last executing test programs: 6.813286332s ago: executing program 0 (id=77): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'wg1\x00', 0x3}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f00000000c0)={0x8, 0x1}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100)=0x3, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0xd0801, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000180)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)) pwrite64(r1, &(0x7f0000000200)="000c00a0e875f6c19410f0d35f0411a6f40a4be78816735d1aa64d25116d8a94152b29ffad95762ba33851840d228bc3a769c34000c1bb0be2be463e8a6ce83d713f28f80a34ee95cc9a5a0a8e8fe1dc429d6010830d343bc0daac2be01def314b5f75beee19d40a99695a5ecc65c836a9666ca6ad68ac0523ca4c9e2692a90168581ea7db3ff9b9acfbeba62d45ab47700a5ea7d4a7c447ef8247ebfe0f969b9efe0fc3fa4836516ffa1f976e457f0f83fd996fcaf51b834d7a", 0xba, 0x1000) sendto(r0, &(0x7f00000002c0)="67498de1b2dd968a169bd72b479ee22eeb3547e64c309e4225774b1539b992e4ad34dc747100bf29e42bc7545571a8b2c0712885e4b2b584eed33239fdf131294479060b7cb1b0f944927f0412bed43a1fe7f7cc85829d51f69faf0a8d779366eee544d8d9344f146bd45f0eda8305366cea5045545553a1696e675ed94c6b16fe0d9ec3", 0x84, 0x4000001, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000380)={0x1e, 0x7, 0x1, {0x15, '/proc/self/net/pfkey\x00'}}, 0x1e) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) write$P9_RGETLOCK(r1, &(0x7f0000000440)={0x33, 0x37, 0x1, {0x2, 0xffffffffffffffff, 0x8, r2, 0x15, '/proc/self/net/pfkey\x00'}}, 0x33) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000004c0)={0x2d0a, 0x7fff, 0xf04, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)=[{0x7, 0x1ff, 0xf0}, {0x0, 0xfe, 0x1661}, {0x8, 0x100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x6, 0x101, 0x8000000000000001}) readv(r3, &(0x7f0000001680)=[{&(0x7f0000000540)=""/101, 0x65}, {&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/124, 0x7c}], 0x4) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f00000016c0)) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000001740)={0x7, 0x7b, 0x2}, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000002580)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSETELEM={0xd34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xd14, 0x3, 0x0, 0x1, [{0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x1ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "94c73b3b47b6093704a3e9caef6e26c0b4d2ec0582e620a845745d0ef69d64ec4596bf3d4d1a2c66ab5f9f442a8cc5d6b818c3a5f4dc93117be86d7dd9fe5f528f726bda3e17b19c422b08d7d9f191e675757166ad9429614d283234a9601591050f41affca44e5e806d3edf8f3ccf8f4614acc410ce9d15e7fab113b8ab0edad1f0ea3ddc2713f41535c558ac8db415fb482cf85cc786789820d9a72a784b35ee28acda4c54a3ef8b40889197bd1a09087b81d41f654791ee7e6964c02b3ff6929b429ad81eddb347d3aa1995785b75d28df4e595e245f68b27e9ee7885ea7d5c3d293cb9c7dab79e3b35c4dfce0886218202976856584b"}, @NFTA_DATA_VALUE={0xa9, 0x1, "75381e50a0e8f838d94950fb8964c241857ff6a265ff6cd34a6620ca828a166b30474016b7245a838d9c17b042bbbbcc1e7b5eafa75ae9613ef99101d37acfb14fdd28d8ed25c119c14b5324dcc62bc6b068478c2fb5fb37aa155d130f420f04d9c9787069c8a57a97005e4c9bc1645ae6d1a4177c3dec31044f8805a9b1d15b5b7ff78d3c238feaa02016bf2646c70517b7f90e086f457600e6de453377f0da572f9bbbc8"}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "0ac3578088dee2503c4d41652da3f41a983a4c04294e2a8030661fd060abed247912f974779f5232430c112791d9c130930f8e0ece986cd1ba96946a1adfd00a304aa058a98678b04afc61c12a2822d2039930daffbb391e3ec9621f0a78f2e558f4ead163b52dcc7cd0ab6a004e6c580dd1e094be452f82c7776b046eafb847deffb136c58e9c6576ebaec623dd74bb5b925ec8472b676354c9581998afaf2849d43e97321497ba3231ff22fb1c08833cff442757a72a65e84687f6134212e61d0d6881c0cca40d21760fa0d8f1cc7d599df30c0594e7716322e4e26db6805c8765b8fa63"}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "78d960a507baf8a9cf8bd605c3a1ec04c33b78c9645896e3673960213d3bb6a71fba6b1f874a47889a5f098105cdb4750884b35049f5bcd0136513b5e79582344bb66b8e793bd1f46be27e05a45489"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x48, 0x1, "a6db0ebd3d2b961229b182a219858d745bec84e0f44ac06e4f40e54a67c5f5909e33591be47d310b715622292d12424b393d0dd5c6f1a7a0373e673fbdf7d9deaaab64af"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "7261bafad6048c9ca466e6b7477496ab0be29676e152edee72a6f502b840919605552a986e509344978a5d3e8cd2dda459ac127d4f295869b95600ef2e6af1df6de3fd92e3e890888ba16da1d67880655844015c41fd11fe5cb349d9c59d995e7480dc054bdee1fe7f86a22b169e65953c99aa85724d1468f6b5ef51ea929965850d9150a8f05d387dc41ad8205d350f050e09768ceae842a12769558b5e4b0edaa74db72afc843bc021fbd186e9ece1c4b83521da63d7d1e89eb4f9848c148414f299fa9e853f05450e002e0769eb98e01e05fe4cf0f42811169ab865ab1295b8d4ad63e696818a485178f4e81621d9f8ddde1ed046c4dead"}]}, @NFTA_SET_ELEM_KEY_END={0x39c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "58b2ae5e63588d4fb4a0068f79cfe920b2d16867e6e65f138fd7ae48ea6689bb4148456e9464808c97b7590d73f52a5452488c9ae8d86cf0e5e7cedb8e2c5a47b8f1dfcf6f4881899214bfaac3eb902d8b4af6c25237f7bd6e3ddad08fafcd3c9a7a681a39f0806504b478720be1ca058d35628225e03ef2a3f0ff"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "1f84d964501496f68f03261961d59e1e1529db2620bea26c5c721a22922f1a070c301392fe1bbbbaaad4729a1a7a330439733190580ac707dda39dd1fd4ba4dd42e1c64bc3cf6c4ce82a0987feb94f07f8e5246631fe42c6a0992d9d50ce845df0586451645d5594c6fb2fe714fe6d9100f0826dc6f99c183f226a0d320c7ee5673118e79a2839ee3e3104e9e6b22625af8e8868dac02ff338a6954b7ec836793956217af90d821fcac5819458b7af73e07cad66dc702b88d15e06057846c67087"}, @NFTA_DATA_VALUE={0xe7, 0x1, "5a503b7840219998ad979022eb501d9248a27cf76e861c34d6affdac8f8ec0c580bacd82d290140585fc76a125d892658d13170025745ca31b12a0b65447a9fb2cec9c8fad812353d94e096d1c06777deb82ed4e34f40923554811ad17e742b973f3455efbe64a643ce26f08e47a9dd0b43f37e8f7af0d142da2bfb236d5660af50e468f35b21c51a32932d5ee5cda6a25b1943c9e3fd267b3ed8e67aeaf837637aeb6bb06952eada22e371d42ff49413860c0de6cb2d97ae8eab29ee0d01e86eccce028fa8701f59e98389a7fcd81884c7e15e04cd34c3ce166f8d3f7fd3f41bb8aef"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "bb50713559a23a2263ee51ff18d3f4f135ca0024bd24c664e444d27ae6ea3afdd76576545c4992ffe98dc56d421fd821e73a3ce5e890309ada56e6d48ec89f51e55ab6c5551cff2737097b77c386bd8898172932494eacc2a47f15dd702703972503f2d0f928d7ae9e74ddf07ddcc9b5886c51f0d3a9c9d84d36af35b9d241c91b5eba04ec0cd35bf9e7e6ddb35c1b42f7ea9726638f69b226"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000004}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "ef5c6bd10469c42a78c044d96c1d259b93ac978a643c11d04213561ee5de5a44c8d3ee2b7a95209e9d81de"}, @NFTA_DATA_VALUE={0xab, 0x1, "9832398f8ae09cca25c5e31808c4bf989bec1729db2644b82e6f4424f4ca0b06fb1480730f52185ef58c34aa1e9f644298ce086a554de038ba5f7f06b326dcb06ed541c32f390e886b77b49810be227e1fe5ff1a0073d3915bf0c7014da04c81d57801c5858e0f41fc5f0a12ff7f7a51b2e5e175bf93876fbc42826bb31a4b4837d85c0e36c777123f0fbec69e8461e6253aaea37340c12bb6aa927b100261ab57162658320437"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x68}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "1642bad966776d8514f2dd28e6e760996815da5211b0721bd8b00e5514b3e31ba56c29b4b67bc080fa7e838b444b2cd3867ebf9a3dfca76942913edbe16dc21f791f08f60c027b51d309b48857b4519abaa1ebb20b79b7a65f783e217d715df5d2b4d8b841e41bd18e9647fc9b5c4688325f89d51c077d79a76860ef73c426c6a530ea6540fa1de2c23c2db80a0791206d9d6ca0e76d3bbcb71821647653"}, @NFTA_DATA_VALUE={0x22, 0x1, "df77bb5a7992f719c614b85df1c26afdd4985579aad9500799de26165048"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9b, 0x1, "9c41479fc36a8feeef40dd2ad00f8d845ff73653ac70368589a9e593ac1b8ace2b15518f95b3d28e532a29c9af1a3a86dd24c9892bdcc916edd0407c965331e68cc5627dd3e8b669e66e675b0432191d7a601a1b9550c56817ded277113e2e1e7aa639413e57f0a969e7bf801e0823d74fccea7d98b023b93bb18bf3684b838b2ca119d2b15c9cfe6357f932edda7b3ceb1581cc245b57"}]}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "c32f8363a897750ae36306185878c9352a328d639a2617546930d50cc65318a7a80a4c5f145486ae82312e73512603657eb201c52022edfd3fec4688ea543ca9d374bcd262b16fc0a99fa8e75c29a8726d7403aef90737d94fdfd8fbc526252e5d76a030d754f66edf35"}]}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd5c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f00000025c0)={r4, 0x0, 0x5, 0x78, 0x96d, 0x4}) r5 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000002600)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x7, 0x2, 0x80000001, 0x6, 0x2]}, &(0x7f0000002680)=0x78) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000026c0)=0x100) pipe2$9p(&(0x7f0000002700)={0xffffffffffffffff}, 0x80880) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000002740)) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000027c0)={0x41, 0x1, 0x3}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000002800)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) tee(r5, r8, 0x3, 0x8) 6.812812152s ago: executing program 0 (id=78): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000180)={&(0x7f0000000040)=0xac, 0x8, &(0x7f0000000080)=[{}], &(0x7f0000000140)}) (async) sendmmsg$inet(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x18}}], 0x2, 0x0) 6.805917793s ago: executing program 0 (id=79): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) inotify_add_watch(r1, &(0x7f0000005780)='./file0\x00', 0x44000201) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r3 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r4, 0xcfa3e000) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @remote}, 0x10, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x11c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4084}, 0x10000080) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/141, 0x8d}], 0x1}, 0x40012021) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6.736194125s ago: executing program 0 (id=80): io_setup(0xe9b6, &(0x7f0000000380)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x40001fe) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40002, 0x0) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000400)="c4462af28a81eade35859af237a05e2e31bb643502f9145ed5b4b5db80730e390adb3a1e6f4277efbc1d8a0a57ab024b4f", 0x31, 0x101}, &(0x7f0000000480)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005a001f001007f4b9002304000a04f51108000500020100020800038005004000", 0x24) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000180)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="4028a9000000a90e0955ce3c80cda0e0f25de60d9fda877fac2318bf7753f92491370481603560c76a4b287ee62c46bda1cf4caac2b3f9ffd02daa9ef2ee8c6ba534bcfa4c6b0fdb2d68469e98d5c47420f7eba2bfb81634fd86a0cde26ed23220afe501808786d51d99915d66ad8b51bcd70b7f1cef9def23b6758437fd049e4f98a4271afc06202feb0cea00d4b5956197d683774d17088d838dffc7b13b6fb1e75be366f71494342eaaedbada752d99a9a6"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x40, 0x6, 0xb5, "d444f18dc45d5d2052bab431e6b6b149223aa8cb8fa2c8f5f3cdb028b09f06c9fe98228e32d8f4afd52df622b9914d71e3c0a0164dc165bc967f5bb547c3945e9becb275d2d5a8d9b8970be43f2a3f61921127f8ad4ba04b55673945d0c15ceb1cc5de212f4243f923c026fef39fd8869d70fec6fad3cd691ac0a96216b0fc4bf0c5e4cbc3469b699bc1c63bb41fa50118f5e3148efc922c7ac7d7db627120ec8ab3d7d5ecad53a94472a41350c4c45a6ab7f99c17"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}}) 5.039615636s ago: executing program 2 (id=87): fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0xa668814b04239fa4, 0x2, 0x41000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "42a2d4bd30a531b27d636afb4cfd94fa"}) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 4.995033588s ago: executing program 2 (id=88): syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYRES64], 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902870003010430010904000000010100000a2401ff000f0201020524040407082404040667decb0904010000010200000904010101010200000c240201fa0306046b7f59b90905010900040c040707250182010100090402000001020000090402010101022000082402010701010607240101f30000090582090004"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f00000011c0)) sendto$packet(r1, &(0x7f0000000240)="6d970eb1ac73ba5863017cea1998c5e9777fdeae55a7d8018aa689587f8421972a34d230174b170b", 0x28, 0x4000841, &(0x7f0000000340)={0x11, 0x5, r2, 0x1, 0x89, 0x6, @local}, 0x14) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) write$khugepaged_scan(r4, &(0x7f0000000000), 0x8) syz_usb_connect$midi(0x5, 0xc8, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008732b0d004000010203010902b600010108f0f9090400000701030001072401fe03070009050a04ff03ea10011125010da10c27127cb05bafff37f77c2b09050e101000050a0b07250103c5218e09050e04400008f07f0a2501064bbce6b6a8a109088000ff03a90d250d250109665627bd70e309bfa209050e00000200f2f00a250106a01faf9f9877090580084000fa98011325010f5aa8b5a0fe5ece336753153d7dfdc50905000c10009c0a251225e50df863c005d291b5a6725ed4cc6511"], &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x9, 0x15, 0x3, 0xff, 0x9}, 0x46, &(0x7f0000000040)={0x5, 0xf, 0x46, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1, 0x9, 0x2, 0x918}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x6, 0x19, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x0, 0x9, 0x4, 0x7f}, @ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x1000007, 0xf00, 0x0, [0xff000f, 0x3f30, 0x0, 0xffc09f, 0x7f80c0, 0xffff00]}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x102, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, {0xb2, &(0x7f0000000540)=@string={0xb2, 0x3, "bcd1ce9b60a1902760698a280d7000e1e5d1bef78b3108128c5c51edf2dfd9297a1f24dcb205d6d6b788c238958c566350609d61838561872f8c2a7dd1c073e2c060c88f8f84b5002751e705cfa9890e893f2d2e38556754f3cd831454e0420051228a8267dd2e85e817f7360252b33c21411f9bb2bd37b4f506a93c8c77ad3159b4337f0b0d37459ce6bc3cc00e525bdf11aa5ba250bcb2cad2a6e9cb9bd4618c688f5cb91cd92cecc6111a24f21a95"}}]}) 4.397427986s ago: executing program 3 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/231, 0xe7, 0x1, &(0x7f0000000100)=""/4096, 0x1000}, &(0x7f0000001140)=0x40) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000001180)="93ed23b9ebdffbdffc8bd76fa145445b7c4817beba9fe60e73e670ecaa8470e3d386df9ce5e6f3dc21fbc96fd63e9dc0fa78da06a47d4d2912db00285d9e684950b81123328aba2e5189a6112d77a46d184074a31691d968deafc65f", 0x5c}, {&(0x7f0000001200)="0a799e5a9beee7e6f4cca36dce788c4e1cc49069bbd8efe8cdd04cd3e957223fc0e7b20bb4f8b581e53cb990158cdb838457b988cdf6449feaa4c735fad785608cde07c7818418f66ed84e0f7be3f820776055fbb0671ee9cf01f2a8e7a7fd4d4e90b044bfb42eca98ce2627b649a222dab6152fe3b148b7212470bd47753b88b5f7992c8c4441312f61618f71845d1acc6948e6367f093edb4a13455b1020f993523a1a79a8833457a057500e8576a35d117100751b630ed65b1515b0543f19bdc82b07d2d9ba36df09cfa0", 0xcc}, {&(0x7f0000001300)="ac3df07f11ccc2d97a7b983a6d7dae8eedfca0f6eacd6c0bb0d376398264632d51040fc8d97d77df8ccc56090d1155f67f4979095aba71f123ae9f80d5a1aec43c5d5f52bea9c147a5fdb6e23e3b43cadd7696f1062ad39747238ad83dd070603d15e1eca36fe5886cc9510b6ea09894e780b324dab530d7254a00835f592010f35a3be472d2ef07c74dd632701c0668878b49f7099f", 0x96}, {&(0x7f00000013c0)="0dfe9de1441f141d999c80ea0f30e622aa306d8d8aa6a535402de6eb402b8b508bfb1276a35031bf37b8885162451c1c00747878f1c2cbb6518f40137c55e6939556349726f0fa8960f3a3bfe033951b468954d5d543c698f0c29bc392bea10276d6e8e798f79064b5b7cc295d869aefd9cd474761a73f40e712c68e042fa1b74424bae00bb7956fc9796205ddd0b183722ec2ba479bac8ae5f23382c55d73bf89582d79af579a51fb9291c8155957009695106c7f261ea70fe33eefa48fb523c7f980511479e08bd8ee70f8aba721c159fe8b019b6ed8aa", 0xd8}], 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001500)=0x0) r2 = socket$inet6(0xa, 0x4, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000001540)={0x1, 'wlan0\x00', {}, 0x8}) r3 = syz_open_procfs(r1, &(0x7f0000001580)='net/ip_tables_matches\x00') pipe2(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r6 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x181e9a5f0b993b6a, 0x1010, r3, 0x20000000) syz_ublk_setup_io_uring(0x4df7, &(0x7f0000001600)={0x0, 0xb617, 0x40, 0x2, 0x269, 0x0, r3}, &(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) syz_ublk_setup_io_uring(0x3840, &(0x7f0000001740)={0x0, 0xc5cf, 0x800, 0x3, 0x2da, 0x0, r3}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)=0x0) r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000018c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000001940)={0x2e, 0x1f, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001900)=@new_dev={0x4, 0xcc0, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x105}}}, &(0x7f00000019c0)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001a00)=0x10) getsockname$unix(r5, &(0x7f0000001a40)=@abs, &(0x7f0000001ac0)=0x6e) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001b00)={'NETMAP\x00'}, &(0x7f0000001b40)=0x1e) fsetxattr$security_selinux(r11, &(0x7f0000001b80), &(0x7f0000001bc0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x1) r12 = syz_usb_connect$cdc_ncm(0x4, 0x94, &(0x7f0000001c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0xff, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f133"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x345b, 0x0, 0x80}, {0x6, 0x24, 0x1a, 0x33, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x80, 0x8}, @country_functional={0xa, 0x24, 0x7, 0x0, 0xec6d, [0x4, 0xb56]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xe, 0xe, 0x7, 0x3, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x3, 0x35}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf1, 0x40, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfe, 0x8, 0x2d}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x9, 0xd}}}}}}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x310, 0x46, 0x6, 0x1, 0x8, 0x2}, 0xd1, &(0x7f0000001d00)={0x5, 0xf, 0xd1, 0x6, [@generic={0x87, 0x10, 0xa, "45238dd1df0c4426900b20d913a2ddef39a084e8d4b876751f54ee45ac61304b33f67eef76c1da15b106c2bc0f385edb8cb927dcbd1192ab368cd1512db44433cf2354c737830d7265b84383bfca7aa6a435bfb58f60dc0152c9b432e2da55a4af75f23fbf96a20710a5610b7956ef9d00ea685c2c08a8d137a6bf8cd29c66bfd534e96a"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x1, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xff, 0x1, 0x0, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "1a65faad1e460a8e0a789f3e29b13c4d"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0xf, 0x4, [0x60, 0xff0f, 0x0]}]}, 0x5, [{0x91, &(0x7f0000001e00)=@string={0x91, 0x3, "85df6169f5148c80f41c186b1f9c5b92b4b6d1bbb37f3685772175d927f2608f8bdebf8b27edb1706f0da3941638de49525a45d959af8711cb0238eb2ddfaf21a9aca46e954f93bd5279dc3af75d79c6935fb2d635f4e095dcf9e7241847fdb7c21b64923437ee6c52f975e40aaa5bb1c238c93e141ba4d5bb1c7caac01dffb50f267cff09a4e55ef99057f90149d9"}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x860}}, {0x42, &(0x7f0000001f00)=@string={0x42, 0x3, "4f787dea6359e881f2a8ea6af53d8009e2a4f9382bba27408b1cf8cc252c359dba6b93adf7169b3a869171bd16ea1e92992dd4f1317ba4ed44becba322713a81"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x40b}}, {0x2d, &(0x7f0000001fc0)=@string={0x2d, 0x3, "2b8c5b834afc4e703df5d4623aa0bc89129a29f302ca8d83073fd3b9badcb92cdbdb1c036daa061d6657a9"}}]}) syz_usb_control_io$cdc_ncm(r12, &(0x7f00000021c0)={0x14, &(0x7f0000002080)={0x20, 0x27, 0xf4, {0xf4, 0x31, "95c6221374b0c2f9c2fbaad604aa33aed1d34ee2bca20322838cfab85e0461089668e8e5ed58bc60c8ebf141cde03876bfc303d8f0219d31022fe08739f818f559f4bf5b3c812fa6d9a7a7d9b915e419c416124411016f6824c941fdb8d3de2b498e729372bc06e507ed25a88647cc3b8cdb414c1ecec541638460edd21c3d5f38a09070123e754080dbf022c582561c83033c536ee05eaca99fbdf50677837c43699297ab060eb67358f173610eb9a4eeded07e94045a66bbccff8289b7810cbe096e0c2f7d093da4be554fcd9fe1b97a7e490d2e9c967ebe13e3bc66644679cfe00921f2774ffaa0fd74485db729834171"}}, &(0x7f0000002180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002400)={0x44, &(0x7f0000002200)={0x0, 0x9, 0x24, "11d4d40b368871524a284be55efe3f9f748a87129b429a37e88f890e62f0433a2644ddcc"}, &(0x7f0000002240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002280)={0x0, 0x8, 0x1}, &(0x7f00000022c0)={0x20, 0x80, 0x1c, {0xaa8f, 0x4, 0xd, 0xac29, 0x0, 0xb31, 0x556, 0x4, 0xd, 0x7fff, 0x8, 0x5}}, &(0x7f0000002300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000002340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002380)={0x20, 0x87, 0x2, 0x40}, &(0x7f00000023c0)={0x20, 0x89, 0x2}}) ioctl$FICLONE(r5, 0x40049409, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002500)={'syztnl2\x00', &(0x7f0000002480)={'syztnl2\x00', 0x0, 0x2f, 0x8b, 0x5, 0x2, 0x8, @local, @local, 0x20, 0x40, 0x9, 0x10}}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000002540)={@loopback, @loopback, r13}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000002680)={0x14, &(0x7f0000002580)={0x40, 0x9, 0x96, {0x96, 0x23, "73ec3334aecabc76fc7ada00fc4a9297a3eee63faa1c5143103bddeb2771df5559442554d619119bbb7298b90744a0c3b68d96520b701fb5f8dbaf8ea175258ff889b5622c0bec806484ec667a4c67137471ef99a03c352f574cc82244d9a066b6808fbb4ce83298020a530bfcff270a7bb00aba0cb8bcfa1b93486519999d8a1f5c99d52d61e1108351db68a75c33a8d413fcfa"}}, &(0x7f0000002640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002900)={0x44, &(0x7f00000026c0)={0x20, 0x15, 0x74, "0c10d57f61f6da5be65cdb74d4389c2acb9a3c989f02ae99099273631d3dde9865015b2f5e7eee1a01d8af336ea45985d294c7b56681509c59f3a3d442337e0895e60fd4115445b2776776e9174512c4d923587410d91885c3027a32525b8e74dd580dc7f12655f1985d6b28409b54aa74a486f9"}, &(0x7f0000002740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002780)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000027c0)={0x20, 0x80, 0x1c, {0xa2e, 0x3, 0x6, 0x5, 0x101, 0x8, 0x2, 0xb6, 0x8, 0x0, 0x3, 0x401}}, &(0x7f0000002800)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000002840)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002880)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000028c0)={0x20, 0x89, 0x2, 0x1}}) connect$inet6(r0, &(0x7f0000002980)={0xa, 0x4e21, 0x2c5c, @loopback, 0xffffd0d1}, 0x1c) pipe2(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r14, 0x4068aea3, &(0x7f0000002a00)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r3, 0xe40a1000) socket$nl_route(0x10, 0x3, 0x0) 3.92389977s ago: executing program 3 (id=98): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @loopback}, {0x1, @local}, 0x50, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_batadv\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="c74424009e3e0000c744240200000000c7442406000000000f011c240f015f040f01c3b85dbf9cd10f23c80f21f8350c00d0000f23f866bad00466b80c0066ef0f070f01ddc4c231bef8c4e269a9850400000066b80f000f00d0", 0x5a}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.861262642s ago: executing program 3 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xe4, 0x7, 0xfffc, r0, 0x0, 0x0, 0x600}]) 3.6097168s ago: executing program 0 (id=100): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x10, r1, 0x8dd8f000) setresuid(0xee01, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x146) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000006900150000000008ffffffff0a08"], 0x18}], 0x1}, 0x8000) write$binfmt_elf64(r5, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x324) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan0\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x20) fallocate(r10, 0x20, 0x1, 0x4) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r11, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5300080b0102012130010904000000010130000a24010f3b00080000000d240706050a0000000700000013240302ea03020604b551a62d94065e57ff0711240a05050300000000000000000000000904010000010230000904010101010230000905010920000308d80a2525020000002dce000904b402000001023000090402010101023000090582094000a010080a2525ff07000009720b"], 0x0) 2.982351999s ago: executing program 3 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0xe, 0x4, "939e69344771b5cf27ba941abbcb8d7c5b94b3fd41b6bf956bef248b7fe7cfb63152c982bf982560e319cf3b933a4d7dbc54a8adfff45805000fd22e8ead92a6", "91c18c9983db595203eabf0bee5e25fbdffc535c9db537570e0e5b9ec79be268404f33e1eb6fb6514ef08b3e13a2ac97667fba5360ce214035f49231f4354611", "8a06ccbab7230947194df1693dd9a1e6dcec9eec9ef99dc74e27568a57cf697a", [0x5, 0x3]}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.931175651s ago: executing program 3 (id=106): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0x6, 0x6, 0x3, 0xbc, 0x5, 0xa, 0x1, 0x44, 0x9, 0x3, 0x100}, {0xb, 0xa6f2, 0x8, 0x8, 0x8, 0xf7, 0x44, 0xd, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x1a, 0x3, 0x15, 0x0, 0x7, 0x7}], 0xfffffffd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.838089943s ago: executing program 3 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0xa042, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x2, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x41}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000000) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) close(0x3) fchmodat(r1, &(0x7f0000000700)='./file0\x00', 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) dup3(r1, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) fcntl$setflags(r0, 0x2, 0x1) r4 = syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0x9, 0xb4, {0xb4, 0xb, "a0226d210f8fe7d765b0548afdb95de9ab3ec935744357eddff85ff43d0703b98c8d3b0d21ad7b975d50f03b6d9254dfa6e565604121da64cbf26795077e3005e2ddce6fa0fe13218102fd0096e4c435db58390118ec5462afef6575109b0f32161a4d576c3f61a4ea2ae60e56323f37640837cd50dbb530273fd3c5637733d496421a42a24bd6fd0063e2283309a774e6f8372532cf3440379a043eb8cceff97eb97083c503f8b12bb3e3c04620a63c243a"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="0003df80ec6b3efff35b"], &(0x7f0000000140)=ANY=[@ANYBLOB="000f35000000050f350005b82f7b4ae60a1003000b005e0b7b090a1003020c00050000000a100302030005097301071002000cff7f0b10010cc800"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0xae, 0x8, "95f133a7", "704734e9"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0xfc, 0x8, 0x3, 0x10, 0x8001}}}, &(0x7f0000000640)={0x84, &(0x7f0000000780)={0x40, 0x15, 0x2b, "1204fddb6ede4292485baf05e59af52ceb13e91b4e6153fe9a3917f58cd45d6ee628785b4020e3079e7b88"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, '8m'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000500)={0x40, 0x19, 0x2, 'Fs'}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000005c0)={0x40, 0x1e, 0x1}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1}}) 2.131495875s ago: executing program 0 (id=109): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000300)={0x0, 0x145d, 0x100, 0x201, 0x270}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8cb4, 0x4, 0x2, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a5f, 0x2000, 0x2, 0x2ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x143802, 0x0) r7 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) r9 = syz_ublk_setup_io_uring(0x3cf1, &(0x7f0000000040)={0x0, 0x5ea6, 0x8000, 0x3, 0x38f}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000002c0)) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000200)={0x0, 0x8cec, 0x20, 0x1, 0xb0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b5, 0x20400, 0x8000001, 0x339}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0xc493657c96276ca0, 0x2, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab5f, 0x200, 0x3, 0x102ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x203a09, 0x10, 0x2, 0x23b, 0x0, r9}}], 0x4, &(0x7f0000001540)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000b40)={'bridge_slave_0\x00', &(0x7f0000000a80)=@ethtool_perm_addr={0x20, 0x80, "3241b4e7fe9ead0ae4b568f38dac805b567fbe7ed0fe3099f9383fad246a70d427e7d7c0cff106c4971f552ba06c7d42b5cfb734e1325f08274d4916c2e3c9221f0437d58b1126f289de91f56a499e301062b3c8a6f9c5683779f07443bce7fa828cf9fd81bf4bd9ce142e8308a807a272bb887859c69f3fd02df5ef44c136ab"}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(r11, 0xc0207508, &(0x7f0000000380)={r7, 0xffff, 0x70, &(0x7f0000000300)={0x70, 0xa, {0x1b, 0xa, 0xa, 0x8, 0xf8, 0x28, 0x3572, 0xfffffffffffffff7, 0x7500}, {0x7, 0x6, 0x4, 0x9}, {0x1, 0x8, 0x7, 0x3}, {0x9, 0xe, 0xe2c}}}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000400)={0x20, 0xf, 0x90, {0x90, 0xc, "ffac0d3c0b2276d2c1e35de21a08537c68e9758a242827dd04b37e51e5161d62d6804a75ac933161d6b1631396adfafd3055b45f600a6cc1748984495cffe64b093dfdddd67d8cbb9d98a7bb280c660a41f6f2e248d776188ce748a26d2cb0033914406e38fc21b9792d6b7697ce790d411f5cdadd59da421b6798420e5c5e48c8158a8596c28646038736ad99c6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "a0aaa0d0bab771b12c4f396e518c74ed8d197f366b6162be6df1bc9b"}}, &(0x7f0000000500)={0x0, 0x22, 0xf, {[@local=@item_012={0x0, 0x2, 0x5}, @global=@item_4={0x3, 0x1, 0x4, "0688b977"}, @main=@item_4={0x3, 0x0, 0xc, "8668beb8"}, @global, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xb, "c8"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5e, 0x1, {0x22, 0x277}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x40, 0x1, 0x64, "505bc55725e0dc0a759b51a2b1548d4420ec893da38e0f6fae50191fb37089e72c6852c0648cf11a220d3f0e419677fbb6b9cc97f097b4f9a09e1b980ae66e28ab9177e4b94d9fcda49c06f6b59614d09534dee650853820547b140bf71b4ba9304bf2ad"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xc5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x1, 0xa, "dc08d0ffb49081f1a647"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x6}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x1f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xfd}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.941849301s ago: executing program 2 (id=110): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x8, &(0x7f0000000000)) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) listen(r0, 0x73d) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 1.941239281s ago: executing program 2 (id=111): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8936, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000029c0)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2d, 0x1, 0x42100000, 0xf7b5, 0xfff7, 0x4, 0x2, 0x0, 0x0, 0x8, 0x5e72}}, 0x50) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$midi(0x1, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x499, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [@midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x1, 0x5, [{0x2, 0x3}, {0xff, 0x92}, {0x8, 0x2}, {0x9, 0x9}, {0xb, 0x8}], 0xf4}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x3, 0xbe, 0x4, [{0x6, 0x3}, {0x0, 0xf}, {0x8f}, {0x3, 0x34}], 0x4}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x5, 0x48, 0x6, {0x6, 0x25, 0x1, 0x2, "c7d3"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6, 0x10, 0x80}, 0x55, &(0x7f0000000100)={0x5, 0xf, 0x55, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x8, 0x1000}, @ssp_cap={0x18, 0x10, 0xa, 0xa5, 0x3, 0x8, 0x8708, 0x1, [0xff0030, 0xc0, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "aa6dd751aa55159d999c5a360026e76c"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0d47bd24000000001e800000006000"}, @ptm_cap={0x3}]}, 0x3, [{0x12, &(0x7f0000000180)=ANY=[]}, {0xc7, &(0x7f0000000440)=@string={0xc7, 0x3, "c94ec125b25774b9d2b8432a1f9832b1839cc4a8d864f00239441e3758ce7755b40c8b90794f790f24eca6f03df2df59a4194873fa70d6e583e02feb567b796ee80c0a1237c81795f838111afc7114a37673ceffeef7e1b098f856896e09815037199885ad22de53674394733f9c795555d75dcfebd96adff4e382b3a1bc2df565e8abdd9ac57f308aabc4109ef13feca1759691a1cdcd8428f1e37e38938f47d6133e06ddca01ff22e85f06e2ea39cd854073e1a0b85669d240ba07a303943e336fe032b1"}}, {0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "51b504141eee8b2756c5aa0d75d366dc24cfc342848b6fbe1db2"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) 757.861927ms ago: executing program 1 (id=114): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0xe, 0x4, "939e69344771b5cf27ba941abbcb8d7c5b94b3fd41b6bf956bef248b7fe7cfb63152c982bf982560e319cf3b933a4d7dbc54a8adfff45805000fd22e8ead92a6", "91c18c9983db595203eabf0bee5e25fbdffc535c9db537570e0e5b9ec79be268404f33e1eb6fb6514ef08b3e13a2ac97667fba5360ce214035f49231f4354611", "8a06ccbab7230947194df1693dd9a1e6dcec9eec9ef99dc74e27568a57cf697a", [0x5, 0x3]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 756.280427ms ago: executing program 1 (id=115): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async, rerun: 32) socket$inet6(0xa, 0x3, 0x3c) (rerun: 32) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x39, r2}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) (async) ioctl(r4, 0x8916, &(0x7f0000000000)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5}) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0x4020aeb2, &(0x7f0000000100)={0x56}) (async, rerun: 32) mknod$loop(&(0x7f0000000440)='./file0\x00', 0x2000, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) getsockopt$inet6_tcp_int(r8, 0x6, 0x4, 0x0, &(0x7f0000000040)) (async, rerun: 32) r9 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x294}) (async) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ace000/0x2000)=nil, &(0x7f000018b000/0x3000)=nil, 0x2000, 0x0, 0x6040000}) 756.097637ms ago: executing program 1 (id=116): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1, &(0x7f0000002a80)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1}}], 0x3, 0x400122a0, 0x0) recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000000), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000500)=""/128, 0x80}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x10103) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 641.66836ms ago: executing program 1 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(r0, r0, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r1, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0), 0x82e80, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x22, 0x2, "cfa7"}, 0x20, 0x0) (async) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000900)={0x1, 0x0, {0x21, 0x3, 0x12, 0x7, 0x1, 0x74, 0x1, 0xaa}}) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x11000) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f4, 0x0, 0x7ff}]}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x7}, "a69446735fa49a61", "db38707c7fceca7cb84af14bb4abb68b", "1fbae6e0", "5a42b899c342e114"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f00000000c0)=0x3, 0x4) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x10, 0x0, 0x100, 0x12}}) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mmap(&(0x7f0000875000/0x3000)=nil, 0x3000, 0x4, 0x4010, r1, 0x9bab6000) (async) write$binfmt_script(r7, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0xc000}) 583.524222ms ago: executing program 1 (id=118): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x97f5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x811}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x4, 0x7}]}, 0x10) 529.755264ms ago: executing program 1 (id=119): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ff"], 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x3}, 0x10) 49.789528ms ago: executing program 2 (id=120): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') chdir(&(0x7f00000001c0)='./bus\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x84800, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0x1029092, &(0x7f0000000080)={[], [{@pcr={'pcr', 0x3d, 0x2f}}]}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'pimreg\x00', 0x91}) 0s ago: executing program 2 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x4004) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x30}}, 0x4040) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0xf, 0xa01, 0x0, 0x0, {0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="9a0078000000000f01ca0d013bdd1ab9770b00000f3266baf80cb8aec00080ef66bafc0c66b8000066efb8000000800f23d80f21f835400000300f23f8b9800000c00f3235001000000f30c4c2bdde5e9fb805000000b9070000000f01c1", 0x5e}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.867497][ T36] audit: type=1400 audit(1781939659.460:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 21.008737][ T36] audit: type=1400 audit(1781939666.610:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.009925][ T286] cgroup: Unknown subsys name 'net' [ 21.031452][ T36] audit: type=1400 audit(1781939666.610:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.058616][ T36] audit: type=1400 audit(1781939666.640:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.058784][ T286] cgroup: Unknown subsys name 'devices' [ 21.180914][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.186507][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.298601][ T36] audit: type=1400 audit(1781939666.900:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.315896][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.321750][ T36] audit: type=1400 audit(1781939666.900:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.345159][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.354957][ T36] audit: type=1400 audit(1781939666.900:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.386762][ T36] audit: type=1400 audit(1781939666.940:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.412446][ T36] audit: type=1400 audit(1781939666.940:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.438018][ T36] audit: type=1400 audit(1781939666.950:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.463535][ T36] audit: type=1400 audit(1781939666.950:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.708876][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.716126][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.723285][ T294] bridge_slave_0: entered allmulticast mode [ 22.729646][ T294] bridge_slave_0: entered promiscuous mode [ 22.737751][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.744818][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.751930][ T294] bridge_slave_1: entered allmulticast mode [ 22.758060][ T294] bridge_slave_1: entered promiscuous mode [ 22.773407][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.780458][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.787501][ T293] bridge_slave_0: entered allmulticast mode [ 22.793759][ T293] bridge_slave_0: entered promiscuous mode [ 22.802712][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.809777][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.816808][ T293] bridge_slave_1: entered allmulticast mode [ 22.822987][ T293] bridge_slave_1: entered promiscuous mode [ 22.880898][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.887950][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.895042][ T295] bridge_slave_0: entered allmulticast mode [ 22.901187][ T295] bridge_slave_0: entered promiscuous mode [ 22.912792][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.919870][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.926925][ T296] bridge_slave_0: entered allmulticast mode [ 22.933221][ T296] bridge_slave_0: entered promiscuous mode [ 22.942492][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.949556][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.956588][ T296] bridge_slave_1: entered allmulticast mode [ 22.962840][ T296] bridge_slave_1: entered promiscuous mode [ 22.968791][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.975862][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.982934][ T295] bridge_slave_1: entered allmulticast mode [ 22.989097][ T295] bridge_slave_1: entered promiscuous mode [ 23.122685][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.129753][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.137007][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144040][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.157016][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.164083][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.171348][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.178362][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188205][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195245][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.202527][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.209565][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.229746][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.236953][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.244232][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.251256][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.291275][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.298519][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.305873][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313577][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.320917][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.328006][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335320][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.342482][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.360206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.367330][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.374826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.381931][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.406055][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.413088][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.420577][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.427601][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.435055][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.442069][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449570][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.456571][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.464772][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471799][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.500446][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.507481][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.527500][ T294] veth0_vlan: entered promiscuous mode [ 23.542493][ T295] veth0_vlan: entered promiscuous mode [ 23.555583][ T295] veth1_macvtap: entered promiscuous mode [ 23.562074][ T293] veth0_vlan: entered promiscuous mode [ 23.574550][ T294] veth1_macvtap: entered promiscuous mode [ 23.586316][ T296] veth0_vlan: entered promiscuous mode [ 23.596223][ T293] veth1_macvtap: entered promiscuous mode [ 23.638052][ T296] veth1_macvtap: entered promiscuous mode [ 23.650818][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.698083][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 23.744564][ T324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.767431][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.771626][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.776545][ T324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.802128][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.811233][ T324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.820654][ T324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.847506][ T336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=336 comm=syz.3.8 [ 24.009120][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.044856][ T359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=359 comm=syz.2.14 [ 24.070261][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 24.099584][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.170420][ T310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 24.183190][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.194224][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.210258][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 24.224447][ T310] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 24.235301][ T310] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 24.244158][ T310] usb 2-1: Manufacturer: syz [ 24.252483][ T310] usb 2-1: config 0 descriptor?? [ 24.269098][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 24.275364][ T45] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 24.283897][ T45] usb 1-1: config 0 has no interface number 0 [ 24.291728][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 24.301067][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.309400][ T45] usb 1-1: Product: syz [ 24.313705][ T45] usb 1-1: Manufacturer: syz [ 24.318357][ T45] usb 1-1: SerialNumber: syz [ 24.324018][ T45] usb 1-1: config 0 descriptor?? [ 24.337738][ T45] smsc95xx v2.0.0 [ 24.579114][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.661703][ T327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.670457][ T327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.686716][ T327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.701755][ T327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.710326][ T327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.719280][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 24.725279][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 24.733062][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 24.738367][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 24.739165][ T310] usb 2-1: USB disconnect, device number 2 [ 24.754976][ T298] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 24.755311][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 24.762667][ T298] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 24.778332][ T298] Bluetooth: hci0: Frame reassembly failed (-84) [ 24.779989][ T312] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 24.787654][ T298] Bluetooth: hci0: Frame reassembly failed (-84) [ 24.796121][ T312] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 24.810135][ T312] usb 3-1: config 1 interface 1 altsetting 2 endpoint 0x8 has an invalid bInterval 66, changing to 7 [ 24.821013][ T312] usb 3-1: config 1 interface 1 has no altsetting 1 [ 24.828970][ T312] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 24.838153][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.846159][ T312] usb 3-1: Product: syz [ 24.851802][ T312] usb 3-1: Manufacturer: syz [ 24.856396][ T312] usb 3-1: SerialNumber: syz [ 24.972472][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 24.983315][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 25.024027][ T378] process 'syz.3.19' launched '/dev/fd/6' with NULL argv: empty string added [ 25.064841][ T312] usb 3-1: 1:2 : UAC_AS_GENERAL descriptor not found [ 25.071910][ T312] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 25.087274][ T312] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 25.100060][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.111935][ T312] usb 3-1: USB disconnect, device number 2 [ 25.124861][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.429724][ T392] netlink: 'syz.3.23': attribute type 16 has an invalid length. [ 25.549139][ T310] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.640968][ T401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 25.657528][ T402] overlay: ./file0 is not a directory [ 25.679170][ T310] usb 2-1: device descriptor read/64, error -71 [ 25.680895][ T404] syzkaller1: entered promiscuous mode [ 25.698284][ T404] syzkaller1: entered allmulticast mode [ 25.708955][ T404] capability: warning: `syz.2.26' uses 32-bit capabilities (legacy support in use) [ 25.718773][ T404] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 25.733328][ T404] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 25.929094][ T310] usb 2-1: device descriptor read/64, error -71 [ 26.029135][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.169111][ T310] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 26.180236][ T312] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.194043][ T312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.203153][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.211200][ T312] usb 3-1: SerialNumber: syz [ 26.227639][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 26.227652][ T36] audit: type=1400 audit(1781939671.830:145): avc: denied { create } for pid=407 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.229798][ T408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=408 comm=syz.3.28 [ 26.234006][ T36] audit: type=1400 audit(1781939671.830:144): avc: denied { create } for pid=407 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.254135][ T408] netlink: 'syz.3.28': attribute type 4 has an invalid length. [ 26.266135][ T36] audit: type=1400 audit(1781939671.830:146): avc: denied { ioctl } for pid=407 comm="syz.3.28" path="socket:[3966]" dev="sockfs" ino=3966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.309091][ T310] usb 2-1: device descriptor read/64, error -71 [ 26.318891][ T36] audit: type=1400 audit(1781939671.830:147): avc: denied { write } for pid=407 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.325624][ T408] netlink: 'syz.3.28': attribute type 4 has an invalid length. [ 26.344987][ T36] audit: type=1400 audit(1781939671.830:148): avc: denied { read } for pid=407 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.372484][ T36] audit: type=1400 audit(1781939671.840:149): avc: denied { bind } for pid=407 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.589115][ T310] usb 2-1: device descriptor read/64, error -71 [ 26.699233][ T310] usb usb2-port1: attempt power cycle [ 26.769135][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 26.869835][ T9] usb 1-1: USB disconnect, device number 2 [ 26.918391][ T312] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 26.945195][ T36] audit: type=1400 audit(1781939672.550:150): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.980426][ T36] audit: type=1400 audit(1781939672.580:151): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=609 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.009214][ T36] audit: type=1400 audit(1781939672.580:152): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=609 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.037732][ T36] audit: type=1400 audit(1781939672.580:153): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=609 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.069314][ T310] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 27.100584][ T310] usb 2-1: device descriptor read/8, error -71 [ 27.212980][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.231218][ T310] usb 2-1: device descriptor read/8, error -71 [ 27.350445][ T9] usb 3-1: USB disconnect, device number 3 [ 27.356769][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 27.387240][ T312] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 27.394801][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.410968][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 27.419395][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.429285][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 27.441210][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.461914][ T312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.471103][ T310] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 27.484902][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.495845][ T312] usb 4-1: config 0 descriptor?? [ 27.503138][ T491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 27.516938][ T423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 27.526441][ T310] usb 2-1: device descriptor read/8, error -71 [ 27.597391][ T500] Zero length message leads to an empty skb [ 27.680069][ T310] usb 2-1: device descriptor read/8, error -71 [ 27.799174][ T310] usb usb2-port1: unable to enumerate USB device [ 27.927005][ T524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 27.944031][ T529] capability: warning: `syz.2.40' uses deprecated v2 capabilities in a way that may be insecure [ 27.959206][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.971496][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 27.979867][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 27.989690][ T312] usb 4-1: USB disconnect, device number 2 [ 28.062226][ T540] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 28.109942][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 28.115959][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.126883][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.139689][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 28.148726][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.157559][ T31] usb 1-1: config 0 descriptor?? [ 28.163426][ T31] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 28.273660][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 28.297101][ T547] overlayfs: failed to resolve './file2': -2 [ 28.349092][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.365822][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 28.371812][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 28.380789][ T31] usb 1-1: USB disconnect, device number 3 [ 28.499092][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 28.505395][ T310] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 28.514511][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.523130][ T310] usb 3-1: config 0 descriptor?? [ 28.669110][ T312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 28.729158][ T543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.737649][ T543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.751439][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 28.757562][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.768248][ T310] usb 3-1: USB disconnect, device number 4 [ 28.786049][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.799192][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 28.819083][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 28.825301][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.836404][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.846164][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.855686][ T565] hid-generic 0000:0000:0000.0001: pid 565 passed too short report [ 28.863992][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.878449][ T312] usb 2-1: config 0 descriptor?? [ 28.890571][ T312] hub 2-1:0.0: USB hub found [ 29.033341][ T579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 29.057647][ T473] bridge_slave_1: left allmulticast mode [ 29.066857][ T473] bridge_slave_1: left promiscuous mode [ 29.074478][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.085996][ T473] bridge_slave_0: left allmulticast mode [ 29.098758][ T473] bridge_slave_0: left promiscuous mode [ 29.111492][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.120497][ T312] hub 2-1:0.0: 29 ports detected [ 29.129299][ T312] hub 2-1:0.0: insufficient power available to use all downstream ports [ 29.142136][ T374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.231562][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.238604][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.246016][ T584] bridge_slave_0: entered allmulticast mode [ 29.252718][ T584] bridge_slave_0: entered promiscuous mode [ 29.260210][ T473] veth1_macvtap: left promiscuous mode [ 29.265787][ T473] veth0_vlan: left promiscuous mode [ 29.309168][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.316274][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.323397][ T584] bridge_slave_1: entered allmulticast mode [ 29.329088][ T310] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 29.332846][ T584] bridge_slave_1: entered promiscuous mode [ 29.336723][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 29.354946][ T374] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.366122][ T374] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.379892][ T312] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 29.386276][ T312] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 29.394678][ T374] usb 1-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 29.398995][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.409135][ T374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.410752][ T584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.418755][ T374] usb 1-1: Product: syz [ 29.425963][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.430300][ T374] usb 1-1: Manufacturer: syz [ 29.437074][ T584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.450654][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 29.456602][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.465435][ T374] usb 1-1: SerialNumber: syz [ 29.481924][ T584] veth0_vlan: entered promiscuous mode [ 29.490391][ T312] usb 2-1: USB disconnect, device number 7 [ 29.493420][ T584] veth1_macvtap: entered promiscuous mode [ 29.514177][ T310] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 29.525298][ T310] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.540315][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.546938][ T310] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 29.556824][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.565945][ T310] usb 3-1: config 0 descriptor?? [ 29.574744][ T581] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 29.678274][ T374] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.692850][ T374] usb 1-1: USB disconnect, device number 4 [ 29.708412][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.990869][ T310] elecom 0003:056E:00FC.0002: unknown main item tag 0x2 [ 30.001037][ T310] elecom 0003:056E:00FC.0002: unknown global tag 0xd [ 30.007833][ T310] elecom 0003:056E:00FC.0002: item 0 2 1 13 parsing failed [ 30.015398][ T310] elecom 0003:056E:00FC.0002: probe with driver elecom failed with error -22 [ 30.191805][ T310] usb 3-1: USB disconnect, device number 5 [ 30.459093][ T312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.598330][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 30.613420][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.625726][ T312] usb 1-1: config 1 interface 0 has no altsetting 0 [ 30.634269][ T312] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 30.644821][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.646273][ T620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 30.653027][ T312] usb 1-1: Product: syz [ 30.665838][ T312] usb 1-1: Manufacturer: syz [ 30.670496][ T312] usb 1-1: SerialNumber: syz [ 30.679104][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.829092][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 30.835296][ T311] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.846305][ T311] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.856175][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.862907][ T311] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 30.871953][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.880721][ T311] usb 4-1: config 0 descriptor?? [ 30.884844][ T312] usbhid 1-1:1.0: can't add hid device: -71 [ 30.891629][ T312] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 30.900810][ T312] usb 1-1: USB disconnect, device number 5 [ 30.909269][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 31.039097][ T31] usb 2-1: device descriptor read/64, error -71 [ 31.289134][ T31] usb 2-1: device descriptor read/64, error -71 [ 31.300526][ T311] hid (null): unknown global tag 0xd [ 31.305844][ T311] hid (null): invalid report_count 218908673 [ 31.311858][ T311] hid (null): invalid report_size 64835 [ 31.317432][ T311] hid (null): unknown global tag 0xc [ 31.323039][ T311] hid (null): invalid report_size -44574717 [ 31.489294][ T312] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 31.502262][ T611] new mount options do not match the existing superblock, will be ignored [ 31.549100][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 31.561433][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.561447][ T36] audit: type=1400 audit(1781939677.170:201): avc: denied { create } for pid=610 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 31.562805][ T611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.595354][ T611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.639109][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.670149][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.681149][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 31.689101][ T31] usb 2-1: device descriptor read/64, error -71 [ 31.694123][ T312] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 31.709307][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.710996][ T623] usb 4-1: USB disconnect, device number 3 [ 31.717941][ T312] usb 3-1: config 0 descriptor?? [ 31.799086][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 31.805317][ T311] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 31.813651][ T311] usb 1-1: config 0 has no interface number 0 [ 31.819785][ T311] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 31.831271][ T311] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 31.840334][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.848308][ T311] usb 1-1: Product: syz [ 31.852547][ T311] usb 1-1: Manufacturer: syz [ 31.857145][ T311] usb 1-1: SerialNumber: syz [ 31.862636][ T311] usb 1-1: config 0 descriptor?? [ 31.867876][ T627] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 31.969197][ T31] usb 2-1: device descriptor read/64, error -71 [ 32.075443][ T627] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 32.082748][ T31] usb usb2-port1: attempt power cycle [ 32.131385][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.138930][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.146427][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.153924][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.161412][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.168873][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.176349][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.183830][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.191327][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.198796][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.206279][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.213756][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.221222][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.228686][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.236164][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.243686][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.251200][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.258680][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.266339][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.273977][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.281483][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.288966][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.289257][ T311] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 32.296563][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.306654][ T311] asix 1-1:0.188: probe with driver asix failed with error -61 [ 32.314179][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.328967][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.336458][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.343941][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.351500][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.358961][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.366504][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.373997][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.381476][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.388921][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.396409][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.403889][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.411357][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.418816][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.426286][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.429097][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 32.433770][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.448742][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.456210][ T312] holtek_mouse 0003:04D9:A04A.0004: unknown main item tag 0x0 [ 32.464188][ T312] holtek_mouse 0003:04D9:A04A.0004: hidraw0: USB HID v0.03 Device [HID 04d9:a04a] on usb-dummy_hcd.2-1/input0 [ 32.472410][ T31] usb 2-1: device descriptor read/8, error -71 [ 32.478923][ T312] usb 3-1: USB disconnect, device number 6 [ 32.489067][ T635] fido_id[635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 32.509193][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.610163][ T31] usb 2-1: device descriptor read/8, error -71 [ 32.639094][ T65] usb 4-1: device descriptor read/64, error -71 [ 32.849108][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 32.857769][ T36] audit: type=1400 audit(1781939678.460:202): avc: denied { read append } for pid=626 comm="syz.0.70" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.880939][ T65] usb 4-1: device descriptor read/64, error -71 [ 32.887450][ T36] audit: type=1400 audit(1781939678.460:203): avc: denied { open } for pid=626 comm="syz.0.70" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.910727][ T312] usb 1-1: USB disconnect, device number 6 [ 32.913123][ T31] usb 2-1: device descriptor read/8, error -71 [ 32.926872][ T36] audit: type=1400 audit(1781939678.520:204): avc: denied { mount } for pid=637 comm="syz.2.73" name="/" dev="ramfs" ino=5570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.948889][ T36] audit: type=1400 audit(1781939678.520:205): avc: denied { mmap_zero } for pid=637 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 32.958039][ T642] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 33.002400][ T646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 33.035456][ T36] audit: type=1400 audit(1781939678.640:206): avc: denied { read } for pid=647 comm="syz.0.76" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.069828][ T31] usb 2-1: device descriptor read/8, error -71 [ 33.082215][ T36] audit: type=1400 audit(1781939678.690:207): avc: denied { ioctl } for pid=651 comm="syz.0.78" path="socket:[5104]" dev="sockfs" ino=5104 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.119105][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.119611][ T36] audit: type=1400 audit(1781939678.730:208): avc: denied { watch } for pid=654 comm="syz.0.79" path="/17" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.148813][ T36] audit: type=1400 audit(1781939678.730:209): avc: denied { watch_reads } for pid=654 comm="syz.0.79" path="/17" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.170994][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.178902][ T36] audit: type=1400 audit(1781939678.730:210): avc: denied { getopt } for pid=654 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.201463][ T31] usb usb2-port1: unable to enumerate USB device [ 33.222109][ T657] 9pnet_fd: Insufficient options for proto=fd [ 33.259125][ T65] usb 4-1: device descriptor read/64, error -71 [ 33.340137][ T310] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 33.352131][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 33.363268][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 33.374406][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.387282][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.396336][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.404858][ T310] usb 3-1: config 0 descriptor?? [ 33.410070][ T639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 33.459090][ T31] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 33.499103][ T65] usb 4-1: device descriptor read/64, error -71 [ 33.609200][ T65] usb usb4-port1: attempt power cycle [ 33.615690][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.624241][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 33.635237][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 33.644892][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 33.654885][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 33.664674][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 33.677876][ T31] usb 1-1: string descriptor 0 read error: -22 [ 33.684500][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 33.693705][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.702734][ T31] usb 1-1: config 0 descriptor?? [ 33.708600][ T657] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 33.726036][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.754368][ T662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 33.819583][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.827007][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.834424][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.841957][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.849372][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.856751][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.864148][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.871541][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.878903][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.886292][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.893682][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.901080][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.908452][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.915841][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.923239][ T310] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 33.930803][ T310] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 33.939494][ T310] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.959134][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.980094][ T65] usb 4-1: device descriptor read/8, error -71 [ 34.039106][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 34.080361][ T311] usb 3-1: USB disconnect, device number 7 [ 34.110086][ T65] usb 4-1: device descriptor read/8, error -71 [ 34.189087][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 34.195174][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.201842][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 34.211011][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.219820][ T31] usb 2-1: config 0 descriptor?? [ 34.349103][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.369999][ T65] usb 4-1: device descriptor read/8, error -71 [ 34.500065][ T65] usb 4-1: device descriptor read/8, error -71 [ 34.597672][ T672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 34.609652][ T65] usb usb4-port1: unable to enumerate USB device [ 34.629598][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x2 [ 34.636612][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.643733][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.649481][ T674] kvm: kvm [673]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 34.650849][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.666583][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.673775][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.680914][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.687782][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.695487][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.702790][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.709864][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.716729][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.723846][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.730859][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.738905][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.745938][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.752992][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.759890][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.766795][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.773897][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.780923][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.787776][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.794637][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.801531][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.808389][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.815368][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.822586][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.832007][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.838883][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.845930][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.854800][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.861708][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.868571][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.875588][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.882773][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.889654][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.896487][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.903392][ T31] wacom 0003:056A:00BC.0006: unknown main item tag 0x0 [ 34.910552][ T31] wacom 0003:056A:00BC.0006: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 34.923369][ T31] wacom 0003:056A:00BC.0006: hidraw0: USB HID v0.c1 Device [HID 056a:00bc] on usb-dummy_hcd.1-1/input0 [ 34.942687][ T31] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BC.0006/input/input4 [ 34.958722][ T31] usb 2-1: USB disconnect, device number 12 [ 35.159098][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.299131][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.370961][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 35.400742][ T700] netlink: 'syz.1.94': attribute type 58 has an invalid length. [ 35.539096][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.649104][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 35.779099][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 35.799082][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 35.805227][ T31] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 35.813543][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.823626][ T31] usb 2-1: config 0 has no interface number 0 [ 35.831030][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 35.840070][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.848063][ T31] usb 2-1: Product: syz [ 35.852223][ T31] usb 2-1: Manufacturer: syz [ 35.856806][ T31] usb 2-1: SerialNumber: syz [ 35.861958][ T31] usb 2-1: config 0 descriptor?? [ 35.867679][ T31] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 35.874089][ T31] usb 2-1: No valid video chain found. [ 35.909090][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.068889][ T31] usb 2-1: USB disconnect, device number 13 [ 36.149112][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.252948][ T31] usb 1-1: USB disconnect, device number 7 [ 36.259603][ T10] usb usb3-port1: attempt power cycle [ 36.588293][ T718] can0: slcan on ttyS3. [ 36.592423][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 36.592437][ T36] audit: type=1400 audit(1781939682.200:221): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.592537][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.602053][ T36] audit: type=1400 audit(1781939682.210:222): avc: denied { setopt } for pid=717 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.647351][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.657019][ T36] audit: type=1400 audit(1781939682.260:223): avc: denied { read } for pid=721 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.680053][ T36] audit: type=1400 audit(1781939682.260:224): avc: denied { open } for pid=721 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.682725][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.705377][ T36] audit: type=1400 audit(1781939682.270:225): avc: denied { getattr } for pid=721 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.737507][ T717] can0 (unregistered): slcan off ttyS3. [ 36.746309][ T36] audit: type=1400 audit(1781939682.350:226): avc: denied { write } for pid=720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.778192][ T36] audit: type=1400 audit(1781939682.350:227): avc: denied { add_name } for pid=720 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.800530][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 36.805961][ T36] audit: type=1400 audit(1781939682.370:228): avc: denied { remove_name } for pid=731 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=1105 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.817758][ T739] binder: Bad value for 'max' [ 36.840588][ T31] usb 1-1: config 1 has an invalid interface number: 180 but max is 2 [ 36.845789][ T739] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.103'. [ 36.848755][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.848777][ T31] usb 1-1: config 1 has no interface number 2 [ 36.860028][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.872834][ T36] audit: type=1400 audit(1781939682.420:229): avc: denied { mounton } for pid=738 comm="syz.1.103" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.902968][ T31] usb 1-1: config 1 interface 180 has no altsetting 0 [ 36.909872][ T36] audit: type=1400 audit(1781939682.470:230): avc: denied { name_bind } for pid=738 comm="syz.1.103" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.938649][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.940978][ T31] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 36.958811][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.966965][ T31] usb 1-1: Product: syz [ 36.979079][ T31] usb 1-1: Manufacturer: syz [ 36.985344][ T31] usb 1-1: SerialNumber: syz [ 37.084885][ T765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 37.119114][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 37.140123][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.202514][ T31] usb 1-1: unit 4 not found! [ 37.215262][ T31] usb 1-1: USB disconnect, device number 8 [ 37.260199][ T310] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 37.270263][ T10] usb 3-1: device descriptor read/8, error -71 [ 37.329097][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.379199][ T10] usb usb3-port1: unable to enumerate USB device [ 37.419120][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 37.425530][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.433853][ T310] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 37.442732][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.454192][ T310] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 37.463239][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.471223][ T310] usb 2-1: Product: syz [ 37.475375][ T310] usb 2-1: Manufacturer: syz [ 37.479975][ T310] usb 2-1: SerialNumber: syz [ 37.489104][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 37.495349][ T311] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 37.503543][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.513654][ T311] usb 4-1: config 0 has no interface number 0 [ 37.521110][ T311] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 37.530171][ T311] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 37.538156][ T311] usb 4-1: Product: syz [ 37.542330][ T311] usb 4-1: Manufacturer: syz [ 37.546913][ T311] usb 4-1: SerialNumber: syz [ 37.552147][ T311] usb 4-1: config 0 descriptor?? [ 37.557969][ T311] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 37.564396][ T311] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 37.573036][ T311] usb 4-1: Failed to create links for entity 1 [ 37.579233][ T311] usb 4-1: Failed to register entities (-22). [ 37.688235][ T310] usb 2-1: unit 2 not found! [ 37.695165][ T310] usb 2-1: USB disconnect, device number 14 [ 38.039098][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.199113][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 38.205356][ T311] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 38.217224][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 38.228237][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 38.237992][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.247057][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.256073][ T311] usb 1-1: config 0 descriptor?? [ 38.262069][ T311] hub 1-1:0.0: USB hub found [ 38.329107][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 38.439101][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 38.480187][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.491487][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.501654][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 38.511152][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.521609][ T311] hub 1-1:0.0: 1 port detected [ 38.521891][ T310] usb 3-1: config 0 descriptor?? [ 38.600179][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.611110][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.621014][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 38.630175][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.642311][ T10] usb 2-1: config 0 descriptor?? [ 38.937189][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.944034][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.950831][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.957606][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.964394][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.971178][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.977936][ T310] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 38.985321][ T310] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 39.049630][ T773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.058162][ T773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.066574][ T773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.075162][ T773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.087718][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 39.094283][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.103046][ T10] usb 2-1: USB disconnect, device number 15 [ 39.139127][ T771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.147674][ T771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.357252][ T310] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 39.364774][ T310] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 39.371890][ T310] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 39.381839][ T310] usb 3-1: USB disconnect, device number 12 [ 39.439096][ T311] hub 1-1:0.0: activate --> -90 [ 39.534448][ T31] usb 1-1: USB disconnect, device number 9 [ 39.540356][ T311] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 39.579130][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 39.730295][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.740768][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.749729][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.763933][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 39.772989][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.780975][ T10] usb 2-1: Product: syz [ 39.785108][ T10] usb 2-1: Manufacturer: syz [ 39.789699][ T10] usb 2-1: SerialNumber: syz [ 39.915385][ T295] ------------[ cut here ]------------ [ 39.920912][ T295] WARNING: CPU: 1 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 39.928850][ T295] Modules linked in: [ 39.932869][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 39.944543][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.954649][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 39.959707][ T295] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 39.979372][ T295] RSP: 0018:ffffc9000b63fc60 EFLAGS: 00010293 [ 39.985439][ T295] RAX: ffffffff81f271be RBX: ffff88810ab6da78 RCX: ffff888103b9cc00 [ 39.993511][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.001519][ T295] RBP: ffffc9000b63fc88 R08: 0000000000000003 R09: 0000000000000004 [ 40.005158][ T10] usb 2-1: 0:2 : does not exist [ 40.009520][ T295] R10: dffffc0000000000 R11: fffff520016c7f7c R12: dffffc0000000000 [ 40.009539][ T295] R13: 1ffff1102156db58 R14: ffff88810ab6dac0 R15: 0000000000000000 [ 40.020318][ T10] usb 2-1: USB disconnect, device number 16 [ 40.022341][ T295] FS: 000055555d579500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.045182][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.051842][ T295] CR2: 000055555d59c958 CR3: 00000001263ce000 CR4: 00000000003526b0 [ 40.059853][ T295] Call Trace: [ 40.063135][ T295] [ 40.066059][ T295] shmem_rmdir+0x5f/0x90 [ 40.070339][ T295] vfs_rmdir+0x3e3/0x560 [ 40.074691][ T295] incfs_kill_sb+0x109/0x230 [ 40.079334][ T295] deactivate_locked_super+0xd5/0x2a0 [ 40.084721][ T295] deactivate_super+0xb8/0xe0 [ 40.086906][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.089612][ T295] cleanup_mnt+0x406/0x4a0 [ 40.109677][ T295] __cleanup_mnt+0x1d/0x40 [ 40.111325][ T310] usb 4-1: USB disconnect, device number 8 [ 40.114103][ T295] task_work_run+0x1e5/0x260 [ 40.124495][ T295] ? __cfi_task_work_run+0x10/0x10 [ 40.129669][ T295] ? __x64_sys_umount+0x12e/0x180 [ 40.134704][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.140113][ T295] ? __kasan_check_read+0x15/0x20 [ 40.145152][ T295] resume_user_mode_work+0x35/0x50 [ 40.150292][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 40.155763][ T295] do_syscall_64+0x63/0xf0 [ 40.160214][ T295] ? clear_bhb_loop+0x50/0xa0 [ 40.164886][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.170799][ T295] RIP: 0033:0x7f4abed9e097 [ 40.175228][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.194839][ T295] RSP: 002b:00007ffe72ca29c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.203264][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4abed9e097 [ 40.211257][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72ca2a80 [ 40.219242][ T295] RBP: 00007ffe72ca2a80 R08: 00007ffe72ca3a80 R09: 00000000ffffffff [ 40.227196][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72ca3b10 [ 40.235175][ T295] R13: 00007f4abee322ca R14: 0000000000009bb2 R15: 00007ffe72ca3b50 [ 40.243157][ T295] [ 40.246158][ T295] ---[ end trace 0000000000000000 ]--- [ 40.251985][ T295] ================================================================== [ 40.260063][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 40.266317][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 40.274283][ T295] [ 40.276589][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 40.276608][ T295] Tainted: [W]=WARN [ 40.276612][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.276618][ T295] Call Trace: [ 40.276622][ T295] [ 40.276627][ T295] __dump_stack+0x21/0x30 [ 40.276645][ T295] dump_stack_lvl+0x140/0x1c0 [ 40.276659][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.276673][ T295] print_report+0x3d/0x70 [ 40.276687][ T295] kasan_report+0x162/0x1a0 [ 40.276700][ T295] ? ihold+0x24/0x70 [ 40.276712][ T295] ? _raw_spin_unlock+0x45/0x60 [ 40.276726][ T295] ? ihold+0x24/0x70 [ 40.276738][ T295] kasan_check_range+0x25a/0x2b0 [ 40.276751][ T295] __kasan_check_write+0x18/0x20 [ 40.276760][ T295] ihold+0x24/0x70 [ 40.276771][ T295] vfs_rmdir+0x26a/0x560 [ 40.276785][ T295] incfs_kill_sb+0x109/0x230 [ 40.276796][ T295] deactivate_locked_super+0xd5/0x2a0 [ 40.276819][ T295] deactivate_super+0xb8/0xe0 [ 40.276842][ T295] cleanup_mnt+0x406/0x4a0 [ 40.276862][ T295] __cleanup_mnt+0x1d/0x40 [ 40.276873][ T295] task_work_run+0x1e5/0x260 [ 40.276887][ T295] ? __cfi_task_work_run+0x10/0x10 [ 40.276899][ T295] ? __x64_sys_umount+0x12e/0x180 [ 40.276908][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.276918][ T295] ? __kasan_check_read+0x15/0x20 [ 40.276927][ T295] resume_user_mode_work+0x35/0x50 [ 40.276937][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 40.276949][ T295] do_syscall_64+0x63/0xf0 [ 40.276963][ T295] ? clear_bhb_loop+0x50/0xa0 [ 40.276973][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.276989][ T295] RIP: 0033:0x7f4abed9e097 [ 40.276999][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.277008][ T295] RSP: 002b:00007ffe72ca29c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.277019][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4abed9e097 [ 40.277027][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72ca2a80 [ 40.277034][ T295] RBP: 00007ffe72ca2a80 R08: 00007ffe72ca3a80 R09: 00000000ffffffff [ 40.277041][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72ca3b10 [ 40.277048][ T295] R13: 00007f4abee322ca R14: 0000000000009bb2 R15: 00007ffe72ca3b50 [ 40.277056][ T295] [ 40.277060][ T295] ================================================================== [ 40.520265][ T295] Disabling lock debugging due to kernel taint [ 40.526476][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 40.534263][ T295] #PF: supervisor write access in kernel mode [ 40.540568][ T295] #PF: error_code(0x0002) - not-present page [ 40.546534][ T295] PGD 800000010d332067 P4D 800000010d332067 PUD 0 [ 40.553034][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 40.559085][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 40.572173][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 40.577169][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.587214][ T295] RIP: 0010:ihold+0x2a/0x70 [ 40.591702][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 40.611287][ T295] RSP: 0018:ffffc9000b63fca0 EFLAGS: 00010246 [ 40.617333][ T295] RAX: ffff888103b9cc00 RBX: 0000000000000000 RCX: ffff888103b9cc00 [ 40.625282][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.633230][ T295] RBP: ffffc9000b63fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 40.641179][ T295] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88810ab6da84 [ 40.649129][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.657092][ T295] FS: 000055555d579500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.665998][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.672567][ T295] CR2: 0000000000000168 CR3: 00000001263ce000 CR4: 00000000003526b0 [ 40.680519][ T295] Call Trace: [ 40.683776][ T295] [ 40.686689][ T295] vfs_rmdir+0x26a/0x560 [ 40.690916][ T295] incfs_kill_sb+0x109/0x230 [ 40.695494][ T295] deactivate_locked_super+0xd5/0x2a0 [ 40.700869][ T295] deactivate_super+0xb8/0xe0 [ 40.705540][ T295] cleanup_mnt+0x406/0x4a0 [ 40.709942][ T295] __cleanup_mnt+0x1d/0x40 [ 40.714362][ T295] task_work_run+0x1e5/0x260 [ 40.718934][ T295] ? __cfi_task_work_run+0x10/0x10 [ 40.724033][ T295] ? __x64_sys_umount+0x12e/0x180 [ 40.729065][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.734445][ T295] ? __kasan_check_read+0x15/0x20 [ 40.739473][ T295] resume_user_mode_work+0x35/0x50 [ 40.744567][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 40.750024][ T295] do_syscall_64+0x63/0xf0 [ 40.754444][ T295] ? clear_bhb_loop+0x50/0xa0 [ 40.759114][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.765021][ T295] RIP: 0033:0x7f4abed9e097 [ 40.769428][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.789034][ T295] RSP: 002b:00007ffe72ca29c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.797450][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4abed9e097 [ 40.805406][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72ca2a80 [ 40.813367][ T295] RBP: 00007ffe72ca2a80 R08: 00007ffe72ca3a80 R09: 00000000ffffffff [ 40.821326][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72ca3b10 [ 40.829281][ T295] R13: 00007f4abee322ca R14: 0000000000009bb2 R15: 00007ffe72ca3b50 [ 40.837237][ T295] [ 40.840237][ T295] Modules linked in: [ 40.844107][ T295] CR2: 0000000000000168 [ 40.848232][ T295] ---[ end trace 0000000000000000 ]--- [ 40.853662][ T295] RIP: 0010:ihold+0x2a/0x70 [ 40.858151][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 40.877731][ T295] RSP: 0018:ffffc9000b63fca0 EFLAGS: 00010246 [ 40.883775][ T295] RAX: ffff888103b9cc00 RBX: 0000000000000000 RCX: ffff888103b9cc00 [ 40.891729][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.899696][ T295] RBP: ffffc9000b63fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 40.907652][ T295] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88810ab6da84 [ 40.915619][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.923573][ T295] FS: 000055555d579500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.932480][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.939041][ T295] CR2: 0000000000000168 CR3: 00000001263ce000 CR4: 00000000003526b0 [ 40.947005][ T295] Kernel panic - not syncing: Fatal exception [ 40.953345][ T295] Kernel Offset: disabled [ 40.957694][ T295] Rebooting in 86400 seconds..