last executing test programs: 2m42.229039502s ago: executing program 3 (id=593): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224002bad00800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect(0x6, 0x51, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x413, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224002bad00800009040002010300010009210000000122f80409058103"], 0x0) (async) syz_usb_connect(0x6, 0x51, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x413, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 2m40.973751774s ago: executing program 3 (id=602): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r0 = gettid() (async) r1 = getpid() (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (async) r7 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x202, 0x8) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001040)={0x18, 0x0, &(0x7f0000000100)=[@register_looper, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) (async) r8 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r8, &(0x7f0000000740)=""/384, 0x200008c0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) keyctl$revoke(0x3, r9) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002a40)={r9}, &(0x7f0000002b00)=ANY=[@ANYBLOB="656eee3d72617720686173683d7368610000000000000000000000000000000000000000000400"/69], 0x0, 0x0) 2m40.929383257s ago: executing program 3 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='f2fs\x00', 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0xfe, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffff, 0x84400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='fuseblk\x00', 0x2200892, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r3, 0x10000003, {0x0, 0x0, 0x0, 0x6, 0x4200000000000ffc, 0x0, 0x6, 0x10, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0x7]}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000003f40)='mountstats\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="019e0957edeb30f3002bbd7000fbdbdf25010000000000000009410000004c00180000000865746800"/105], 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x500d4) 2m40.8605318s ago: executing program 3 (id=604): r0 = socket(0x2, 0x2, 0x3) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) write$cgroup_pid(r2, &(0x7f00000013c0), 0xfffffdef) keyctl$search(0xa, r1, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2a}) 2m40.829637402s ago: executing program 3 (id=606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000380)="d6b8", 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ftruncate(0xffffffffffffffff, 0xc17a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) socket(0x17, 0x3, 0xfb) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x182) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) mknod$loop(0x0, 0x20, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000700)) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 2m40.680534811s ago: executing program 3 (id=608): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffff9, 0x10}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r2, 0x3, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd70000000000007000000050000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000013c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2m40.660070872s ago: executing program 32 (id=608): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffff9, 0x10}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000380000/0x4000)=nil, 0x4000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r2, 0x3, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd70000000000007000000050000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000013c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2m21.580338998s ago: executing program 0 (id=716): memfd_create(0x0, 0x3) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000080)='./control\x00', 0x26f) pivot_root(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control\x00') setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000093d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}]}, 0x1f) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) r6 = syz_open_pts(r5, 0xc00) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, 0x0, 0x400, 0x70bd25, 0x10, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x34, 0x69}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x24, 0x1}, {0x6}, {}, {0x13}, {0x6c, 0x1}, {0x6c, 0x1}, {0x30}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0xb, 0x1}, {0x60, 0x1}, {0x1b, 0x1}, {0x2}, {0xb}, {0x5}, {0x12, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x18, 0x1}, {0x60, 0x1}, {0x5}, {0x48, 0x1}, {0x6b}, {0x1b}, {0x16, 0x1}, {0x6}, {0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8803}, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x200, 0x5, 0x0, 0x3ff, 0x17, "0108c179cd5f7837"}) 2m21.55197649s ago: executing program 0 (id=717): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) 2m21.513615002s ago: executing program 0 (id=718): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x800005}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) 2m21.456624375s ago: executing program 0 (id=719): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x9]}, 0x8, 0x80000) r1 = syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=0x0]) 2m20.245851934s ago: executing program 0 (id=721): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180)={0x20400, 0x110, 0x1c}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x88) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r2, r3+60000000}}, 0x0) timer_delete(r1) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x4) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x8, 0x1, 0x8}}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000000101040000000000000000020000003000010100000080080001000000000008000200e00000020c00038005001800000000000c0002800500010000000000b85708ec874a95380ca2338de635d7d72190d6d37e20bd2f330d46c46c14c547b860cfee6c966874fd8870031e5bbb92ad8f7bc6b6e1d4cca2a6ffaa9c3b33b46539e1ac594c0fad5006990ce9892b5d30"], 0x44}}, 0x0) 2m20.188038048s ago: executing program 0 (id=722): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x89}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009080}, 0xa000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x890}, 0x20040084) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x890}, 0x20040084) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'veth1_to_hsr\x00'}, {0x20, 'ethtool\x00'}, {0x20, '*%'}, {}, {0x20, '+-'}, {0x20, '\x00'}, {0x20, 'vxcan1\x00'}], 0xa, "6e2ea964c825c97c21b42efef1e99e8ad45b9e42ec997c405d3885ccb1df403fe40e20aa722cd5fac41aa6c038d01432439b787db2ab4ce8c82f426f10b170d4b75a0f94a70a5559b97702b024a9d2f02f01f912ea68f6e8404d48e0ccdf9b853e3c5b97bdd059e1d652b77e45401dedd1fd4cde2d7775958d828b3e875de979e15e87ae28946ddbd1238ddb7d6e5d29b968853b8b9803dfdbaf38a29ba21794a19c7112b9729ce55b0d533510604f30f84cced5665dccbb156e8e5ae93336475dd8622a0e393057726c9950db845dac823fd1e1d1102c8e8911fbe59e02f450d26ce9e866e87e5eae983099385ee30157faf77c24b72657f0061b2204cee44139ead5fd3384b49f496ca36e01d89fbf08fd6f89a0c08f96f0332b3bcf1bf0111e47b8628196ac9b7993fb9bdbe3fe216a7096918bf7ca5740d108042db2f1ba661a92188667d17e7ea24a42f1f7a8e99c25e0504401c46a08eed12860f394ebbfd7181fc19c0bb87c0a38de63f4e616e073c5bf304c7e3a1973cad864f578ef6dd07dc7f564619a4801fadc9844549aed5f5b8b599b32c89b0c687e9f270308fa0a5bc5e358911fe9add9e1bd773aafcb22d249de7696198d70694f95480ab3b16d67d082e64519154ea745c59e08dc3a7504d7f5831f16c4fd5b253fc82cc0b7c866ced62aef9299319667ac0168b4c3caed3dadc87e6dd89f2caba4088a94155f3b51f0c7e6bfe94f014d33833596bb5adc915e2f6631478b9b243d34ee4ea21569ffe5afd8a0acabfdac1b2a3200ae3f9a07dc2399865c31b71e7e1da2ea6feb29c0ad9e0a87079624fcbc2d660a3d6c1f062684e9854177dd9a151d7f1717458aa8750e7ee51f37ecc212fe7e68465e1904b83ddc69f001d6eabda433ca24011e37ec05474354c03403a97928bc8ae64e2f73424c2ac98a710a8e09180cf4fcf40295aef5ec409dbc8c287118320af31c452ed941d16d328da5c159fd79ec27b9901937576d6c45eeae8fb236dbb1fd4b9448f87bd29ba18c2fa2ae18e93ac1232d6c635ff13952d8d9949cf1e5283c03f166da0acb41d2d4320ac4960a5034dda7b049add97a2cd43c0cf33882e1e335a2afbc83fc2e77aaeb8169cb926e1e84ebca8f87d99ee1db76a89be0708e74f73a10123d62b1a8919cae0f7b056d972701ef5b81471e8ccaf07d611ff9e466674e78d4f6fa8d22b829caa06ea0f41369538ada2332f2e4e6df72b5dc881486cf2b6804a56e194a73bbde03109cafffc19b9b64d956fceb9db2cdbbc59e3bba93aa2fb75d87145dc461b69b338ed61dfed59745c1cbcc13cd620236f3b432d44c39045918fdda11c61d80bc5cd7092313dee23a91bddca510f199a76fdeecb1e7eadc987171e0361e53a408a1a4ac2ec541f9a992c4d4967d2573f7480549964c7cc89f2bfbfda1d0780197a5ecf08402e74af8faf3781ab392aa4473622d237dbb1d46633b49e37b698416a7eaf049b3b788f4d6994ad6bc6f8a8946050773f67a6fe9a54bd7fa061b3fd45c9838f542cd6500a4d793480f3e9e17c43ecf5ad5d4c96dc85ae64b386ef807f5345920b858155f94df498e70ebac00372afad1a4c882f10b6bbd8d08231361047f9e7d86b5da41a5511a17f68ee61103bfdb49079dbe34ea3687b40a1bd070a53489657b40483a3e651d395a818e1da571fbf624245980cb0242aaaee27f824d0afabc7cc147823f3835c6d3d91cfe24a3352328cb1cbea381bfb390cd96cd7293df0ae8d3f024dbc631143ac7ccccc42c8afa5e388446d35c4f46a10c2f8c033d013d99e22bbe8b6b99ba2ef9e919cab0df0dca30c08bca672506bf74eba7bd5f89e7b397f275b3d08038920b1bbaf258e83cddfcb004c7713ad7055f1da27280c72ba062ddcfdade9db0d49bb830ba85d43ce7a9a86fcce6a9687b190234211573ad02851e76474387ba874562318ad7188ec36715995bc256f37af2557792a5487fbd6f5709cba94d9904b1bff4d192f395b897c818a356faacb3a59e61167157034bf7f9407b09c352a4877cef6a8a9bf1b4f3153e34cb88d6622522fdbd99846449aefe7db3bde6288921985c0b6291c9e7e5c6ecf15983a882b2dd2c9bd4a3f6bfc330f614a06c5c655e895b6bae4d73b4188a4eabef24f675f062ff5b9b4a88d0f57d4512a0701ca9a343224135114e779e3b44bb667c60d7aeb546f0d4d3f3ecac6a5249a70d36f8591c5a86aa1171d2903064e694079f8b3614bd5e9f86ad7dd7a542c99b07b8fc795666a7bb1713a8690108cad7806e28d5325e1cab09d72431a2a26245005cfa265e76974f38f16920cb82b2912603230c5c091b7b20cc464c5ceb32a6981362047b9b7d9a183ef92c58fc55a3a453b543851c8c0a8836631d986cef379f09ea51bc62a0e6cc2cd71465c19b6154fcc19d8f7224c3ab5349ca53a91d7e5af9c20e255927b86a282dcca009e8714bef4c9c829cdba9e0187ec2266b3e0b707a3668c4e1eb771dab947df81b2c9c55777835ce2f90f514c8b3fd52c8b3c9287e78040e077156916eac29764847544a1eff2926912d3bf18e0fbe207b7cf12d5039f3addaea26f7fbbf096a0ed3085a9d038f268eed65b5f944c2b40b2a18a841665802d9eae89ae5e5011d799e19e1a9c42b055aa4a9f9b0f6d3278d746391af6712eefc0efcb8d308e4bd6d09884cc0d1e6ce1cd62137ec895b957f5233c9b90e3fc64f6103b7fec8f650235c6c7d9d7280a6ee1c44c6b9a1d6fb33dbf35378ef6d7440a161476fdf0b8d645298a01a23ed86de781393ceb1f68bac04221cdc4124ce1a4a3c516fbb5e63ae6b7471d4eb1786b8ff7038289884d66bb3350a50a00c91542fce3f98af46dac9c238b8231fd5cadb52437a69a28dbe7425efeff9fef52539ba2be6c8bcc93c87943c9f8ba39b01cba1f5bbda1daaa629062e7dd33f988531f3be04d973d6aa12d4ff99af03171f48ae8e1db6bfefff7faf4065c0fb8deb923c3bd86912cf115ffb4e0f1e32c9585e7435716adb62472f190e368a4c074e478fb5f7704e3117e3f4f0c3695d1d58dfd0e2efa57f7237061416be4519ed4054c6e792097cb9c07c1359d255ef23fd25eee8b134d56e381abf64247917c9e74daa34586e22a3dfc60b5c627b4d21cb91ebaa386ba182adefaa53f59a4082631d2db005fdef7d793d3d2b2540e89d2dea956a0998bb174995540488d4d867b3045318af3154f0812b0e5789bf9426281d5fb805a3b647b3c9006142a275db376ac11e6f517d074f59d67aebb0968d684afc667e30920f725905ee35619ac8f429840c1ee8a7bdb48e9a511dca70c23560dbd3d7839b9941e91d4579d018c7f80bbfcc39b234b80b2b1c04b7def6cabc7b8750048c676597c42924cc882240d0c9b406a41d9351ab8f84632d36b373987b828144062f6fad94d42241fd5c0bf74305c8deafaeea810a0f6fb4c2d43f7c2eb97be1d6cc30c5ea95bc9b38aef2fce80e88ce9636f3e7d733a00de9a51d238bf6a4e44e424a3154299d0bca8d3c1eda8ea47e40505fefb778f613c6810e9f393f659c8e5985fccb7007e4347fafed8fee4c68d18e0b3ba602d2a2fb557e55cf4919d1500850245c1f62d0782d0866ca7ea627e4ae43ac0662a07c668ffbb9af7e55ed214808b4547cf2562dd465a7b2874ed53a8ff5bedece77c220792181f499bc34b66c7d2968c4a5a1bed70216642f1a6c86ca75630321d66899a5e2a24a4e3935db40f32c301b0bfeb5d31c0377a76e19c056a3ec2c00c9af7023240c72be70e0c1c8397ab1bd02376dce38a48c3a875bb7ddda8182946dd144157c54a6d1237f9e9ead6a304b742fb04fbfd2b96992e5f3a5dd90c039a5dbcd010650701d7ff2a9f97e2300e5692b5af1f364b341ed1533805a2d2545ed0669e7e61befbd7e49feb3876503ce363c2cb4c1636621d16e184819021025425dd4587dd5db789f813e3fc726fa0b264bb9c43cccff03a188f4f3e81630b882de1e9af99a5174b712c9665c33565a573bbce9f319e7608452dc9ec146f280a2323fcb02503c1c90e79051d88b13e2574c9a882c25d40c48ee89a7eea938bf4d6535e4ff1f751c34bd23ce7e3f64656378dd74dd4d6469be8bb3e38f4c03aa06bc95433b6600dd269eabd0c8fdf21a362b4939184d907edd58887f7cc81502dbcca82f03997f60110bf6511ec39fc70e3ee90c0d8714730ad5b456a9d986350252267a0c3b5a0a6e1f4d583da2b9e4052dfd0dd2d00576c19d86fba40da76412a0dece8a6ee73585f444a32eee024786eb6274df2921b89b2df7e83492757282f9106c31f01ce202a73b490d0397cdc07b0bc65465e3634735b731269e599a1910f1d7e8c8c2a4e8f0ca3e243c40cdc44c6c5ab8d428f5f3f863285514ab4d6d1ebccb882d584cfd12ab629b8db7f964d7b2eeb8923e888561759c8d7f8de58452a119ddfc6eedde99f6d9cb4ac99b90c6923e4bc99e1c44196c667b84a104e1ca08d92e8dcbb957dfd4bc97e4c9f5003491faebeded4fb2602da18ea7cc69dc57a46aba0ce74cb293c505a9e48cbaa49aa3aa4668c99acd98d56cb422e47530a7e3ccaf58d64da9e516a783d9f49234b826427e83e3c8232e75f04569a3839376502219458f75578365bf7656cbaa9b806e177216a86e903dd11e25b0837019cb00dec986fa453739cca45365dee9a23249d03eea59afc8f64d19d9ce3d3ca88e7d1117c5836356f02f36552783c3c67401e43b9b0ab0b91c71246c4a812ed32d345276a891a73ff1abeb8e59e2e2899ad27e2eee4e29bb165bc564acb3fa56392f30c4930ade0ac4a13cc2878bb4313e16dee5dd001075d28cdff0fc034b79ae608cd89c3e562f0e80c89ad2def8409eb3fcf215ed4f0c347e960289646b2840ff934b280a7d3642b2062ca18a23b577dfd18f8e18303a3b3ab3afe2a4da1fda7ea3c9bb85fd58f06753ac188748ee0d1cc01913c195d95cc8a5f48684fb4ec9fc61a87f600967ceff3eed3784d9aeddaf686fa9c36ccee003e2878b59a77644af72b1f277ba79878ef0e1c47891ae03d80e66ddf9051aeb90757eda9be03cc8ad550b99f4c8cf154f8bbb93b2436aa59b4fe21d3c4501dcecd443fd8b9663a5428b5322d08fa4fdbf9f136e92081a36a2137c97602dd436d9e07e03cc65dc9a06036e4bd051d1f65f69c8fb79747561008396a8f75114c1f6c7da1c22a4c42215ffa6a881e9004011b11b30c9c797e50819600192314e9336d6dd451f4c17fd693b294b62ea62b8961a24b983c942db2eb72589b190dfacdf3f86ba870e755791bccefe7cf7c9311506fe787d34a0b218c96d68d8c917c557e2d84d1d6912f7e64a4de5cd1874ae18608abd7c852fdfc4e84f96ce126a95708de5b9a060305347697557f676ff94e5adc71445fd411aeef5da7a8d44524ff34213c63aa83892d087663d2ba2ea3093134f726ccf99630a2bd9ee6118f6440594f55e1646b9bac8b494719294c9669c622a0ea72716d2bcb4a2fc9161cd761ce55097deacd31a156b9a77dc9766a0db2d465ced6e97256a45eec8fb99471f0f383705382102f3731749190b4d4243f84bef5edfe818c607519bb0583a0672657efc9d5f9df5cb377ec1f1a8d122fa7ec52fbf28a9e6e97c982a78741d00be7dfac6d7b4da02720bf34b3068bb5480e8a1c7116eb84c8b35769acf0ef1ca5611050202c3f7e3013ef166abbe08d7978ef1b4b7465e07c6f3d9603b34d94df3441aeaee29a5c52f730f105a130555"}, 0x1033) dup(0xffffffffffffffff) (async) r3 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000014c0)={@local, 0x7fb, 0x1, 0x0, 0x9, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000014c0)={@local, 0x7fb, 0x1, 0x0, 0x9, 0x1}, 0x20) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000001500)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c) (async) connect$inet6(r4, &(0x7f0000001500)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001580), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) accept4$unix(r3, &(0x7f00000016c0), &(0x7f0000001740)=0x6e, 0x800) fcntl$getownex(r3, 0x10, &(0x7f0000001780)={0x0, 0x0}) ptrace$setregs(0xf, r6, 0x3, &(0x7f00000017c0)="99c1ebf3b1345d2356b67e51ae69ccf4d574855062c841460c0da08f17f0892b218a298fab8c9c7bed770421209d9fa1ce684147b31713604516589e9a5c7e15497a4c635f578369ad6cd968196bd2988f54cfddf55a7a10383381f73859bb1fe9345e095adb9e79c4e471611f7f338fb973366628170a66cc73b0d78d4271546540fb870fb42ba029e32f025d8f52d8c6c7192873c591414a") ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001980)={'veth1_to_batadv\x00', &(0x7f0000001880)=@ethtool_rxnfc={0x2d, 0x10, 0x4e, {0x12, @ah_ip4_spec={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x6}, {0x0, @random="759537219dd2", 0x4, 0x5, [0x7, 0x2]}, @udp_ip4_spec={@remote, @rand_addr=0x64010102, 0x4e22, 0x4e23, 0x6}, {0x0, @local, 0x4, 0x1, [0x4, 0x10001]}, 0x5, 0x5}, 0x3, [0x7f, 0x6, 0x80]}}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x40) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffffffc) (async) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffffffc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000019c0)={0x0, 'lo\x00', {0x2}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000001a00)={0x0, 0x2, 0x9, 0x3}) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000001a40), &(0x7f0000001a80)) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000001ac0)={0x9, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x88) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000001ac0)={0x9, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x88) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r7) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) mount(&(0x7f0000001cc0)=@md0, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='gadgetfs\x00', 0x2020000, 0x0) 2m5.163070571s ago: executing program 33 (id=722): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x89}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009080}, 0xa000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x890}, 0x20040084) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x890}, 0x20040084) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'veth1_to_hsr\x00'}, {0x20, 'ethtool\x00'}, {0x20, '*%'}, {}, {0x20, '+-'}, {0x20, '\x00'}, {0x20, 'vxcan1\x00'}], 0xa, "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"}, 0x1033) dup(0xffffffffffffffff) (async) r3 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000014c0)={@local, 0x7fb, 0x1, 0x0, 0x9, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000014c0)={@local, 0x7fb, 0x1, 0x0, 0x9, 0x1}, 0x20) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000001500)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c) (async) connect$inet6(r4, &(0x7f0000001500)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001580), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) accept4$unix(r3, &(0x7f00000016c0), &(0x7f0000001740)=0x6e, 0x800) fcntl$getownex(r3, 0x10, &(0x7f0000001780)={0x0, 0x0}) ptrace$setregs(0xf, r6, 0x3, &(0x7f00000017c0)="99c1ebf3b1345d2356b67e51ae69ccf4d574855062c841460c0da08f17f0892b218a298fab8c9c7bed770421209d9fa1ce684147b31713604516589e9a5c7e15497a4c635f578369ad6cd968196bd2988f54cfddf55a7a10383381f73859bb1fe9345e095adb9e79c4e471611f7f338fb973366628170a66cc73b0d78d4271546540fb870fb42ba029e32f025d8f52d8c6c7192873c591414a") ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001980)={'veth1_to_batadv\x00', &(0x7f0000001880)=@ethtool_rxnfc={0x2d, 0x10, 0x4e, {0x12, @ah_ip4_spec={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x6}, {0x0, @random="759537219dd2", 0x4, 0x5, [0x7, 0x2]}, @udp_ip4_spec={@remote, @rand_addr=0x64010102, 0x4e22, 0x4e23, 0x6}, {0x0, @local, 0x4, 0x1, [0x4, 0x10001]}, 0x5, 0x5}, 0x3, [0x7f, 0x6, 0x80]}}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x40) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffffffc) (async) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xfffffffffffffffc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000019c0)={0x0, 'lo\x00', {0x2}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000001a00)={0x0, 0x2, 0x9, 0x3}) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000001a40), &(0x7f0000001a80)) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000001ac0)={0x9, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x88) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000001ac0)={0x9, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}}, 0x88) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r7) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) mount(&(0x7f0000001cc0)=@md0, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='gadgetfs\x00', 0x2020000, 0x0) 3.096889902s ago: executing program 2 (id=2014): r0 = socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x1, 0x28}}}}}]}}]}}, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x1000, 0x10, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) (async) r8 = eventfd2(0x6, 0x800) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) (async) r9 = eventfd(0x7) io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, r6, 0x0, 0x0, 0x40, 0x0, 0x3, r8}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3b7c, r6, 0x0, 0x0, 0x8, 0x0, 0x3, r9}]) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="f451", 0x2}], 0x1, 0x0, 0x0, 0x4008010}, 0x80f5) 3.070419423s ago: executing program 2 (id=2015): r0 = socket$igmp(0x2, 0x3, 0x2) pipe2(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000340)=0x1d, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x141040, 0x71) r5 = inotify_init() io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) readv(r5, &(0x7f0000003bc0)=[{&(0x7f0000002400)=""/146, 0x92}], 0x1) (async) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x8400003d) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/66}, 0xad}], 0x348, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x5, 0x0, 0x26000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)=0x28) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe) 2.940685811s ago: executing program 2 (id=2016): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, 0x0, 0x0, 0xffffffffffffff30}]) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f804c00248045002c802cd00b29a0cf37843c11703c85210bfb54a5f579eeab7aa5c2a99f7fde2a0900000040000000220ffd5cd1d1a8c126e6aae344fb97b01addfd0e96fcc2c5078f2c"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.940139381s ago: executing program 2 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000780)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x5}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0xf9, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private0, [{0x18, 0x14, "b0a0bad5c190613548a39b2d65e74add94ba003478e51fedd26434e1aad8c494aa186f49627c012a911cf2303f9da5d2bdd2c1b4ec79055b088688c12d787aca6b7340f55440f8431030289052fc8c4ac45d3efc944d7394d77b79b673d16f5907ef76f8c2bef7dcdeaac5d03909b9d5e51cdd359bdc31fe4ec010724094674ad72bd5076bd66445459ab554f7916034b42be060e59604d173e77890fb26030208f6eb79"}, {0x19, 0x7, "8e73a796a983f5824c13c0362f2486a30cdecb4cbb39c8c1aed3b0c030144539e167a3f90d047bbebff09f65b7dc31980db866a4e1a4aa5c87"}]}}}}}}}, 0x133) 2.920530492s ago: executing program 2 (id=2018): r0 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r0, 0x7) (async, rerun: 32) accept4$unix(r0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000000)=""/156, &(0x7f00000000c0)=0x9c) 2.512411906s ago: executing program 2 (id=2024): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800290506ad5dbf930006090582020002000110"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f00000000c0)={0x9f, 0x0, 0x1}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x12000000000000]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) read$FUSE(r6, &(0x7f0000000700)={0x2020}, 0x2020) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.152515956s ago: executing program 4 (id=2029): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@newsa={0x148, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2, 0x60, 0x0, 0x33}, {@in=@private=0xa010100, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1fe, 0x0, 0x6, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x6}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) fallocate(r2, 0x3, 0x0, 0x100000001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r5, 0x40, 0x1d97, 0x1) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000002c0)=@dstopts={0x3a, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x2a}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3b5}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x8, 0xa1, "6c9aed5ffce43f85f9f9d19caf381264741b119d9b2322b025bad0dc9d50ef77b5387ef9716aef39545fc7d46f9ee2c12e241f96cd0064d881ecbcc03530dc3d96fe0e58c6dd15a85a553f7f425fa43b86bb6bf1af59335fe68e35a4a12467bb98b8a57bfa6b783d3e9e1b05ea53a90352f1f912b4a8d3bced60bc8ce379804296ff1445710be98b4c5a8071cab0cf208573f426f39ebae08f0fafcce715a26eb9"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0xd8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, 0x0) bind$bt_hci(r6, &(0x7f0000000200)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r8, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) timer_getoverrun(r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000004c0)=0x8123) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x1, "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"}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0xf) fallocate(r9, 0x0, 0x3, 0x800000) 2.151692226s ago: executing program 4 (id=2030): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40cf0270}, 0x1c) shutdown(r0, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @multicast1}, @private=0xa010101, 0x11, 0x16}}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f00000001c0)=[@nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x54, {"0f22dc660f0091040000008f89b097ff64f3430f1efa2666f0400fbb1af30f1bf666baf80cb804c7cc8aef66bafc0cb833000000efc421ad73dc05650f21fdf0ff4100"}}, @in_dx={0x69, 0x20, {0x4eef, 0x2}}, @wrmsr={0x65, 0x20, {0xb5d, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x77, {0x2, "c744240000780000c744240207000000c7442406000000000f011c2466b8ca008ee06465db6c1dbc0fae6a8366baf80cb82e03f48bef66bafc0c66b8f70066ef0f01f8c4e37961080066440fc6ab0c000000070f5196ffffffff642e0f79e3"}}, @out_dx={0x6a, 0x28, {0x6db5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x806, 0x6, 0x7, 0x3}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xb9, 0x5, 0x10001, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0x2}}, @wr_crn={0x67, 0x20, {0x8, 0x1}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_load_code={0x12e, 0x5a, {0x3, "6426d9220fc71e0f009a6330c8a90f3366ba4000b008ee420f01d148b839000000000000000f23d80f21f835000000200f23f82e64f20f01df450f0564660f72f500"}}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0xfa07}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x44d, 0x6cc, 0xcc000000000, 0x4}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_syzos={0x136, 0x40, {0x2, 0xf15, [@set_irq_handler={0xc8, 0x20, {0x22, 0x2}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1d, 0x332, 0x9, 0x1}}, @nested_load_code={0x12e, 0x63, {0x1, "410fc199ada300003ef466baa000b0ecee66baf80cb8b3e15085ef66bafc0cb084eef24e0f2cecb9800000c00f3235001000000f30f466b840000f00d8c4630d4cf7004b0f7ea802180000"}}, @set_irq_handler={0xc8, 0x20, {0xb1, 0x1}}, @uexit={0x0, 0x18, 0x80000000}, @set_irq_handler={0xc8, 0x20, {0x4e, 0x1}}, @nested_amd_clgi={0x17f, 0x10}], 0x4b0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = landlock_create_ruleset(&(0x7f00000006c0)={0x413, 0x1a70dc5280890f12, 0x1}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000700)={0xc, 0x8000000000000001}, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000780)={0x85c, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb8, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd0f6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6156}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x881) poll(&(0x7f0000000980)=[{r0, 0x3082}, {r1, 0x481}, {r3, 0x1120}, {r0, 0x418}, {r0, 0x802f}, {r0, 0x6000}, {r4, 0x100}], 0x7, 0x2a9f) flistxattr(r5, &(0x7f00000009c0)=""/192, 0xc0) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder-control\x00', 0x0, 0x0) fcntl$setpipe(r7, 0x407, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffc0, 0x42}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff7, 0x49}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x24040010) getresuid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) fsetxattr$security_capability(r3, &(0x7f0000000cc0), &(0x7f0000000dc0)=@v3={0x3000000, [{0x1, 0x101}, {0x9, 0x8}], r11}, 0x18, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r12 = gettid() capset(&(0x7f0000000f40)={0x20080522, r12}, &(0x7f0000000f80)={0x54, 0x0, 0x1, 0xfffffffe, 0x551, 0x9}) 1.318578374s ago: executing program 4 (id=2043): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x317, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) syz_usb_connect(0x0, 0x8f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201030c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104ff63200309050900ff03030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x317, 0x1000, 0x3, 0x36b}, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) (async) syz_usb_connect(0x0, 0x8f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201030c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104ff63200309050900ff03030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340"], 0x0) (async) 1.299224615s ago: executing program 4 (id=2044): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0xffffffff, 0xe, 0x200, 0x2], [0x8001, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24d, 0xd, 0x1, 0x9, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7821a04a, 0x8, 0xb89, 0xa, 0x1, 0x1, 0xc, 0xe, 0x1, 0xde1e, 0x7, 0x2, 0x40000000000002, 0xffffffffffff8000, 0x1000, 0x12, 0x94, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x996d, 0x8001, 0x1, 0x3, 0x5, 0xfffb, 0x3, 0x101, 0x0, 0x67c, 0x4, 0x2, 0xd, 0x2, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x9312, 0x10, 0x80, 0x1, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x5, 0x7ff, 0x3, 0xff, 0x1ff, 0x7, 0xe648, 0x3, 0x6, 0xdfb3, 0x3, 0x4000000000002, 0xfffffffffffffffd, 0x7fff, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x800080, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x3, 0x200000000000065f, 0x8, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b000100006e020904840001ee48"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000009c0)=0x60000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.181536012s ago: executing program 1 (id=2045): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{0x77359400}, {r0, r1/1000+10000}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="f8788ab8f188026ec1e1c592ddca81805ecba94905b36920ab8a1308a2854a0e231d715b3091d31929101c15235c108b80efa9ba75a9550f89549979a4679a95e192293a3511d4cc62a09952e9b783b57ce14684ff904a8c48021b6ae4a08cdbfff43cd92515a717eba3ea214e4a2e7a204112c12f5b077945b917aa93a1019d91ab30044d38a84696579202b11bb9a7117d2062c9049303d11842751bfcd6712f5a418eba73c7b4175cff65de2b17573235ba3630f146fbe16c9e2d8e65d3fee29532487a96d6499cb83765fa4ff89c618b4f", @ANYRESDEC, @ANYRES32=0x0], 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xab24]}, &(0x7f0000000040), &(0x7f0000000140), 0x8) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x401}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000400), 0x0, &(0x7f0000000480)={r4, r5+10000000}, &(0x7f00000004c0)={[0x5]}, 0x8) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB=';pids'], 0x6) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ppoll(&(0x7f0000000340)=[{r7, 0x8104}, {r8, 0x4}, {r9, 0x6}, {r10, 0x1780}, {r11, 0x15000}, {r12, 0x8010}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x8]}, 0x8) 676.520941ms ago: executing program 5 (id=2048): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) socket$inet6(0xa, 0x400000000001, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4}, 0x1c) (async) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) (async) 607.555105ms ago: executing program 5 (id=2049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x800) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'wg1\x00', {0x2, 0x0, @broadcast}}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB="080001000300000008000300", @ANYRES32=r5, @ANYBLOB="0c00060002bf0a004f3200000000000000000000000f0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x400c075) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f0000000600)="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", 0x113) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004) 607.097395ms ago: executing program 5 (id=2050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x406f413, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x2}, @sack_perm, @timestamp, @timestamp], 0x5) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="0f300f09b9800000c00f3235000800000f30f80000020f23c00f21f835000007000f23f866b80f008ec0b83cb93ead0f23a8c2c221f935c00000c00f23f865f30f09b805000000b90d00000066b836018ed89a00000000bd006732190200000032", 0xfffffffffffffec8}], 0x1, 0x45, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 605.268865ms ago: executing program 1 (id=2051): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4001af83, &(0x7f0000000180)={0x0, 0xffffffff}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x1000004, &(0x7f0000000140)='fuse\x00\x8d\xe8\x97dxO\x90\xa4\a\x1b\xaa^Dm\x0fv\xd0+_\x98z\xf4\xb0K\x00'/45) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) close_range(r1, 0xffffffffffffffff, 0x0) 604.788065ms ago: executing program 1 (id=2052): syz_clone(0x800, &(0x7f0000000000)="ff84f56cfec4baca2710adc4392ba938f384562a77c1fa088a33428915c7053f3cf0ee593479acedc9", 0x29, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="0a2053b7bc343898f80e484e8b8998a3d092e3a3ab462b31bdd4d19a341f07f15314b7747ced4e2d94b7043690bac0b53bbf7646b2974bc9ffc5b1b92a72e77ab33bed1e07cc402524b5f09fa24656c078c7d0366dd86b60d47ddd31699590d49206bf6867aa3a2f4705b9619d6fd8dafd9a5c61df897659bc5b966944e990a66ba4db8aa517253139d4290c85f97d9b95ea8035c90e9c4bb621ad929bf1fa37310f76ce2d158eb486668baa0dd40a05f8cc406ca24b4f8aa71a8945d1ea6c8aedfde0c2") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f00001f9000/0x3000)=nil, 0x3000, 0xc) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 604.541045ms ago: executing program 5 (id=2053): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000983000/0x1000)=nil, 0x1000}) 535.748409ms ago: executing program 1 (id=2054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setresgid(0xee00, 0xee01, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000480)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x240, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80, 0x40) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x5, 0x95, 0x84, 0x3ff, 0x8}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) setuid(0xee01) (async) setuid(0xee01) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x1000000000000000, 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}, 0x40) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 521.22115ms ago: executing program 4 (id=2055): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xba, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0xec}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000580)={0x200000, 0x200000, 0x4, 0x10000, 0x7e, 0x2}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wake_lock', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x40004, 0x12) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x4, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0x9, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xce, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xff, 0x1, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x40, 0x2, 0x81, 0x8, 0x5c}, 0xa6, &(0x7f00000001c0)={0x5, 0xf, 0xa6, 0x5, [@generic={0x64, 0x10, 0x4, "f4b89e2403f84fcd24375755582f7a842680e7e2713d8c423f76f0a00e0c27e0b88c4a4481449fcb29fdea11fca42bcd2826f93790977c84d58ad90263f02d08fc181b6474ad2dc5e16ff234b397c92148d538d7a1862816fcf19f2959dcbeb885"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "ef64add2e5cf3ac1d67b25e6517f5143"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b67cefcc93b726ada62886de01018d8e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x12, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x2, 0x5, 0x4, 0x9}]}, 0x5, [{0xd6, &(0x7f0000000280)=@string={0xd6, 0x3, "6ceb1727ec189150c30c196dd72281a4567c141feab9e113269beeb4a317f04ad706059d613f3a93a976524b6aa7cc94e5754cdde3347437e52e6173570c1db15fa08f508b3bf06615224eb4715429d2caf5c193d2046ce5d098ae4d899266052f16fc355ee656140be7090016899c8d6a33cd939cf7f5c289df5bfff16bb8deedbb3102c8d13346b069b182f213cccd775f5ebed539b7bc91043d2613782699169de5ee5b8e73c0dfe02d03f110a5186806b2a1a3ece2eb2270f75c2ce68c9a48d92d7693027b96575a07e540cad3a2d60aa9f8"}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "9299"}}, {0x68, &(0x7f0000000380)=@string={0x68, 0x3, "13ef8850105f89ea32b7ce91e6c4055848987b45a3956e639f6d92732e96dcf1919e5965bde1b9edda561a0669f9c008474bca9dba8f51401782657b518131c18786b1db2b5d578f10992bbd9645a4366083828e833e28b05792582bf2e3ca01076bae802773"}}, {0xdc, &(0x7f0000000440)=@string={0xdc, 0x3, "ebb4ce59ce047da70e74198fc3469d716a32b5986640901637dedec5804e4a9b15ca5615e50750de73d927118d5705e58d650b423bb26d2b1d60c02e4d17e20fd68317ec9fc15ef8be44074823e7be76d963ab9f1712f8a3fe8afe36a1ce8ea969f43b9e20d0a635617231194dc243d05b0bed29c07ddcb4df66855bd420d507c07e74bcc472ea60568c8ff41bbfb136c69dc6de4bbc59826a910d2c907c16657e2be96b84f339d5dacf62a33f268a0307bca39d0387ff156b11374c9410469519523097697f19de4aadf3cdb67774c1c2c653637714856ca12b"}}, {0x45, &(0x7f0000000540)=@string={0x45, 0x3, "25f9d7be32d000b6d1c56f2be832855e9129978b2d8226f1e3af0298a71e2e00935880853ecf4b6aed870d9212b9aa60720a8dd305c6b91ba49427056952cf5f0a488d"}}]}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000640)={0x0, 0xc000}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x5, "51860fc0"}, @main=@item_012={0x1, 0x0, 0xb, 'A'}]}}, 0x0}, 0x0) 436.487735ms ago: executing program 5 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x4}, 0x38) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xc8) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) ioprio_get$pid(0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r8 = dup(r7) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xc8) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="0318e0666fe87b1ff851212fb0f45d46856c37414bdde7f97f6af8ba532d"}]}, 0x40}}, 0x40000) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) 410.801336ms ago: executing program 1 (id=2057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) (async, rerun: 64) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) getsockopt$inet_opts(r2, 0x0, 0x16, 0x0, &(0x7f0000000100)) (async, rerun: 64) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) (rerun: 64) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x604, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updsa={0x104, 0x1a, 0xa21, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6c}, {@in, 0x0, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x6, 0x0, 0x2000000000000, 0x0, 0x7}, {0x0, 0x80, 0x4, 0x4}, {}, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x7, 0x4) 410.346856ms ago: executing program 5 (id=2058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) r2 = dup3(r1, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0xf, 0x4, "6850ee3f"}, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r5 = dup3(r3, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, 0x0}) (async) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000480)={0x3, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x6, 0x5, 0x101, 0x80000000, 0x3, 0xfffffc01}, {0x40000001, 0x9, 0x4, 0x56e, 0x9, 0x7, 0xaba}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000fc0), 0x27, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000fc0), 0x27, 0x0, 0x0}) 111.008203ms ago: executing program 1 (id=2059): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) (async) close(r2) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x18e) (async) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xe8) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x17) ftruncate(r6, 0x9) close(r6) (async) execveat$binfmt(r0, r1, 0x0, 0x0, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000001ac1e000100000000000000000000000000000000fffc00000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000003c000000ac1e0001000000000000000000000000fdffffffffffffff0000000000000000000000000076eb129d2bbdb12c0000000800000000000000000000000000000000004000000000000000000000000000010000000000000000000000000000000200000000000000feffffffffffffff0000000000000000000000080000000000000000020000000000000000000000480002"], 0x140}, 0x1, 0x0, 0x0, 0x4c080}, 0x4048844) 49.530727ms ago: executing program 34 (id=2059): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) (async) close(r2) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x18e) (async) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xe8) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x17) ftruncate(r6, 0x9) close(r6) (async) execveat$binfmt(r0, r1, 0x0, 0x0, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000001ac1e000100000000000000000000000000000000fffc00000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000003c000000ac1e0001000000000000000000000000fdffffffffffffff0000000000000000000000000076eb129d2bbdb12c0000000800000000000000000000000000000000004000000000000000000000000000010000000000000000000000000000000200000000000000feffffffffffffff0000000000000000000000080000000000000000020000000000000000000000480002"], 0x140}, 0x1, 0x0, 0x0, 0x4c080}, 0x4048844) 0s ago: executing program 4 (id=2061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfff, @private0, 0xffffff01}, 0x1c) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (rerun: 32) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (async, rerun: 64) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') (rerun: 64) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') kernel console output (not intermixed with test programs): ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.179032][ T45] usb 6-1: USB disconnect, device number 30 [ 212.192366][ T36] audit: type=1400 audit(2000000072.050:1608): avc: denied { name_bind } for pid=4549 comm="syz.2.1175" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 212.200917][ T405] usb 5-1: USB disconnect, device number 49 [ 212.232939][ T4553] rust_binder: Write failure EFAULT in pid:465 [ 212.233368][ T4553] overlayfs: conflicting options: metacopy=off,verity=require [ 212.267141][ T36] audit: type=1400 audit(2000000072.130:1609): avc: denied { getopt } for pid=4557 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.302257][ T1087] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 212.312150][ T36] audit: type=1400 audit(2000000072.180:1610): avc: denied { append } for pid=4564 comm="syz.2.1181" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.583919][ T405] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 212.744940][ T405] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 212.755561][ T405] usb 5-1: config 7 interface 1 has no altsetting 0 [ 212.763469][ T405] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 212.773023][ T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.781228][ T405] usb 5-1: Product: syz [ 212.785585][ T405] usb 5-1: Manufacturer: syz [ 212.790214][ T405] usb 5-1: SerialNumber: syz [ 212.797497][ T405] usb 5-1: selecting invalid altsetting 0 [ 212.803431][ T405] rndis_host 5-1:7.0: probe with driver rndis_host failed with error -22 [ 212.902733][ T4582] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.911599][ T4582] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.943965][ T64] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 213.005376][ T1304] usb 5-1: USB disconnect, device number 50 [ 213.047763][ T4590] loop7: detected capacity change from 0 to 7 [ 213.060485][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.070712][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.079883][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.093642][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.102841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.104482][ T4599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.111463][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.117013][ T4599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.118301][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.128558][ T4599] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 213.135959][ T4601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.142078][ T4599] rust_binder: Read failure Err(EFAULT) in pid:1090 [ 213.151533][ T4601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.158699][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.166277][ T64] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 213.172789][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.182077][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.196200][ T4599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1090 [ 213.200319][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 213.210144][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.217117][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 213.227027][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.251167][ T64] usb 6-1: config 0 descriptor?? [ 213.568989][ T36] audit: type=1400 audit(2000000073.430:1611): avc: denied { read } for pid=4605 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.607132][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.615993][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.664996][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.672261][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.679365][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.686352][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.693402][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.700514][ T64] waltop 0003:172F:0032.0037: unknown main item tag 0x0 [ 213.708337][ T64] waltop 0003:172F:0032.0037: hidraw1: USB HID v10.00 Device [HID 172f:0032] on usb-dummy_hcd.5-1/input0 [ 213.765448][ T4613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1197'. [ 213.778286][ T4613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.786924][ T4613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.795746][ T4615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1197'. [ 213.813614][ T4619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.822844][ T4619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.834681][ T1304] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 213.837459][ T36] audit: type=1400 audit(2000000073.700:1612): avc: denied { bind } for pid=4618 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.844227][ T4619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.871326][ T31] usb 6-1: USB disconnect, device number 31 [ 213.874929][ T4619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.983919][ T1304] usb 5-1: Using ep0 maxpacket: 32 [ 213.990327][ T1304] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 213.999093][ T1304] usb 5-1: config 0 has no interface number 0 [ 214.005504][ T1304] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 214.017376][ T1304] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 214.026645][ T1304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.035103][ T1304] usb 5-1: Product: syz [ 214.039591][ T1304] usb 5-1: Manufacturer: syz [ 214.044808][ T1304] usb 5-1: SerialNumber: syz [ 214.050579][ T1304] usb 5-1: config 0 descriptor?? [ 214.061761][ T4609] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 214.087721][ T4631] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1202'. [ 214.271155][ T4608] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 214.279347][ T1304] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 214.289729][ T1304] asix 5-1:0.188: probe with driver asix failed with error -32 [ 214.394671][ T4641] fuse: Bad value for 'rootmode' [ 214.494682][ T4657] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1210'. [ 214.524947][ T4655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.561072][ T4671] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 214.589126][ T4673] fuse: Bad value for 'rootmode' [ 214.903912][ T1304] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 215.042074][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.050709][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.058508][ T1304] usb 6-1: Using ep0 maxpacket: 32 [ 215.061394][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.064844][ T1304] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 215.072371][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.080581][ T1304] usb 6-1: config 0 has no interface number 0 [ 215.094529][ T1304] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 215.106021][ T1304] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 215.115107][ T1304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.123125][ T1304] usb 6-1: Product: syz [ 215.127336][ T1304] usb 6-1: Manufacturer: syz [ 215.132462][ T1304] usb 6-1: SerialNumber: syz [ 215.137805][ T1304] usb 6-1: config 0 descriptor?? [ 215.143157][ T4676] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.351272][ T4676] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.513167][ T4686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.521760][ T4686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.559262][ T1304] asix 6-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 215.608301][ T4688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 215.961095][ T1304] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 215.971529][ T1304] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 216.071707][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 216.081496][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 216.081511][ T36] audit: type=1326 audit(2000000075.940:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.1.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1f99bf79 code=0x0 [ 216.134334][ T1304] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.144690][ T1304] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 216.315747][ T1304] asix 6-1:0.191 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet, 42:78:b1:3f:bb:2f [ 216.329522][ T1304] usb 6-1: USB disconnect, device number 32 [ 216.335971][ T1304] asix 6-1:0.191 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet [ 216.510689][ T4699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.579496][ T4707] fuse: Bad value for 'fd' [ 216.610326][ T31] usb 5-1: USB disconnect, device number 51 [ 216.655617][ T36] audit: type=1400 audit(2000000076.520:1623): avc: denied { ioctl } for pid=4714 comm="syz.4.1230" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 216.823925][ T45] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 216.905146][ T4724] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 216.974935][ T45] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 216.990420][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 217.001820][ T45] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 217.012151][ T45] usb 6-1: config 0 has no interface number 0 [ 217.019565][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 217.028676][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.036738][ T45] usb 6-1: Product: syz [ 217.040946][ T45] usb 6-1: Manufacturer: syz [ 217.045576][ T45] usb 6-1: SerialNumber: syz [ 217.050740][ T45] usb 6-1: config 0 descriptor?? [ 217.164880][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 217.176696][ T31] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.188022][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.197389][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.205616][ T31] usb 5-1: Product: А [ 217.209707][ T31] usb 5-1: Manufacturer: 珷ᵲ餣ꕹ㕋悩싦韯噁㖦䣡羱䡈퓫ᯂ䀴弦蓖ΐꉸ뒃撋뭩싖ປ㣏掵땕㺱笋ଞ随ꥈ⨝⼿抣ዾ띝祖꺒ౘ捕㵾ꭧ쫁ἑᬛ`奬碙錀弼뫊뱷禺腗聀믰ᾥȈ辷飱九ﯱ塀喕畋ࠄ똎龕餆䄓덲඀쳘灖ઢ죏彛䧹尩㿄㥀ꆺ尰쿡絯鎶捳ɳ¼䁙璘جᨌ [ 217.240305][ T31] usb 5-1: SerialNumber: х [ 217.334911][ T1087] usbhid 2-1:0.0: can't add hid device: -32 [ 217.340965][ T1087] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 217.457908][ T45] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 217.464489][ T45] usb 6-1: No valid video chain found. [ 217.647914][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.657320][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.667247][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.676761][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.686876][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.696304][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.709069][ T4718] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.784029][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.792585][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.800948][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.809517][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.828475][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.837626][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.846579][ T4748] xt_NFQUEUE: number of total queues is 0 [ 217.847652][ T4751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:804 [ 217.853410][ T4752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.860187][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.877998][ T4756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.878777][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.887329][ T4756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.910809][ T4756] veth1_to_hsr: entered promiscuous mode [ 217.917001][ T4756] veth1_to_hsr: left promiscuous mode [ 217.920242][ T31] cdc_ncm 5-1:1.0: bind() failure [ 217.928769][ T31] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 217.929644][ T4756] tmpfs: Unsupported parameter 'mpol' [ 217.937370][ T31] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 217.952511][ T31] usb 5-1: USB disconnect, device number 52 [ 218.454228][ T36] audit: type=1326 audit(2000000078.310:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.4.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x0 [ 218.507207][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.515761][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.525921][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.535630][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.572838][ T4776] pim6reg1: entered promiscuous mode [ 218.578683][ T4776] pim6reg1: entered allmulticast mode [ 218.640063][ T4782] overlayfs: overlapping lowerdir path [ 218.654893][ T36] audit: type=1400 audit(2000000078.520:1625): avc: denied { ioctl } for pid=4783 comm="syz.1.1250" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.741682][ T4786] 9pnet: p9_errstr2errno: server reported unknown error 1i\ [ 218.813162][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.821854][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.063168][ T36] audit: type=1400 audit(2000000078.920:1626): avc: denied { write } for pid=4798 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.134824][ T36] audit: type=1400 audit(2000000079.000:1627): avc: denied { create } for pid=4804 comm="syz.1.1258" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 219.156986][ T36] audit: type=1400 audit(2000000079.000:1628): avc: denied { associate } for pid=4804 comm="syz.1.1258" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 219.304293][ T36] audit: type=1400 audit(2000000079.020:1629): avc: denied { create } for pid=4807 comm="syz.1.1258" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 219.304756][ T4808] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 219.326484][ T36] audit: type=1400 audit(2000000079.020:1630): avc: denied { write open } for pid=4807 comm="syz.1.1258" path="/279/core" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 219.335602][ T4808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 219.360188][ T36] audit: type=1400 audit(2000000079.030:1631): avc: denied { write } for pid=4804 comm="syz.1.1258" name="bus" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 219.413308][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.426425][ T4818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.434013][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.435924][ T4818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.454723][ T4818] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1261'. [ 219.582114][ T1304] usb 6-1: USB disconnect, device number 33 [ 219.626191][ T4824] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1264'. [ 219.635890][ T4824] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.723975][ T64] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 219.875150][ T64] usb 5-1: config 4 has an invalid interface number: 64 but max is 0 [ 219.883276][ T64] usb 5-1: config 4 has no interface number 0 [ 219.889420][ T64] usb 5-1: config 4 interface 64 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 219.900229][ T64] usb 5-1: config 4 interface 64 has no altsetting 0 [ 219.908409][ T64] usb 5-1: Dual-Role OTG device on HNP port [ 219.914594][ T64] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd17, bcdDevice=ec.cc [ 219.923650][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.931710][ T64] usb 5-1: Product: syz [ 219.935906][ T64] usb 5-1: Manufacturer: syz [ 219.940566][ T64] usb 5-1: SerialNumber: syz [ 219.973912][ T1304] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 219.997770][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.006659][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.016488][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.025115][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.073818][ T4830] fuse: Bad value for 'fd' [ 220.123924][ T1304] usb 6-1: Using ep0 maxpacket: 16 [ 220.130299][ T1304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.141558][ T1304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 220.152951][ T1304] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.154766][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.166032][ T1304] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.175798][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.183511][ T1304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.196700][ T4838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1270'. [ 220.209266][ T1304] usb 6-1: config 0 descriptor?? [ 220.214860][ T4824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 220.224747][ T64] usb 5-1: USB disconnect, device number 53 [ 220.610924][ T4846] fuse: Unknown parameter 'user_id00000000000000000000' [ 220.627988][ T1304] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 220.641291][ T1304] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 220.686570][ T1304] microsoft 0003:045E:07DA.0038: No inputs registered, leaving [ 220.704620][ T4854] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 220.717296][ T1304] microsoft 0003:045E:07DA.0038: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 220.750979][ T1304] microsoft 0003:045E:07DA.0038: no inputs found [ 220.763872][ T1304] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 220.793531][ T1304] usb 6-1: USB disconnect, device number 34 [ 220.963642][ T4863] fuse: Bad value for 'fd' [ 220.986701][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.996048][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.083902][ T4871] netlink: 'syz.2.1281': attribute type 4 has an invalid length. [ 221.101243][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.109966][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.121622][ T4873] fuse: Bad value for 'fd' [ 221.561173][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.570190][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.579087][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.587646][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.604253][ T4884] fuse: Bad value for 'fd' [ 221.827442][ T4893] devpts: called with bogus options [ 221.864001][ T371] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 222.014389][ T371] usb 6-1: no configurations [ 222.019030][ T371] usb 6-1: can't read configurations, error -22 [ 222.073219][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.081990][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.153970][ T371] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 222.222843][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.231562][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.304278][ T371] usb 6-1: no configurations [ 222.308886][ T371] usb 6-1: can't read configurations, error -22 [ 222.315346][ T371] usb usb6-port1: attempt power cycle [ 222.606859][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 222.606877][ T36] audit: type=1326 audit(2000000082.470:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.2.1298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e2b99bf79 code=0x0 [ 222.653892][ T371] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 222.695319][ T371] usb 6-1: no configurations [ 222.699967][ T371] usb 6-1: can't read configurations, error -22 [ 222.833973][ T371] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 222.854706][ T371] usb 6-1: no configurations [ 222.859310][ T371] usb 6-1: can't read configurations, error -22 [ 222.865783][ T371] usb usb6-port1: unable to enumerate USB device [ 222.948296][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.957012][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.481418][ T4964] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4964 comm=syz.4.1306 [ 223.507087][ T36] audit: type=1400 audit(2000000083.370:1639): avc: denied { ioctl } for pid=4974 comm="syz.1.1309" path="socket:[36965]" dev="sockfs" ino=36965 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.533237][ T4980] fuse: Bad value for 'fd' [ 223.661756][ T4987] netlink: 'syz.1.1312': attribute type 22 has an invalid length. [ 224.072368][ T36] audit: type=1400 audit(2000000083.930:1640): avc: denied { lock } for pid=4994 comm="syz.4.1316" path="socket:[36435]" dev="sockfs" ino=36435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 224.319020][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.327868][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.336650][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.345603][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.471449][ T5003] fuse: Bad value for 'rootmode' [ 224.571554][ T5006] fuse: Bad value for 'fd' [ 224.599044][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1322'. [ 224.782337][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.790861][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.798481][ T5010] netlink: 'syz.5.1322': attribute type 1 has an invalid length. [ 224.806379][ T5010] netlink: 'syz.5.1322': attribute type 2 has an invalid length. [ 224.815047][ T5010] netlink: 'syz.5.1322': attribute type 1 has an invalid length. [ 224.822782][ T5010] netlink: 'syz.5.1322': attribute type 2 has an invalid length. [ 224.875909][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.884952][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.322748][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.331405][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.339598][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.348267][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.356355][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.364998][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.373012][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.381696][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.389827][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.398703][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.407336][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.416773][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.448983][ T36] audit: type=1400 audit(2000000085.310:1641): avc: denied { connect } for pid=5028 comm="syz.2.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.478563][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.487271][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.525977][ T5033] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 225.534110][ T5033] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 225.542036][ T5033] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 225.549920][ T5033] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 225.557973][ T5033] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 225.565971][ T5033] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 225.574013][ T5033] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 225.581786][ T5033] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 225.589701][ T5033] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 225.597773][ T5033] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 225.913905][ T64] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 225.948113][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.956636][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.065645][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.076627][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.086582][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.099613][ T64] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.108738][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.117485][ T64] usb 6-1: config 0 descriptor?? [ 226.158409][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.167109][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.175474][ T5051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1335'. [ 226.184530][ T5051] tipc: Invalid UDP bearer configuration [ 226.184570][ T5051] tipc: Enabling of bearer rejected, failed to enable media [ 226.324802][ T64] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 226.334259][ T64] plantronics 0003:047F:FFFF.0039: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 226.550728][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.559433][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.584915][ T64] usb 6-1: USB disconnect, device number 39 [ 226.807106][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.815834][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.114845][ T36] audit: type=1400 audit(2000000086.980:1642): avc: denied { setattr } for pid=5078 comm="syz.5.1344" name="secretmem" dev="secretmem" ino=37219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.155509][ T5086] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 227.177223][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.186581][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.204364][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.214246][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.255895][ T5092] overlayfs: failed to resolve './file1': -2 [ 227.514464][ T64] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 227.533058][ T5110] Invalid argument reading file caps for ./file0 [ 227.613075][ T36] audit: type=1400 audit(2000000087.470:1643): avc: denied { setattr } for pid=5119 comm="syz.4.1357" name="XDP" dev="sockfs" ino=38109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.646531][ T36] audit: type=1400 audit(2000000087.510:1644): avc: denied { connect } for pid=5121 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.666666][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 227.672875][ T64] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 227.684015][ T64] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.687966][ T5124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.695255][ T64] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 227.704533][ T5124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.716478][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.730696][ T64] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 227.739751][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.748320][ T64] usb 6-1: config 0 descriptor?? [ 227.804519][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.813107][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.825970][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.835531][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.157018][ T5094] netlink: 'syz.5.1349': attribute type 27 has an invalid length. [ 228.185598][ T64] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 228.192448][ T64] lua 0003:1E7D:2C2E.003A: item fetching failed at offset 2/5 [ 228.200212][ T64] lua 0003:1E7D:2C2E.003A: parse failed [ 228.207243][ T64] lua 0003:1E7D:2C2E.003A: probe with driver lua failed with error -22 [ 228.355184][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 228.364978][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.373224][ T5150] bridge_slave_0 (unregistering): left allmulticast mode [ 228.380619][ T5150] bridge_slave_0 (unregistering): left promiscuous mode [ 228.387704][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.544690][ T64] usb 6-1: USB disconnect, device number 40 [ 228.891272][ T5165] can0: slcan on ttyS3. [ 228.924930][ T5164] can0 (unregistered): slcan off ttyS3. [ 229.034737][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.043308][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.052108][ T5189] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1374'. [ 229.323885][ T64] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 229.485034][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.495688][ T64] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 229.505443][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.515071][ T64] usb 6-1: config 0 descriptor?? [ 229.857154][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 229.924405][ T64] apple 0003:05AC:0292.003B: unbalanced collection at end of report description [ 229.933675][ T64] apple 0003:05AC:0292.003B: parse failed [ 229.940117][ T64] apple 0003:05AC:0292.003B: probe with driver apple failed with error -22 [ 230.086125][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.094711][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.122108][ T45] usb 6-1: USB disconnect, device number 41 [ 230.973896][ T371] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 231.069434][ T5261] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1398'. [ 231.123919][ T371] usb 6-1: Using ep0 maxpacket: 16 [ 231.130477][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.141462][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.151578][ T371] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.164424][ T371] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.173470][ T371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.182239][ T371] usb 6-1: config 0 descriptor?? [ 231.590017][ T371] microsoft 0003:045E:07DA.003C: item 0 4 0 11 parsing failed [ 231.597873][ T371] microsoft 0003:045E:07DA.003C: parse failed [ 231.604035][ T371] microsoft 0003:045E:07DA.003C: probe with driver microsoft failed with error -22 [ 231.665009][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.674141][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.791735][ T45] usb 6-1: USB disconnect, device number 42 [ 232.092949][ T5278] .N: renamed from veth0_to_bond (while UP) [ 232.109632][ T36] audit: type=1400 audit(2000000091.970:1645): avc: denied { listen } for pid=5280 comm="syz.1.1405" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 232.196111][ T5285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.201335][ T5287] netlink: 'syz.1.1407': attribute type 29 has an invalid length. [ 232.248114][ T5289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.249276][ T5289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1295 [ 232.392349][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.410298][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.553938][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 232.713958][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 232.720338][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.730764][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.741186][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.750274][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.758380][ T31] usb 6-1: Product: syz [ 232.762620][ T31] usb 6-1: Manufacturer: syz [ 232.767220][ T31] usb 6-1: SerialNumber: syz [ 232.946450][ T5301] SELinux: policydb version -220870155 does not match my version range 15-33 [ 232.955456][ T5301] SELinux: failed to load policy [ 232.972987][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.981633][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.982390][ T5291] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1408'. [ 232.998497][ T5291] tipc: Invalid UDP bearer configuration [ 232.998517][ T5291] tipc: Enabling of bearer rejected, failed to enable media [ 233.012218][ T5303] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.1414'. [ 233.021708][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 233.024812][ T31] usb 6-1: 0:2 : does not exist [ 233.031664][ T5303] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1414'. [ 233.036283][ T31] usb 6-1: unit 9 not found! [ 233.060870][ T31] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 233.106368][ T31] usb 6-1: USB disconnect, device number 43 [ 233.122111][ T5303] fuse: Bad value for 'rootmode' [ 233.122559][ T5313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1417'. [ 233.157009][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.165576][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.705182][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.714914][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.722540][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.731699][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.803878][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 233.934346][ T5348] x_tables: duplicate underflow at hook 2 [ 233.964989][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.976255][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.986016][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.998992][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.008050][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.016549][ T31] usb 6-1: config 0 descriptor?? [ 234.222337][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.231382][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.239492][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.248418][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.257156][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.271612][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.285080][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.293584][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.301714][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.310352][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.323007][ T31] plantronics 0003:047F:FFFF.003D: ignoring exceeding usage max [ 234.331537][ T31] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 234.340424][ T31] plantronics 0003:047F:FFFF.003D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 234.356636][ T5356] IPv6: A: Disabled Multicast RS [ 234.517037][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.526650][ T64] usb 6-1: USB disconnect, device number 44 [ 234.526685][ T36] audit: type=1400 audit(2000000094.400:1646): avc: denied { write } for pid=5366 comm="syz.4.1434" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.533652][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.613771][ T5371] overlayfs: missing 'lowerdir' [ 235.058790][ T5390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 235.081026][ T36] audit: type=1400 audit(2000000094.940:1647): avc: denied { remount } for pid=5391 comm="syz.1.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.111440][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.120767][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.403903][ T64] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 235.540190][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.549296][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.565373][ T64] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.573443][ T64] usb 6-1: not running at top speed; connect to a high speed hub [ 235.582043][ T64] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 235.593598][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 235.604692][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 235.615542][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.625293][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 235.634972][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 67, setting to 64 [ 235.647534][ T64] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 235.656814][ T36] audit: type=1400 audit(2000000095.520:1648): avc: denied { read } for pid=5431 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.676963][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.684993][ T64] usb 6-1: Product: syz [ 235.689144][ T64] usb 6-1: Manufacturer: syz [ 235.693806][ T64] usb 6-1: SerialNumber: syz [ 235.699090][ T64] usb 6-1: config 0 descriptor?? [ 235.704380][ T5399] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.711907][ T5399] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.719182][ T5399] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.946087][ T64] usb 6-1: USB disconnect, device number 45 [ 235.956517][ T5439] netlink: 'syz.4.1460': attribute type 12 has an invalid length. [ 236.054965][ T5446] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5446 comm=syz.4.1462 [ 236.162673][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.171576][ T5455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.185818][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.194460][ T5455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.603660][ T36] audit: type=1400 audit(2000000096.460:1649): avc: denied { setopt } for pid=5467 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.848051][ T5479] fuseblk: Unknown parameter 'ro ؈?000000000204&mUw 00000200G0' [ 236.930156][ T5483] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1473'. [ 236.939771][ T5483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.063962][ T36] audit: type=1326 audit(2000000096.930:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.1476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f1f99bf79 code=0x0 [ 237.539780][ T36] audit: type=1400 audit(2000000097.400:1651): avc: denied { map } for pid=5494 comm="syz.5.1477" path="pipe:[23672]" dev="pipefs" ino=23672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 237.602430][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.611011][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.629989][ T5503] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1478'. [ 237.833958][ T64] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 237.887903][ T5505] overlayfs: failed to clone upperpath [ 237.917254][ T5511] veth0_to_batadv: entered promiscuous mode [ 237.923264][ T5511] veth0_to_batadv: entered allmulticast mode [ 237.985387][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 237.994768][ T64] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 238.007725][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.013049][ T64] usb 6-1: config 0 has no interface number 0 [ 238.022396][ T64] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 238.026631][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.043869][ T64] usb 6-1: config 0 interface 196 has no altsetting 0 [ 238.063266][ T64] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 238.072644][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.081313][ T64] usb 6-1: Product: syz [ 238.085554][ T64] usb 6-1: Manufacturer: syz [ 238.090157][ T64] usb 6-1: SerialNumber: syz [ 238.095353][ T64] usb 6-1: config 0 descriptor?? [ 238.100615][ T5501] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 238.292064][ T36] audit: type=1400 audit(2000000098.150:1652): avc: denied { create } for pid=5532 comm="syz.4.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 238.314605][ T36] audit: type=1400 audit(2000000098.150:1653): avc: denied { sys_admin } for pid=5532 comm="syz.4.1489" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 238.335848][ T36] audit: type=1400 audit(2000000098.150:1654): avc: denied { associate } for pid=5534 comm="syz.4.1489" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 238.603727][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.612321][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.837991][ T64] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 238.845815][ T64] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 238.856875][ T64] usb 6-1: USB disconnect, device number 46 [ 238.862900][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.870768][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.878674][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.886580][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.894458][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.902362][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.910338][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.918299][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.926279][ T5555] netlink: 'syz.5.1497': attribute type 1 has an invalid length. [ 238.957872][ T5559] overlayfs: conflicting lowerdir path [ 238.965766][ T36] audit: type=1400 audit(2000000098.830:1655): avc: denied { mount } for pid=5558 comm="syz.5.1499" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.181335][ T5573] rust_binder: Write failure EFAULT in pid:1352 [ 239.181405][ T5573] rust_binder: Write failure EFAULT in pid:1352 [ 239.199529][ T5577] fuse: Unknown parameter '1-fd' [ 239.223358][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.231890][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.240757][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.249384][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.258030][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.266723][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.273926][ T45] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 239.404002][ T45] usb 6-1: device descriptor read/64, error -71 [ 239.522005][ T5595] fuse: Bad value for 'fd' [ 239.643919][ T45] usb 6-1: device descriptor read/64, error -71 [ 239.883929][ T45] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 240.013889][ T45] usb 6-1: device descriptor read/64, error -71 [ 240.253888][ T45] usb 6-1: device descriptor read/64, error -71 [ 240.364030][ T45] usb usb6-port1: attempt power cycle [ 240.556373][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 240.556391][ T36] audit: type=1400 audit(2000000100.420:1658): avc: denied { read append } for pid=5606 comm="syz.2.1516" name="file1" dev="tmpfs" ino=2475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.557520][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.562518][ T36] audit: type=1400 audit(2000000100.420:1659): avc: denied { open } for pid=5606 comm="syz.2.1516" path="/454/file0/file1" dev="overlay" ino=2475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.585552][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.629537][ T36] audit: type=1326 audit(2000000100.490:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.2.1516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e2b99bf79 code=0x0 [ 240.703924][ T45] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 240.724913][ T45] usb 6-1: device descriptor read/8, error -71 [ 240.855308][ T45] usb 6-1: device descriptor read/8, error -71 [ 241.093963][ T45] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 241.114851][ T45] usb 6-1: device descriptor read/8, error -71 [ 241.245063][ T45] usb 6-1: device descriptor read/8, error -71 [ 241.353962][ T45] usb usb6-port1: unable to enumerate USB device [ 241.674746][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.683602][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.443984][ T64] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 242.595046][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.606101][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.615901][ T64] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 242.625025][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.633534][ T64] usb 6-1: config 0 descriptor?? [ 243.040997][ T64] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 243.048569][ T64] cp2112 0003:10C4:EA90.003E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 243.240800][ T64] cp2112 0003:10C4:EA90.003E: Part Number: 0x82 Device Version: 0xFE [ 243.576036][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.584691][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.641988][ T64] cp2112 0003:10C4:EA90.003E: error setting SMBus config [ 243.649612][ T64] cp2112 0003:10C4:EA90.003E: probe with driver cp2112 failed with error -71 [ 243.659758][ T64] usb 6-1: USB disconnect, device number 51 [ 244.175237][ T36] audit: type=1400 audit(2000000104.040:1661): avc: denied { checkpoint_restore } for pid=5644 comm="syz.5.1529" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.227488][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.237438][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.245995][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.254506][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.255130][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.271037][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.285387][ T5657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5657 comm=syz.5.1534 [ 244.287351][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.306858][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.307466][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.319231][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.385052][ T36] audit: type=1400 audit(2000000104.250:1662): avc: denied { ioctl } for pid=5659 comm="syz.5.1535" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.642388][ T5670] fuse: Bad value for 'rootmode' [ 244.654099][ T405] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 244.717601][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.726347][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.735127][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.744600][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.755733][ T5677] validate_nla: 24 callbacks suppressed [ 244.755754][ T5677] netlink: 'syz.4.1541': attribute type 28 has an invalid length. [ 244.770487][ T5677] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 244.780491][ T36] audit: type=1400 audit(2000000104.650:1663): avc: denied { relabelto } for pid=5676 comm="syz.4.1541" name="ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 244.807486][ T36] audit: type=1400 audit(2000000104.650:1664): avc: denied { associate } for pid=5676 comm="syz.4.1541" name="ptp0" dev="tmpfs" ino=1218 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 244.823882][ T405] usb 6-1: Using ep0 maxpacket: 8 [ 244.847006][ T405] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 244.855835][ T405] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 244.857674][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.864345][ T405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 244.872936][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.881884][ T405] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 244.901222][ T405] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE [ 244.912982][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 244.922812][ T405] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 244.926677][ T5684] fuse: Bad value for 'fd' [ 244.937476][ T405] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 244.949659][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.958651][ T405] usb 6-1: Product: syz [ 244.962955][ T405] usb 6-1: Manufacturer: syz [ 244.967604][ T405] usb 6-1: SerialNumber: syz [ 244.973516][ T405] usb 6-1: config 0 descriptor?? [ 244.979448][ T405] hub 6-1:0.0: bad descriptor, ignoring hub [ 244.986828][ T405] hub 6-1:0.0: probe with driver hub failed with error -5 [ 245.141932][ T5701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.151173][ T5701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.344012][ T371] usb 6-1: USB disconnect, device number 52 [ 245.434875][ T5708] fuse: Unknown parameter 'fsname' [ 245.440458][ T5708] fuse: Bad value for 'fd' [ 245.817337][ T36] audit: type=1326 audit(2000000105.680:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.5.1555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdde379bf79 code=0x0 [ 246.181250][ T5749] overlayfs: disabling nfs_export due to verity=require [ 246.218997][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.227648][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.268962][ T5757] fuse: Bad value for 'group_id' [ 246.274090][ T5757] fuse: Bad value for 'group_id' [ 246.648980][ T5765] fuse: Bad value for 'fd' [ 246.976933][ T5782] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1576'. [ 246.993968][ T405] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 247.037806][ T5784] fuse: Bad value for 'group_id' [ 247.042883][ T5784] fuse: Bad value for 'group_id' [ 247.155017][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.179669][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.199655][ T405] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.218028][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.256743][ T405] usb 6-1: config 0 descriptor?? [ 247.298135][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.307783][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.832248][ T5812] fuse: Unknown parameter '00000000000000000000u71أG@ލԮz.냊jq`?Z՘' [ 247.920703][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.930984][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.271787][ T36] audit: type=1326 audit(2000000108.130:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.4.1589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cd1b9bf79 code=0x0 [ 248.324604][ T5818] overlayfs: failed to clone upperpath [ 248.474918][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.484705][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.505305][ T405] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #200: -71 [ 248.514930][ T405] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 248.523073][ T405] uclogic 0003:256C:006D.003F: failed probing pen v2 parameters: -71 [ 248.531642][ T405] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 248.539862][ T405] uclogic 0003:256C:006D.003F: probe with driver uclogic failed with error -71 [ 248.553188][ T405] usb 6-1: USB disconnect, device number 53 [ 249.114660][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.128195][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.137758][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.147435][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.159177][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.167279][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.176662][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.184482][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.205949][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.214095][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.227874][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.253388][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.261268][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.269259][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.277045][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.284921][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.292887][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.300666][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.308473][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.316568][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.319118][ T5856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1601'. [ 249.324694][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.341215][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.350021][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.359169][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.366974][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.374778][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.381560][ T36] audit: type=1400 audit(2000000109.240:1667): avc: denied { audit_control } for pid=5857 comm="syz.2.1602" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 249.382702][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.382731][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.382756][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.382780][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.382804][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.415701][ T5861] netlink: 'syz.5.1600': attribute type 4 has an invalid length. [ 249.420856][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.428698][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 249.435758][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.476153][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.483996][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.491903][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.500085][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.507858][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.515607][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.523331][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.531202][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.538958][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.546721][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.554465][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.562370][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.570154][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.577907][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.585678][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.593502][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.601325][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.609101][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.616892][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.624668][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.632389][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.640201][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.648060][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.655849][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.663580][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.671506][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.679389][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.687370][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.695317][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.703076][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.711066][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.719141][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.726905][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.734812][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.742626][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.750394][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.758303][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.766304][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.774199][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.782247][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.790140][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.798232][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.805996][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.813724][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.822121][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.829999][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.838180][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.846406][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.854308][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.862496][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.870523][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.878312][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.886165][ T405] hid-generic 0000:FFFFFFFE:0007.0040: unknown main item tag 0x0 [ 249.904013][ T405] hid-generic 0000:FFFFFFFE:0007.0040: hidraw1: HID v0.00 Device [syz0] on syz1 [ 249.939434][ T5871] fido_id[5871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.940738][ T5873] veth0_to_team: mtu greater than device maximum [ 250.036180][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.045472][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.053449][ T36] audit: type=1326 audit(2000000109.910:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.064854][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.080992][ T36] audit: type=1326 audit(2000000109.910:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.090610][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.119136][ T36] audit: type=1326 audit(2000000109.910:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.142791][ T36] audit: type=1326 audit(2000000109.910:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.166562][ T36] audit: type=1326 audit(2000000109.910:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.190040][ T36] audit: type=1326 audit(2000000109.910:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde379bf79 code=0x7fc00000 [ 250.238589][ T36] audit: type=1400 audit(2000000110.100:1674): avc: denied { read } for pid=5893 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.239922][ T5894] IPv6: A: Disabled Multicast RS [ 250.275004][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.283679][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.293235][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.301798][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.403938][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 250.555025][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 250.563209][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.574802][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.583894][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.592039][ T10] usb 6-1: Product: syz [ 250.596215][ T10] usb 6-1: Manufacturer: syz [ 250.600863][ T10] usb 6-1: SerialNumber: syz [ 250.605989][ T10] usb 6-1: config 0 descriptor?? [ 250.611585][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 250.617528][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 250.626200][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 250.640237][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.746081][ T5899] fuse: Bad value for 'fd' [ 250.914033][ T10] usb 6-1: USB disconnect, device number 54 [ 250.955806][ T5912] fuse: Bad value for 'group_id' [ 250.960771][ T5912] fuse: Bad value for 'group_id' [ 251.332849][ T5915] sock: sock_set_timeout: `syz.5.1620' (pid 5915) tries to set negative timeout [ 251.340927][ T5918] overlay: filesystem on ./file0 not supported as upperdir [ 251.401498][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 251.489734][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.523497][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.532447][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.734330][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 251.798033][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.806693][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.884938][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.896151][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.905919][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.918857][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.928006][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.936843][ T10] usb 6-1: config 0 descriptor?? [ 252.051760][ T5946] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 252.059385][ T5946] SELinux: failed to load policy [ 252.066399][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.074954][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.388483][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.394750][ T5950] overlay: Unknown parameter './file0' [ 252.398083][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.468456][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 252.474603][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 252.485352][ T10] usb 6-1: USB disconnect, device number 55 [ 253.009109][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 253.022979][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.032232][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.280792][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.289465][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.298173][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.306745][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.334092][ T45] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 253.483883][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 253.490185][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.496856][ T45] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 253.506000][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.514531][ T45] usb 6-1: config 0 descriptor?? [ 253.784955][ T45] hid-led 0003:1D34:0004.0041: probe with driver hid-led failed with error -71 [ 253.796539][ T45] usb 6-1: USB disconnect, device number 56 [ 254.133950][ T45] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 254.263884][ T45] usb 6-1: device descriptor read/64, error -71 [ 254.503904][ T45] usb 6-1: device descriptor read/64, error -71 [ 254.743921][ T45] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 254.772787][ T6010] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 254.849796][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.859926][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.873886][ T45] usb 6-1: device descriptor read/64, error -71 [ 254.996619][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.005249][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.113878][ T45] usb 6-1: device descriptor read/64, error -71 [ 255.223999][ T45] usb usb6-port1: attempt power cycle [ 255.563919][ T45] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 255.585065][ T45] usb 6-1: device descriptor read/8, error -71 [ 255.627768][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.636280][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.658260][ T36] audit: type=1400 audit(2000000115.520:1675): avc: denied { write } for pid=6057 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 255.699762][ T6064] netlink: 'syz.1.1671': attribute type 16 has an invalid length. [ 255.715179][ T45] usb 6-1: device descriptor read/8, error -71 [ 255.715748][ T6069] rust_binder: 1195: no such ref 0 [ 255.726551][ T6069] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 255.733782][ T6069] rust_binder: 1195: no such ref 2 [ 255.739219][ T6069] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 255.739678][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.756349][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.953965][ T45] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 255.975033][ T45] usb 6-1: device descriptor read/8, error -71 [ 256.020452][ T36] audit: type=1400 audit(2000000115.880:1676): avc: denied { create } for pid=6076 comm="syz.4.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 256.082356][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.091135][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.104887][ T45] usb 6-1: device descriptor read/8, error -71 [ 256.214217][ T45] usb usb6-port1: unable to enumerate USB device [ 256.592610][ T6096] fuse: Bad value for 'fd' [ 256.622755][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.631322][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.640317][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.649344][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.184877][ T6125] option changes via remount are deprecated (pid=6124 comm=syz.2.1693) [ 257.193569][ T6125] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 257.200884][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.209604][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.215729][ T31] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 257.225926][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.235300][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.315737][ T36] audit: type=1400 audit(2000000117.180:1677): avc: denied { mount } for pid=6138 comm="syz.4.1699" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 257.374928][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1 [ 257.386483][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 257.397418][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.408500][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c535, bcdDevice=f1.0d [ 257.417601][ T31] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 257.425914][ T31] usb 6-1: Manufacturer: syz [ 257.431037][ T31] usb 6-1: config 0 descriptor?? [ 257.436878][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 257.784170][ T6144] cgroup2: Unknown parameter 'uid>00000000000000016384' [ 258.035635][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.044277][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.070778][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.079354][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.121544][ T36] audit: type=1400 audit(2000000117.980:1678): avc: denied { getopt } for pid=6172 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.153995][ T36] audit: type=1400 audit(2000000118.020:1679): avc: denied { bind } for pid=6176 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.173394][ T36] audit: type=1400 audit(2000000118.020:1680): avc: denied { name_bind } for pid=6176 comm="syz.4.1712" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.179629][ T6179] veth1: entered allmulticast mode [ 258.194441][ T36] audit: type=1400 audit(2000000118.020:1681): avc: denied { node_bind } for pid=6176 comm="syz.4.1712" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.259284][ T6181] veth1: left allmulticast mode [ 258.341405][ T36] audit: type=1326 audit(2000000118.200:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.1715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cd1b9bf79 code=0x0 [ 258.445438][ T36] audit: type=1326 audit(2000000118.310:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.4.1721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f3cd1b9bf79 code=0x0 [ 258.609903][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.618469][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.760901][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.769391][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.828457][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.836966][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.837490][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.845563][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.287274][ T6242] FAULT_INJECTION: forcing a failure. [ 259.287274][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.300517][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.2.1731 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 259.300548][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 259.300556][ T6242] Call Trace: [ 259.300561][ T6242] [ 259.300567][ T6242] __dump_stack+0x21/0x30 [ 259.300600][ T6242] dump_stack_lvl+0x140/0x1c0 [ 259.300613][ T6242] ? __cfi_dump_stack_lvl+0x10/0x10 [ 259.300626][ T6242] ? check_stack_object+0x12b/0x150 [ 259.300639][ T6242] dump_stack+0x19/0x20 [ 259.300653][ T6242] should_fail_ex+0x3d7/0x530 [ 259.300664][ T6242] should_fail+0xf/0x20 [ 259.300674][ T6242] should_fail_usercopy+0x1e/0x30 [ 259.300684][ T6242] _copy_to_user+0x24/0xa0 [ 259.300698][ T6242] simple_read_from_buffer+0xed/0x160 [ 259.300713][ T6242] proc_fail_nth_read+0x1aa/0x220 [ 259.300724][ T6242] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 259.300734][ T6242] ? bpf_lsm_file_permission+0xd/0x20 [ 259.300744][ T6242] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 259.300754][ T6242] vfs_read+0x289/0xcb0 [ 259.300766][ T6242] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 259.300777][ T6242] ? __cfi_vfs_read+0x10/0x10 [ 259.300788][ T6242] ? __kasan_check_write+0x18/0x20 [ 259.300801][ T6242] ? mutex_lock+0x97/0x1d0 [ 259.300812][ T6242] ? __cfi_mutex_lock+0x10/0x10 [ 259.300822][ T6242] ? __fget_files+0x2c5/0x340 [ 259.300837][ T6242] ksys_read+0x145/0x260 [ 259.300849][ T6242] ? __cfi_ksys_read+0x10/0x10 [ 259.300861][ T6242] ? __kasan_check_read+0x15/0x20 [ 259.300872][ T6242] __x64_sys_read+0x7f/0x90 [ 259.300884][ T6242] x64_sys_call+0x2638/0x2ee0 [ 259.300903][ T6242] do_syscall_64+0x57/0xf0 [ 259.300917][ T6242] ? clear_bhb_loop+0x50/0xa0 [ 259.300932][ T6242] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 259.300945][ T6242] RIP: 0033:0x7f2e2b95c84e [ 259.300958][ T6242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.300967][ T6242] RSP: 002b:00007f2e2c7b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.300985][ T6242] RAX: ffffffffffffffda RBX: 00007f2e2c7ba6c0 RCX: 00007f2e2b95c84e [ 259.300994][ T6242] RDX: 000000000000000f RSI: 00007f2e2c7ba0a0 RDI: 0000000000000004 [ 259.301000][ T6242] RBP: 00007f2e2c7ba090 R08: 0000000000000000 R09: 0000000000000000 [ 259.301007][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.301014][ T6242] R13: 00007f2e2bc16038 R14: 00007f2e2bc15fa0 R15: 00007ffe4b780f78 [ 259.301023][ T6242] [ 259.874713][ T10] usb 6-1: USB disconnect, device number 61 [ 260.022003][ T6271] fuse: Unknown parameter '' [ 260.273876][ T10] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 260.407222][ T36] audit: type=1400 audit(2000000120.270:1684): avc: denied { setattr } for pid=6295 comm="syz.2.1748" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.426414][ T6296] overlay: Unknown parameter 'subj_type' [ 260.435660][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.450851][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.454563][ T6302] fuse: Unknown parameter 'grou00000000000000000000' [ 260.462752][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 260.470974][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.486260][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.488280][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.497460][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.517177][ T10] usb 6-1: Product: syz [ 260.521364][ T10] usb 6-1: Manufacturer: syz [ 260.526096][ T10] usb 6-1: SerialNumber: syz [ 260.531891][ T6273] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.683469][ T36] audit: type=1400 audit(2000000120.540:1685): avc: denied { lock } for pid=6325 comm="syz.4.1760" path="socket:[44973]" dev="sockfs" ino=44973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.000129][ T10] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 261.006391][ T10] cdc_ncm 6-1:1.0: bind() failure [ 261.012724][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 261.014386][ T6332] fuse: Unknown parameter 'group_i00000000000000000000' [ 261.020164][ T10] cdc_ncm 6-1:1.1: bind() failure [ 261.034508][ T10] usb 6-1: USB disconnect, device number 62 [ 261.051189][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.062259][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.072506][ T6334] fuse: Unknown parameter 'euid>00000000000000000000' [ 261.201088][ T6344] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 261.493924][ T10] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 261.591774][ T6353] usb usb8: usbfs: process 6353 (syz.2.1770) did not claim interface 0 before use [ 261.656153][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2632, setting to 64 [ 261.671074][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 261.684062][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.693192][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.701269][ T10] usb 6-1: Product: syz [ 261.705492][ T10] usb 6-1: Manufacturer: syz [ 261.710068][ T10] usb 6-1: SerialNumber: syz [ 261.745433][ T6357] fuse: Unknown parameter 'group_i00000000000000000000' [ 261.797934][ T6363] futex_wake_op: syz.1.1775 tries to shift op by 144; fix this program [ 261.807856][ T6363] futex_wake_op: syz.1.1775 tries to shift op by 144; fix this program [ 261.833923][ T6370] loop9: detected capacity change from 0 to 7 [ 261.840319][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.848399][ T6370] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.856318][ T6370] loop9: unable to read partition table [ 261.862670][ T6370] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 261.862670][ T6370] ) failed (rc=-5) [ 261.864489][ T3360] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.884263][ T3360] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.892394][ T3360] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.900530][ T3360] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.908119][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.908599][ T3360] Buffer I/O error on dev loop9, logical block 0, async page read [ 261.918195][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.925065][ T6343] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.957737][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.966660][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.109051][ T6383] fuse: Unknown parameter 'group_i00000000000000000000' [ 262.126496][ T6385] tipc: New replicast peer: 255.255.255.255 [ 262.132794][ T6385] tipc: Enabled bearer , priority 10 [ 262.548699][ T6343] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 262.592054][ T36] audit: type=1400 audit(2000000122.450:1686): avc: denied { write } for pid=6402 comm="syz.1.1790" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.592059][ T6403] random: crng reseeded on system resumption [ 262.756855][ T10] cdc_ncm 6-1:1.0: bind() failure [ 262.763956][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 262.771116][ T10] cdc_ncm 6-1:1.1: bind() failure [ 262.802686][ T6408] fuse: Unknown parameter 'group_id00000000000000000000' [ 262.918819][ T6415] bond_slave_1: entered promiscuous mode [ 262.926012][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.934584][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.965377][ T31] usb 6-1: USB disconnect, device number 63 [ 263.243893][ T31] tipc: Node number set to 1947394001 [ 263.421192][ T6429] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.533921][ T36] audit: type=1400 audit(2000000123.390:1687): avc: denied { shutdown } for pid=6437 comm="syz.2.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.668752][ T36] audit: type=1400 audit(2000000123.520:1688): avc: denied { lock } for pid=6448 comm="syz.4.1809" path="socket:[45340]" dev="sockfs" ino=45340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 263.724739][ T6464] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.767935][ T6455] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 263.829404][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.838858][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.847642][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.855574][ T6485] fuse: Bad value for 'fd' [ 263.860435][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.950967][ T6490] rust_binder: inc_ref_done called when no active inc_refs [ 263.962155][ T6492] fuse: Bad value for 'user_id' [ 263.974331][ T6492] fuse: Bad value for 'user_id' [ 264.343902][ T31] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 264.386648][ T6512] netlink: 'syz.1.1830': attribute type 27 has an invalid length. [ 264.398596][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.405705][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.413353][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.420431][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.427963][ T6512] bridge0: left promiscuous mode [ 264.433011][ T6512] bridge0: left allmulticast mode [ 264.442933][ T6512] bond_slave_1: left promiscuous mode [ 264.478529][ T36] audit: type=1400 audit(2000000124.340:1689): avc: denied { read write } for pid=6516 comm="syz.4.1832" name="ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 264.479463][ T6517] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 264.506557][ T36] audit: type=1400 audit(2000000124.340:1690): avc: denied { open } for pid=6516 comm="syz.4.1832" path="/dev/ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 264.536650][ T6519] fuse: Bad value for 'user_id' [ 264.544514][ T36] audit: type=1400 audit(2000000124.390:1691): avc: denied { relabelto } for pid=6516 comm="syz.4.1832" name="ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 264.547900][ T6519] fuse: Bad value for 'user_id' [ 264.575734][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.587497][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 264.596933][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.604220][ T36] audit: type=1400 audit(2000000124.390:1692): avc: denied { associate } for pid=6516 comm="syz.4.1832" name="ptp0" dev="tmpfs" ino=1218 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 264.610595][ T31] usb 6-1: config 0 descriptor?? [ 264.638501][ T36] audit: type=1400 audit(2000000124.390:1693): avc: denied { read } for pid=6516 comm="syz.4.1832" path="/dev/ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 265.046110][ T31] logitech 0003:046D:CA04.0042: unknown main item tag 0x0 [ 265.053321][ T31] logitech 0003:046D:CA04.0042: unknown main item tag 0x0 [ 265.060858][ T31] logitech 0003:046D:CA04.0042: unknown main item tag 0x0 [ 265.068925][ T31] logitech 0003:046D:CA04.0042: hidraw1: USB HID v0.03 Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 265.080379][ T31] logitech 0003:046D:CA04.0042: no inputs found [ 265.230313][ T36] audit: type=1400 audit(2000000125.090:1694): avc: denied { map } for pid=6535 comm="syz.1.1839" path="socket:[45568]" dev="sockfs" ino=45568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.263452][ T6538] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1840'. [ 265.265661][ T31] usb 6-1: USB disconnect, device number 64 [ 265.298028][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.306670][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.317002][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.325639][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.843734][ T6554] fuse: Bad value for 'fd' [ 265.856231][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 265.856247][ T36] audit: type=1400 audit(2000000125.720:1696): avc: denied { mounton } for pid=6555 comm="syz.1.1846" path="/proc/1285/task" dev="proc" ino=45592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 266.173896][ T64] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 266.325146][ T64] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.335329][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.348326][ T64] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 266.357447][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.366109][ T64] usb 6-1: config 0 descriptor?? [ 266.374547][ T64] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 266.431895][ T6573] netlink: 'syz.4.1852': attribute type 4 has an invalid length. [ 266.439713][ T6573] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1852'. [ 266.449248][ T6573] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 266.458256][ T6573] netlink: 'syz.4.1852': attribute type 2 has an invalid length. [ 266.479787][ T6582] fuse: Bad value for 'fd' [ 266.479799][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.479917][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.562742][ T6599] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1863'. [ 266.773027][ T6602] fuse: Bad value for 'fd' [ 266.824200][ T45] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 266.832532][ T45] hid-generic 0000:0000:0000.0043: hidraw1: HID v0.00 Device [syz1] on syz0 [ 266.882626][ T6611] hid-generic 0000:FFFFFFFE:0007.0033: pid 6611 passed too short report [ 266.966764][ T6618] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1870'. [ 267.035542][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.044124][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.102809][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.111493][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.120809][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.129360][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.347212][ T64] usb 6-1: USB disconnect, device number 65 [ 267.366291][ T6629] fuse: Bad value for 'fd' [ 267.431320][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1875'. [ 267.677966][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.687611][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.744633][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.753460][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.771667][ T6658] fuse: Bad value for 'fd' [ 267.824570][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.833244][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.386146][ T6671] /dev/rnullb0: Can't open blockdev [ 268.463895][ T64] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 268.490253][ T6680] fuse: Bad value for 'fd' [ 268.593694][ T36] audit: type=1400 audit(2000000128.450:1697): avc: denied { remount } for pid=6690 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 268.621943][ T64] usb 6-1: device descriptor read/64, error -71 [ 268.628547][ T36] audit: type=1400 audit(2000000128.480:1698): avc: denied { create } for pid=6690 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 268.652406][ T6693] virtiofs: Unknown parameter 'always' [ 268.883928][ T64] usb 6-1: device descriptor read/64, error -71 [ 269.123913][ T64] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 269.240432][ T6025] tipc: Subscription rejected, illegal request [ 269.253895][ T64] usb 6-1: device descriptor read/64, error -71 [ 269.256277][ T6706] fuse: Invalid rootmode [ 269.273129][ T6708] overlayfs: failed to clone upperpath [ 269.321595][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.330013][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.330512][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.340132][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.493894][ T64] usb 6-1: device descriptor read/64, error -71 [ 269.604051][ T64] usb usb6-port1: attempt power cycle [ 269.864482][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.873031][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.943903][ T64] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 269.965020][ T64] usb 6-1: device descriptor read/8, error -71 [ 270.095339][ T64] usb 6-1: device descriptor read/8, error -71 [ 270.333879][ T64] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 270.354960][ T64] usb 6-1: device descriptor read/8, error -71 [ 270.403404][ T36] audit: type=1400 audit(2000000130.260:1699): avc: denied { map } for pid=6729 comm="syz.2.1909" path="socket:[46017]" dev="sockfs" ino=46017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.484936][ T64] usb 6-1: device descriptor read/8, error -71 [ 270.593984][ T64] usb usb6-port1: unable to enumerate USB device [ 270.615553][ T6734] overlayfs: failed to clone lowerpath [ 270.618454][ T6738] fuse: Invalid rootmode [ 270.710121][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1915'. [ 270.758754][ T6750] sit0: entered promiscuous mode [ 270.765471][ T6750] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 270.773287][ T6750] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1916'. [ 270.876512][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.885545][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.042264][ T36] audit: type=1400 audit(2000000130.900:1700): avc: denied { getopt } for pid=6754 comm="syz.1.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.704567][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.713107][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.235859][ T6767] fuse: Invalid rootmode [ 272.307259][ T6771] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1923'. [ 272.316413][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 272.339027][ T6774] fuse: Bad value for 'group_id' [ 272.344070][ T6774] fuse: Bad value for 'group_id' [ 272.366539][ T36] audit: type=1400 audit(2000000132.230:1701): avc: denied { name_bind } for pid=6778 comm="syz.1.1926" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 272.387975][ T36] audit: type=1400 audit(2000000132.230:1702): avc: denied { bpf } for pid=6778 comm="syz.1.1926" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.612998][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.621611][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.191477][ T36] audit: type=1400 audit(2000000133.050:1703): avc: denied { setattr } for pid=6788 comm="syz.1.1930" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.221746][ T6792] fuse: Bad value for 'rootmode' [ 273.236733][ T36] audit: type=1400 audit(2000000133.100:1704): avc: denied { connect } for pid=6793 comm="syz.1.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.266585][ T6798] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1933'. [ 273.294080][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.302622][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.311849][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.320749][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.329003][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.337593][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.671145][ T36] audit: type=1400 audit(2000000133.530:1705): avc: denied { open } for pid=6810 comm="syz.4.1938" path="/dev/ptp0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 273.698038][ T36] audit: type=1400 audit(2000000133.530:1706): avc: denied { ioctl } for pid=6810 comm="syz.4.1938" path="/dev/ptp0" dev="tmpfs" ino=1218 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 274.181068][ T6816] fuse: Bad value for 'rootmode' [ 274.203290][ T36] audit: type=1400 audit(2000000134.060:1707): avc: denied { read } for pid=6819 comm="syz.4.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.286511][ T36] audit: type=1400 audit(2000000134.150:1708): avc: denied { setcurrent } for pid=6822 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 274.533894][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 274.663894][ T10] usb 6-1: device descriptor read/64, error -71 [ 274.903900][ T10] usb 6-1: device descriptor read/64, error -71 [ 275.144161][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 275.223089][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.231846][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.283895][ T10] usb 6-1: device descriptor read/64, error -71 [ 275.523911][ T10] usb 6-1: device descriptor read/64, error -71 [ 275.634014][ T10] usb usb6-port1: attempt power cycle [ 275.642094][ T6840] fuse: Bad value for 'rootmode' [ 275.753914][ T36] audit: type=1400 audit(2000000135.610:1709): avc: granted { setsecparam } for pid=6846 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 275.755241][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.781987][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.793565][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.802102][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.973911][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 275.994999][ T10] usb 6-1: device descriptor read/8, error -71 [ 276.125044][ T10] usb 6-1: device descriptor read/8, error -71 [ 276.355365][ T6853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.355983][ T6853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1653 [ 276.363515][ T6853] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 276.373872][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 276.381874][ T6853] rust_binder: Write failure EINVAL in pid:1653 [ 276.405003][ T10] usb 6-1: device descriptor read/8, error -71 [ 276.429532][ T6857] overlayfs: overlapping lowerdir path [ 276.460491][ T6864] fuse: Unknown parameter 'use00000000000000000000' [ 276.461433][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.476327][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.506860][ T6866] kvm: pic: non byte write [ 276.511535][ T6866] kvm: pic: non byte write [ 276.516371][ T6866] kvm: pic: non byte write [ 276.520927][ T6866] kvm: pic: non byte write [ 276.525719][ T6866] kvm: pic: non byte write [ 276.530330][ T6866] kvm: pic: non byte write [ 276.534954][ T6866] kvm: pic: non byte write [ 276.539574][ T6866] kvm: pic: non byte write [ 276.544337][ T6866] kvm: pic: non byte write [ 276.549072][ T6866] kvm: pic: non byte write [ 276.549997][ T10] usb 6-1: device descriptor read/8, error -71 [ 276.556063][ T36] audit: type=1400 audit(2000000136.420:1710): avc: denied { mounton } for pid=6865 comm="syz.2.1960" path="/proc/1664/cgroup" dev="proc" ino=47677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 276.620985][ T36] audit: type=1401 audit(2000000136.480:1711): op=fscreate invalid_context=CFA7AE [ 276.664073][ T10] usb usb6-port1: unable to enumerate USB device [ 276.735431][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.744526][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.050876][ T6876] No source specified [ 277.268719][ T6883] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.289651][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.306139][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.377213][ T6889] fuse: Unknown parameter 'use00000000000000000000' [ 277.398873][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1969'. [ 277.407897][ T6891] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1969'. [ 277.416881][ T6891] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1969'. [ 277.523879][ T6896] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1971'. [ 277.532844][ T6896] z00X: renamed from gretap0 (while UP) [ 277.539452][ T6896] z00X: entered allmulticast mode [ 277.562996][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.572212][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.703926][ T371] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 277.847774][ T6900] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1973'. [ 277.858046][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.870148][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.879959][ T371] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 277.889095][ T371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.898579][ T371] usb 6-1: config 0 descriptor?? [ 277.983351][ T6905] fuse: Unknown parameter '00000000000000000000003000000000000000000030x00000000000000030000000000000000000000000000000000000000003' [ 278.006831][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.015725][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.079825][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.088381][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.107253][ T6913] fuse: Unknown parameter 'use00000000000000000000' [ 278.125444][ T6915] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 278.133667][ T36] audit: type=1400 audit(2000000137.990:1712): avc: denied { connect } for pid=6914 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.259414][ T6925] x_tables: unsorted underflow at hook 1 [ 278.272678][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.282158][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.306521][ T6929] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1984'. [ 278.384644][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.393271][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.401854][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'. [ 278.674710][ T6937] fuse: Unknown parameter 'user_i00000000000000000000' [ 278.718770][ T36] audit: type=1400 audit(2000000138.580:1713): avc: denied { create } for pid=6942 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.846503][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.855125][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.562339][ T6958] fuse: Unknown parameter 'user_i00000000000000000000' [ 279.577882][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.586970][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.596053][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.604662][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.613196][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.621761][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.743377][ T6975] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 279.753974][ T36] audit: type=1400 audit(2000000139.620:1714): avc: denied { relabelto } for pid=6974 comm="syz.1.2002" name="486" dev="tmpfs" ino=2689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 279.781237][ T36] audit: type=1400 audit(2000000139.620:1715): avc: denied { associate } for pid=6974 comm="syz.1.2002" name="486" dev="tmpfs" ino=2689 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 279.809840][ T36] audit: type=1326 audit(2000000139.620:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1f99bf79 code=0x7ffc0000 [ 279.833501][ T36] audit: type=1326 audit(2000000139.620:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1f99bf79 code=0x7ffc0000 [ 279.856988][ T36] audit: type=1326 audit(2000000139.620:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6f1f99bf79 code=0x7ffc0000 [ 279.881387][ T36] audit: type=1326 audit(2000000139.620:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1f99bf79 code=0x7ffc0000 [ 279.955403][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.964115][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.972988][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.981567][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.319620][ T371] usbhid 6-1:0.0: can't add hid device: -71 [ 280.325667][ T371] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 280.335975][ T371] usb 6-1: USB disconnect, device number 74 [ 280.352722][ T6987] fuse: Unknown parameter 'user_i00000000000000000000' [ 280.564902][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.573592][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.753885][ T371] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 280.903871][ T371] usb 6-1: Using ep0 maxpacket: 8 [ 280.910042][ T371] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.920940][ T371] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.932526][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.943518][ T371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.953348][ T371] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.967619][ T371] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 280.976870][ T371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.984880][ T371] usb 6-1: Product: syz [ 280.989041][ T371] usb 6-1: Manufacturer: syz [ 280.993619][ T371] usb 6-1: SerialNumber: syz [ 280.998830][ T371] usb 6-1: config 0 descriptor?? [ 281.005055][ T371] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input44 [ 281.190128][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.198817][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.217413][ T371] usb 6-1: USB disconnect, device number 75 [ 281.348097][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.357371][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.882531][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.891794][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.918073][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.926703][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.936016][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.944556][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.003930][ T7047] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 282.011555][ T7047] SELinux: failed to load policy [ 282.507273][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.515963][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.147139][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 283.147157][ T36] audit: type=1326 audit(2000000143.010:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.176853][ T36] audit: type=1326 audit(2000000143.010:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.200886][ T36] audit: type=1326 audit(2000000143.010:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.202873][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.224704][ T36] audit: type=1326 audit(2000000143.010:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.234679][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.257925][ T36] audit: type=1326 audit(2000000143.010:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.287472][ T36] audit: type=1326 audit(2000000143.010:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.310942][ T36] audit: type=1326 audit(2000000143.010:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.334281][ T36] audit: type=1326 audit(2000000143.010:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.357830][ T36] audit: type=1326 audit(2000000143.010:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.381202][ T36] audit: type=1326 audit(2000000143.010:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd1b9bf79 code=0x7ffc0000 [ 283.577412][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.586013][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.732432][ T7138] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2049'. [ 283.802516][ T7144] ext4: Unknown parameter 'fuse' [ 284.055747][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.073049][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.084450][ T7169] rust_binder: 705: no such ref 2 [ 284.097462][ T7169] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 284.097483][ T7169] rust_binder: Read failure Err(EFAULT) in pid:705 [ 284.098309][ T7168] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 284.112037][ T7168] rust_binder: Read failure Err(EFAULT) in pid:705 [ 284.154027][ T371] usb 2-1: USB disconnect, device number 113 [ 284.176055][ T6025] bridge_slave_1: left allmulticast mode [ 284.181810][ T6025] bridge_slave_1: left promiscuous mode [ 284.187707][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.195628][ T6025] bridge_slave_0: left allmulticast mode [ 284.201334][ T6025] bridge_slave_0: left promiscuous mode [ 284.207392][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.293887][ T31] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 284.328261][ T6025] tipc: Disabling bearer [ 284.333615][ T6025] tipc: Left network mode [ 284.339263][ T6025] veth1_macvtap: left promiscuous mode [ 284.345004][ T6025] veth0_vlan: left promiscuous mode [ 284.427052][ T31] usb 6-1: device descriptor read/64, error -71 [ 284.505092][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.512170][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.519470][ T7174] bridge_slave_0: entered allmulticast mode [ 284.525656][ T7174] bridge_slave_0: entered promiscuous mode [ 284.532133][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.539455][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.546667][ T7174] bridge_slave_1: entered allmulticast mode [ 284.553023][ T7174] bridge_slave_1: entered promiscuous mode [ 284.595009][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.602045][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.609381][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.616435][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.626977][ T6025] ------------[ cut here ]------------ [ 284.632520][ T6025] WARNING: CPU: 0 PID: 6025 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.642831][ T6025] Modules linked in: [ 284.646802][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: kworker/u8:5 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 284.658590][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.668903][ T6025] Workqueue: netns cleanup_net [ 284.674085][ T6025] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 284.680112][ T6025] Code: e8 11 3c db fc 4b 83 3c 3e 00 75 19 e8 b5 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 a7 70 83 fc 49 83 c7 08 eb c9 e8 9c 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 284.689122][ T31] usb 6-1: device descriptor read/64, error -71 [ 284.700112][ T6025] RSP: 0018:ffffc900036d7b90 EFLAGS: 00010293 [ 284.712542][ T6025] RAX: ffffffff85042c74 RBX: ffff888122a93540 RCX: ffff8881301dcc00 [ 284.720593][ T6025] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888102b54000 [ 284.728681][ T6025] RBP: ffffc900036d7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 284.736748][ T6025] R10: dffffc0000000000 R11: fffff520006daf04 R12: dffffc0000000000 [ 284.744991][ T6025] R13: dffffc0000000000 R14: ffff888102b54000 R15: 0000000000000000 [ 284.752976][ T6025] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 284.762085][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.768714][ T6025] CR2: 00007f8f60660000 CR3: 000000013051a000 CR4: 00000000003526b0 [ 284.776718][ T6025] Call Trace: [ 284.780004][ T6025] [ 284.782950][ T6025] cleanup_net+0x6bd/0xc90 [ 284.787488][ T6025] ? __cfi_cleanup_net+0x10/0x10 [ 284.792430][ T6025] ? __schedule+0x1357/0x1ea0 [ 284.797146][ T6025] ? kick_pool+0xb9/0x550 [ 284.801486][ T6025] process_scheduled_works+0x7d4/0x1020 [ 284.807084][ T6025] worker_thread+0xc70/0x10b0 [ 284.811768][ T6025] ? __cfi_try_to_wake_up+0x10/0x10 [ 284.817017][ T6025] kthread+0x2c9/0x370 [ 284.821089][ T6025] ? __cfi_worker_thread+0x10/0x10 [ 284.826329][ T6025] ? __cfi_kthread+0x10/0x10 [ 284.830923][ T6025] ret_from_fork+0x67/0xa0 [ 284.836457][ T6025] ? __cfi_kthread+0x10/0x10 [ 284.841142][ T6025] ret_from_fork_asm+0x1a/0x30 [ 284.846090][ T6025] [ 284.849130][ T6025] ---[ end trace 0000000000000000 ]--- [ 284.890247][ T3534] raw-gadget.0 gadget.2: failed to queue disconnect event [ 284.899034][ T6025] ------------[ cut here ]------------ [ 284.904896][ T6025] WARNING: CPU: 0 PID: 6025 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 284.915304][ T6025] Modules linked in: [ 284.919214][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: kworker/u8:5 Tainted: G W syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 284.932916][ T6025] Tainted: [W]=WARN [ 284.936856][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.946955][ T6025] Workqueue: netns cleanup_net [ 284.951740][ T6025] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 284.957857][ T6025] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 52 70 83 fc 49 83 c7 08 eb c5 e8 47 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 70 83 fc 5b 41 5c 41 5e 41 [ 284.977603][ T6025] RSP: 0018:ffffc900036d7b90 EFLAGS: 00010293 [ 284.983696][ T6025] RAX: ffffffff85042cc9 RBX: ffff888102b54800 RCX: ffff8881301dcc00 [ 284.991740][ T6025] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888102b54810 [ 284.999749][ T6025] RBP: ffffc900036d7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 285.007783][ T6025] R10: dffffc0000000000 R11: fffff520006daf04 R12: dffffc0000000000 [ 285.015893][ T6025] R13: dffffc0000000000 R14: ffff888102b54000 R15: 0000000000000010 [ 285.023984][ T6025] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 285.032922][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.033938][ T31] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 285.039569][ T6025] CR2: 00007f8f60660000 CR3: 000000010c7d8000 CR4: 00000000003526b0 [ 285.055133][ T6025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.063124][ T6025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 285.071149][ T6025] Call Trace: [ 285.074458][ T6025] [ 285.077408][ T6025] cleanup_net+0x6bd/0xc90 [ 285.081830][ T6025] ? __cfi_cleanup_net+0x10/0x10 [ 285.086800][ T6025] ? __schedule+0x1357/0x1ea0 [ 285.091479][ T6025] ? kick_pool+0xb9/0x550 [ 285.095838][ T6025] process_scheduled_works+0x7d4/0x1020 [ 285.101394][ T6025] worker_thread+0xc70/0x10b0 [ 285.106126][ T6025] ? __cfi_try_to_wake_up+0x10/0x10 [ 285.111525][ T6025] kthread+0x2c9/0x370 [ 285.115705][ T6025] ? __cfi_worker_thread+0x10/0x10 [ 285.120832][ T6025] ? __cfi_kthread+0x10/0x10 [ 285.125475][ T6025] ret_from_fork+0x67/0xa0 [ 285.129895][ T6025] ? __cfi_kthread+0x10/0x10 [ 285.134495][ T6025] ret_from_fork_asm+0x1a/0x30 [ 285.139262][ T6025] [ 285.142263][ T6025] ---[ end trace 0000000000000000 ]--- [ 285.176363][ T6025] ------------[ cut here ]------------ [ 285.181864][ T6025] WARNING: CPU: 0 PID: 6025 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 [ 285.191487][ T6025] Modules linked in: [ 285.195443][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: kworker/u8:5 Tainted: G W syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 285.208776][ T6025] Tainted: [W]=WARN [ 285.212584][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.222665][ T6025] Workqueue: netns cleanup_net [ 285.227463][ T6025] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 285.233025][ T6025] Code: 3c 20 00 74 08 48 89 df e8 4f 05 f6 fc 48 8b 3b e8 e7 43 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 39 9e fc <0f> 0b e9 b0 fd ff ff e8 d6 39 9e fc 0f 0b e9 18 fe ff ff e8 ca 39 [ 285.252718][ T6025] RSP: 0018:ffffc900036d7b70 EFLAGS: 00010293 [ 285.258823][ T6025] RAX: ffffffff84e9632e RBX: ffff888122a93540 RCX: ffff8881301dcc00 [ 285.266833][ T6025] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881301dcc00 [ 285.274842][ T6025] RBP: ffffc900036d7b98 R08: ffffffff87d351c7 R09: 1ffffffff0fa6a38 [ 285.282822][ T6025] R10: dffffc0000000000 R11: fffffbfff0fa6a39 R12: 1ffffffff0fa6788 [ 285.290827][ T6025] R13: dffffc0000000000 R14: ffff888122a94140 R15: dffffc0000000000 [ 285.298842][ T6025] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 285.307819][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.314538][ T6025] CR2: 00007f8f60660000 CR3: 000000010c776000 CR4: 00000000003526b0 [ 285.322530][ T6025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.330557][ T6025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 285.338673][ T6025] Call Trace: [ 285.341966][ T6025] [ 285.345391][ T6025] xfrm_net_exit+0x31/0x80 [ 285.349835][ T6025] cleanup_net+0x6bd/0xc90 [ 285.354287][ T6025] ? __cfi_cleanup_net+0x10/0x10 [ 285.359234][ T6025] ? __schedule+0x1357/0x1ea0 [ 285.363994][ T6025] ? kick_pool+0xb9/0x550 [ 285.368332][ T6025] process_scheduled_works+0x7d4/0x1020 [ 285.374019][ T6025] worker_thread+0xc70/0x10b0 [ 285.378711][ T6025] ? __cfi_try_to_wake_up+0x10/0x10 [ 285.383957][ T6025] kthread+0x2c9/0x370 [ 285.388029][ T6025] ? __cfi_worker_thread+0x10/0x10 [ 285.393140][ T6025] ? __cfi_kthread+0x10/0x10 [ 285.397778][ T6025] ret_from_fork+0x67/0xa0 [ 285.402205][ T6025] ? __cfi_kthread+0x10/0x10 [ 285.406856][ T6025] ret_from_fork_asm+0x1a/0x30 [ 285.411819][ T6025] [ 285.414902][ T6025] ---[ end trace 0000000000000000 ]--- [ 285.497104][ T6025] bridge_slave_1: left allmulticast mode [ 285.502784][ T6025] bridge_slave_1: left promiscuous mode [ 285.519519][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.527200][ T6025] bridge_slave_0: left allmulticast mode [ 285.532856][ T6025] bridge_slave_0: left promiscuous mode [ 285.538620][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.746237][ T6025] veth1_macvtap: left promiscuous mode [ 285.751796][ T6025] veth0_vlan: left promiscuous mode [ 286.025970][ T6025] bridge_slave_1: left allmulticast mode [ 286.031794][ T6025] bridge_slave_1: left promiscuous mode [ 286.037456][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.045200][ T6025] bridge_slave_0: left allmulticast mode [ 286.050850][ T6025] bridge_slave_0: left promiscuous mode [ 286.056846][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.064545][ T6025] bridge_slave_1: left allmulticast mode [ 286.070185][ T6025] bridge_slave_1: left promiscuous mode [ 286.075936][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.083375][ T6025] bridge_slave_0: left allmulticast mode [ 286.089108][ T6025] bridge_slave_0: left promiscuous mode [ 286.094769][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.255704][ T6025] tipc: Disabling bearer [ 286.261049][ T6025] tipc: Left network mode [ 286.266274][ T6025] veth1_macvtap: left promiscuous mode [ 286.271832][ T6025] veth0_vlan: left promiscuous mode