last executing test programs: 14.252120602s ago: executing program 0 (id=84): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000a"], 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4804) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x70bd29, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x18, 0x4, 0x3, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x3, 0x5, 0x9, 0x1000}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x86c, 0x0, 0x5, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.221505583s ago: executing program 0 (id=85): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000f80), 0xc0500, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000fc0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2003020, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) lsm_get_self_attr(0x67, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, ""/9}, &(0x7f0000000000)=0xfffffffffffffd2b, 0x0) (rerun: 32) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 14.089447398s ago: executing program 0 (id=86): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/216, 0xd8}], 0x1, 0x1, 0x58ca, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0, 0x110}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)={0x28, r3, 0x1, 0x4070bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x4810) 13.205371356s ago: executing program 0 (id=93): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x440080, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_usb_connect$midi(0x3, 0x3e, &(0x7f00000039c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x283, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x6, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x5, [], [{{0x9, 0x5, 0xc, 0x8, 0x200, 0x0, 0xfd, 0x4a, {0x4}}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x4, 0x8, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x62000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000002b00)={{0x1, 0x0, 0x3, 0x3, 0xf20}, 0xa836, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x3, 0x200, 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x5, 0x4, 0x45, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x10, 0x101, 0x40}}) close_range(r0, 0xffffffffffffffff, 0x0) 12.704688392s ago: executing program 0 (id=101): r0 = syz_usb_connect$uac1(0x1, 0xa0, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9b, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@input_terminal={0x0, 0x24, 0x2, 0x3, 0x205, 0x4, 0x1, 0x40, 0x7, 0x5d}, @selector_unit={0x0, 0x24, 0x5, 0x1, 0x0, 'I'}, @input_terminal={0x0, 0x24, 0x2, 0x1, 0x403, 0x1, 0x9, 0x5, 0x81, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x24, 0x7, {0x7, 0x25, 0x1, 0x8, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x40, 0x0, {0x7, 0x25, 0x1, 0x8, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000980)={0xffffffffffffff7c, 0x0, 0x0, 0x0, 0x62}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2400d044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'netpci0\x00', @random="f61a2ecaa55d"}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x804) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000a40)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0xc0}, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12.664360323s ago: executing program 0 (id=102): syz_io_uring_setup(0x2491, &(0x7f0000000040)={0x0, 0x8ffd, 0x8, 0x0, 0x280}, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3a, @remote, 0x4e20, 0x1, 'dh\x00', 0x1, 0x449, 0x57}, 0x2c) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 12.626269494s ago: executing program 32 (id=102): syz_io_uring_setup(0x2491, &(0x7f0000000040)={0x0, 0x8ffd, 0x8, 0x0, 0x280}, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3a, @remote, 0x4e20, 0x1, 'dh\x00', 0x1, 0x449, 0x57}, 0x2c) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 10.417326865s ago: executing program 3 (id=113): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000280)=0x1c, 0x80800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x6, 0x7}) (async) r1 = syz_open_dev$rtc(&(0x7f0000000680), 0x0, 0x8000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000001000)=""/4096) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000000)=""/98, 0x62}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000006c0)={0x1, 0x1, {0x0, 0x1d, 0x400000c, 0x2, 0xa, 0x8001, 0x102, 0x112}}) (async) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000740)) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$RTC_AIE_OFF(r1, 0x7002) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000180), 0x0) (async) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async) syz_ublk_setup_queues(r6, r11, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r6}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r10, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c63616368653d667363616368652c63616368653d6d6d61702c00de42"]) 10.416824285s ago: executing program 3 (id=114): r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "764c3cbd4b9b7d59625e8a076879fba0a9f3e6a82551ea6a5cfc4e9b07b71db3eeffa3445ddb573a0d465f42672a21fac054d92ba200", 0x3e}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000024c0)='keyring\x00', &(0x7f0000002500)={'syz', 0x1}, r0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000403512148040000102030109036e00e1007f2011080b000301dfa2a03f07a8bb0a59410f89aedb780130010904000000010130000a2401090a007e070000090401000001023000ffff010101010230000905010900000401290a252504000400051500090402000001023000090402010101023000090582097227fcffd100f5742cd8746bce0335760c6836815686790c5d64310f9ca1a15213c343778aa3c69e8ff66cfaa83ec65f396342724209b5a43d7459ea79e29a1b89b34619b05d1414f3815c"], 0x0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r0, 0x32, 0x5a}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'md4\x00'}}, &(0x7f0000000480)="9340c85ab14154f8a03093fba1691b96d021929c4a3b318791596fb0be4876d220f531419f121b3bda0e4980c07923978d08", &(0x7f00000004c0)=""/90) (async) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b6a1a2bdcbc0adc8d570acfd6225ee60623928d775e6d80f4584a8b143f8bb36030e6320ee5a86100ddab29abce56f43788079dcd882f589568c71ff41349953a1e8ce97be5a6712904e684869e80e78851aa5a66d582c5338b6c3edd6dccefd635f48ea2df7fcb2a2ea6d90a59271fe156d1713edbad052080a482e04e4bc2624fe1994071f7a80251c7bbcb3d95dc9936067", 0x93, r1) 7.406941952s ago: executing program 1 (id=132): sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9922}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x937d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x2, 0xfffffffe) (async) r1 = socket(0x2, 0x2, 0xfffffffe) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffff7fff}, 0x4) 7.382400273s ago: executing program 1 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000580)={0x5, 0xa, &(0x7f0000000480)="8eff4d1b7c33f1f41480"}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x4010, 0x20000005, 0x10, 0x401, 0x16, 0xc, 0x213, 0x1000, 0x0, 0x21a, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc) syz_usb_disconnect(r2) 6.913830868s ago: executing program 3 (id=134): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) syz_usb_connect$midi(0x3, 0xd2, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x1, 0x1, 0x5, 0x30, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0x8}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x7, 0x0, 0x2, {0x10, 0x25, 0x1, 0xc, "e01e650b535d66bad4b4904f"}}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x40, 0x9, 0x5, {0xf, 0x25, 0x1, 0xb, "ed028ccd224dfc89d77d4c"}}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x9, 0x6, 0x32, {0x4}}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7, 0xb, 0x80, {0xd, 0x25, 0x1, 0x9, "55ee0786435aec2be0"}}}, {{0x9, 0x5, 0xb, 0x0, 0x7f7, 0x2, 0x6, 0x2, {0x5, 0x25, 0x1, 0x1, "ca"}}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xb, 0x4, 0x8, {0x13, 0x25, 0x1, 0xf, "8a7c5ad0a3cd190eed84d9f6347ef6"}}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0xa, 0xd1, {0x6, 0x25, 0x1, 0x2, "d6af"}}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x7f, 0x88, 0x6, {0x5, 0x25, 0x1, 0x1, 'G'}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x6, 0x6, 0x3, 0x20, 0x2}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x90, &(0x7f0000000200)=@string={0x90, 0x3, "2ce590ef63127185c77199f50a0cebc1d0bc31efcd216634f295103b4fb3acbbc35c57f80b269a386b9c91d96d5a004198540afa66464fe83f3f7622d06fdecc7dcf1d0b45ac8f60aabe341d3cfe4b7ff80f98310e790f608a64af0affd5aa571a2e0fbac40070fcf818b800c7649244d68158b1b69aee179aa174225862851560aa93b7ca7a3e71ac6f8274dd85"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0xee, &(0x7f0000000340)=@string={0xee, 0x3, "8123cad861873a3d29bfbc87a6beb1bd02d43506560130de02edfc366e25c2b7f179a30a3e869c4c9a8271be1327824e563f158a1a991b3ef50b39d9db233ccb8d11d6b919c5f08fb97b1ee427d323f534f94ede17af4a50b096bbe7229b79e130151a39a5812a751f91adea697ab869b6983a7d8dfe3733777f3700e1a851a32c7ced5271c7c076610c19cc16124c567e64ceca03b8ac41c5989d73b3b23922685b4c8ba10cc12e9be0d71cb342d8bfbd8b5a172a4fb17540e023204b1654c220b53b2e3d633d60b310565f19c46a61a7819bd6773060037b40fe0e1f50ee6860db09f029047e9b32a861ef"}}, {0x81, &(0x7f0000000440)=@string={0x81, 0x3, "84ca1060e9c86f4cd674c1357044c1a8e4d07de72164b86ed1693bfaf75c21dffa3f1d1abcdd41a813e2bd5fb76c3d1b9219a19a215a5f7d7c083c6ec46e1325be7368d0e45476cff30f8e53add8edf9a26c0e8b8d7c90f17f8794a97ff155d97a95b0af4e44e638d0ff4d934be2d5b6c907e011967b6709d485efeb8bbf88"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00221600"], 0x0}, 0x0) 4.97591078s ago: executing program 1 (id=143): timerfd_create(0x2, 0x180800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x84240000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000240)={0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='numa_maps\x00') utimensat(r1, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000040)=[{0x70502c1e, 0x7fff, 0x7}], 0x1, 0x0, 0x10, 0x10, 0x1, 0x10}) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000100)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 3.902397005s ago: executing program 3 (id=146): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000000)=0x4, 0x4) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0xf, &(0x7f0000004000/0x3000)=nil) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220f00000083090000000b11200000b37488dffcf1d4c1e88d992002b5b9ec9d9a16bc99fa072817d25c8d5d29cd58498db8f0bf8a852d8c008d7b21fba86a60a99366d44e86b54c6a7803abd512df6e9d61abce4ba49a53816881c6610bda11d9c01129578c8fa000eb63e6b59fc1f0fecad2db28ca5245f243e6c737a1cd772c5c77fd374b50bdea31666bb8015804660c5445438cbce5f097883c5ad4a7c4a54a40b24ea528fd2dc7d42d7e"], 0x0}, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000180)={0x1, 0xffffffff, 0x6, 0x4, 0x1}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000040)=0x9, 0x66) 3.854691846s ago: executing program 4 (id=147): r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000006440)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000005340)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/125, 0x7d}, {&(0x7f00000052c0)=""/113, 0x71}], 0x6, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005400)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005480)=""/205, 0xcd}, {&(0x7f0000005580)=""/85, 0x55}], 0x2, &(0x7f0000005640)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000005d80)=[{&(0x7f00000057c0)=""/182, 0xb6}, {&(0x7f0000005880)=""/206, 0xffffffffffffff36}, {&(0x7f0000005980)=""/34, 0x22}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f0000005a40)=""/246, 0xf6}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f0000005bc0)=""/118, 0x76}, {&(0x7f0000005c40)=""/32, 0x20}, {&(0x7f0000005c80)=""/104, 0x68}, {&(0x7f00000003c0)=""/104, 0x68}], 0xa, &(0x7f0000005e40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000005f00), 0x6e, &(0x7f0000006340)=[{&(0x7f0000005f80)=""/155, 0x9b}, {&(0x7f0000006040)=""/52, 0x34}, {&(0x7f0000006080)=""/119, 0x77}, {&(0x7f0000006100)=""/99, 0x63}, {&(0x7f0000006180)=""/177, 0xb1}, {&(0x7f0000006240)=""/235, 0xeb}], 0x6, &(0x7f00000063c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x4, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0005000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14f0ffff00030300000000000000ff00000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000280)) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/264, @ANYRES32, @ANYBLOB="0000000090000000000000002900000036000000730e0000000000000740000000000e0001000400000000000000ffffff7fffffffff010000000000008000040000000000006b75000000000000"], 0x1a0}}], 0x2, 0x20040840) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000006c0)=0x10, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000001480)={'batadv_slave_1\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x70000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x1, 0x8, 0x5d6, 0x3, {{0xf, 0x4, 0x0, 0x1d, 0x3c, 0x68, 0x0, 0x7, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp={0x44, 0x28, 0x71, 0x0, 0x1, [0xfffffff7, 0xe94, 0x8001, 0x0, 0x10001, 0x8, 0x80000001, 0x0, 0x9]}]}}}}}) 3.74533213s ago: executing program 4 (id=148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x3) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xfe48) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)}], 0x1}}], 0x1, 0x4000045) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190ec) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket(0x10, 0x803, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000005a80)=0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000200)='./file0/file1\x00', r12, r13) syz_fuse_handle_req(r11, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x2, 0x2, 0xdc, 0x5, 0x7, 0x6, {0x6, 0x63c, 0x3, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r12, r13, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140), 0x4) sendmsg$netlink(r5, &(0x7f0000005b40)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005640)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="ec010000200004002bbd7000fbdbdf2577007880c48b7d430fe91d22329df016aae7f3905c91aa6764a40b3c3b9efe2e9c7c68bcdedaeeddda86df47a749c722d9ae0754147eecd73cfc05117644282424fe481400cf0000000000000000000000000000000000040043801400c800fe88000000000000000000000000010108004900", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04007f8003273408000900", @ANYRES32=0x0, @ANYBLOB="0c001e00e3b115230000000000000000"], 0x1ec}, {&(0x7f0000004500)={0x11c, 0x3d, 0x400, 0x70bd2c, 0x25dfdbff, "", [@nested={0x8, 0xba, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @generic="36dd055b83bf3a8c0fb1ffa7abba388d1b80844db0a14830bfb89e5cbb00788204a5c11e0af46904ec77e95d79c7f950e1f08b14ce7fccc689650cacd79632388c537c53e12d6fa34ee3b22d98564308447160f4a4fbd491769ad3a36199ba66c4a875b155835c524b9f42ae3540b623e75564fdcf628a8f0f97f0abe0afc84f9529c4be40cad99bb4a3c8f3635db2d5676d5683ac695cb5d78be3c01af83a9077bce616854cfe9cad330984", @generic="de2e4e03daf8427aaba266a9d140fbc6085b4d92eff32ae352acf468e238d5ca7b8da337d468af49ca6e587c09", @nested={0x18, 0x11b, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x10, 0x126, 0x0, 0x1, [@typed={0xc, 0x96, 0x0, 0x0, @u64=0x5}]}]}, 0x11c}], 0x2, &(0x7f0000005ac0)=[@cred={{0x1c, 0x1, 0x2, {r14, r10}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r13}}}], 0x60, 0x8000}, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/125, 0x7d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="120100e30000004035120482400001020301090269000301717aac980b0001010a200609040000000101200009240104000509000309040100000102200009040101010102200009050109200046edf893db00080508082583fb3d0626a60d9e02000001022000000000000000ff20008905826278f65b2109ff03f8e640082501349e5f01d2e9944fcb975254c72a333377e29d4234fe52e6f89b0a08e4106fa65140ea06d18fcc7a"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 3.376644942s ago: executing program 2 (id=150): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @random="003abd4ef200", @val={@val={0x88a8, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x28, 0x61, 0x0, 0x7, 0x73, 0x0, @rand_addr=0x64010101, @local}, "b79f9c03315111788ab3e9f675abe612d8f10223"}}}}}, 0x3e) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1d, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}}, 0x8000) (async, rerun: 64) ioctl$KVM_GET_MSRS_sys(r1, 0x4018aee3, &(0x7f0000000140)) (async, rerun: 64) mlock(&(0x7f000000c000/0x2000)=nil, 0x2000) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x2f) (async) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) (async) write$selinux_access(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 3.197423318s ago: executing program 2 (id=151): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "5f468b975dfb0f60"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x20004050) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.197006548s ago: executing program 2 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x800, 0x1, 0x2}}]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_io_uring_setup(0x1dc7, &(0x7f00000001c0)={0x0, 0xd5a8, 0x2, 0x4}, &(0x7f00000003c0), &(0x7f0000000100), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)) syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010410e4942400001020301090291000301090008080b00020100201009040000000101200009240100080731000611240804050100010002000300020000000b2406020406000600f2000c240306000408050233ea0209"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 3.018641594s ago: executing program 3 (id=153): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x40000000, 0x8, 0x0, 0x3, 0x1}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) r4 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(r3, &(0x7f00000013c0), &(0x7f0000000300)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) write$binfmt_script(r2, 0x0, 0xb) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r3, 0x0, 0xfffffffffffffff8, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x12f) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120101022c1ff808202060209ef8139325a27f49980001ac0510090904b202010e01000809051e03ff030a2d4c8ea7eb1f5b07f3acba3769d0920d7e466327d70833b5b837f5f5c930fa4731577d793714c80fe345dd8eed2f352cbde78a984d0e1854cc1a070edee37c70df4ede4529b256b640392c49d5ff7901d795f346263c11a48ad889b2f695354662395b63092195bd58223f61610997988e45904011cb0e53d3c4d9c1ba8edd8a64381d3108ab2d9c14ae59c3c936267ddc2317401da261680000000000000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x40000000, 0x8, 0x0, 0x3, 0x1}]}) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) (async) fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) fsetxattr$security_selinux(r3, &(0x7f00000013c0), &(0x7f0000000300)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) (async) write$binfmt_script(r2, 0x0, 0xb) (async) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) (async) splice(r1, 0x0, r3, 0x0, 0xfffffffffffffff8, 0x2) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x12f) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120101022c1ff808202060209ef8139325a27f49980001ac0510090904b202010e01000809051e03ff030a2d4c8ea7eb1f5b07f3acba3769d0920d7e466327d70833b5b837f5f5c930fa4731577d793714c80fe345dd8eed2f352cbde78a984d0e1854cc1a070edee37c70df4ede4529b256b640392c49d5ff7901d795f346263c11a48ad889b2f695354662395b63092195bd58223f61610997988e45904011cb0e53d3c4d9c1ba8edd8a64381d3108ab2d9c14ae59c3c936267ddc2317401da261680000000000000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) 2.467228881s ago: executing program 4 (id=154): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x800, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 2.309432126s ago: executing program 4 (id=155): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xe6902, 0x0) readv(r0, &(0x7f00000031c0)=[{&(0x7f0000003200)=""/4096, 0x1f000}], 0x1000000000000031) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "d13f82efde47a881", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", "04000a00", "066580001e00"}, 0x38) (async) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000600)="44fb64cec586f8ac7c18d3763a8af31493c79c87115a49609fe6e695efc7fdc105d4ea57d12791274d330e41fd5f299a20eefdaa1978929b7ab8dd1d50d0b3cebb", 0x41}], 0x1) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.243506418s ago: executing program 4 (id=156): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x1d, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x7, 0xff, 0x5, 0x31, 0x6, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x40, 0x8000, 0x0, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x8f, 0x1, 0x5, [{@multicast1, 0x1}, {@remote, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', r4, 0x20, 0x20, 0x7, 0x3c, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x64, 0x0, 0x6, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x4, [{@multicast1, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@loopback, 0x1d9}]}]}}}}}) r5 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) read$eventfd(r5, &(0x7f0000000040), 0x8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x486, 0x0, 0xfffffffffffffff8}]}) ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x8000000000000001, 0x100, 0x0, 0xb}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r10, 0x0, 0xf, 0x0, &(0x7f0000004840)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r12 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r12, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) read$FUSE(r11, 0x0, 0x0) r13 = socket$inet6(0xa, 0x4, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x81) ioctl$sock_inet_SIOCGIFNETMASK(r13, 0x891b, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @multicast2}}) 2.192805829s ago: executing program 4 (id=157): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001180)=ANY=[], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) syz_fuse_handle_req(r1, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770569fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836b0100000030b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83bfdb2b662b84e43be4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbcd5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fe00dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b88a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da886101d567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d243477a46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c300000000000000031e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d5565a29d7c359a688749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff6a5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3694abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$midi(0x3, 0xb7, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x1, 0x1, 0x4, 0x50, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x0, 0x1, [{0x5}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x6, 0x4, [{0xff, 0x5}, {0x2, 0x8}, {0x8}, {0x48, 0x2}], 0x9}], [{{0x9, 0x5, 0xa, 0x0, 0x260, 0x7, 0xd, 0x8, {0x11, 0x25, 0x1, 0xd, "3decd0d803c1eaa7b7909d72ef"}}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xff, 0x9, 0xf, {0xb, 0x25, 0x1, 0x7, "bafcd5f9b96dc9"}}}, {{0x9, 0x5, 0x80, 0x5e16defd3da9a188, 0x20, 0x1, 0xfc, 0xb, {0x9, 0x25, 0x1, 0x5, "ee7e397c9e"}}}, {{0x9, 0x5, 0xa, 0x17, 0x400, 0x3, 0x1, 0x4, {0xc, 0x25, 0x1, 0x8, "ec2b827dbf312d69"}}}, {{0x9, 0x5, 0xc, 0x19, 0x200, 0x2, 0xa8, 0x4, {0x9, 0x25, 0x1, 0x5, "4d6a7aaeff"}}}]}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xdc29da27c0126171, 0x2, 0x0, 0xff, 0x10}, 0xcd, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x407}}, {0xc1, &(0x7f00000007c0)=@string={0xc1, 0x3, "d201bfe35c8a874b93927c31de81f22de3d35c9d342a0ca6a0e4f33dbc70b9701437862ac8d952e4466d3e9ac365da16dc63f55e949deed5723e436a25e67f83459760bb282f8a5d9979af9364845c9b71119ee9c5a8df027b7c6718a6ccf807501b526d667ab993494d90f1ac8bac412a9b4a8f657bdcc0d44a2f2ffa95e4f2b0e1c31300d9fc85d62648284e2c9bf268f9e29c94cb41a881e44e8a355310076997cfe15788c900a58c11b9dbe9104d01e7928875caf5f0509abb4f898e2e"}}]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="400a22000000030007df1be98b10902d4a342ceb7a17468cda379a641ba3990ebd0d972d176f67779e28439993d58db91f939bb7836dcb91e588ac6ca65b0182209f27bed3b6b86c73ca072a4d549cda62ef99baf71cf9be09b6909c041538b68af00cd055e4c547330b03ee1f3ca6fa2cd4149dddcc809f73bab8a0cc36cac33d8b45082cf8e03bca42f73fc9832b18cf26ddb84ccd3d3576c5eb7b675040de20606c331ceac53ed2ee60cfa2ed8940cf18240f83b1cd482cdfc7cae50e89147bbe84cb7875443928a221d8b4dd2f71dd2c6c96254ff87fac984b64d37ac7a627ed03a030268bac3a00e59dc5b6428fc0f8a129ec3d7cdf94722036adcdfc3e4ca38a571f38c47da32d00926fe452e7d03508ba386632c9cd9c0f825b2f468f173f0366650815f4b2cd7c150fe5af2880f463a82ebdbc608a00000000000000000000000000795242f8bfa50102d8c510b904b1394074bccba3dec5e2ea77b10c3ef9936e5e310a290b7b"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x38, 0x60, 0x2, 0x40, "d866bbcc", "b9c383e1"}}, 0x0}, &(0x7f00000012c0)={0x84, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000280)=ANY=[@ANYBLOB="20004cd261b561fc789c3fa16815285a9b18eeb44db2344623c6bd7e0265d2ddf5fa76293c4f251986b9d27078fa042a8c91b60686fb60c0347726fc3f0fe6f0251547e9ca2d9160ab21ec3c05b1a73bc882e389312873cb5d7ab3a08ed1109e4a791758787768b3c0dafe8fc67be45c7d5aae05041a3f52a5fbf55d045c7b64a9143c6c307f23aedf68c33781805580d1bc998900b00aed5f68a5583ecc6a1d90eecfbd793a4adb"], 0x0, 0x0, 0x0, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.917151769s ago: executing program 1 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write(r3, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x403, 0x0, 0x9}, {0xa31, 0x0, 0x618}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502"], 0x0) 527.400123ms ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x600}) (async, rerun: 32) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000002099049ca448541040000102030109028d00030104007f080b0101010a20020904000000010120000924010700061500b20c24030500040a25007f008009040100000102200009040101010102200008240201e60304061024010505000400000005050000004409050126000206998008250101181e00000904020000010220000904020101010220000915820900020e0452082501040f", @ANYRES16], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 474.858345ms ago: executing program 1 (id=160): r0 = socket(0x10, 0xa, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xd) (async) ptrace$pokeuser(0x6, r1, 0x388, 0xd) ptrace$pokeuser(0x6, r1, 0x358, 0xfffffffffffffffb) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setuid(0xee00) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f00000058c0)=[{{0x0, 0xfffffffffffffef7, &(0x7f00000001c0)=[{&(0x7f0000000780)="14", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0x120}}], 0x1, 0x4008c51) (async) sendmmsg$inet(r2, &(0x7f00000058c0)=[{{0x0, 0xfffffffffffffef7, &(0x7f00000001c0)=[{&(0x7f0000000780)="14", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0x120}}], 0x1, 0x4008c51) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r3, 0x0, 0x4653, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000016000100000000000000000066c953b7003800ff0100000000000000000000000000011500020000000000"], 0x44}}, 0x1) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000016000100000000000000000066c953b7003800ff0100000000000000000000000000011500020000000000"], 0x44}}, 0x1) write(r0, &(0x7f0000000140)="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", 0xfc) (async) write(r0, &(0x7f0000000140)="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", 0xfc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xb) munlockall() syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000000140)=ANY=[@ANYBLOB="120101020000001082053b004000010203010902bd0003010090060904000000010100000a2401080026000201020c24020501010109080057060b240704030002372bf191052404030509040100000102000009040101010102000009240201f4404c02040724010c0078990a2402020004fa0707250100a4e1ff0904020000010200000904020101010200000924020100068103000c24020109020106faed030009240201040909879309240201f8f903fdfa09058209ff0302fd040725010007be5b00"/207], &(0x7f0000001680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7b, 0x6, 0x5, 0x20, 0x20}, 0x21, &(0x7f0000000240)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x10000, 0x88f, 0x9, [0x0, 0xc030, 0x3f0f, 0xc0]}]}, 0x1, [{0xd8, &(0x7f0000001580)=@string={0xd8, 0x3, "37ac44505ca517a5ebb92c207f6340c573b797981d3f7ef097f76fcc9e149a7ab1a1c71f85978ea8547ad97da86a1b48c900b25887f4cff90a07d1f4adb46d1611f6266e8aa7dc3d65c8fbc9add5da336dfbf8e3af67a235741334dd3e62c783a7d83f0c193bfb04daf6ad00979b6a6a2f6ecd7f8dd18fe171080c0232bba5dd65f1fb7ac6cec5361867a4b0abb68f11ca7e384fbc6dd5bb60d5ad3b45f2ec69eda013e0f764c4379716d5088661b670e5c87966035b711df2474688b318340c18b514ad9f98906cf8863263e61e4551368b03f0a266"}}]}) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000100)={0x1, 0x3, 0x4}) ioctl$FICLONE(r5, 0x40049409, r5) (async) ioctl$FICLONE(r5, 0x40049409, r5) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000003c0)="22f6123146e4a47a1cda6a95343b863e2e27fe66b0e94ac297b16189f93f2f7db38cfa0e06007c1e7c5599dc22f60793eb96602b3b225e63d166beb1bd7a67207c4eca82e560f286cdd98ef866d2868b6cface96b1406f16a665d0bf4e36185ad54397121b602e54cc8fc987f8cc02d8ca3793106ceb262a62def67cf2d6d3ee5ee0a10c8f20a98cfbcf9e5cd190358e4acf4b1860c1d87b555592c6c128133834bed9d79f564fe71c79fc352587ff5f3ec0f440a4ca0519c8cb2784d3788c76a19aa7189a6fa6dec3d0fdb331f18cc900ddddbc4cc1f549415f0e4d64381e765c0b1171aa3af987e37b7a6d8df0d75f8ae2fdf635ff6b08db13329506e2", 0xfe}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="0a23e57b499df4029c5091f5069388a4203c6fa92cdc5c4c81443b8def232b113fe4d628e1498e63ceb558317b5e2e36b9830135074982f615a188f6a575346d74d3b3371ee0915bf52c1c7eeb4b2d00e9f229bb574670fdfef0a4d12c5a5682421b09848bda246f43dec9957e06eee5c5fe", 0x72}], 0x3) 81.371947ms ago: executing program 2 (id=161): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000140)=0xfffffff7) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d665dd8dcd320a16f35", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 81.087537ms ago: executing program 2 (id=162): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) write(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x10a8004, &(0x7f0000000240)=ANY=[@ANYRESOCT]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 17.86805ms ago: executing program 2 (id=163): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000775000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x6, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x3, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0x9, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x1, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x7, 0x1, 0x0, 0x7, 0xf9, 0x0, 0xfa, 0xff, 0x6, 0x2, 0xffff, 0x7, 0x3, 0x4, 0x7fffffff, [0xa, 0x7c]}}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000775000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x6, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x3, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0x9, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x1, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x7, 0x1, 0x0, 0x7, 0xf9, 0x0, 0xfa, 0xff, 0x6, 0x2, 0xffff, 0x7, 0x3, 0x4, 0x7fffffff, [0xa, 0x7c]}}) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (async) 0s ago: executing program 3 (id=164): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1ff]}, 0x8, 0x800) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 23.423356][ T36] audit: type=1400 audit(1779474287.720:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.426980][ T286] cgroup: Unknown subsys name 'net' [ 23.446190][ T36] audit: type=1400 audit(1779474287.720:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.473394][ T36] audit: type=1400 audit(1779474287.750:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.473905][ T286] cgroup: Unknown subsys name 'devices' [ 23.655553][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.661178][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.796443][ T36] audit: type=1400 audit(1779474288.090:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.820039][ T36] audit: type=1400 audit(1779474288.090:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.844905][ T36] audit: type=1400 audit(1779474288.090:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.870010][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.878839][ T36] audit: type=1400 audit(1779474288.170:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.904285][ T36] audit: type=1400 audit(1779474288.170:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.936876][ T36] audit: type=1400 audit(1779474288.230:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.962477][ T36] audit: type=1400 audit(1779474288.230:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.963131][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.826132][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.833237][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.840323][ T293] bridge_slave_0: entered allmulticast mode [ 24.846782][ T293] bridge_slave_0: entered promiscuous mode [ 24.855458][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.862508][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.869660][ T293] bridge_slave_1: entered allmulticast mode [ 24.876037][ T293] bridge_slave_1: entered promiscuous mode [ 24.897090][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.904178][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.911273][ T294] bridge_slave_0: entered allmulticast mode [ 24.917623][ T294] bridge_slave_0: entered promiscuous mode [ 24.925004][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.932076][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.939199][ T294] bridge_slave_1: entered allmulticast mode [ 24.945520][ T294] bridge_slave_1: entered promiscuous mode [ 24.997253][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.004330][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.011404][ T296] bridge_slave_0: entered allmulticast mode [ 25.017771][ T296] bridge_slave_0: entered promiscuous mode [ 25.027165][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.034251][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.041323][ T296] bridge_slave_1: entered allmulticast mode [ 25.047606][ T296] bridge_slave_1: entered promiscuous mode [ 25.072624][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.079858][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.087019][ T295] bridge_slave_0: entered allmulticast mode [ 25.093346][ T295] bridge_slave_0: entered promiscuous mode [ 25.102808][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.109920][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.117026][ T295] bridge_slave_1: entered allmulticast mode [ 25.123347][ T295] bridge_slave_1: entered promiscuous mode [ 25.258844][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.266249][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.273638][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.280698][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.301230][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.308355][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.315765][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.322834][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.333804][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.340872][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.348199][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.355270][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.365803][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.372873][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.380185][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.387245][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.430973][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.438904][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.446443][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.454358][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.461782][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.469174][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.476541][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.483924][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.507716][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.514854][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.522412][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.529493][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.537180][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.544269][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.551997][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.559104][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.596646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.603763][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.614047][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.621102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.628861][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.635915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.643566][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.650652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.683889][ T296] veth0_vlan: entered promiscuous mode [ 25.692299][ T294] veth0_vlan: entered promiscuous mode [ 25.711188][ T293] veth0_vlan: entered promiscuous mode [ 25.723732][ T294] veth1_macvtap: entered promiscuous mode [ 25.735034][ T296] veth1_macvtap: entered promiscuous mode [ 25.751670][ T293] veth1_macvtap: entered promiscuous mode [ 25.769623][ T295] veth0_vlan: entered promiscuous mode [ 25.807237][ T295] veth1_macvtap: entered promiscuous mode [ 25.817122][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.871209][ T318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.911760][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.961444][ T322] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.011158][ T332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.057994][ T337] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 26.113795][ T341] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9'. [ 26.133705][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 26.313135][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.333160][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.344281][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 26.355180][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.368172][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 26.377299][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.386214][ T9] usb 1-1: config 0 descriptor?? [ 26.391501][ T321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 26.403226][ T312] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.464238][ T31] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 26.472556][ T31] usb 3-1: config 1 has no interface number 0 [ 26.478881][ T31] usb 3-1: config 1 interface 93 has no altsetting 0 [ 26.486114][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 26.491314][ T31] usb 3-1: New USB device found, idVendor=05e3, idProduct=050a, bcdDevice=6b.02 [ 26.500876][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.509536][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.523585][ T45] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 26.532717][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.540781][ T45] usb 2-1: Product: syz [ 26.545143][ T45] usb 2-1: Manufacturer: syz [ 26.549847][ T45] usb 2-1: SerialNumber: syz [ 26.564440][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.572496][ T312] usb 4-1: not running at top speed; connect to a high speed hub [ 26.581104][ T312] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 26.597305][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 26.607262][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.615334][ T312] usb 4-1: Manufacturer: 탉ᖩ쒸阡쿀⍃碭밨񦅡 [ 26.622130][ T312] usb 4-1: SerialNumber: syz [ 26.721843][ T31] usb 3-1: string descriptor 0 read error: -71 [ 26.730260][ T31] usb 3-1: USB disconnect, device number 2 [ 26.809296][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x3 [ 26.816292][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.824103][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.831027][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.837954][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.844948][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.851844][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.859113][ T9] wacom 0003:056A:0326.0001: unknown main item tag 0x0 [ 26.866523][ T9] wacom 0003:056A:0326.0001: Unknown device_type for 'HID 056a:0326'. Ignoring. [ 27.017086][ T9] usb 1-1: USB disconnect, device number 2 [ 27.158625][ T45] usb 2-1: unit 0 not found! [ 27.165428][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.175927][ T45] usb 2-1: unit 0 not found! [ 27.181682][ T45] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 27.192039][ T45] usb 2-1: unit 0 not found! [ 27.201101][ T45] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 27.211012][ T45] usb 2-1: USB disconnect, device number 2 [ 27.223490][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.277439][ T310] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.285693][ T310] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.344561][ T353] fido_id[353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.478735][ T366] random: crng reseeded on system resumption [ 27.712482][ T384] netlink: 57 bytes leftover after parsing attributes in process `syz.0.22'. [ 27.943119][ T310] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 28.094344][ T310] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.105646][ T310] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.118707][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.125354][ T310] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 28.134512][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.143460][ T310] usb 2-1: config 0 descriptor?? [ 28.273107][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.424485][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.435526][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.450160][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.459748][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.467821][ T9] usb 1-1: Product: syz [ 28.472050][ T9] usb 1-1: Manufacturer: syz [ 28.476680][ T9] usb 1-1: SerialNumber: syz [ 28.553427][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.560472][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.567625][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.574667][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.581699][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.588748][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.595793][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.602792][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.609800][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.616834][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.623841][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.630822][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.637851][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.644854][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.651830][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.658947][ T310] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 28.667377][ T310] lenovo 0003:17EF:60B5.0003: hidraw0: USB HID v0.08 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0 [ 28.683912][ T405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.694815][ T405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.703375][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 28.703407][ T36] audit: type=1400 audit(1779474293.000:138): avc: denied { create } for pid=399 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.728730][ T36] audit: type=1400 audit(1779474293.000:139): avc: denied { setopt } for pid=399 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.735486][ T9] cdc_ncm 1-1:1.0: bind() failure [ 28.747915][ T36] audit: type=1400 audit(1779474293.000:140): avc: denied { bind } for pid=399 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.772273][ T313] usb 2-1: USB disconnect, device number 3 [ 28.786372][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 28.793344][ T9] cdc_ncm 1-1:1.1: bind() failure [ 28.802125][ T9] usb 1-1: USB disconnect, device number 3 [ 29.170824][ T312] usb 4-1: USB disconnect, device number 2 [ 29.195674][ T36] audit: type=1400 audit(1779474293.490:141): avc: denied { read write } for pid=463 comm="syz.3.25" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.219194][ T36] audit: type=1400 audit(1779474293.490:142): avc: denied { open } for pid=463 comm="syz.3.25" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.246429][ T36] audit: type=1400 audit(1779474293.500:143): avc: denied { ioctl } for pid=463 comm="syz.3.25" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.274852][ T36] audit: type=1400 audit(1779474293.570:144): avc: denied { map } for pid=470 comm="syz.3.27" path="socket:[4498]" dev="sockfs" ino=4498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.349089][ T487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.358092][ T486] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 29.360012][ T487] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 29.413572][ T492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.422464][ T492] netlink: 43 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.431360][ T492] netlink: 'syz.1.33': attribute type 5 has an invalid length. [ 29.439047][ T492] netlink: 43 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.453425][ T310] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.604312][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 29.615217][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.622739][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.635730][ T310] usb 3-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 29.645446][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.654197][ T310] usb 3-1: config 0 descriptor?? [ 29.659476][ T466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 29.666734][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.793067][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 29.800055][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.810396][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.819570][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.834117][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.843710][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 29.848929][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.857001][ T45] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 29.873216][ T45] usb 1-1: SerialNumber: syz [ 29.878985][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.887691][ T312] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 29.896160][ T312] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 29.906509][ T312] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 29.913167][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.915657][ T312] usb 4-1: config 128 has no interface number 0 [ 29.929388][ T312] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 29.940653][ T312] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 29.950806][ T312] usb 4-1: config 128 interface 127 has no altsetting 0 [ 29.959417][ T312] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 29.969014][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.977080][ T312] usb 4-1: Product: syz [ 29.981269][ T312] usb 4-1: Manufacturer: syz [ 29.985960][ T312] usb 4-1: SerialNumber: syz [ 30.073103][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 30.079167][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 30.084722][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.085918][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 30.104277][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 30.106212][ T45] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 30.118142][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 30.127326][ T310] usb 3-1: USB disconnect, device number 3 [ 30.139053][ T45] cdc_ncm 1-1:1.0: bind() failure [ 30.140525][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.152148][ T45] usb 1-1: USB disconnect, device number 4 [ 30.159250][ T313] usb 2-1: config 0 descriptor?? [ 30.192842][ T496] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 30.218317][ T312] usb 4-1: USB disconnect, device number 3 [ 30.231351][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.365766][ T36] audit: type=1400 audit(1779474294.660:145): avc: denied { read write } for pid=493 comm="syz.1.34" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.367923][ T494] ======================================================= [ 30.367923][ T494] WARNING: The mand mount option has been deprecated and [ 30.367923][ T494] and is ignored by this kernel. Remove the mand [ 30.367923][ T494] option from the mount to silence this warning. [ 30.367923][ T494] ======================================================= [ 30.391331][ T36] audit: type=1400 audit(1779474294.660:146): avc: denied { open } for pid=493 comm="syz.1.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.429196][ T501] tmpfs: Too few inodes for current use [ 30.449085][ T36] audit: type=1400 audit(1779474294.660:147): avc: denied { ioctl } for pid=493 comm="syz.1.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.480057][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 30.486154][ T313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.496295][ T313] usb 2-1: USB disconnect, device number 4 [ 30.573096][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.687527][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.696165][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.703845][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.711333][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.723116][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 30.728419][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.731410][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.747258][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.749950][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.758153][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.767381][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.785119][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.788947][ T312] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.792769][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.802802][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.809284][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.824876][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.832288][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.833999][ T312] usb 4-1: config 0 descriptor?? [ 30.839856][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.853716][ T313] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 30.863493][ T313] hid-generic 0000:0004:261D.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 30.903900][ T519] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 30.911568][ T519] netlink: 17 bytes leftover after parsing attributes in process `syz.0.41'. [ 30.923256][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.971925][ T529] 9pnet_fd: Insufficient options for proto=fd [ 31.253127][ T313] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 31.262439][ T312] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 31.277208][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.285055][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.292433][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.300237][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.307769][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.315470][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.322798][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.330872][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.338422][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.346316][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.353857][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.361365][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.368956][ T312] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 31.404548][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 31.415436][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.428453][ T313] usb 2-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 31.437548][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.450172][ T313] usb 2-1: config 0 descriptor?? [ 31.455531][ T531] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.463465][ T312] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 31.472495][ T312] microsoft 0003:045E:07DA.0005: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 31.488419][ T312] microsoft 0003:045E:07DA.0005: no inputs found [ 31.503355][ T312] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 31.671548][ T462] usb 4-1: USB disconnect, device number 4 [ 31.880777][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 31.890341][ T313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.905400][ T313] usb 2-1: USB disconnect, device number 5 [ 32.163070][ T312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.198825][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 32.334348][ T312] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 32.345923][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.352643][ T312] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 32.362092][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.387339][ T312] usb 1-1: config 0 descriptor?? [ 32.595649][ T312] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x1 [ 32.602519][ T312] lua 0003:1E7D:2C2E.0006: unexpected long global item [ 32.609686][ T312] lua 0003:1E7D:2C2E.0006: parse failed [ 32.615350][ T312] lua 0003:1E7D:2C2E.0006: probe with driver lua failed with error -22 [ 32.796175][ T313] usb 1-1: USB disconnect, device number 5 [ 33.353182][ T569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 33.383061][ T576] fuse: Unknown parameter 'Cc0x0000000000000009' [ 33.472890][ T582] random: crng reseeded on system resumption [ 33.753155][ T310] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 33.761908][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.772233][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 33.779986][ T45] usb 3-1: can't read configurations, error -71 [ 33.787784][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 33.787800][ T36] audit: type=1400 audit(1779474298.080:192): avc: denied { create } for pid=585 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.795392][ T586] 8021q: VLANs not supported on lo [ 33.813415][ T36] audit: type=1400 audit(1779474298.080:193): avc: denied { write } for pid=585 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.837537][ T36] audit: type=1400 audit(1779474298.090:194): avc: denied { ioctl } for pid=585 comm="syz.2.61" path="socket:[5021]" dev="sockfs" ino=5021 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.904193][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 33.915230][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.928463][ T310] usb 1-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 33.937827][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.948925][ T310] usb 1-1: config 0 descriptor?? [ 33.955411][ T584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 33.965714][ T590] netlink: 'syz.3.63': attribute type 9 has an invalid length. [ 33.975442][ T591] netlink: 'syz.3.63': attribute type 9 has an invalid length. [ 33.998687][ T36] audit: type=1400 audit(1779474298.290:195): avc: denied { remount } for pid=594 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.018529][ T36] audit: type=1400 audit(1779474298.300:196): avc: denied { name_bind } for pid=594 comm="syz.3.64" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.040027][ T36] audit: type=1400 audit(1779474298.300:197): avc: denied { node_bind } for pid=594 comm="syz.3.64" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.069528][ T36] audit: type=1400 audit(1779474298.360:198): avc: denied { append } for pid=599 comm="syz.3.65" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.197149][ T36] audit: type=1400 audit(1779474298.490:199): avc: denied { append } for pid=605 comm="syz.3.67" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.202738][ T606] input: syz0 as /devices/virtual/input/input8 [ 34.227750][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.230496][ T36] audit: type=1400 audit(1779474298.530:200): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.258524][ T36] audit: type=1400 audit(1779474298.530:201): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.314164][ T606] kvm: MWAIT instruction emulated as NOP! [ 34.384503][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 34.390576][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.398437][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 34.404568][ T310] usb 1-1: USB disconnect, device number 6 [ 34.411946][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 34.420633][ T45] usb 3-1: config 0 has no interface number 0 [ 34.426816][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 34.436885][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 34.448376][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 34.457638][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.466959][ T45] usb 3-1: Product: syz [ 34.471535][ T45] usb 3-1: Manufacturer: syz [ 34.476421][ T45] usb 3-1: SerialNumber: syz [ 34.482200][ T45] usb 3-1: config 0 descriptor?? [ 34.487578][ T588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.494993][ T588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.703546][ T588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.710919][ T588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.753096][ T313] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.876892][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.887323][ T45] asix 3-1:0.34: probe with driver asix failed with error -71 [ 34.895952][ T45] usb 3-1: USB disconnect, device number 5 [ 34.903979][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 34.918063][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.935651][ T313] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 34.945080][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.954812][ T313] usb 4-1: Product: syz [ 34.959679][ T313] usb 4-1: Manufacturer: syz [ 34.964928][ T313] usb 4-1: SerialNumber: syz [ 35.177583][ T313] usb 4-1: unit 4 not found! [ 35.182331][ T313] usb 4-1: unit 0 not found! [ 35.223099][ T310] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 35.243928][ T312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.283082][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.374405][ T310] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 35.383532][ T310] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 35.392599][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.401490][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 35.407495][ T310] usb 1-1: config 0 descriptor?? [ 35.416372][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.425120][ T312] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 35.433396][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 35.438564][ T312] usb 2-1: config 1 has no interface number 0 [ 35.446360][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.454136][ T312] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 35.463292][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.471395][ T312] usb 2-1: Product: syz [ 35.472771][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.475908][ T312] usb 2-1: Manufacturer: syz [ 35.489343][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 35.489600][ T313] usb 4-1: unit 4 not found! [ 35.500823][ T312] usb 2-1: SerialNumber: syz [ 35.505691][ T313] usb 4-1: unit 0 not found! [ 35.515379][ T45] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 35.520350][ T313] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 35.524500][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.537877][ T313] usb 4-1: unit 4 not found! [ 35.541523][ T45] usb 3-1: Product: syz [ 35.546124][ T313] usb 4-1: unit 0 not found! [ 35.551108][ T45] usb 3-1: Manufacturer: syz [ 35.559529][ T45] usb 3-1: SerialNumber: syz [ 35.567889][ T313] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 35.578015][ T313] usb 4-1: USB disconnect, device number 5 [ 35.589653][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.721626][ T312] usb 2-1: USB disconnect, device number 6 [ 35.767715][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 35.780446][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.168485][ T624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.177120][ T624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.185761][ T624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.194310][ T624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.213334][ T312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.267220][ T637] netlink: 72 bytes leftover after parsing attributes in process `syz.1.76'. [ 36.375355][ T312] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 36.384833][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.392975][ T312] usb 4-1: Product: syz [ 36.397826][ T312] usb 4-1: Manufacturer: syz [ 36.402520][ T312] usb 4-1: SerialNumber: syz [ 36.421523][ T45] usb 3-1: USB disconnect, device number 6 [ 36.445678][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.613709][ T633] rust_binder: Write failure EFAULT in pid:77 [ 36.616121][ T312] usb 4-1: USB disconnect, device number 6 [ 37.203092][ T462] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.353273][ T462] usb 3-1: Using ep0 maxpacket: 32 [ 37.359741][ T462] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 37.369460][ T462] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 37.379344][ T462] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.387540][ T462] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.396644][ T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.404677][ T462] usb 3-1: Product: 玈ᛡￄﭿ㐴﮷ᩱ歠穝躔ϳ愬꟔ṤṺ䀼ᛲ꡻絗鈷엑䇚茰跸旇抂ú媕꧄蘔钁檾ۙ筃ꢯஎ᧕肝⿥쒔ᬾ찿퇶ⳇ丏̍ꏭ放 [ 37.421601][ T313] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.429102][ T462] usb 3-1: Manufacturer: 낋Ψ펣㽅鴪춠 [ 37.435735][ T462] usb 3-1: SerialNumber: syz [ 37.441589][ T645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.448860][ T645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.533146][ T45] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.583090][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 37.589476][ T313] usb 4-1: config 1 has an invalid interface number: 169 but max is 1 [ 37.597786][ T313] usb 4-1: config 1 has an invalid interface number: 215 but max is 1 [ 37.606054][ T313] usb 4-1: config 1 has an invalid interface number: 78 but max is 1 [ 37.614244][ T313] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 37.623216][ T313] usb 4-1: config 1 has no interface number 0 [ 37.629323][ T313] usb 4-1: config 1 has no interface number 1 [ 37.635453][ T313] usb 4-1: config 1 has no interface number 2 [ 37.641564][ T313] usb 4-1: config 1 interface 169 altsetting 8 bulk endpoint 0xE has invalid maxpacket 32 [ 37.651537][ T313] usb 4-1: config 1 interface 169 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.661404][ T313] usb 4-1: config 1 interface 169 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.671648][ T313] usb 4-1: config 1 interface 215 altsetting 251 has a duplicate endpoint with address 0xE, skipping [ 37.682575][ T313] usb 4-1: config 1 interface 215 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 37.693520][ T313] usb 4-1: too many endpoints for config 1 interface 78 altsetting 25: 39, using maximum allowed: 30 [ 37.704125][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 37.704531][ T313] usb 4-1: config 1 interface 78 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 37.714242][ T45] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.725346][ T313] usb 4-1: config 1 interface 169 has no altsetting 0 [ 37.725372][ T313] usb 4-1: config 1 interface 215 has no altsetting 0 [ 37.739133][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 37.745112][ T313] usb 4-1: config 1 interface 78 has no altsetting 0 [ 37.755040][ T45] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.40 [ 37.760870][ T313] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=c8.60 [ 37.765767][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.774708][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.783854][ T45] usb 2-1: Product: ❙䱎鴊荎秕≎ᓆㆦ褍ᴒ勡ﺃႲ砷䡣꼽瞽ܻ후懶嵊뺪ᐅ⻧玑뇸…㺴㮋捯珥ﲩꃒ铣秩瘭沣嬸壱གྷᮂ䖈 [ 37.791672][ T313] usb 4-1: Product: syz [ 37.799840][ T45] usb 2-1: Manufacturer: й [ 37.816635][ T313] usb 4-1: Manufacturer: syz [ 37.821079][ T45] usb 2-1: SerialNumber: 謀觜쁩浐ៃḧd慶꡾褏㭱伿ꩢ玦䃡ﶧꛫ⬥ᚉ셖ꔲ瑊䙧జ蠕쐧鱄폣娲⾳禳沗⪛厸尖䴸糭躭ؘ⑊鎷숪 [ 37.825008][ T313] usb 4-1: SerialNumber: syz [ 37.832677][ T656] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 37.857716][ T647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.874998][ T462] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 37.889637][ T462] usb 3-1: USB disconnect, device number 7 [ 37.897727][ T462] usblp0: removed [ 37.994912][ T9] usb 1-1: USB disconnect, device number 7 [ 38.046962][ T664] Bluetooth: hci0: sending frame failed (-49) [ 38.053293][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 38.068764][ T313] dm9601 4-1:1.169: probe with driver dm9601 failed with error -22 [ 38.078409][ T313] dm9601 4-1:1.215: probe with driver dm9601 failed with error -22 [ 38.087937][ T313] dm9601 4-1:1.78: probe with driver dm9601 failed with error -22 [ 38.097812][ T313] usb 4-1: USB disconnect, device number 7 [ 38.270434][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 38.276485][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 38.286055][ T45] usb 2-1: USB disconnect, device number 7 [ 38.643110][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.773117][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.897871][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 38.897890][ T36] audit: type=1400 audit(1779474303.190:218): avc: denied { mount } for pid=687 comm="syz.1.92" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.899482][ T691] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 38.913209][ T36] audit: type=1400 audit(1779474303.190:219): avc: denied { mounton } for pid=687 comm="syz.1.92" path="/19/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.931325][ T691] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.943113][ T36] audit: type=1400 audit(1779474303.230:220): avc: denied { mount } for pid=687 comm="syz.1.92" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.958127][ T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.053110][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.123165][ T313] usb 4-1: device descriptor read/64, error -71 [ 39.136616][ T36] audit: type=1400 audit(1779474303.430:221): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.156916][ T36] audit: type=1400 audit(1779474303.460:222): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.194225][ T36] audit: type=1400 audit(1779474303.490:223): avc: denied { write } for pid=695 comm="syz.1.94" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.313079][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.363189][ T313] usb 4-1: device descriptor read/64, error -71 [ 39.387650][ T36] audit: type=1400 audit(1779474303.690:224): avc: denied { read write } for pid=700 comm="syz.1.96" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.412161][ T36] audit: type=1400 audit(1779474303.690:225): avc: denied { open } for pid=700 comm="syz.1.96" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.463117][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.603145][ T313] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.682665][ T36] audit: type=1400 audit(1779474303.970:226): avc: denied { mounton } for pid=713 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 39.703406][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.733192][ T313] usb 4-1: device descriptor read/64, error -71 [ 39.742787][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.749939][ T713] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.757094][ T713] bridge_slave_0: entered allmulticast mode [ 39.763098][ T462] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 39.764416][ T713] bridge_slave_0: entered promiscuous mode [ 39.777021][ T457] bridge_slave_1: left allmulticast mode [ 39.782732][ T457] bridge_slave_1: left promiscuous mode [ 39.788431][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.796016][ T457] bridge_slave_0: left allmulticast mode [ 39.801658][ T457] bridge_slave_0: left promiscuous mode [ 39.807391][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.823208][ T9] usb usb3-port1: attempt power cycle [ 39.874087][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.881186][ T713] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.888909][ T713] bridge_slave_1: entered allmulticast mode [ 39.895251][ T713] bridge_slave_1: entered promiscuous mode [ 39.914291][ T462] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.925423][ T462] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.935357][ T462] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.942226][ T462] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 39.951482][ T462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.963814][ T457] veth1_macvtap: left promiscuous mode [ 39.969310][ T457] veth0_vlan: left promiscuous mode [ 39.976187][ T462] usb 2-1: config 0 descriptor?? [ 39.981265][ T313] usb 4-1: device descriptor read/64, error -71 [ 40.052361][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.059474][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.066828][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.073891][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.094127][ T313] usb usb4-port1: attempt power cycle [ 40.103594][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.111012][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.120919][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.127991][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.137351][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.144429][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.163084][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.179146][ T713] veth0_vlan: entered promiscuous mode [ 40.186241][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.197640][ T713] veth1_macvtap: entered promiscuous mode [ 40.219583][ T36] audit: type=1400 audit(1779474304.510:227): avc: denied { mounton } for pid=713 comm="syz-executor" path="/root/syzkaller.MMZA2Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.324129][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.396775][ T462] hid (null): unknown global tag 0xc [ 40.404064][ T462] hid-steam 0003:28DE:1102.0007: unknown global tag 0xc [ 40.411047][ T462] hid-steam 0003:28DE:1102.0007: item 0 0 1 12 parsing failed [ 40.418784][ T462] hid-steam 0003:28DE:1102.0007: steam_probe:parse of hid interface failed [ 40.427472][ T462] hid-steam 0003:28DE:1102.0007: probe with driver hid-steam failed with error -22 [ 40.443107][ T313] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.464182][ T313] usb 4-1: device descriptor read/8, error -71 [ 40.503133][ T312] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 40.563107][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.584304][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.594395][ T313] usb 4-1: device descriptor read/8, error -71 [ 40.601349][ T45] usb 2-1: USB disconnect, device number 8 [ 40.654178][ T312] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 40.662347][ T312] usb 5-1: config 0 has no interface number 0 [ 40.668499][ T312] usb 5-1: config 0 interface 41 has no altsetting 0 [ 40.676606][ T312] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 40.685767][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.693844][ T312] usb 5-1: Product: syz [ 40.698026][ T312] usb 5-1: Manufacturer: syz [ 40.702673][ T312] usb 5-1: SerialNumber: syz [ 40.708110][ T312] usb 5-1: config 0 descriptor?? [ 40.724371][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.833185][ T9] usb usb3-port1: unable to enumerate USB device [ 40.843188][ T313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.864172][ T313] usb 4-1: device descriptor read/8, error -71 [ 40.994256][ T313] usb 4-1: device descriptor read/8, error -71 [ 41.103208][ T313] usb usb4-port1: unable to enumerate USB device [ 41.433103][ T313] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.470263][ T731] usb usb8: usbfs: process 731 (syz.2.108) did not claim interface 5 before use [ 41.515798][ T312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 41.583321][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 41.590118][ T313] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 41.601398][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 41.610534][ T313] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 41.619100][ T313] usb 2-1: Product: syz [ 41.623326][ T313] usb 2-1: Manufacturer: syz [ 41.630722][ T313] hub 2-1:4.0: bad descriptor, ignoring hub [ 41.636712][ T313] hub 2-1:4.0: probe with driver hub failed with error -5 [ 41.823102][ T462] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 41.974160][ T462] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 41.982552][ T462] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 41.991535][ T462] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 42.002024][ T462] usb 3-1: config 220 has no interface number 2 [ 42.008338][ T462] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 42.021522][ T462] usb 3-1: config 220 interface 0 has no altsetting 0 [ 42.028332][ T462] usb 3-1: config 220 interface 76 has no altsetting 0 [ 42.035461][ T462] usb 3-1: config 220 interface 1 has no altsetting 0 [ 42.044537][ T462] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 42.053657][ T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.061638][ T462] usb 3-1: Product: syz [ 42.066021][ T462] usb 3-1: Manufacturer: syz [ 42.070643][ T462] usb 3-1: SerialNumber: syz [ 42.093275][ T9] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 42.123191][ T313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 42.131123][ T719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.139879][ T719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.148935][ T719] overlayfs: missing 'lowerdir' [ 42.155296][ T719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.163966][ T719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.287430][ T462] usb 3-1: selecting invalid altsetting 0 [ 42.293481][ T462] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 42.299929][ T462] usb 3-1: No valid video chain found. [ 42.305861][ T313] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 42.313636][ T313] usb 4-1: can't read configurations, error -61 [ 42.323447][ T462] usb 3-1: USB disconnect, device number 12 [ 42.443223][ T313] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.533322][ T312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 42.544139][ T312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 42.554102][ T312] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 42.563539][ T312] usb 5-1: USB disconnect, device number 2 [ 42.604557][ T313] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 42.612227][ T313] usb 4-1: can't read configurations, error -61 [ 42.618787][ T313] usb usb4-port1: attempt power cycle [ 42.703309][ T45] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 42.884612][ T762] tmpfs: Unknown parameter 'nR' [ 42.903977][ T768] syz.2.120 (768): /proc/767/oom_adj is deprecated, please use /proc/767/oom_score_adj instead. [ 42.963101][ T313] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 42.963101][ T312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.985014][ T313] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 42.992706][ T313] usb 4-1: can't read configurations, error -61 [ 43.055412][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.064024][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.123124][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 43.123152][ T313] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 43.130299][ T312] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 252, using maximum allowed: 30 [ 43.146712][ T312] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 43.155517][ T313] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 43.158006][ T312] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 43.166550][ T462] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 43.178941][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 43.187125][ T313] usb 4-1: can't read configurations, error -61 [ 43.192769][ T312] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 43.199099][ T717] usb 2-1: USB disconnect, device number 9 [ 43.208107][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.215238][ T313] usb usb4-port1: unable to enumerate USB device [ 43.228863][ T312] usb 5-1: config 0 descriptor?? [ 43.374328][ T462] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.385416][ T462] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 43.396511][ T462] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.403331][ T462] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 43.412399][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.421337][ T462] usb 3-1: config 0 descriptor?? [ 43.426628][ T770] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 43.636123][ T770] mmap: syz.2.121 (770) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.639949][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x3 [ 43.655015][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.661948][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.668910][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.675821][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.682729][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.689655][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.696576][ T312] wacom 0003:056A:0003.0008: unknown main item tag 0x0 [ 43.703811][ T312] wacom 0003:056A:0003.0008: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 43.714137][ T312] wacom 0003:056A:0003.0008: hidraw0: USB HID v0.04 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 43.726791][ T312] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.0008/input/input9 [ 43.840592][ T312] usb 5-1: USB disconnect, device number 3 [ 43.853124][ T313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.863388][ T462] usbhid 3-1:0.0: can't add hid device: -71 [ 43.869417][ T462] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 43.879974][ T462] usb 3-1: USB disconnect, device number 13 [ 44.005283][ T313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.013950][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.024109][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.034447][ T313] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 44.043745][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.052179][ T313] usb 2-1: Product: syz [ 44.056617][ T313] usb 2-1: Manufacturer: syz [ 44.061235][ T313] usb 2-1: SerialNumber: syz [ 44.271977][ T313] usb 2-1: USB disconnect, device number 10 [ 44.404376][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 44.404395][ T36] audit: type=1400 audit(1779474308.700:243): avc: denied { connect } for pid=781 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.486791][ T36] audit: type=1400 audit(1779474308.780:244): avc: denied { mounton } for pid=789 comm="syz.4.127" path="/5/file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 44.792482][ T36] audit: type=1400 audit(1779474309.080:245): avc: denied { append } for pid=804 comm="syz.4.131" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.815417][ T346] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 44.823194][ T36] audit: type=1400 audit(1779474309.120:246): avc: denied { setopt } for pid=804 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.843784][ T36] audit: type=1400 audit(1779474309.140:247): avc: denied { map } for pid=804 comm="syz.4.131" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.994567][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.003310][ T346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.013499][ T346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.024625][ T346] usb 3-1: string descriptor 0 read error: -22 [ 45.030827][ T346] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 45.039917][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.103063][ T495] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 45.254001][ T495] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.265084][ T495] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 45.275943][ T495] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 45.288379][ T495] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.297493][ T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.305584][ T495] usb 2-1: Product: syz [ 45.309818][ T495] usb 2-1: Manufacturer: syz [ 45.314473][ T495] usb 2-1: SerialNumber: syz [ 45.323442][ T811] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 45.532616][ T811] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 45.713102][ T462] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 45.843087][ T462] usb 4-1: device descriptor read/64, error -71 [ 45.853825][ T797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.862363][ T797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.873123][ T717] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 46.024316][ T717] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 167, changing to 4 [ 46.035530][ T717] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 46.048193][ T717] usb 5-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 46.057376][ T717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.065422][ T717] usb 5-1: Product: syz [ 46.069607][ T717] usb 5-1: Manufacturer: syz [ 46.074352][ T717] usb 5-1: SerialNumber: syz [ 46.079092][ T346] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 46.083392][ T462] usb 4-1: device descriptor read/64, error -71 [ 46.092013][ T346] usb 3-1: USB disconnect, device number 14 [ 46.141214][ T811] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.305814][ T717] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.312804][ T717] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 46.319808][ T717] usb 5-1: unit 158 not found! [ 46.329414][ T717] usb 5-1: USB disconnect, device number 4 [ 46.336339][ T462] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 46.349100][ T495] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 46.356101][ T495] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 46.483104][ T462] usb 4-1: device descriptor read/64, error -71 [ 46.549798][ T36] audit: type=1400 audit(1779474310.840:248): avc: denied { bind } for pid=810 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.556879][ T495] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 46.587134][ T495] usb 2-1: USB disconnect, device number 11 [ 46.593561][ T495] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 46.604852][ T36] audit: type=1400 audit(1779474310.900:249): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.642506][ T818] Zero length message leads to an empty skb [ 46.753124][ T462] usb 4-1: device descriptor read/64, error -71 [ 46.863200][ T462] usb usb4-port1: attempt power cycle [ 46.985715][ T829] netlink: 'syz.4.140': attribute type 11 has an invalid length. [ 46.997337][ T36] audit: type=1400 audit(1779474311.290:250): avc: denied { execute } for pid=828 comm="syz.4.140" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.997425][ T829] process 'syz.4.140' launched '/dev/fd/15' with NULL argv: empty string added [ 47.027827][ T36] audit: type=1400 audit(1779474311.330:251): avc: denied { execute_no_trans } for pid=828 comm="syz.4.140" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.038395][ T829] netlink: 140 bytes leftover after parsing attributes in process `syz.4.140'. [ 47.064947][ T829] netlink: 56 bytes leftover after parsing attributes in process `syz.4.140'. [ 47.145583][ T36] audit: type=1400 audit(1779474311.440:252): avc: denied { mount } for pid=830 comm="syz.4.141" name="/" dev="ramfs" ino=6965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.203084][ T462] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 47.224201][ T462] usb 4-1: device descriptor read/8, error -71 [ 47.354164][ T462] usb 4-1: device descriptor read/8, error -71 [ 47.433095][ T495] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 47.523073][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.583072][ T495] usb 5-1: Using ep0 maxpacket: 16 [ 47.589261][ T495] usb 5-1: config 184 has an invalid interface number: 203 but max is 0 [ 47.597872][ T495] usb 5-1: config 184 has no interface number 0 [ 47.603195][ T462] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 47.605103][ T495] usb 5-1: config 184 interface 203 altsetting 6 bulk endpoint 0xE has invalid maxpacket 1024 [ 47.621986][ T495] usb 5-1: config 184 interface 203 has no altsetting 0 [ 47.632100][ T495] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=1f.b1 [ 47.634608][ T462] usb 4-1: device descriptor read/8, error -71 [ 47.641254][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.655617][ T495] usb 5-1: Product: syz [ 47.659811][ T495] usb 5-1: Manufacturer: syz [ 47.664480][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.670794][ T495] usb 5-1: SerialNumber: syz [ 47.676595][ T834] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 47.774225][ T462] usb 4-1: device descriptor read/8, error -71 [ 47.883172][ T462] usb usb4-port1: unable to enumerate USB device [ 47.888470][ T495] ftdi_sio 5-1:184.203: FTDI USB Serial Device converter detected [ 47.898250][ T495] ftdi_sio ttyUSB0: unknown device type: 0x1fb1 [ 47.904590][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.912220][ T495] usb 5-1: USB disconnect, device number 5 [ 47.918945][ T495] ftdi_sio 5-1:184.203: device disconnected [ 48.143099][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.273113][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.478897][ T850] SELinux: failed to load policy [ 48.513183][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.623194][ T45] usb usb2-port1: attempt power cycle [ 48.723103][ T717] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.743083][ T462] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 48.874559][ T717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 48.883112][ T717] usb 5-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 48.895037][ T717] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 48.904688][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.915726][ T462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.925613][ T462] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.938670][ T462] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.947806][ T462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.956302][ T717] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 48.965626][ T717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.973932][ T462] usb 4-1: config 0 descriptor?? [ 48.978970][ T717] usb 5-1: Product: syz [ 48.983163][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.991719][ T717] usb 5-1: Manufacturer: syz [ 48.996433][ T717] usb 5-1: SerialNumber: syz [ 49.005308][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.018447][ T862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=862 comm=syz.2.151 [ 49.031155][ T862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 49.134224][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.193318][ T462] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 49.209337][ T717] usb 5-1: USB disconnect, device number 6 [ 49.215433][ T462] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 49.242993][ T870] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 49.247157][ T462] usb 4-1: USB disconnect, device number 20 [ 49.313206][ T495] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 49.383097][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 49.404288][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.443087][ T495] usb 3-1: device descriptor read/64, error -71 [ 49.534288][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.553152][ T462] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 49.643201][ T45] usb usb2-port1: unable to enumerate USB device [ 49.683114][ T495] usb 3-1: device descriptor read/64, error -71 [ 49.703071][ T462] usb 4-1: Using ep0 maxpacket: 8 [ 49.709748][ T462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.717659][ T462] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 49.726799][ T462] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 49.734493][ T462] usb 4-1: can't read configurations, error -61 [ 49.873125][ T462] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 49.923080][ T495] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 50.012703][ T881] capability: warning: `syz.4.156' uses 32-bit capabilities (legacy support in use) [ 50.033220][ T462] usb 4-1: Using ep0 maxpacket: 8 [ 50.039816][ T462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.047785][ T462] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 50.058449][ T462] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 50.063144][ T495] usb 3-1: device descriptor read/64, error -71 [ 50.073273][ T462] usb 4-1: can't read configurations, error -61 [ 50.082123][ T462] usb usb4-port1: attempt power cycle [ 50.305605][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 50.305624][ T36] audit: type=1400 audit(1779474314.600:261): avc: denied { write } for pid=885 comm="syz.1.158" path="socket:[8438]" dev="sockfs" ino=8438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.335115][ T717] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.343128][ T495] usb 3-1: device descriptor read/64, error -71 [ 50.423102][ T462] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 50.443479][ T462] usb 4-1: Using ep0 maxpacket: 8 [ 50.450524][ T462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.453566][ T495] usb usb3-port1: attempt power cycle [ 50.458524][ T462] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 50.472558][ T462] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 50.480257][ T717] usb 5-1: device descriptor read/64, error -71 [ 50.486549][ T462] usb 4-1: can't read configurations, error -61 [ 50.623121][ T462] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 50.643527][ T462] usb 4-1: Using ep0 maxpacket: 8 [ 50.650200][ T462] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.657933][ T462] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 50.666992][ T462] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 50.674620][ T462] usb 4-1: can't read configurations, error -61 [ 50.681015][ T462] usb usb4-port1: unable to enumerate USB device [ 50.693077][ T313] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.723135][ T717] usb 5-1: device descriptor read/64, error -71 [ 50.803163][ T495] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.824158][ T495] usb 3-1: device descriptor read/8, error -71 [ 50.853098][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 50.859773][ T313] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 50.868031][ T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.878192][ T313] usb 2-1: config 0 has no interface number 0 [ 50.884342][ T313] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 50.894187][ T313] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.907409][ T313] usb 2-1: config 0 interface 196 has no altsetting 0 [ 50.915830][ T313] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 50.924929][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.932945][ T313] usb 2-1: Product: syz [ 50.937151][ T313] usb 2-1: Manufacturer: syz [ 50.941753][ T313] usb 2-1: SerialNumber: syz [ 50.947105][ T313] usb 2-1: config 0 descriptor?? [ 50.954113][ T495] usb 3-1: device descriptor read/8, error -71 [ 50.973060][ T717] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.103089][ T717] usb 5-1: device descriptor read/64, error -71 [ 51.153954][ T313] ipheth 2-1:0.196: Unable to find endpoints [ 51.163518][ T313] usb 2-1: USB disconnect, device number 16 [ 51.193155][ T495] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 51.215815][ T495] usb 3-1: device descriptor read/8, error -71 [ 51.343107][ T717] usb 5-1: device descriptor read/64, error -71 [ 51.344622][ T495] usb 3-1: device descriptor read/8, error -71 [ 51.453292][ T717] usb usb5-port1: attempt power cycle [ 51.463210][ T495] usb usb3-port1: unable to enumerate USB device [ 51.793172][ T717] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 51.814160][ T717] usb 5-1: device descriptor read/8, error -71 [ 51.944200][ T717] usb 5-1: device descriptor read/8, error -71 [ 52.129849][ T897] 9pnet: Could not find request transport: f] o50x0000000000000004 [ 52.148645][ T899] random: crng reseeded on system resumption [ 52.174853][ T899] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 52.182511][ T899] netlink: 'syz.2.162': attribute type 5 has an invalid length. [ 52.190213][ T717] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 52.190796][ T899] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 52.206187][ T36] audit: type=1400 audit(1779474316.510:262): avc: denied { mounton } for pid=898 comm="syz.2.162" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.230606][ T717] usb 5-1: device descriptor read/8, error -71 [ 52.249009][ T36] audit: type=1400 audit(1779474316.540:263): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.277730][ T901] ------------[ cut here ]------------ [ 52.283310][ T901] WARNING: CPU: 1 PID: 901 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 52.292794][ T901] Modules linked in: [ 52.295825][ T36] audit: type=1400 audit(1779474316.570:264): avc: denied { bind } for pid=903 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.296836][ T901] CPU: 1 UID: 0 PID: 901 Comm: syz.2.163 Not tainted syzkaller #0 8a9cd2cbe126bd9938f6e7ac5eb01541012e42ba [ 52.327250][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.337475][ T901] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 52.343549][ T901] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 92 2c 0c 06 00 0f 85 c2 00 00 00 c6 05 85 2c 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 52.363320][ T901] RSP: 0018:ffffc9000e24f980 EFLAGS: 00010246 [ 52.369426][ T901] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 52.374762][ T717] usb 5-1: device descriptor read/8, error -71 [ 52.377609][ T901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e24fa38 [ 52.391736][ T901] RBP: ffffc9000e24faa8 R08: ffffc9000e24fa37 R09: 0000000000000000 [ 52.399865][ T901] R10: ffffc9000e24fa20 R11: fffff52001c49f47 R12: ffffc9000e24f9c0 [ 52.407902][ T901] R13: dffffc0000000000 R14: 1ffff92001c49f34 R15: 0000000000000000 [ 52.416013][ T901] FS: 00007ffb55a386c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 52.424998][ T901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.431596][ T901] CR2: 00007ffb54a72780 CR3: 000000012b2ca000 CR4: 00000000003526b0 [ 52.439612][ T901] DR0: 000a000000000000 DR1: ffffffffff7fff00 DR2: 0000000080000001 [ 52.447646][ T901] DR3: fffffffffffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 52.455678][ T901] Call Trace: [ 52.458983][ T901] [ 52.461916][ T901] ? preempt_schedule_thunk+0x1a/0x40 [ 52.467350][ T901] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.473142][ T901] ? try_to_wake_up+0x11f0/0x1fa0 [ 52.478192][ T901] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 52.484399][ T901] ___kmalloc_large_node+0x81/0x210 [ 52.489620][ T901] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 52.495841][ T901] __kmalloc_large_node_noprof+0x1e/0xd0 [ 52.501589][ T901] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 52.503826][ T717] usb usb5-port1: unable to enumerate USB device [ 52.509873][ T901] __kmalloc_noprof+0x326/0x500 [ 52.521981][ T901] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 52.528035][ T901] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 52.534514][ T901] ? selinux_file_ioctl+0x732/0x1480 [ 52.539840][ T901] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 52.545448][ T901] ? do_futex+0x37d/0x510 [ 52.549814][ T901] ? __cfi_do_futex+0x10/0x10 [ 52.554543][ T901] ? __fget_files+0x2c5/0x340 [ 52.559302][ T901] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.564294][ T901] ? security_file_ioctl+0x3e/0x110 [ 52.569529][ T901] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 52.576010][ T901] __se_sys_ioctl+0x132/0x1b0 [ 52.580729][ T901] __x64_sys_ioctl+0x7f/0xa0 [ 52.585388][ T901] x64_sys_call+0x1878/0x2ee0 [ 52.590093][ T901] do_syscall_64+0x57/0xf0 [ 52.594563][ T901] ? clear_bhb_loop+0x50/0xa0 [ 52.599303][ T901] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.605277][ T901] RIP: 0033:0x7ffb54b9ce59 [ 52.609738][ T901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.629400][ T901] RSP: 002b:00007ffb55a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.637893][ T901] RAX: ffffffffffffffda RBX: 00007ffb54e15fa0 RCX: 00007ffb54b9ce59 [ 52.645942][ T901] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 52.653978][ T901] RBP: 00007ffb54c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 52.661967][ T901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.669984][ T901] R13: 00007ffb54e16038 R14: 00007ffb54e15fa0 R15: 00007fffb69aac68 [ 52.678028][ T901] [ 52.681061][ T901] ---[ end trace 0000000000000000 ]---