover after parsing attributes in process `syz.4.279'. [ 66.891491][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 66.897548][ T1021] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.914236][ T438] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 66.919617][ T62] usb 4-1: USB disconnect, device number 24 [ 66.953785][ T36] audit: type=1400 audit(1781980289.390:321): avc: denied { remount } for pid=1326 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.017528][ T31] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 67.031062][ T31] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.136269][ T1336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 67.202181][ T354] asix 2-1:127.57: probe with driver asix failed with error -71 [ 67.213073][ T354] usb 2-1: USB disconnect, device number 26 [ 67.233497][ T36] audit: type=1400 audit(1781980289.670:322): avc: denied { append } for pid=1353 comm="syz.2.287" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.411543][ T438] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 67.561484][ T438] usb 5-1: Using ep0 maxpacket: 8 [ 67.567580][ T438] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 67.579971][ T438] usb 5-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 67.589036][ T438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.597052][ T438] usb 5-1: Product: syz [ 67.601200][ T438] usb 5-1: Manufacturer: syz [ 67.605825][ T438] usb 5-1: SerialNumber: syz [ 67.671491][ T62] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 67.815045][ T438] usb 5-1: 1:1 : bogus bTerminalLink 7 [ 67.822679][ T62] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.823977][ T438] usb 5-1: USB disconnect, device number 13 [ 67.833210][ T62] usb 4-1: config 0 has no interface number 0 [ 67.847487][ T62] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.858928][ T62] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.868763][ T62] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 67.877838][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.886534][ T62] usb 4-1: config 0 descriptor?? [ 67.961497][ T354] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 68.091503][ T354] usb 2-1: device descriptor read/64, error -71 [ 68.302589][ T62] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0010/input/input15 [ 68.338559][ T36] audit: type=1400 audit(1781980290.770:323): avc: denied { map } for pid=1374 comm="syz.4.295" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.362073][ T354] usb 2-1: device descriptor read/64, error -71 [ 68.368481][ T36] audit: type=1400 audit(1781980290.800:324): avc: denied { create } for pid=1374 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.398250][ T62] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 68.499284][ T1359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.507835][ T1359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.516239][ T10] usb 4-1: USB disconnect, device number 25 [ 68.611498][ T354] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 68.751493][ T354] usb 2-1: device descriptor read/64, error -71 [ 69.001610][ T354] usb 2-1: device descriptor read/64, error -71 [ 69.111590][ T354] usb usb2-port1: attempt power cycle [ 69.237140][ T36] audit: type=1400 audit(1781980291.670:325): avc: denied { append } for pid=1388 comm="syz.4.299" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 69.241100][ T1389] 9pnet_fd: Insufficient options for proto=fd [ 69.260316][ T36] audit: type=1400 audit(1781980291.670:326): avc: denied { mounton } for pid=1388 comm="syz.4.299" path="/34/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 69.276836][ T1389] hub 9-0:1.0: USB hub found [ 69.293820][ T1389] hub 9-0:1.0: 1 port detected [ 69.391623][ T62] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 69.451583][ T354] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 69.472533][ T354] usb 2-1: device descriptor read/8, error -71 [ 69.527747][ T1398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.536302][ T1398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.544267][ T62] usb 4-1: device descriptor read/64, error -71 [ 69.551630][ T438] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 69.602580][ T354] usb 2-1: device descriptor read/8, error -71 [ 69.681532][ T438] usb 5-1: device descriptor read/64, error -71 [ 69.698973][ T36] audit: type=1400 audit(1781980292.130:327): avc: denied { create } for pid=1414 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.781597][ T62] usb 4-1: device descriptor read/64, error -71 [ 69.841559][ T354] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 69.856928][ T1423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.865804][ T1423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.874297][ T354] usb 2-1: device descriptor read/8, error -71 [ 69.921517][ T438] usb 5-1: device descriptor read/64, error -71 [ 70.002598][ T354] usb 2-1: device descriptor read/8, error -71 [ 70.021506][ T62] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 70.111609][ T354] usb usb2-port1: unable to enumerate USB device [ 70.161503][ T62] usb 4-1: device descriptor read/64, error -71 [ 70.161503][ T438] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 70.291521][ T438] usb 5-1: device descriptor read/64, error -71 [ 70.384452][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 70.406335][ T1428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.414952][ T1428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.422780][ T62] usb 4-1: device descriptor read/64, error -71 [ 70.531590][ T438] usb 5-1: device descriptor read/64, error -71 [ 70.541677][ T62] usb usb4-port1: attempt power cycle [ 70.641619][ T438] usb usb5-port1: attempt power cycle [ 70.881489][ T62] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 70.903224][ T62] usb 4-1: device descriptor read/8, error -71 [ 70.981488][ T438] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 71.000309][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.008896][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.010386][ T438] usb 5-1: device descriptor read/8, error -71 [ 71.018240][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.031316][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.041406][ T62] usb 4-1: device descriptor read/8, error -71 [ 71.152532][ T438] usb 5-1: device descriptor read/8, error -71 [ 71.281556][ T62] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 71.302624][ T62] usb 4-1: device descriptor read/8, error -71 [ 71.367938][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 71.367955][ T36] audit: type=1400 audit(1781980293.800:331): avc: denied { getopt } for pid=1446 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.411566][ T438] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 71.432625][ T438] usb 5-1: device descriptor read/8, error -71 [ 71.434164][ T62] usb 4-1: device descriptor read/8, error -71 [ 71.561650][ T62] usb usb4-port1: unable to enumerate USB device [ 71.566466][ T438] usb 5-1: device descriptor read/8, error -71 [ 71.611671][ T314] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 71.634510][ T1456] cgroup: fork rejected by pids controller in /syz2 [ 71.677596][ T1589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.681625][ T438] usb usb5-port1: unable to enumerate USB device [ 71.686497][ T1589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.701133][ T36] audit: type=1400 audit(1781980294.130:332): avc: denied { write } for pid=1588 comm="syz.2.318" name="tcp" dev="proc" ino=4026532434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.772618][ T314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.793990][ T314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.811727][ T314] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.825666][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.833786][ T314] usb 2-1: SerialNumber: syz [ 71.926503][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.935199][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.105536][ T314] usb 2-1: 0:2 : does not exist [ 72.110472][ T314] usb 2-1: unit 5: unexpected type 0x0a [ 72.119638][ T314] usb 2-1: USB disconnect, device number 31 [ 72.464844][ T1715] SELinux: policydb string does not match my string SE Linux [ 72.464894][ T36] audit: type=1400 audit(1781980294.900:333): avc: denied { ioctl } for pid=1714 comm="syz.2.327" path="pid:[4026532386]" dev="nsfs" ino=4026532386 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.472564][ T1715] SELinux: failed to load policy [ 72.506079][ T36] audit: type=1400 audit(1781980294.900:334): avc: denied { load_policy } for pid=1714 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.671512][ T438] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 72.703399][ T1738] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.712281][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.720878][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.822829][ T438] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.832704][ T438] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 72.841815][ T438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.849933][ T438] usb 5-1: Product: syz [ 72.854169][ T438] usb 5-1: Manufacturer: syz [ 72.858800][ T438] usb 5-1: SerialNumber: syz [ 72.902462][ T314] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 73.031494][ T314] usb 2-1: device descriptor read/64, error -71 [ 73.073154][ T438] usb 5-1: USB disconnect, device number 18 [ 73.088405][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.281497][ T314] usb 2-1: device descriptor read/64, error -71 [ 73.340066][ T1748] netlink: 'syz.2.338': attribute type 4 has an invalid length. [ 73.356534][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.365131][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.391584][ T441] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 73.531503][ T314] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 73.542616][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.553563][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.563346][ T441] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.572425][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.581602][ T441] usb 4-1: config 0 descriptor?? [ 73.661492][ T314] usb 2-1: device descriptor read/64, error -71 [ 73.790288][ T441] usbhid 4-1:0.0: can't add hid device: -71 [ 73.796508][ T441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.805478][ T441] usb 4-1: USB disconnect, device number 30 [ 73.861498][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 73.913324][ T314] usb 2-1: device descriptor read/64, error -71 [ 73.916005][ T36] audit: type=1400 audit(1781980296.350:335): avc: denied { mount } for pid=1789 comm="syz.2.343" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.944478][ T36] audit: type=1400 audit(1781980296.380:336): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.988663][ T1742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1742 comm=syz.3.336 [ 74.001486][ T1742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=1742 comm=syz.3.336 [ 74.015254][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.026671][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.032424][ T314] usb usb2-port1: attempt power cycle [ 74.036566][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 74.050933][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.060906][ T10] usb 5-1: config 0 descriptor?? [ 74.069751][ T36] audit: type=1400 audit(1781980296.500:337): avc: denied { mount } for pid=1793 comm="syz.2.344" name="/" dev="configfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.092871][ T36] audit: type=1400 audit(1781980296.500:338): avc: denied { search } for pid=1793 comm="syz.2.344" name="/" dev="configfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.381484][ T314] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 74.402553][ T314] usb 2-1: device descriptor read/8, error -71 [ 74.470063][ T10] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 74.477620][ T10] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 74.485055][ T441] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 74.492669][ T10] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 74.500069][ T10] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 74.507590][ T10] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 74.516050][ T10] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 74.542507][ T314] usb 2-1: device descriptor read/8, error -71 [ 74.641483][ T441] usb 4-1: device descriptor read/64, error -71 [ 74.670103][ T10] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 9: -71 [ 74.679701][ T10] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -71 [ 74.688937][ T10] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 74.697650][ T10] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 74.705807][ T10] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -71 [ 74.717068][ T10] usb 5-1: USB disconnect, device number 19 [ 74.791635][ T314] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 74.822583][ T314] usb 2-1: device descriptor read/8, error -71 [ 74.881993][ T441] usb 4-1: device descriptor read/64, error -71 [ 74.952668][ T314] usb 2-1: device descriptor read/8, error -71 [ 75.061577][ T314] usb usb2-port1: unable to enumerate USB device [ 75.121557][ T441] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 75.202002][ T36] audit: type=1400 audit(1781980297.640:339): avc: denied { name_bind } for pid=1807 comm="syz.4.347" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.251511][ T441] usb 4-1: device descriptor read/64, error -71 [ 75.491524][ T441] usb 4-1: device descriptor read/64, error -71 [ 75.601589][ T441] usb usb4-port1: attempt power cycle [ 75.941497][ T441] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 75.962488][ T441] usb 4-1: device descriptor read/8, error -71 [ 76.092554][ T441] usb 4-1: device descriptor read/8, error -71 [ 76.331755][ T441] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 76.353363][ T441] usb 4-1: device descriptor read/8, error -71 [ 76.421506][ T314] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 76.482483][ T441] usb 4-1: device descriptor read/8, error -71 [ 76.551498][ T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 76.582568][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.591690][ T441] usb usb4-port1: unable to enumerate USB device [ 76.593705][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 76.610543][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.623480][ T314] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 76.632552][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.641233][ T314] usb 2-1: config 0 descriptor?? [ 76.646654][ T1826] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.702693][ T10] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 76.715543][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.722220][ T10] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 76.731261][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.740309][ T10] usb 5-1: config 0 descriptor?? [ 76.947457][ T36] audit: type=1400 audit(1781980299.380:340): avc: denied { write } for pid=1827 comm="syz.4.354" name="usbmon1" dev="devtmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.061289][ T314] elecom 0003:056E:00FD.0012: unexpected long global item [ 77.068635][ T314] elecom 0003:056E:00FD.0012: probe with driver elecom failed with error -22 [ 77.113340][ T1843] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 77.124458][ T36] audit: type=1400 audit(1781980299.560:341): avc: denied { read } for pid=1842 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.155367][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 77.161724][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 77.169581][ T36] audit: type=1400 audit(1781980299.560:342): avc: denied { create } for pid=1842 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.189993][ T10] usb 5-1: USB disconnect, device number 20 [ 77.241618][ T36] audit: type=1400 audit(1781980299.670:343): avc: denied { write } for pid=1852 comm="syz.3.361" name="/" dev="configfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.276545][ T36] audit: type=1400 audit(1781980299.670:344): avc: denied { add_name } for pid=1852 comm="syz.3.361" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.276753][ T36] audit: type=1400 audit(1781980299.680:345): avc: denied { create } for pid=1852 comm="syz.3.361" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.373606][ T62] usb 2-1: USB disconnect, device number 36 [ 77.493124][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 77.507627][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.590060][ T1856] hid-generic 0000:0000:0000.0013: pid 1856 passed too short report [ 77.777659][ T1866] netlink: 96 bytes leftover after parsing attributes in process `syz.3.365'. [ 77.821826][ T1869] fuse: Bad value for 'user_id' [ 77.826789][ T1869] fuse: Bad value for 'user_id' [ 77.921259][ T1877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.934020][ T1877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.936913][ T1875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.955624][ T1875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.994775][ T1883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.076926][ T1892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.085476][ T1892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.113016][ T36] audit: type=1400 audit(1781980300.550:346): avc: denied { create } for pid=1895 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.191543][ T314] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 78.279146][ T36] audit: type=1400 audit(1781980300.710:347): avc: denied { cmd } for pid=1901 comm="iou-wrk-1902" path="socket:[14449]" dev="sockfs" ino=14449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.311509][ T62] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 78.321597][ T314] usb 2-1: device descriptor read/64, error -71 [ 78.461483][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 78.561540][ T314] usb 2-1: device descriptor read/64, error -71 [ 78.591637][ T62] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 78.717954][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.726534][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.751495][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 78.757098][ T62] usb usb4-port1: attempt power cycle [ 78.771560][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 78.811578][ T314] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 78.922813][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.931149][ T31] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 78.941361][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.950347][ T314] usb 2-1: device descriptor read/64, error -71 [ 78.956622][ T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 78.967554][ T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 78.980708][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 78.991590][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8290, setting to 1024 [ 79.002566][ T31] usb 5-1: config 1 interface 1 has no altsetting 0 [ 79.010519][ T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 79.019602][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.027616][ T31] usb 5-1: Product: syz [ 79.031791][ T31] usb 5-1: Manufacturer: syz [ 79.036407][ T31] usb 5-1: SerialNumber: syz [ 79.101522][ T62] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 79.132503][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 79.201487][ T314] usb 2-1: device descriptor read/64, error -71 [ 79.248194][ T31] usb 5-1: incorrect wMaxPacketSize 0x1400 for BADD profile [ 79.253669][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.262337][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.264305][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.273505][ T62] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 79.292212][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.308012][ T31] usb 5-1: USB disconnect, device number 21 [ 79.315441][ T314] usb usb2-port1: attempt power cycle [ 79.331845][ T62] usb 4-1: Invalid ep0 maxpacket: 64 [ 79.337269][ T62] usb usb4-port1: unable to enumerate USB device [ 79.661524][ T314] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 79.682462][ T314] usb 2-1: device descriptor read/8, error -71 [ 79.812773][ T314] usb 2-1: device descriptor read/8, error -71 [ 79.863214][ T1925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.871855][ T1925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.915288][ T1925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.924219][ T1925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.991646][ T62] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 80.051515][ T314] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 80.072582][ T314] usb 2-1: device descriptor read/8, error -71 [ 80.141516][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 80.147765][ T62] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.158726][ T62] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.165373][ T62] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 80.175480][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.184289][ T62] usb 5-1: config 0 descriptor?? [ 80.202450][ T314] usb 2-1: device descriptor read/8, error -71 [ 80.311622][ T314] usb usb2-port1: unable to enumerate USB device [ 80.516632][ T36] audit: type=1400 audit(1781980302.950:348): avc: denied { map } for pid=1930 comm="syz.2.386" path="socket:[13915]" dev="sockfs" ino=13915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.553092][ T36] audit: type=1400 audit(1781980302.990:349): avc: denied { ioctl } for pid=1933 comm="syz.2.387" path="socket:[14567]" dev="sockfs" ino=14567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.556626][ T1934] syzkaller1: entered promiscuous mode [ 80.583064][ T1934] syzkaller1: entered allmulticast mode [ 80.635139][ T62] hid (null): unknown global tag 0xd [ 80.640488][ T62] hid (null): report_id 3083006261 is invalid [ 81.341486][ T441] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 81.373289][ T62] usb 5-1: string descriptor 0 read error: -71 [ 81.382312][ T314] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 81.390876][ T62] uclogic 0003:5543:004D.0014: failed retrieving string descriptor #200: -71 [ 81.399830][ T62] uclogic 0003:5543:004D.0014: failed retrieving pen parameters: -71 [ 81.408008][ T62] uclogic 0003:5543:004D.0014: failed probing pen v2 parameters: -71 [ 81.416485][ T62] uclogic 0003:5543:004D.0014: failed probing parameters: -71 [ 81.424274][ T62] uclogic 0003:5543:004D.0014: probe with driver uclogic failed with error -71 [ 81.434709][ T62] usb 5-1: USB disconnect, device number 22 [ 81.484070][ T1950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.493884][ T1950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.493996][ T441] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.513558][ T441] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.527230][ T441] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 81.536316][ T441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.544409][ T441] usb 2-1: SerialNumber: syz [ 81.552234][ T441] usb 2-1: bad CDC descriptors [ 81.552546][ T314] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 81.557204][ T441] usb-storage 2-1:1.0: USB Mass Storage device detected [ 81.568602][ T314] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 81.588781][ T314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.589211][ T441] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 81.595465][ T314] usb 4-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 81.612274][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.621739][ T314] usb 4-1: config 0 descriptor?? [ 81.626047][ T1951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 81.760846][ T441] usb 2-1: USB disconnect, device number 41 [ 81.771542][ T62] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 81.901513][ T62] usb 5-1: device descriptor read/64, error -71 [ 82.028948][ T1940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.037556][ T1940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.047591][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 82.047618][ T36] audit: type=1400 audit(1781980304.480:352): avc: denied { watch } for pid=1939 comm="syz.3.389" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 82.099395][ T36] audit: type=1400 audit(1781980304.530:353): avc: denied { mounton } for pid=1939 comm="syz.3.389" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 82.151479][ T62] usb 5-1: device descriptor read/64, error -71 [ 82.227925][ T314] wacom 0003:056A:037B.0015: collection stack underflow [ 82.235024][ T314] wacom 0003:056A:037B.0015: item 0 2 0 12 parsing failed [ 82.242702][ T314] wacom 0003:056A:037B.0015: parse failed [ 82.248474][ T314] wacom 0003:056A:037B.0015: probe with driver wacom failed with error -22 [ 82.283726][ T36] audit: type=1400 audit(1781980304.720:354): avc: denied { accept } for pid=1960 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.303178][ T36] audit: type=1400 audit(1781980304.720:355): avc: denied { shutdown } for pid=1960 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.391510][ T62] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 82.521508][ T62] usb 5-1: device descriptor read/64, error -71 [ 82.761487][ T62] usb 5-1: device descriptor read/64, error -71 [ 82.777307][ T1966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 82.816484][ T1974] syz.2.398 uses obsolete (PF_INET,SOCK_PACKET) [ 82.825366][ T36] audit: type=1400 audit(1781980305.260:356): avc: denied { ioctl } for pid=1973 comm="syz.2.398" path="socket:[14701]" dev="sockfs" ino=14701 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.826574][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.859615][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.871552][ T62] usb usb5-port1: attempt power cycle [ 83.221570][ T62] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 83.242554][ T62] usb 5-1: device descriptor read/8, error -71 [ 83.361495][ T441] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 83.373249][ T62] usb 5-1: device descriptor read/8, error -71 [ 83.388183][ T36] audit: type=1400 audit(1781980305.820:357): avc: denied { name_bind } for pid=1977 comm="syz.2.400" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.408844][ T36] audit: type=1400 audit(1781980305.820:358): avc: denied { node_bind } for pid=1977 comm="syz.2.400" saddr=400:0:800:0:6ff:53:0:20 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 83.430441][ T1982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.440633][ T1982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.452483][ T36] audit: type=1400 audit(1781980305.890:359): avc: denied { relabelfrom } for pid=1981 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.472300][ T36] audit: type=1400 audit(1781980305.890:360): avc: denied { relabelto } for pid=1981 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.501526][ T441] usb 2-1: device descriptor read/64, error -71 [ 83.621503][ T62] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 83.642691][ T62] usb 5-1: device descriptor read/8, error -71 [ 83.741483][ T441] usb 2-1: device descriptor read/64, error -71 [ 83.772525][ T62] usb 5-1: device descriptor read/8, error -71 [ 83.881573][ T62] usb usb5-port1: unable to enumerate USB device [ 83.981526][ T441] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 84.111532][ T441] usb 2-1: device descriptor read/64, error -71 [ 84.137275][ T1989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.145836][ T1989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.160685][ T10] usb 4-1: USB disconnect, device number 39 [ 84.351527][ T441] usb 2-1: device descriptor read/64, error -71 [ 84.431061][ T2007] wg0: entered promiscuous mode [ 84.436064][ T2007] wg0: entered allmulticast mode [ 84.461643][ T441] usb usb2-port1: attempt power cycle [ 84.666076][ T2011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.675015][ T2011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.675139][ T2012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.691254][ T2012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.741541][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 84.751149][ T2011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.760191][ T2011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.801485][ T441] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 84.822701][ T441] usb 2-1: device descriptor read/8, error -71 [ 84.828654][ T2016] netlink: 'syz.3.411': attribute type 5 has an invalid length. [ 84.891521][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 84.897962][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.906866][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 84.919699][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 84.929094][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.937289][ T10] usb 5-1: Product: syz [ 84.941715][ T10] usb 5-1: Manufacturer: syz [ 84.946305][ T10] usb 5-1: SerialNumber: syz [ 84.953410][ T441] usb 2-1: device descriptor read/8, error -71 [ 85.154424][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 85.164228][ T10] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 85.174314][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 85.184811][ T10] usb 5-1: USB disconnect, device number 27 [ 85.191615][ T441] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 85.212481][ T441] usb 2-1: device descriptor read/8, error -71 [ 85.241548][ T438] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 85.277778][ T2024] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 85.292541][ T2024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.301138][ T2024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.342771][ T441] usb 2-1: device descriptor read/8, error -71 [ 85.393291][ T438] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.401793][ T438] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 85.412421][ T438] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 85.425146][ T438] usb 4-1: string descriptor 0 read error: -22 [ 85.431346][ T438] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 85.440471][ T438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.453032][ T441] usb usb2-port1: unable to enumerate USB device [ 85.651844][ T438] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 85.663031][ T438] usb 4-1: USB disconnect, device number 40 [ 85.711705][ T36] audit: type=1326 audit(1781980308.150:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2037 comm="syz.4.418" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f9b9ce59 code=0x0 [ 85.848728][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.857341][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.858114][ T2042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.873653][ T2042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.882017][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.890571][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.144403][ T2044] loop5: detected capacity change from 0 to 7 [ 86.409849][ T2059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.419195][ T2059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.501493][ T314] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 86.531487][ T62] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 86.652556][ T314] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 86.663549][ T314] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.676482][ T314] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 86.689095][ T314] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 86.698253][ T62] usb 2-1: Using ep0 maxpacket: 8 [ 86.703371][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.711394][ T314] usb 4-1: Product: syz [ 86.715695][ T314] usb 4-1: Manufacturer: syz [ 86.720302][ T314] usb 4-1: SerialNumber: syz [ 86.725277][ T62] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.735634][ T62] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 86.745063][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.754253][ T62] usb 2-1: config 0 descriptor?? [ 86.759981][ T62] usb 2-1: bad CDC descriptors [ 86.765025][ T62] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 86.772982][ T62] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 86.779466][ T62] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 86.811565][ T471] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 86.945863][ T2070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.954475][ T2070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.961981][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.962346][ T471] usb 5-1: Using ep0 maxpacket: 32 [ 86.972340][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.977350][ T314] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.992268][ T471] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.000463][ T471] usb 5-1: config 0 has no interface number 0 [ 87.010273][ T2070] raw_sendmsg: syz.2.431 forgot to set AF_INET. Fix it! [ 87.017338][ T314] usb 4-1: USB disconnect, device number 41 [ 87.024375][ T471] usb 5-1: config 0 interface 184 has no altsetting 0 [ 87.032946][ T471] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 87.043673][ T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.051824][ T471] usb 5-1: Product: syz [ 87.054016][ T441] usb 2-1: USB disconnect, device number 46 [ 87.056535][ T471] usb 5-1: Manufacturer: syz [ 87.066580][ T471] usb 5-1: SerialNumber: syz [ 87.072059][ T471] usb 5-1: config 0 descriptor?? [ 87.078664][ T471] smsc75xx v1.0.0 [ 87.487558][ T2072] overlayfs: missing 'lowerdir' [ 87.493011][ T36] audit: type=1400 audit(1781980309.930:362): avc: denied { connect } for pid=2071 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.512543][ T36] audit: type=1400 audit(1781980309.930:363): avc: denied { setopt } for pid=2071 comm="syz.3.432" laddr=172.20.20.170 lport=3 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.567364][ T2079] netlink: 'syz.2.435': attribute type 28 has an invalid length. [ 87.608132][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.616820][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.629276][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.637944][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.751489][ T438] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 87.831496][ T314] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 87.901470][ T438] usb 4-1: Using ep0 maxpacket: 32 [ 87.908452][ T438] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 64 [ 87.918314][ T438] usb 4-1: config 1 interface 0 has no altsetting 0 [ 87.926398][ T438] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.935517][ T438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.943548][ T438] usb 4-1: Product: 罸ᕧ狱䝀ผ뀱역駡⭕걘婨箧쥱틃运朇륳⸜᭧堦ᢘ鲪鮙쎶环⍒ͷ㌶睕칈⟡탕㎧ꦉﭨ籖盅ሆἙ甦ୡ☕Ⅻꓭ嫓ો熺䴅騐䫐ᴑ軯繠ࢻ [ 87.962536][ T438] usb 4-1: Manufacturer: ⃇㸩䓋傿쮒敏䷬䬶秾챑䘂⤶뎉礋Ҳ煮⪽﫰驝싪뎞绡㼚麶☊槥㛦蛧Ἀꩃㅷ憐鮠텸ηꔋ梥褥岪쿳㕲햗뺁㽗ϖ혒㈫壋驞ᒐ惜綋콦ꦤ漁硏ɰ瞟茳蜞堇苼ズ鋣㨜蚰틆㩆㶳콪簾气枃唊⌊濜②䎅ͬ彳瘕෍듆酧눏葋狇襇 [ 87.983274][ T314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.992894][ T438] usb 4-1: SerialNumber: 롏곷ৄス놇똢絛ᾞT绿駌섽镪ѧ쒌︢柀硬屬讁ƛꕤ៟㩹觕듉᮰流ꔙ胦㚎찘䃅ഺ配䜆쥡奱슅俱婀䬐ꬕꍴ첗눘穛᫫嬅砈㑡ꞣ闓ᐮ웕ꉌ떞␊༧持抃퟿蟤헑뢚 [ 87.997601][ T2072] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 88.001021][ T314] usb 2-1: not running at top speed; connect to a high speed hub [ 88.039086][ T314] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 88.050618][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 88.061588][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1945, setting to 64 [ 88.073884][ T314] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 88.083080][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.091221][ T314] usb 2-1: Product: syz [ 88.095432][ T314] usb 2-1: Manufacturer: syz [ 88.100046][ T314] usb 2-1: SerialNumber: syz [ 88.105710][ T2091] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.210397][ T2095] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 88.246243][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.255112][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.291409][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 88.292021][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.303370][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.310920][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.328327][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.337601][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.337664][ T2091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.354069][ T2091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.354972][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 88.376265][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 88.386215][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 88.400648][ T471] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.410203][ T471] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 88.421568][ T471] usb 5-1: USB disconnect, device number 28 [ 88.436545][ T2072] netlink: 80 bytes leftover after parsing attributes in process `syz.3.432'. [ 88.482562][ T438] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 88.493265][ T438] usb 4-1: USB disconnect, device number 42 [ 88.653074][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.661669][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.761511][ T471] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 88.782750][ T2112] : renamed from vlan0 (while UP) [ 88.911486][ T471] usb 5-1: Using ep0 maxpacket: 16 [ 88.918166][ T471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.928887][ T471] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.939472][ T471] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.948803][ T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.957077][ T471] usb 5-1: Product: syz [ 88.961374][ T471] usb 5-1: Manufacturer: syz [ 88.966341][ T471] usb 5-1: SerialNumber: syz [ 89.015733][ T2131] overlayfs: failed to resolve './file1': -2 [ 89.182795][ T2107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.191511][ T2107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.200478][ T471] usb 5-1: 0:2 : does not exist [ 89.208564][ T471] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 89.221553][ T471] usb 5-1: USB disconnect, device number 29 [ 89.281497][ T438] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 89.353253][ T36] audit: type=1400 audit(1781980311.790:364): avc: denied { getopt } for pid=2141 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.378895][ T2144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2144 comm=syz.2.457 [ 89.404846][ T2144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2144 comm=syz.2.457 [ 89.418199][ T2144] overlayfs: conflicting options: nfs_export=on,index=off [ 89.425649][ T2144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2144 comm=syz.2.457 [ 89.438544][ T2144] loop7: detected capacity change from 0 to 16384 [ 89.445028][ T438] usb 4-1: Using ep0 maxpacket: 16 [ 89.454266][ T438] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.465790][ T438] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.476934][ T438] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.490106][ T438] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 89.499444][ T438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.507644][ T438] usb 4-1: Product: syz [ 89.512013][ T438] usb 4-1: Manufacturer: syz [ 89.516634][ T438] usb 4-1: SerialNumber: syz [ 89.724615][ T438] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 89.732948][ T438] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.767671][ T2155] tc_dump_action: action bad kind [ 89.822904][ T2160] overlayfs: failed to resolve './file1': -2 [ 89.866885][ T2165] incfs: Can't find or create .index dir in ./cgroup [ 89.873748][ T2165] incfs: mount failed -22 [ 89.942032][ T2167] overlayfs: failed to resolve './file0': -2 [ 89.949993][ T2167] 9pnet_fd: Insufficient options for proto=fd [ 90.096544][ T36] audit: type=1400 audit(1781980312.530:365): avc: denied { checkpoint_restore } for pid=2176 comm="syz.2.466" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.118479][ T471] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 90.271179][ T2184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.280351][ T2184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.284288][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.315283][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.325501][ T471] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 90.328897][ T438] usb 4-1: USB disconnect, device number 43 [ 90.340648][ T471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.361955][ T471] usb 5-1: config 0 descriptor?? [ 90.571400][ T2163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.580925][ T2163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.803675][ T2186] overlayfs: failed to resolve './file1': -2 [ 90.860677][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.871276][ T2191] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 90.881495][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.888509][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.901491][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.908337][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.931496][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.938347][ T471] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 90.961697][ T471] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 91.241480][ T441] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 91.392631][ T441] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.404037][ T441] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 91.413333][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.421325][ T441] usb 4-1: Product: syz [ 91.425824][ T441] usb 4-1: Manufacturer: syz [ 91.430462][ T441] usb 4-1: SerialNumber: syz [ 91.642746][ T441] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.691134][ T441] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 91.710676][ T441] usb 4-1: USB disconnect, device number 44 [ 91.718806][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.087780][ T2202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.097234][ T2202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.105688][ T36] audit: type=1400 audit(1781980314.540:366): avc: denied { listen } for pid=2201 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 92.108330][ T2202] incfs: Can't find or create .incomplete dir in ./cgroup [ 92.133188][ T2202] incfs: mount failed -22 [ 92.142877][ T2202] syzkaller1: entered promiscuous mode [ 92.148501][ T2202] syzkaller1: entered allmulticast mode [ 92.650132][ T36] audit: type=1400 audit(1781980315.080:367): avc: denied { create } for pid=2208 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.682844][ T36] audit: type=1400 audit(1781980315.110:368): avc: denied { sys_admin } for pid=2208 comm="syz.3.478" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.748260][ T2217] netlink: 136 bytes leftover after parsing attributes in process `syz.2.480'. [ 92.748370][ T36] audit: type=1400 audit(1781980315.180:369): avc: denied { read } for pid=2215 comm="syz.2.480" dev="sockfs" ino=16784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.809519][ T471] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 92.817272][ T36] audit: type=1326 audit(1781980315.230:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.4.460" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f9b9ce59 code=0x7fc00000 [ 92.843783][ T471] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 92.852948][ T471] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 92.867224][ T471] usb 5-1: USB disconnect, device number 30 [ 92.899644][ T2223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.909639][ T2223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.920249][ T2223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.929470][ T2223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.952194][ T2223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.963640][ T2223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.281535][ T471] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 93.431477][ T471] usb 5-1: Using ep0 maxpacket: 16 [ 93.437691][ T471] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 93.445929][ T471] usb 5-1: config 1 has no interface number 0 [ 93.452051][ T471] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.461979][ T471] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.471990][ T471] usb 5-1: config 1 interface 105 has no altsetting 0 [ 93.480178][ T471] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 93.489301][ T471] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.491249][ T36] audit: type=1400 audit(1781980315.930:371): avc: denied { getopt } for pid=2229 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.497427][ T471] usb 5-1: Product: syz [ 93.521045][ T471] usb 5-1: Manufacturer: syz [ 93.525708][ T471] usb 5-1: SerialNumber: syz [ 93.526314][ T2230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 93.535973][ T2226] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 93.539774][ T36] audit: type=1400 audit(1781980315.950:372): avc: denied { bind } for pid=2229 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.546381][ T2226] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 93.565700][ T36] audit: type=1400 audit(1781980315.950:373): avc: denied { setopt } for pid=2229 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.646790][ T2234] fuse: Bad value for 'user_id' [ 93.651756][ T2234] fuse: Bad value for 'user_id' [ 93.657682][ T2234] ]0: renamed from lo [ 93.705568][ T441] usb 2-1: USB disconnect, device number 47 [ 93.980441][ T2226] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 93.987668][ T2226] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 94.141503][ T36] audit: type=1400 audit(1781980316.570:374): avc: denied { mount } for pid=2274 comm="syz.3.501" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.163767][ T36] audit: type=1400 audit(1781980316.580:375): avc: denied { mounton } for pid=2274 comm="syz.3.501" path="/103/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 94.398290][ T471] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 94.409387][ T471] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 94.420548][ T471] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 94.433492][ T471] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:a2:81:cc:d0:ff [ 94.448505][ T471] usb 5-1: USB disconnect, device number 31 [ 94.456643][ T471] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 94.502463][ T471] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 94.511937][ T471] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 94.521328][ T471] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 94.691019][ T36] audit: type=1400 audit(1781980317.120:376): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.699275][ T2307] incfs: Can't find or create .index dir in ./cgroup [ 94.717752][ T2307] incfs: mount failed -30 [ 94.722357][ T2307] incfs: Can't find or create .index dir in ./cgroup [ 94.729124][ T2307] incfs: mount failed -30 [ 94.734218][ T2307] incfs: Can't find or create .index dir in ./cgroup [ 94.740958][ T2307] incfs: mount failed -30 [ 94.745765][ T2307] incfs: Can't find or create .index dir in ./cgroup [ 94.752666][ T2307] incfs: mount failed -30 [ 94.807252][ T2314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 94.873398][ T2320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 94.943228][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.951822][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.221554][ T419] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 95.241517][ T438] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 95.373287][ T419] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.384369][ T419] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.394274][ T419] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.402572][ T438] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 95.407388][ T419] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.418293][ T438] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.427357][ T419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.440232][ T438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.449228][ T419] usb 5-1: config 0 descriptor?? [ 95.455031][ T438] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 95.468813][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.477536][ T438] usb 2-1: config 0 descriptor?? [ 95.482823][ T2331] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.692635][ T438] kye 0003:0458:501A.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 95.703424][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.710123][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.716903][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.723645][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.730394][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.737164][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.743939][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.750668][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.757724][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.764463][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.771249][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.778023][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.784841][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.791671][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.798383][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.805114][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.811923][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.818626][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.825376][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.832097][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.838812][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.845544][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.852377][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.859092][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.866237][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.868343][ T419] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 95.872983][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.885753][ T419] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 95.890808][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.897528][ T419] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 95.901975][ T2340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 95.912033][ T419] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 95.918607][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.933313][ T419] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 95.941516][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.945215][ T419] microsoft 0003:045E:07DA.0018: no inputs found [ 95.957833][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.957865][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.967892][ T419] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 95.971245][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.986720][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 95.993482][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 96.000356][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 96.007075][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 96.013964][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 96.020742][ T438] kye 0003:0458:501A.0017: unknown main item tag 0x0 [ 96.028229][ T438] kye 0003:0458:501A.0017: hidraw1: USB HID v0.04 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 96.043951][ T438] kye 0003:0458:501A.0017: tablet-enabling feature report not found [ 96.052006][ T438] kye 0003:0458:501A.0017: tablet enabling failed [ 96.061622][ T438] usb 2-1: USB disconnect, device number 48 [ 96.090248][ T2329] random: crng reseeded on system resumption [ 96.108608][ T2329] Unrecognized hibernate image header format! [ 96.114746][ T2329] PM: hibernation: Image mismatch: architecture specific data [ 96.123279][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.131863][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.142346][ T419] usb 5-1: USB disconnect, device number 32 [ 96.345597][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.354336][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.370187][ T2354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.378715][ T2354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.430939][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.439556][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.671541][ T438] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 96.822679][ T438] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.837359][ T438] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 96.850951][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 96.859127][ T438] usb 2-1: Product: syz [ 96.863382][ T438] usb 2-1: Manufacturer: syz [ 96.868146][ T438] usb 2-1: SerialNumber: syz [ 96.961172][ T2384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.969750][ T2384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.007503][ T2386] fuse: Bad value for 'fd' [ 97.076279][ T438] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.091568][ T471] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 97.265233][ T2375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.274780][ T2375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.280178][ T441] usb 2-1: USB disconnect, device number 49 [ 97.285969][ T471] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.297674][ T471] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 97.299351][ T441] usblp0: removed [ 97.316502][ T471] usb 5-1: can't read configurations, error -71 [ 97.499430][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.507957][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.517311][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.525796][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.812202][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 97.812221][ T36] audit: type=1400 audit(1781980320.250:385): avc: denied { sqpoll } for pid=2407 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.947511][ T2420] kvm: kvm [2417]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 97.956494][ T2420] kvm: kvm [2417]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 97.977343][ T2420] fuseblk: Bad value for 'fd' [ 97.983164][ T2420] vfat: Unknown parameter 'discardt/tun' [ 98.113290][ T36] audit: type=1400 audit(1781980320.550:386): avc: denied { getopt } for pid=2424 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.239179][ T2428] FAULT_INJECTION: forcing a failure. [ 98.239179][ T2428] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.252502][ T2428] CPU: 1 UID: 0 PID: 2428 Comm: syz.3.543 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 98.252530][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.252550][ T2428] Call Trace: [ 98.252556][ T2428] [ 98.252563][ T2428] __dump_stack+0x21/0x30 [ 98.252593][ T2428] dump_stack_lvl+0x140/0x1c0 [ 98.252607][ T2428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.252626][ T2428] ? check_stack_object+0x12b/0x150 [ 98.252652][ T2428] dump_stack+0x19/0x20 [ 98.252674][ T2428] should_fail_ex+0x3d7/0x530 [ 98.252691][ T2428] should_fail+0xf/0x20 [ 98.252702][ T2428] should_fail_usercopy+0x1e/0x30 [ 98.252716][ T2428] _copy_to_user+0x24/0xa0 [ 98.252726][ T2428] simple_read_from_buffer+0xed/0x160 [ 98.252741][ T2428] proc_fail_nth_read+0x1aa/0x220 [ 98.252757][ T2428] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.252771][ T2428] ? bpf_lsm_file_permission+0xd/0x20 [ 98.252786][ T2428] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.252799][ T2428] vfs_read+0x289/0xcb0 [ 98.252812][ T2428] ? __cfi_vfs_read+0x10/0x10 [ 98.252827][ T2428] ? __kasan_check_write+0x18/0x20 [ 98.252839][ T2428] ? mutex_lock+0x97/0x1d0 [ 98.252851][ T2428] ? __cfi_mutex_lock+0x10/0x10 [ 98.252861][ T2428] ? __fget_files+0x2c5/0x340 [ 98.252875][ T2428] ksys_read+0x145/0x260 [ 98.252885][ T2428] ? __cfi_ksys_read+0x10/0x10 [ 98.252894][ T2428] ? fdget+0x188/0x1e0 [ 98.252906][ T2428] ? __kasan_check_read+0x15/0x20 [ 98.252916][ T2428] __x64_sys_read+0x7f/0x90 [ 98.252926][ T2428] x64_sys_call+0x2638/0x2ee0 [ 98.252937][ T2428] do_syscall_64+0x57/0xf0 [ 98.252950][ T2428] ? clear_bhb_loop+0x50/0xa0 [ 98.252961][ T2428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.252978][ T2428] RIP: 0033:0x7f97d995d68e [ 98.252996][ T2428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.253010][ T2428] RSP: 002b:00007f97da76ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.253023][ T2428] RAX: ffffffffffffffda RBX: 00007f97da7706c0 RCX: 00007f97d995d68e [ 98.253036][ T2428] RDX: 000000000000000f RSI: 00007f97da7700a0 RDI: 0000000000000003 [ 98.253043][ T2428] RBP: 00007f97da770090 R08: 0000000000000000 R09: 0000000000000000 [ 98.253050][ T2428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.253056][ T2428] R13: 00007f97d9c16038 R14: 00007f97d9c15fa0 R15: 00007ffeda220ad8 [ 98.253065][ T2428] [ 98.561529][ T471] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 98.713422][ T471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.723587][ T471] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.732506][ T471] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.745409][ T471] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.754473][ T471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.764089][ T471] hub 5-1:1.0: bad descriptor, ignoring hub [ 98.770029][ T471] hub 5-1:1.0: probe with driver hub failed with error -5 [ 98.777327][ T471] cdc_wdm 5-1:1.0: skipping garbage [ 98.782565][ T471] cdc_wdm 5-1:1.0: skipping garbage [ 98.787761][ T471] cdc_wdm 5-1:1.0: skipping garbage [ 98.792981][ T471] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.901774][ T2451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.910379][ T2451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.951480][ T438] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 98.969199][ T2419] rust_binder: Write failure EINVAL in pid:272 [ 98.969948][ T2419] rust_binder: Failure in copy_transaction_data: EINVAL [ 98.976417][ T2419] rust_binder: 2418:2419 transaction to 2418 failed: EINVAL [ 99.101482][ T438] usb 2-1: Using ep0 maxpacket: 8 [ 99.114962][ T438] usb 2-1: config 1 has an invalid interface number: 18 but max is 2 [ 99.123286][ T438] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 99.132397][ T438] usb 2-1: config 1 has no interface number 3 [ 99.138486][ T438] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 99.149871][ T438] usb 2-1: config 1 interface 18 has no altsetting 0 [ 99.158653][ T438] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 99.167776][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.175851][ T438] usb 2-1: Product: syz [ 99.179415][ T2454] fuse: Bad value for 'fd' [ 99.180013][ T438] usb 2-1: Manufacturer: syz [ 99.190728][ T438] usb 2-1: SerialNumber: syz [ 99.401034][ T438] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.408050][ T438] usb 2-1: unit 3 not found! [ 99.418072][ T438] usb 2-1: USB disconnect, device number 50 [ 99.510570][ T2473] overlayfs: failed to resolve './file0': -2 [ 99.531651][ T471] usb 5-1: reset low-speed USB device number 34 using dummy_hcd [ 99.558502][ T36] audit: type=1400 audit(1781980327.983:387): avc: denied { create } for pid=2478 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 99.559391][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.586559][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.595696][ T36] audit: type=1400 audit(1781980328.033:388): avc: denied { setattr } for pid=2478 comm="syz.2.559" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.596038][ T2479] input: syz1 as /devices/virtual/input/input17 [ 99.758628][ T36] audit: type=1400 audit(1781980328.183:389): avc: denied { read } for pid=2483 comm="syz.3.560" path="socket:[17987]" dev="sockfs" ino=17987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.801502][ T471] usb 5-1: device descriptor read/64, error -71 [ 100.181254][ T471] usb 5-1: device descriptor read/64, error -71 [ 100.560992][ T471] usb 5-1: reset low-speed USB device number 34 using dummy_hcd [ 100.741044][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.749490][ T2498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.750319][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.758180][ T2498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.786002][ T2504] overlayfs: failed to resolve './file0': -2 [ 100.817806][ T36] audit: type=1400 audit(1781980329.243:390): avc: denied { create } for pid=2508 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.830868][ T471] usb 5-1: device descriptor read/64, error -71 [ 100.837363][ T36] audit: type=1400 audit(1781980329.253:391): avc: denied { listen } for pid=2508 comm="syz.1.567" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.861468][ T2513] netlink: 'syz.1.569': attribute type 7 has an invalid length. [ 100.871554][ T2513] netlink: 'syz.1.569': attribute type 5 has an invalid length. [ 100.879216][ T2513] netlink: 17 bytes leftover after parsing attributes in process `syz.1.569'. [ 100.943036][ T36] audit: type=1400 audit(1781980329.373:392): avc: denied { mount } for pid=2514 comm="syz.4.570" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.965325][ T36] audit: type=1400 audit(1781980329.373:393): avc: denied { remount } for pid=2514 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 101.008134][ T36] audit: type=1400 audit(1781980329.433:394): avc: denied { unmount } for pid=892 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 101.130744][ T438] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 101.282069][ T438] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.291006][ T438] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.301368][ T438] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 101.314166][ T438] usb 2-1: string descriptor 0 read error: -22 [ 101.320403][ T438] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.329605][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.338471][ T2513] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 101.346163][ T438] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 101.435693][ T2526] overlayfs: failed to resolve './file0': -2 [ 101.454642][ T471] usb 5-1: USB disconnect, device number 34 [ 101.469911][ T2531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.478490][ T2531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.569331][ T2513] fuse: Bad value for 'fd' [ 101.613778][ T438] usb 2-1: USB disconnect, device number 51 [ 101.760416][ T471] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 101.912005][ T471] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.920487][ T471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.930660][ T471] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.941788][ T471] usb 5-1: string descriptor 0 read error: -22 [ 101.948118][ T471] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 101.957206][ T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.968828][ T471] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 102.101722][ T2545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.110423][ T2545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.225812][ T471] usb 5-1: unit 2 not found! [ 102.230487][ T471] usb 5-1: unit 0 not found! [ 102.241708][ T471] usb 5-1: USB disconnect, device number 35 [ 102.450153][ T441] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 102.601060][ T441] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 102.613715][ T441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.624110][ T441] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.637209][ T2556] SELinux: policydb version 2038006252 does not match my version range 15-33 [ 102.640112][ T441] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 102.646393][ T2556] SELinux: failed to load policy [ 102.655491][ T441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.680203][ T441] usb 2-1: config 0 descriptor?? [ 102.691138][ T441] usb-storage 2-1:0.0: USB Mass Storage device detected [ 102.700148][ T441] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 102.838477][ T2562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.847085][ T2562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.902313][ T419] usb 2-1: USB disconnect, device number 52 [ 103.019885][ T471] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 103.149886][ T471] usb 5-1: device descriptor read/64, error -71 [ 103.369397][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.378360][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.389624][ T471] usb 5-1: device descriptor read/64, error -71 [ 103.639462][ T471] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 103.789636][ T471] usb 5-1: device descriptor read/64, error -71 [ 103.830789][ T36] audit: type=1400 audit(1781980332.265:395): avc: denied { setattr } for pid=2576 comm="syz.3.592" name="PINGv6" dev="sockfs" ino=19551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.955059][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 104.039387][ T471] usb 5-1: device descriptor read/64, error -71 [ 104.079221][ T36] audit: type=1400 audit(1781980332.505:396): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 104.086536][ T2593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.108509][ T2593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.119198][ T36] audit: type=1400 audit(1781980332.505:397): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 104.140259][ T36] audit: type=1400 audit(1781980332.515:398): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 104.160925][ T471] usb usb5-port1: attempt power cycle [ 104.166447][ T36] audit: type=1400 audit(1781980332.515:399): avc: denied { ioctl } for pid=2592 comm="syz.2.597" path="socket:[19032]" dev="sockfs" ino=19032 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 104.192679][ T36] audit: type=1400 audit(1781980332.515:400): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 104.212799][ T36] audit: type=1400 audit(1781980332.515:401): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 104.234172][ T36] audit: type=1400 audit(1781980332.515:402): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 104.254998][ T36] audit: type=1400 audit(1781980332.555:403): avc: denied { create } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 104.275588][ T36] audit: type=1400 audit(1781980332.555:404): avc: denied { setopt } for pid=2592 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 104.558974][ T471] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 104.589968][ T471] usb 5-1: device descriptor read/8, error -71 [ 104.709365][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.719913][ T471] usb 5-1: device descriptor read/8, error -71 [ 104.738167][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.754274][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.763547][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.783047][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.793227][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.798761][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.810040][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.958835][ T471] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 104.979858][ T471] usb 5-1: device descriptor read/8, error -71 [ 105.119803][ T471] usb 5-1: device descriptor read/8, error -71 [ 105.138711][ T313] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 105.228837][ T471] usb usb5-port1: unable to enumerate USB device [ 105.268703][ T313] usb 2-1: device descriptor read/64, error -71 [ 105.328093][ T2626] bridge0: entered allmulticast mode [ 105.335467][ T2628] netlink: 'syz.2.607': attribute type 27 has an invalid length. [ 105.353055][ T703] ip6_tunnel: 7 xmit: Local address not yet configured! [ 105.360423][ T703] ip6_tunnel: 7 xmit: Local address not yet configured! [ 105.378992][ T438] ip6_tunnel: 7 xmit: Local address not yet configured! [ 105.404368][ T2633] fuse: Bad value for 'group_id' [ 105.409483][ T2633] fuse: Bad value for 'group_id' [ 105.414903][ T2633] ------------[ cut here ]------------ [ 105.420682][ T2633] WARNING: CPU: 1 PID: 2633 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 105.430266][ T2633] Modules linked in: [ 105.434176][ T2633] CPU: 1 UID: 0 PID: 2633 Comm: syz.2.609 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 105.445688][ T2633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.455804][ T2633] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 105.461823][ T2633] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 1b 0c 06 00 0f 85 c2 00 00 00 c6 05 55 1b 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 105.481526][ T2633] RSP: 0018:ffffc90010647860 EFLAGS: 00010246 [ 105.487612][ T2633] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 105.495743][ T2633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010647918 [ 105.503805][ T2633] RBP: ffffc90010647988 R08: ffffc90010647917 R09: 0000000000000000 [ 105.511832][ T2633] R10: ffffc90010647900 R11: fffff520020c8f23 R12: ffffc900106478a0 [ 105.518526][ T313] usb 2-1: device descriptor read/64, error -71 [ 105.519894][ T2633] R13: dffffc0000000000 R14: 1ffff920020c8f10 R15: 0000000000000000 [ 105.534145][ T2633] FS: 00007fe6a76da6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 105.543240][ T2633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.549921][ T2633] CR2: 0000200000001000 CR3: 000000013525a000 CR4: 00000000003526b0 [ 105.557895][ T2633] Call Trace: [ 105.561207][ T2633] [ 105.564152][ T2633] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.570300][ T2633] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 105.576220][ T2633] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 105.581939][ T2633] ___kmalloc_large_node+0x81/0x210 [ 105.587171][ T2633] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 105.592874][ T2633] __kmalloc_large_node_noprof+0x1e/0xd0 [ 105.598569][ T2633] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 105.604222][ T2633] __kmalloc_noprof+0x326/0x500 [ 105.609117][ T2633] ? __cfi_lockref_get+0x10/0x10 [ 105.614075][ T2633] incfs_realloc_mount_info+0xa7/0x4d0 [ 105.619596][ T2633] ? incfs_add_sysfs_node+0x118/0x230 [ 105.624993][ T2633] incfs_alloc_mount_info+0x478/0x5f0 [ 105.630418][ T2633] incfs_mount_fs+0x3ca/0x970 [ 105.635166][ T2633] ? __cfi_incfs_mount_fs+0x10/0x10 [ 105.640429][ T2633] ? vfs_parse_fs_string+0x10f/0x180 [ 105.645746][ T2633] ? selinux_capable+0x38/0x50 [ 105.650580][ T2633] legacy_get_tree+0x103/0x1b0 [ 105.655360][ T2633] ? __cfi_incfs_mount_fs+0x10/0x10 [ 105.658559][ T438] ip6_tunnel: 7 xmit: Local address not yet configured! [ 105.660599][ T2633] vfs_get_tree+0x9e/0x290 [ 105.660627][ T2633] do_new_mount+0x251/0xb30 [ 105.676522][ T2633] ? security_capable+0x44/0x130 [ 105.681492][ T2633] path_mount+0x682/0x1010 [ 105.685922][ T2633] __se_sys_mount+0x2bf/0x480 [ 105.690632][ T2633] ? __x64_sys_mount+0xf0/0xf0 [ 105.695408][ T2633] ? __kasan_check_write+0x18/0x20 [ 105.700552][ T2633] ? fpregs_restore_userregs+0x11c/0x260 [ 105.706313][ T2633] __x64_sys_mount+0xc3/0xf0 [ 105.710938][ T2633] x64_sys_call+0x2021/0x2ee0 [ 105.715629][ T2633] do_syscall_64+0x57/0xf0 [ 105.720089][ T2633] ? clear_bhb_loop+0x50/0xa0 [ 105.724785][ T2633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.728497][ T438] ip6_tunnel: 7 xmit: Local address not yet configured! [ 105.730749][ T2633] RIP: 0033:0x7fe6a679ce59 [ 105.742130][ T2633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.761812][ T2633] RSP: 002b:00007fe6a76da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.768362][ T313] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 105.770367][ T2633] RAX: ffffffffffffffda RBX: 00007fe6a6a15fa0 RCX: 00007fe6a679ce59 [ 105.785892][ T2633] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000000 [ 105.794040][ T2633] RBP: 00007fe6a6832e6f R08: 00002000000002c0 R09: 0000000000000000 [ 105.802070][ T2633] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 105.810083][ T2633] R13: 00007fe6a6a16038 R14: 00007fe6a6a15fa0 R15: 00007ffc978f1568 [ 105.818070][ T2633] [ 105.821145][ T2633] ---[ end trace 0000000000000000 ]--- [ 105.826692][ T2633] incfs: Error allocating mount info. -12 [ 105.832571][ T2633] incfs: mount failed -12 [ 105.898423][ T313] usb 2-1: device descriptor read/64, error -71 [ 106.138211][ T313] usb 2-1: device descriptor read/64, error -71 [ 106.248276][ T313] usb usb2-port1: attempt power cycle [ 106.588002][ T313] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 106.609164][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.739042][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.977799][ T313] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 106.998835][ T313] usb 2-1: device descriptor read/8, error -71 [ 107.129000][ T313] usb 2-1: device descriptor read/8, error -71 [ 107.237776][ T313] usb usb2-port1: unable to enumerate USB device [ 109.526623][ C0] ip6_tunnel: 7 xmit: Local address not yet configured!