last executing test programs: 9m0.158872941s ago: executing program 32 (id=30): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=m']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=m']) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x24001804) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r4, 0x22fb5000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r4, 0x22fb5000) pipe2$9p(0x0, 0x0) 8m23.320273939s ago: executing program 33 (id=621): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x49b2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x2, 0xfffffffe) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r6, r3, 0x0, 0x7ffff000) 5m23.528728244s ago: executing program 34 (id=3675): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000002840)='ip_vti0\x00', 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f08ded64ccde8c94ef56491ee54be0e1c2095ed27c1c6fe76cef3e2", 0x1d) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000080)) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/244, 0xf4) 4m37.43270601s ago: executing program 35 (id=4378): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$link(0x8, r0, r0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x5880, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 4m31.373939011s ago: executing program 7 (id=4461): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x20000084, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 4m31.344839593s ago: executing program 7 (id=4462): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) timer_create(0x7, 0x0, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000400), &(0x7f0000002840)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) lseek(0xffffffffffffffff, 0xff, 0x2) recvmmsg(r3, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002880)=""/63, 0x3f}], 0x1}}], 0x1, 0x40010121, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000540), 0xc) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x7fffffff, 0x4) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r1, r0, 0x0, 0x7ffff000) 4m31.191701775s ago: executing program 7 (id=4463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000040)={{r0}, 0x2, &(0x7f0000000000)=[0x2, 0x81], 0x51c3, 0x2, 0x1}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x1c0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x41c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xfc, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}]}]}, @CTA_EXPECT_NAT={0x224, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) chmod(&(0x7f0000000880)='./file0\x00', 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xff\xff'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x800) ptrace$cont(0x9, 0x0, 0x4, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04a48b44005eae4b887eb8354a3a573ad04644a8590c3e3507151a0434f62483"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40801) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000b80)={0x7, 0x6, 0x6, 0x0, 0x0, [{{r0}, 0x4}, {{r0}, 0x9}, {{r3}, 0x2}, {{r0}}, {{r1}, 0x5}, {{r0}, 0x7}]}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000cc0)={{0x2, 0x200, 0xf41, 0x5, 0xf16, 0x1}, 0x2ca, [0x401, 0x9, 0x9, 0x81, 0x2, 0x6, 0x81, 0xb, 0xa2df, 0x5, 0x1ff, 0x3, 0x9b, 0x7, 0xd, 0x9, 0x60, 0xfffffffb, 0x0, 0x10, 0x5, 0x89, 0xffffff09, 0xe, 0x6, 0x4, 0x7, 0x4, 0xfffffffa, 0x200, 0x7, 0x4, 0x9, 0x0, 0xf245, 0x0, 0x92, 0x200, 0x7, 0x9, 0x9b1, 0x7, 0x3, 0x0, 0xfff, 0x2e2, 0x6, 0x1ff, 0x8, 0x2, 0x5fb, 0x0, 0x6, 0x5, 0x40, 0x8, 0x401, 0x7, 0x9, 0x10000, 0x0, 0xa, 0x6, 0x9, 0x3, 0xffffffff, 0x5, 0x9a12, 0x0, 0xc, 0x0, 0x100, 0x33, 0x7, 0x3, 0xff7, 0x9, 0x7ff, 0x9, 0x8, 0x2, 0x40, 0x2, 0x6, 0x8, 0x7, 0x0, 0x80000001, 0x6, 0xc0, 0x1, 0x4, 0xae, 0x3ff, 0x6, 0x40, 0x9d, 0xe453, 0xd0b, 0x1, 0x6c2, 0xfffffffe, 0x0, 0x6, 0xfffffff9, 0xb, 0x800, 0xf, 0x2, 0x3, 0x3, 0xd, 0xe, 0x8, 0x5, 0x7f, 0x1c8f, 0x10001, 0x3, 0xe6, 0x4, 0x10001, 0x51c, 0x6, 0xad, 0x0, 0x1, 0x56, 0xffffa626, 0x0, 0x6, 0x7, 0x0, 0x5, 0xe, 0x8000, 0xfffff682, 0x8, 0x0, 0x8, 0xc000000, 0x6d, 0x1000, 0x81, 0x5, 0x7, 0xab, 0x1000, 0x4, 0x2, 0x8, 0xfffffff8, 0x400, 0x9, 0x4ec3, 0x7, 0xfffff942, 0x7, 0x1, 0xe1, 0x5e4ba1c5, 0x5, 0xa9, 0x35, 0xc, 0x2, 0x7, 0x6, 0xba, 0x0, 0x81, 0x7b, 0xc, 0xd, 0x17, 0x2b85, 0x3, 0x16, 0x1, 0x6, 0x5, 0x0, 0x4, 0x4, 0x9, 0x6, 0x3, 0x3, 0x7fff, 0x6, 0x7, 0x3, 0x5, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0xd, 0x3, 0x9, 0xfffffff8, 0x2, 0x8, 0x2080a716, 0x5, 0x3, 0xe04, 0x3, 0x8, 0x85, 0x75e4, 0x2f, 0x3, 0x1, 0x800, 0x8, 0x1000, 0xfffffffa, 0x1, 0x0, 0x5, 0x40, 0x2, 0x8, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x3, 0x2, 0x7, 0x6, 0x8, 0x7a, 0x7, 0x0, 0xffffffff, 0x7, 0x5e, 0xa, 0x8001, 0x7f, 0x2, 0x80, 0x9c, 0x3, 0x3, 0x1, 0x7, 0x4dbd208d, 0x5, 0x4, 0x2, 0x5, 0x9, 0x8, 0xe, 0x5, 0x7, 0x8, 0x80000000, 0x4, 0x4fe, 0x80000000, 0x8, 0xa47, 0x7, 0xc2, 0xa, 0x5, 0x0, 0xfffff002, 0x50, 0xe, 0x81, 0x2, 0xfffffff8, 0x2, 0xc0000000, 0x1, 0x1, 0x8, 0x5, 0x2, 0x3, 0x81, 0x7f, 0x1e, 0x1, 0x2b51, 0x40, 0x7, 0x80000001, 0xfff, 0xffffbd1e, 0x1, 0x3, 0x5, 0xfffffffc, 0x44, 0x9, 0x40, 0x8642, 0x7, 0x8001, 0x1, 0xb0de, 0x2, 0x0, 0x73, 0x3, 0x6, 0x80000001, 0x1, 0x9, 0xd, 0x9, 0x5, 0xf, 0x6, 0x7fff, 0x0, 0x8, 0x8001, 0x2, 0x4, 0x2, 0x81, 0x2, 0xe, 0x2, 0x4, 0x4, 0xc, 0x8, 0x900, 0xe, 0x3ff, 0x3, 0x9, 0x2, 0x532, 0x3, 0x2, 0x3, 0x1, 0x4, 0x20000000, 0x7f, 0x8, 0x10000000, 0x6, 0x3c9b10c3, 0x612, 0x8, 0xb, 0x9, 0x80, 0x7f, 0x8, 0x5662, 0x3, 0x10, 0x1, 0x1, 0x7, 0xa, 0x1, 0xd, 0x5, 0xe278, 0x8, 0x9, 0xb5c, 0xd, 0x4, 0xc3fc, 0x100, 0x8000, 0x7, 0x4, 0x4, 0xfffff7ae, 0x7, 0x6, 0x8, 0x1000, 0x4, 0x578, 0x30b2dc8f, 0xff, 0x73, 0x9, 0x5, 0x1, 0x9, 0xe0, 0x24, 0x80000000, 0x3, 0x1, 0x8, 0x696, 0x4, 0x4, 0x401, 0x0, 0x8001, 0x8001, 0x140, 0x7, 0x10000, 0x1, 0x3dcc6cc8, 0x5, 0x4, 0x1, 0x0, 0x8, 0x21200, 0x8, 0x34d, 0x7, 0x4, 0x6, 0x8, 0x6, 0x8, 0x8, 0x800, 0x1, 0x4, 0x4, 0x7fff, 0x5, 0x3, 0x2, 0x6, 0x6, 0xb, 0x0, 0x3, 0x2, 0x3, 0xf, 0x9, 0xde, 0x3, 0x2, 0x0, 0xe, 0x6, 0x10000, 0x3, 0x6, 0x4, 0x0, 0x2, 0x82b6, 0x5b, 0x8, 0x7, 0xf, 0x7, 0x1, 0x6, 0x6, 0x2, 0x7f, 0x6, 0x3, 0x8000, 0x0, 0x816, 0x0, 0x19c5, 0x0, 0x8, 0xfffffff9, 0xffffffff, 0x7fffffff, 0xd, 0x1, 0x6, 0x2, 0x7, 0x4, 0x400, 0xfff, 0x0, 0x4, 0x8, 0x5, 0x10001, 0x0, 0x3, 0x1ff, 0x0, 0x9, 0x3, 0x5ae, 0x0, 0x8, 0x7, 0x756, 0x9, 0x98e1, 0x3, 0x5, 0x4, 0xc5, 0xec94, 0x4, 0xffffffff, 0x5, 0x8001, 0x0, 0x5, 0x1, 0x4, 0x594, 0x7ff, 0x62, 0x4, 0x9, 0x84e7, 0x7, 0x199, 0x8, 0x10001, 0x2, 0x2, 0xe, 0x8, 0x5, 0x1, 0x2, 0xd, 0xf47, 0x10, 0x7, 0x8, 0x2, 0x1, 0x1, 0x2, 0x2, 0xa0, 0x3, 0x8, 0x2, 0x5, 0x1, 0x101, 0x7ff, 0x5, 0x3d57, 0x7fffffff, 0xfff, 0x3, 0x6, 0x7f, 0x1, 0x8000, 0x1ff, 0x8000000, 0x800000, 0x7, 0x3, 0x8001, 0x9, 0x5, 0x1, 0x6, 0x0, 0x1, 0xe, 0x5, 0x7, 0x3, 0x8, 0x1475d9, 0xffdb, 0x5, 0x4, 0x5fb1, 0x7, 0x8, 0x0, 0xd3b8, 0x56, 0x6, 0x353, 0x1, 0x561c, 0x31b, 0x7, 0x7, 0x3, 0x0, 0x0, 0xe3, 0x325d, 0x3, 0x97, 0xffffffff, 0x7fffffff, 0x7ff, 0x6, 0x9, 0x7, 0x2, 0x9, 0x7, 0x438, 0x1, 0x2, 0xc3e, 0xb, 0x8, 0x33, 0x6, 0xc2cd, 0x2, 0x900, 0x9, 0x2, 0x0, 0x576, 0x68, 0x0, 0x8, 0x6b, 0xd3, 0x22, 0x5, 0x7ff, 0x69, 0x3ff, 0x1, 0x5, 0x9, 0x7fff, 0x5, 0x0, 0x101, 0xfffffffd, 0xe, 0x2, 0x5, 0x2, 0xdac, 0x3, 0x1000, 0x297b, 0x5, 0x9, 0x7, 0x2, 0x7, 0x460, 0x800, 0x5, 0x4, 0xdb, 0x5, 0x4, 0x0, 0x7, 0x1ff, 0x7, 0x2, 0x5, 0x1, 0x8, 0x2, 0xff, 0xe9f0, 0x9, 0x101, 0x8, 0x6a, 0x7, 0x7fff, 0x9a47, 0x8, 0xb1, 0x6, 0x3, 0x10000, 0x3, 0xa59a, 0x4, 0x10000, 0x3ff, 0x4, 0x5, 0x7f, 0x2, 0x401, 0x1, 0x4, 0x200, 0x5910d677, 0x7, 0x705, 0x200, 0x1, 0x8, 0x5, 0x6, 0x4, 0x1000, 0x81, 0x1f, 0x2, 0x5, 0xfffffffa, 0x200, 0x0, 0x9, 0x6d, 0x8000, 0x9, 0x9, 0x101, 0x7fffffff, 0x3, 0x3, 0x5, 0xe92, 0x101, 0x4, 0x7, 0xb, 0xfff, 0x4, 0x6, 0x7, 0x6, 0x0, 0x8, 0x8b0, 0x7f, 0xc, 0xebf2, 0x3ff80000, 0xffffff00, 0x161, 0x8, 0x80, 0xc0, 0x6, 0x99, 0x9, 0xde0, 0x8, 0x3, 0x40, 0x5, 0x9, 0xfffffffc, 0x9, 0x1, 0xa, 0x3ff, 0x7, 0x9, 0x9, 0xb73, 0xfffff48e, 0x5, 0x81, 0x1, 0xb, 0x3ff, 0x3, 0xda08, 0x4, 0x400, 0xf5e, 0x7fff, 0x2, 0x2, 0x1, 0xffff, 0x10000, 0x5, 0x0, 0xa48, 0x0, 0x7c9, 0x8, 0x4, 0x80, 0x4, 0x3, 0x7fff, 0x20000, 0xff, 0x2, 0x4, 0xf, 0x4, 0x0, 0x10, 0x4, 0x9000000, 0x655ab3a9, 0x4, 0x0, 0x4, 0x7, 0x3ff, 0x1ff, 0x0, 0x17ed, 0x7fff, 0x6, 0x1, 0xff, 0xffff0000, 0xffffffff, 0x1, 0x80, 0x3, 0x6, 0x7fffffff, 0xfffffffd, 0x8, 0x9fd, 0x8, 0x3, 0x5be, 0x5e, 0x5, 0x9, 0x0, 0x5, 0x0, 0x6, 0x1e, 0xd4c1, 0x4, 0x4, 0x1, 0xfffffffb, 0x80000000, 0xfff, 0xc, 0x1, 0x1000, 0x393, 0x4f1f, 0xb, 0x57004adc, 0xb0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x5a, 0x3, 0x5, 0x2ef, 0x5000000, 0x7, 0x2922, 0xfffffff9, 0x0, 0xfff, 0x0, 0x9d, 0x7, 0xb, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x120000, 0x10000, 0x1, 0xc3, 0x6, 0xe, 0x8, 0x4, 0x2, 0x6c, 0x8, 0x7ff, 0x6, 0xf674, 0x19, 0x41a2, 0x5, 0x2, 0x4, 0x4f0, 0x3, 0x5, 0x401, 0x39, 0xdb39, 0x3, 0x3, 0xa, 0x1, 0x10001, 0x7, 0x119, 0x78d2, 0x4, 0x3, 0x0, 0x7, 0x386, 0x6, 0xa, 0x6257, 0x7, 0x1ff, 0x3, 0x6, 0x7, 0xb, 0x5, 0x5, 0x13, 0x3, 0x8, 0x1ff, 0x6, 0x3, 0x6, 0x7f, 0x80000000, 0x7, 0x3, 0x0, 0xff, 0x6, 0x6, 0x7, 0x8, 0x6, 0x7, 0x0, 0x2, 0x80000001, 0x6, 0x7ff, 0x9, 0x7ff, 0x400, 0x8000, 0xc989, 0x800, 0x4, 0x0, 0xb2, 0x2, 0x8, 0x80000000, 0x7fff, 0x8, 0xc, 0x10001, 0x8, 0x8, 0x3, 0x3, 0x9, 0x9, 0x2, 0x5, 0x1, 0x5, 0x30, 0x2, 0x0, 0x5, 0xfe4, 0x6, 0x6, 0x5, 0x7ff, 0x2, 0x6, 0xfffffffa, 0x5, 0x7, 0x0, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff, 0x3, 0x9, 0x0, 0x7, 0x2, 0x0, 0xfffffff9, 0x5, 0x7, 0x2, 0x4, 0x100, 0x2, 0x9, 0x9, 0x1, 0x9, 0xe, 0x8, 0x6, 0x80000001]}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000001ec0)={&(0x7f0000001d00), 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xcc, r5, 0x400, 0x4, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa48e}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xfff7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x8000}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x42011) fcntl$getownex(r4, 0x10, &(0x7f0000001f00)={0x0, 0x0}) ptrace$cont(0x18, r6, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x20008800) getrusage(0x1, &(0x7f0000002080)) r8 = syz_open_dev$hiddev(&(0x7f0000002140), 0x0, 0x270102) r9 = openat$cgroup_ro(r1, &(0x7f0000002180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_FLAGS={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x20000001) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x38, r10, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x7, 0x4d, 0x205, 0x1}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000002440)={0x1, 0x5}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r10, 0x84, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44001) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000002580)={0x1, 0x3, 0x2, 0x9, 0x5, 0x4}) 4m31.190026866s ago: executing program 7 (id=4464): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) mount$fuseblk(0x0, &(0x7f0000000400)='./cgroup\x00', 0x0, 0x25000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x10, 0x7, 0xca8}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6c}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0xfffffffd}]}]}, 0x17c}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0xfffffffc, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 4m31.167758757s ago: executing program 7 (id=4465): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x15) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',aname=!']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) 3m45.430473405s ago: executing program 3 (id=4837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_usb_connect$cdc_ncm(0x4, 0xf1, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xc504eb69803ff47a, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x2, 0x1, 0x6, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "cc29de77a7"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x20000, 0x9d, 0xa17, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x6, 0x7, 0xe5}, @mdlm_detail={0x72, 0x24, 0x13, 0xfb, "65932cb5acd45ce6d58d6ae31a4002e6d268abe6b958e8300af43d22f37f246233107cdeae5d5aa30dd15b0c6f7e333995afc0ee2566d7cb9e003f8a9c031942eb6015ff56f4a502539135330f8ca587b6e19d6a8fd294d182aff7c7fafb1e3163832fbc07a9681546aa9e908833"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4f, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x87, 0x7}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x340, 0xb3, 0x1, 0xfa, 0xff, 0x1}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x55, 0x6, 0x0, 0x9}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1409}}]}) (rerun: 32) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="000f9b0000009b103e67c11507125103d3033f6191f9ffa7a2a783a7f7e024e76364ba13842b7ab352d53b989a36ba826d326ef8df26daede994c4fcc8d52205449bae59d7c8a050c0620bea52e27fe0a08ae47e234bb7ae9584832876b4abfa88d9560fdb6c7ab8bacb12f0476c6fb328d26f43f8e76fcac073f7faa2a9152e5a8dd9d4bc77a80afe5e011c287bce9ff195da33d3eefd4fa3438d42edc92f954c"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000020de000000000000fdd3419d960bfce5b38bae4520e92e119bc2493ee35f370a4475f021"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xf801, 0x401, 0x1, 0x6, 0x1ff, 0x7, 0x1, 0x0, 0x7, 0x6, 0xfeff, 0x2}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x10}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x9c46}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) memfd_create(&(0x7f0000002240)='key_or_keyring:', 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 64) bind$pptp(r2, &(0x7f0000000600)={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x1e) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 3m44.880377379s ago: executing program 3 (id=4840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 3m44.857202701s ago: executing program 3 (id=4841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000282000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0, 0x18}) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r6}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@private1, 0x18, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) r7 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r7, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r7, 0xf38ae000) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.821122784s ago: executing program 37 (id=4841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000282000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0, 0x18}) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r6}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@private1, 0x18, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) r7 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r7, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r7, 0xf38ae000) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3m35.768253596s ago: executing program 6 (id=4972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0xffc99a3b00000000, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3m35.766931746s ago: executing program 6 (id=4973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) r2 = userfaultfd(0x80801) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async, rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="e8da0b70de94907ea28b5cdc8243e43fec642d3711198d0d84216e66b570d96ff4aebb8727c68030", 0x28}], 0x1, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r4}, 0x0) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) (rerun: 32) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) close_range(r2, r5, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async, rerun: 32) read(r5, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000200)={{0xeeee8000, 0xdddd0000, 0x4, 0x8, 0x1, 0x81, 0xc, 0x4, 0xe4, 0xef, 0x2, 0x7}, {0xdddd1000, 0xeeef0000, 0x8, 0x3, 0x10, 0x0, 0x0, 0x7f, 0x1, 0x26, 0x3, 0xfa}, {0x5000, 0x3000, 0xe, 0xc0, 0x40, 0x0, 0x0, 0x56, 0x16, 0xf5, 0x5, 0x5}, {0xf000, 0x6000, 0xf, 0x4, 0x7, 0x2, 0x9, 0x61, 0x59, 0x6, 0x7, 0xe}, {0x1, 0x10000, 0x4, 0x6, 0x82, 0xb6, 0x9, 0x35, 0xc, 0x3, 0x8, 0x7}, {0xd000, 0x2000, 0x15, 0x1, 0x7, 0xd, 0x83, 0x21, 0x2, 0x59, 0x8, 0x4}, {0x10000, 0xeeee0000, 0xf, 0x9, 0x81, 0x8, 0xe7, 0xb, 0x9, 0xbe, 0x10, 0x4}, {0x0, 0x10000, 0x0, 0x5, 0x8, 0x10, 0x2, 0x5, 0x3, 0xf1, 0xa, 0x4}, {0x80b3000, 0x8}, {0x5000, 0x1}, 0x20010000, 0x0, 0xd000, 0x4301, 0x2, 0x1, 0x1000, 0x0, [0x512, 0x5, 0x6, 0x76c]}) (rerun: 64) 3m35.766683526s ago: executing program 6 (id=4974): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 3m35.759436077s ago: executing program 6 (id=4975): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) readahead(0xffffffffffffffff, 0xf, 0x3) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pread64(r6, &(0x7f0000000540)=""/202, 0xca, 0x6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r8, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 3m35.517378077s ago: executing program 8 (id=4980): unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'pimreg\x00', {}, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x59, "3e8a5f04f553a326abbc8afbcff0201ef20e35f20cc43523b4dbf8765b9a9b98e2d42f34d007d81b07dce9a0765fdf9f8d97b775f9d4abc981051619a6c792978f7918588af4d988e2ba8af2394a180786d7df16292ed8f5c4"}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x11, "283cbb2933ccc64805dc1856a6bc4babe1"}, 0x0}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x400000, 0xfffffffd}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x2000, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@private0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x17c}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f6e4ea40) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x3, 0x1000, 0x0, 0x6, 0x6]}, &(0x7f0000000080)=0x54) r6 = accept$inet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) 3m33.821457464s ago: executing program 8 (id=4996): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) r1 = getuid() mount$incfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2010, &(0x7f0000000480)={[{@rlog_pages={'rlog_pages', 0x3d, 0x468}}], [{@euid_gt={'euid>', r0}}, {@euid_lt={'euid<', r1}}, {@measure}, {@pcr={'pcr', 0x3d, 0x22}}]}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = getgid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100), 0x10) 3m33.820995033s ago: executing program 8 (id=4997): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = memfd_create(&(0x7f00000006c0)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb8\nR\xe8@\x99\xe8\x8e\x12\x1c\xb3U\xd7\xa4\x86\xe2\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5/\xae\xfa\xf8\xdd\xc8b', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0xff64000) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000034c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3m33.817870104s ago: executing program 8 (id=4998): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (rerun: 64) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x10000000, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf250100000000000000094100000014001800003b2b7564703a73797a3100000000d7e4a83b6d929498221e91e4cf76502f60cd70a2696f1655415b1c2ef8dd0311982b7d5a0cbab305cf4027782887205f64443b2a3e780ea32ebedcd172c934f09561c0a72012e6355081e84abd0700000000000000c859b61424d2eda4468e20a1807863f0de77b5c38386e97eeabfd891afb21ed8c398559fb8c131f1149962dc02ba3893a5372cd572bf185c9ae3487a3de54caee4a4e3cfb2af8c874d8333a196fafa5daceeb721be5d5031ee6e48d2199527a90e8964fd834f9374fd37d2f491b472d1cc852fc341ace624263e7354fbcc3fbb94380e5edf03035e9a566515bf8c136d32b44811db534d7b83cf7eb4435f8b6286247e010ebf1bc36f649194a6"], 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000004) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xc7) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x189a02, 0xb8) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) (rerun: 32) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) (async) r7 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) waitid(0x1, r7, 0x0, 0x4, 0x0) (async, rerun: 64) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (rerun: 64) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) creat(0x0, 0x0) (async) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) openat$cgroup_int(r8, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (rerun: 64) 3m32.968185962s ago: executing program 8 (id=5002): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) setresuid(0x0, 0xffffffffffffffff, 0xee01) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x121a02, 0x0) sendfile(r1, r1, &(0x7f0000000100)=0x9, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) futex(&(0x7f000000cffc)=0x1, 0x2, 0x0, 0x0, &(0x7f0000048000)=0x8000002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 3m32.696004724s ago: executing program 6 (id=5007): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000500)={{0x0, 0xa, 0x9, 0x4, 0x401, 0x2, 0x9, 0x8, 0x80000001, 0x36f, 0x2, 0x2, 0x4, 0x2, 0x9}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000020c0)={{r4, 0x4, 0x2, 0x4, 0x3, 0xdd7d, 0x9, 0xf, 0xc, 0x4, 0x5, 0x0, 0x8, 0x5, 0x10007ffc}}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r6, 0x1, 0x9, &(0x7f0000000040), 0x29) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000002000ff"], 0x54}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010004000000000000001000000018000180140002007665746830000000000000000000000008000f00"], 0x34}}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000072, 0x0, 0x8dfe}]}) sendfile(r1, r0, 0x0, 0x7ffff000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$KVM_GET_SREGS(r10, 0x8138ae83, &(0x7f0000000040)) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x26800, 0x0) write$cgroup_pressure(r11, &(0x7f0000000200)={'full', 0x20, 0x99b, 0x20, 0x267}, 0x2f) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x3}) 3m32.692755235s ago: executing program 8 (id=5008): eventfd(0x8000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x8f, 0xd, 0x5f, @empty, @remote, 0x1, 0x7800, 0x10, 0x81}}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x0, 0x3, 0x2}}, 0x2e) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) timerfd_create(0x1, 0x80800) ioctl$LOOP_CHANGE_FD(r2, 0x4c07, 0xffffffffffffffff) 3m32.603078152s ago: executing program 38 (id=5008): eventfd(0x8000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x8f, 0xd, 0x5f, @empty, @remote, 0x1, 0x7800, 0x10, 0x81}}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x0, 0x3, 0x2}}, 0x2e) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) timerfd_create(0x1, 0x80800) ioctl$LOOP_CHANGE_FD(r2, 0x4c07, 0xffffffffffffffff) 3m32.595293422s ago: executing program 6 (id=5011): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x2, 0x0, 0xc, 0x6109, 0xc3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) 3m16.79698698s ago: executing program 39 (id=5011): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x2, 0x0, 0xc, 0x6109, 0xc3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) 2m46.303988525s ago: executing program 4 (id=5364): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000a20000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0xd108c000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x8, 0x6, 0x700, 0x8, 0x100020}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000b75000/0x3000)=nil, 0x3000, 0x1) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="7478817e27913a3f7771b01c55d3feddecece65842b23ea2", 0x18}, {&(0x7f0000000240)="218a5f455c82b2401624b903da01b43ca20f798ba89661e28196ac3d42e00ff8e7815e5bc41803f67b13355e7d641805b11e38280ec38a063cdfc586f84fb4182e44db6ec51eb85402bcd3931329f0cce4582ffc9ae6eb7198f6fab2b14d97e2a6aea870", 0x64}, {&(0x7f0000002180)="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", 0x1000}], 0x3, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3cd8bf7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x78}, 0x4) madvise(&(0x7f00008ec000/0x2000)=nil, 0x2000, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000001cc0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000d, 0x80010, r2, 0x4052c000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) write$P9_RGETLOCK(r6, &(0x7f0000000500)={0x2d, 0x37, 0x1, {0x0, 0x1, 0xf7, r7, 0xf, '/dev/snd/timer\x00'}}, 0x2d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @remote}, {0x1}, 0x2e, {0x2, 0x4e22, @empty}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r8, &(0x7f0000000080)=""/101, 0x1d) getdents(r8, 0x0, 0x3b) 2m46.301446545s ago: executing program 4 (id=5365): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/23) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x39}) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 2m46.132901988s ago: executing program 4 (id=5370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a000000000000004012000000000000000000000000000100000000200002000a004e20f4fffffffe8000000000000000000000000000bb000000000d0001"], 0x6c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000140)={{0x1, 0x0, 0x80, {0x6000, 0x1000}}, "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", "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"}) socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x3}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000021c0)) 2m46.054687645s ago: executing program 4 (id=5374): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe2c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8ee49000) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x80000000, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) madvise(&(0x7f00006ce000/0x1000)=nil, 0x1000, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe2c02, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8ee49000) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xf, r1, 0x80000000, &(0x7f0000000500)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) (async) madvise(&(0x7f00006ce000/0x1000)=nil, 0x1000, 0xa) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 2m45.267701589s ago: executing program 4 (id=5396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000180)="1400000800", 0x5, 0x20000804, 0x0, 0x17) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x18a) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m45.161021178s ago: executing program 4 (id=5400): sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40880) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) unshare(0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r1, 0xff, 0x2) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="00214717eeec0b66ea3136a7076e00"/24, 0x18}], 0x1, 0xd, 0x1) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r5, 0x3000) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r3, 0xffffd000) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000440)=0x89, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)={0x0, r9, 0x8000000000000001, 0x7f, 0x6, 0x1}) setreuid(0x0, r8) cachestat(r2, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r10, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 2m45.13138469s ago: executing program 40 (id=5400): sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40880) r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) unshare(0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r1, 0xff, 0x2) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1840, 0x124, 0x8}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="00214717eeec0b66ea3136a7076e00"/24, 0x18}], 0x1, 0xd, 0x1) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r5, 0x3000) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r3, 0xffffd000) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000440)=0x89, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)={0x0, r9, 0x8000000000000001, 0x7f, 0x6, 0x1}) setreuid(0x0, r8) cachestat(r2, &(0x7f0000003a80)={0x80000001, 0x5e43}, 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r10, &(0x7f0000000400)="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", 0x1f000) 10.624544609s ago: executing program 2 (id=8923): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x2501) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0xfa, 0x4, 0x1, 0x3ff, "d27279f20743a8c600bc44611c99b43ccc38d69ee4d3bf959602dd51163c4fb3"}) 10.531233996s ago: executing program 2 (id=8926): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/netstat\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) 10.515747777s ago: executing program 2 (id=8928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1}, 0x20) 10.460239641s ago: executing program 2 (id=8929): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 10.459816592s ago: executing program 2 (id=8931): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 10.407025706s ago: executing program 2 (id=8937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x0, r2}) read$eventfd(r2, &(0x7f0000000040), 0x8) 10.370587729s ago: executing program 41 (id=8937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x0, r2}) read$eventfd(r2, &(0x7f0000000040), 0x8) 3.444069791s ago: executing program 1 (id=9112): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000080)=@ieee802154, &(0x7f0000000000)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) 3.308765132s ago: executing program 1 (id=9123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 3.252397676s ago: executing program 1 (id=9126): readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) 3.252204267s ago: executing program 1 (id=9128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x81}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000051}}], 0x2, 0x0) 3.138475486s ago: executing program 1 (id=9135): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1, 0x6, 0x0, 0x10) 3.116425268s ago: executing program 1 (id=9136): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x14b442, 0x113) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) 1.299078955s ago: executing program 0 (id=9168): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) syz_clone3(&(0x7f000000dd80)={0x200a00500, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.249565379s ago: executing program 0 (id=9169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x3, 0x80}, {0x19, 0x1, 0x0, '\x00', 0x10}, {0x20, 0x4, 0x0, '\x00', 0x8}, {0x5, 0x1, 0xff, '\x00', 0x4}, {0x3, 0x0, 0x5, '\x00', 0x9}, {0x0, 0x1}, {0x0, 0xb, 0xbe}, {0x0, 0x6, 0x0, '\x00', 0xeb}, {0x0, 0x0, 0x3, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x80}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x7}, {0xfe, 0x2, 0x4, '\x00', 0x9}, {0x0, 0x5f}, {0x1, 0x3, 0x81, '\x00', 0x4}, {0xc, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x1, 0x8, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x50, 0x83, 0x10}]}}) 1.164268066s ago: executing program 0 (id=9170): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/19, 0x13}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.125168569s ago: executing program 0 (id=9171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x6, 0x80000001, 0x2, 0xc000000}]}) 960.060023ms ago: executing program 0 (id=9174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1c, 0x0, 0x0) 959.925902ms ago: executing program 0 (id=9175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x81044804, &(0x7f0000000100)="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") 890.305408ms ago: executing program 5 (id=9177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xf000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x1a, 0x0, 0xfc, 0x86, 0xfe}, {0x1000, 0x80a0000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x80, 0x0, 0x4, 0x0, 0x10}, {0x0, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x4001, 0x900, [0x0, 0x4, 0x10000, 0x3]}) 808.193045ms ago: executing program 5 (id=9178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x10005, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x800000000000a, 0x0, 0x8, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 771.946778ms ago: executing program 5 (id=9179): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000180)={0x3, 0x10000, 0x2}) 712.367263ms ago: executing program 5 (id=9180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40001101, 0x0, 0x0) 660.321247ms ago: executing program 5 (id=9181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="010000000000000021000040"]) 652.193867ms ago: executing program 5 (id=9182): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) wait4(r0, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) 112.357911ms ago: executing program 9 (id=9185): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigpending(0xfffffffffffffffe, 0x0) 84.732784ms ago: executing program 9 (id=9186): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x21) 20.308489ms ago: executing program 9 (id=9187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) syz_open_dev$evdev(&(0x7f0000000780), 0x3ff, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 20.165829ms ago: executing program 9 (id=9188): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) 20.082929ms ago: executing program 9 (id=9189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x80000000, 0x1}) 0s ago: executing program 9 (id=9190): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) kernel console output (not intermixed with test programs): [T18415] tipc: Started in network mode [ 445.104912][T18415] tipc: Node identity 8f, cluster identity 6 [ 445.111112][T18415] tipc: Node number set to 143 [ 445.115988][T18415] tipc: Cannot configure node identity twice [ 445.193040][T18419] fuse: Unknown parameter 'use00000000000000000000' [ 445.325988][T18441] fuse: Unknown parameter 'use00000000000000000000' [ 445.448631][T18455] bridge0: port 3(ip6gretap0) entered blocking state [ 445.455500][T18455] bridge0: port 3(ip6gretap0) entered disabled state [ 445.462508][T18455] ip6gretap0: entered allmulticast mode [ 445.468453][T18455] ip6gretap0: entered promiscuous mode [ 445.474362][T18455] bridge0: port 3(ip6gretap0) entered blocking state [ 445.481199][T18455] bridge0: port 3(ip6gretap0) entered forwarding state [ 445.490001][T18455] fuse: Bad value for 'fd' [ 445.559066][T18458] netlink: 'syz.1.5993': attribute type 4 has an invalid length. [ 445.568790][T18458] netlink: 'syz.1.5993': attribute type 4 has an invalid length. [ 446.256716][T18490] 9pnet_fd: Insufficient options for proto=fd [ 446.716369][T18519] 9pnet_fd: Insufficient options for proto=fd [ 446.949127][T18538] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6019'. [ 446.958307][T18538] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6019'. [ 446.967404][T18538] netlink: 'syz.1.6019': attribute type 5 has an invalid length. [ 446.975304][T18538] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6019'. [ 447.053109][T18546] netlink: 'syz.1.6022': attribute type 3 has an invalid length. [ 447.407293][T18597] /dev/rnullb0: Can't lookup blockdev [ 447.455181][T18603] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=18603 comm=syz.9.6044 [ 447.756945][T18625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18625 comm=syz.2.6052 [ 447.853971][T18638] fuse: Unknown parameter 'user_i00000000000000000000' [ 447.873306][T18640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6057'. [ 447.892977][T18643] cgroup: Unknown parameter 'j*&PrRqQ^/k֦' [ 447.914330][T18645] fuse: Bad value for 'fd' [ 447.987730][T18661] fuse: Unknown parameter 'user_id00000000000000000000' [ 447.992766][ T36] audit: type=1326 audit(2000000340.811:17517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18662 comm="syz.1.6066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 448.074419][T18678] /dev/loop0: Can't lookup blockdev [ 448.203742][T18689] fuse: Unknown parameter 'user_id00000000000000000000' [ 448.229340][T18691] overlayfs: failed to clone upperpath [ 448.305509][T18701] netlink: 'syz.2.6081': attribute type 4 has an invalid length. [ 448.313771][T18701] netlink: 'syz.2.6081': attribute type 4 has an invalid length. [ 448.436978][T18707] overlayfs: failed to clone upperpath [ 448.457223][T18709] fuse: Unknown parameter 'user_id00000000000000000000' [ 448.511214][T18719] netlink: 'syz.2.6089': attribute type 27 has an invalid length. [ 448.778208][T18736] overlayfs: failed to clone upperpath [ 448.796040][T18740] fuse: Bad value for 'fd' [ 448.848772][T18752] netlink: 'syz.1.6099': attribute type 4 has an invalid length. [ 448.857649][T18753] netlink: 'syz.1.6099': attribute type 4 has an invalid length. [ 448.867501][T18753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18753 comm=syz.1.6099 [ 448.920317][T18762] tipc: Started in network mode [ 448.925319][T18762] tipc: Node identity 7f000001, cluster identity 4711 [ 448.932586][T18762] tipc: Enabled bearer , priority 10 [ 448.951596][T18766] fuse: Bad value for 'fd' [ 449.492621][T18790] fuse: Bad value for 'fd' [ 450.060217][ T10] tipc: Node number set to 2130706433 [ 450.142154][T18817] fuse: Unknown parameter '0x0000000000000003' [ 450.201083][T18825] tmpfs: Bad value for 'huge' [ 450.372278][T18846] fuse: Unknown parameter '0x0000000000000003' [ 450.549226][T18873] fuse: Unknown parameter '0x0000000000000003' [ 450.959316][T18900] batadv_slave_0: entered promiscuous mode [ 450.966639][T18900] batadv_slave_0: left promiscuous mode [ 451.075416][T18909] veth0: mtu less than device minimum [ 451.144515][T18913] veth1_vlan: mtu greater than device maximum [ 451.152375][T18915] fuseblk: Bad value for 'fd' [ 451.310503][ T36] audit: type=1326 audit(2000000344.131:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18929 comm="syz.1.6162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 451.794443][T18956] overlayfs: failed to clone upperpath [ 451.832996][T18967] 9pnet: p9_errstr2errno: server reported unknown error [ 453.293235][ T36] audit: type=1400 audit(2000000346.111:17519): avc: denied { lock } for pid=19027 comm="syz.5.6196" path="socket:[80916]" dev="sockfs" ino=80916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 454.239942][T19088] tipc: Enabling not permitted [ 454.245599][T19088] tipc: Enabling of bearer rejected, failed to enable media [ 454.382448][T19101] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.492667][T19116] /dev/loop2: Can't lookup blockdev [ 454.517043][T19118] netlink: 'syz.2.6228': attribute type 64 has an invalid length. [ 454.573575][ T36] audit: type=1326 audit(2000000347.391:17520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.2.6231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e1798ebe9 code=0x0 [ 456.868856][T19206] overlayfs: failed to clone upperpath [ 457.095991][T19223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6265'. [ 457.212559][T19241] netlink: 'syz.1.6271': attribute type 4 has an invalid length. [ 457.222044][T19241] netlink: 'syz.1.6271': attribute type 4 has an invalid length. [ 457.267570][ T36] audit: type=1400 audit(2000000350.081:17521): avc: denied { map } for pid=19248 comm="syz.5.6275" path="socket:[80240]" dev="sockfs" ino=80240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 457.766458][T19287] netlink: 'syz.2.6289': attribute type 12 has an invalid length. [ 457.997900][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6299'. [ 458.024692][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6301'. [ 458.046143][T19320] netlink: 8568 bytes leftover after parsing attributes in process `syz.9.6302'. [ 458.313319][T19391] 9pnet_fd: Insufficient options for proto=fd [ 458.368324][T19393] /dev/loop0: Can't lookup blockdev [ 458.458544][T19398] overlayfs: failed to clone lowerpath [ 458.532565][T19400] overlayfs: failed to clone upperpath [ 458.835574][T19414] /dev/loop0: Can't lookup blockdev [ 459.216338][T19438] overlayfs: failed to clone upperpath [ 459.417539][T19448] overlayfs: failed to clone upperpath [ 459.482068][ T36] audit: type=1400 audit(2000000352.301:17522): avc: denied { read } for pid=19457 comm="syz.5.6331" path="socket:[81355]" dev="sockfs" ino=81355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 459.841227][T19532] 9p: Unknown access argument 18446744073709551615: -34 [ 459.856335][T19535] fuse: Unknown parameter 'rootmodm' [ 459.957580][T19544] netlink: 'syz.2.6365': attribute type 16 has an invalid length. [ 459.965506][T19544] netlink: 'syz.2.6365': attribute type 2 has an invalid length. [ 459.973339][T19544] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.6365'. [ 460.171100][T19561] 9pnet_fd: Insufficient options for proto=fd [ 460.482216][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6382'. [ 460.946571][T19615] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6386'. [ 463.154985][T19689] tipc: Enabled bearer , priority 10 [ 464.238283][T19715] can: request_module (can-proto-6) failed. [ 464.280210][ T9931] tipc: Node number set to 4278321153 [ 464.526399][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6443'. [ 466.526829][T19801] tipc: Enabling of bearer rejected, media not registered [ 467.626049][T19856] tipc: Enabling of bearer rejected, failed to enable media [ 474.378664][ T36] audit: type=1326 audit(2000000367.191:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20177 comm="syz.9.6647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x0 [ 475.198306][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6659'. [ 475.543426][ T36] audit: type=1326 audit(2000000368.311:17524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20217 comm="syz.1.6665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 476.334729][T20271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6689'. [ 476.368105][ T36] audit: type=1326 audit(2000000369.181:17525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20274 comm="syz.1.6691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 476.693603][ T36] audit: type=1326 audit(2000000369.511:17526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20291 comm="syz.2.6697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e1798ebe9 code=0x0 [ 477.221615][T20301] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6700'. [ 477.230979][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6700'. [ 477.386123][ T36] audit: type=1400 audit(2000000370.201:17527): avc: denied { read } for pid=20315 comm="syz.5.6707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 478.413915][ T36] audit: type=1326 audit(2000000371.231:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20368 comm="syz.1.6730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 479.791897][ T36] audit: type=1326 audit(2000000372.611:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20406 comm="syz.2.6746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e1798ebe9 code=0x0 [ 480.146283][T20421] 9pnet_fd: Insufficient options for proto=fd [ 480.186459][T20427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6755'. [ 480.422644][T20436] netlink: 300 bytes leftover after parsing attributes in process `syz.9.6760'. [ 480.698256][T20478] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6778'. [ 481.312616][T20527] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6802'. [ 481.321812][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6802'. [ 481.341407][ T36] audit: type=1326 audit(2000000374.161:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.1.6803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a898ebe9 code=0x0 [ 482.725544][ T36] audit: type=1326 audit(2000000375.541:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.759479][ T36] audit: type=1326 audit(2000000375.541:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.785899][ T36] audit: type=1326 audit(2000000375.541:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.820833][ T36] audit: type=1326 audit(2000000375.541:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.839958][T20673] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 482.848569][ T36] audit: type=1326 audit(2000000375.541:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.877579][ T36] audit: type=1326 audit(2000000375.541:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.901332][ T36] audit: type=1326 audit(2000000375.541:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 482.927428][ T36] audit: type=1326 audit(2000000375.541:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20658 comm="syz.9.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f535418ebe9 code=0x7ffc0000 [ 483.556315][T20731] overlayfs: failed to clone upperpath [ 483.593578][T20736] tipc: Enabling of bearer rejected, failed to enable media [ 483.990205][T20759] overlayfs: failed to clone upperpath [ 484.696377][T20803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6930'. [ 484.721560][T20808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6931'. [ 484.730913][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 484.740446][T20809] 9pnet_fd: Insufficient options for proto=fd [ 484.767983][T20813] incfs: Error accessing: ./file0/file0. [ 484.773792][T20813] incfs: mount failed -20 [ 485.280491][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 485.280513][ T36] audit: type=1326 audit(2000000378.101:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.5.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99838ebe9 code=0x7ffc0000 [ 485.310499][ T36] audit: type=1326 audit(2000000378.101:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.5.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99838ebe9 code=0x7ffc0000 [ 485.339491][ T36] audit: type=1326 audit(2000000378.111:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.5.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc99838ebe9 code=0x7ffc0000 [ 485.363752][ T36] audit: type=1326 audit(2000000378.111:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.5.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99838ebe9 code=0x7ffc0000 [ 486.752587][ T36] audit: type=1400 audit(2000000379.571:17553): avc: denied { mounton } for pid=20937 comm="syz.5.6995" path="/356/file0" dev="tmpfs" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 487.569341][T20987] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.580198][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.587731][T20987] bridge_slave_0: entered allmulticast mode [ 487.594275][T20987] bridge_slave_0: entered promiscuous mode [ 487.605115][T20987] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.612303][T20987] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.619495][T20987] bridge_slave_1: entered allmulticast mode [ 487.626043][T20987] bridge_slave_1: entered promiscuous mode [ 487.686508][T20992] tipc: Started in network mode [ 487.691440][T20992] tipc: Node identity 2d14140f, cluster identity 4711 [ 487.698284][T20992] tipc: Enabling of bearer rejected, failed to enable media [ 487.713934][T20987] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.721127][T20987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.728438][T20987] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.735534][T20987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.759748][ T2804] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.767072][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.778932][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.786060][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.795227][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.802293][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.830993][T20987] veth0_vlan: entered promiscuous mode [ 487.842597][T20987] veth1_macvtap: entered promiscuous mode [ 488.122480][T21014] tipc: Enabling of bearer rejected, failed to enable media [ 488.143138][T21016] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7026'. [ 488.152236][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7026'. [ 488.161423][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 488.450441][ T45] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 488.600198][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 488.606529][ T45] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 488.616622][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 488.624839][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 488.633976][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.642110][ T45] usb 2-1: Product: syz [ 488.646295][ T45] usb 2-1: Manufacturer: syz [ 488.650957][ T45] usb 2-1: SerialNumber: syz [ 488.656704][T21026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.781131][T21050] netlink: 168 bytes leftover after parsing attributes in process `syz.9.7042'. [ 488.846589][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7044'. [ 488.855783][T21054] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7044'. [ 488.866216][T21054] netlink: 'syz.5.7044': attribute type 3 has an invalid length. [ 488.872335][ T45] usb 2-1: USB disconnect, device number 72 [ 488.883342][T21054] netlink: 'syz.5.7044': attribute type 2 has an invalid length. [ 488.891299][T21054] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7044'. [ 489.543090][T21085] overlayfs: failed to clone upperpath [ 490.474998][ T2801] ip6gretap0: left allmulticast mode [ 490.480390][ T2801] ip6gretap0: left promiscuous mode [ 490.485753][ T2801] bridge0: port 3(ip6gretap0) entered disabled state [ 490.492969][ T2801] bridge_slave_1: left allmulticast mode [ 490.498690][ T2801] bridge_slave_1: left promiscuous mode [ 490.504452][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.511976][ T2801] bridge_slave_0: left allmulticast mode [ 490.517690][ T2801] bridge_slave_0: left promiscuous mode [ 490.523579][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.703714][ T2801] tipc: Disabling bearer [ 490.709176][ T2801] tipc: Left network mode [ 490.810198][ T45] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 490.822029][ T2801] veth1_macvtap: left promiscuous mode [ 490.827557][ T2801] veth0_vlan: left promiscuous mode [ 490.960238][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 490.966776][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 490.977948][ T45] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.988160][ T45] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 491.001398][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.008051][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 491.018100][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.028342][ T45] usb 2-1: config 0 descriptor?? [ 491.441029][ T45] wacom 0003:056A:0015.001E: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 491.451898][ T45] wacom 0003:056A:0015.001E: hidraw0: USB HID v0.21 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0 [ 491.465515][ T45] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.001E/input/input42 [ 491.646655][ T65] usb 2-1: USB disconnect, device number 73 [ 492.420215][ T62] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 492.581352][ T62] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.591741][ T62] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 492.601083][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.610671][ T62] usb 2-1: config 0 descriptor?? [ 494.672118][T21341] fuse: Invalid rootmode [ 495.204984][ T65] usb 2-1: USB disconnect, device number 74 [ 495.550300][ T65] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 495.700241][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 495.706623][ T65] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 495.717643][ T65] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.727865][ T65] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 495.740940][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 495.747573][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 495.756689][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.766250][ T65] usb 2-1: config 0 descriptor?? [ 496.177191][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 496.190220][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 496.215999][ T65] usb 2-1: USB disconnect, device number 75 [ 496.794429][T21430] random: crng reseeded on system resumption [ 497.463655][T21463] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.477098][T21463] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.485481][T21463] bridge_slave_0: entered allmulticast mode [ 497.493138][T21463] bridge_slave_0: entered promiscuous mode [ 497.500097][T21463] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.507497][T21463] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.514893][T21463] bridge_slave_1: entered allmulticast mode [ 497.521773][T21463] bridge_slave_1: entered promiscuous mode [ 497.603709][T21463] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.610908][T21463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.618218][T21463] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.625401][T21463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.660606][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.670798][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.708282][ T2805] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.715355][ T2805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.743335][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.750539][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.806599][T21463] veth0_vlan: entered promiscuous mode [ 497.833636][T21463] veth1_macvtap: entered promiscuous mode [ 498.042577][T21497] can: request_module (can-proto-6) failed. [ 498.065017][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7239'. [ 498.090366][ T45] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 498.250201][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 498.256997][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 498.267868][ T45] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.277714][ T45] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 498.290778][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 498.297415][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 498.306552][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.315315][ T45] usb 2-1: config 0 descriptor?? [ 498.360221][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 498.521279][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.534274][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.544205][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.557211][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.566315][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.575197][ T9] usb 3-1: config 0 descriptor?? [ 498.614137][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7249'. [ 498.735597][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 498.741664][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 498.750743][ T45] usb 2-1: USB disconnect, device number 76 [ 498.983247][ T9] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 498.993445][ T9] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 499.243941][ T9] usb 3-1: USB disconnect, device number 10 [ 499.335829][T21551] tipc: Started in network mode [ 499.340914][T21551] tipc: Node identity ac14142f, cluster identity 4711 [ 499.347840][T21551] tipc: New replicast peer: 0.0.0.0 [ 499.353691][T21551] tipc: Enabled bearer , priority 10 [ 499.759623][T21574] tipc: Started in network mode [ 499.764860][T21574] tipc: Node identity ac14142f, cluster identity 4711 [ 499.772358][T21574] tipc: New replicast peer: 0.0.0.0 [ 499.778076][T21574] tipc: Enabled bearer , priority 10 [ 500.350179][ T331] tipc: Node number set to 2886997039 [ 500.788023][T21609] SELinux: policydb string length 1392508936 does not match expected length 8 [ 500.797154][T21609] SELinux: failed to load policy [ 500.890203][ T45] tipc: Node number set to 2886997039 [ 501.080196][ T65] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 501.120207][ T331] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 501.230180][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 501.236459][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.246658][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.257488][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.266603][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.274679][ T65] usb 2-1: Product: syz [ 501.278908][ T65] usb 2-1: Manufacturer: syz [ 501.280185][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 501.283543][ T65] usb 2-1: SerialNumber: syz [ 501.290398][ T331] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 501.301670][ T331] usb 3-1: config 0 has no interface number 0 [ 501.307783][ T331] usb 3-1: config 0 interface 184 has no altsetting 0 [ 501.316383][ T331] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 501.325522][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.333581][ T331] usb 3-1: Product: syz [ 501.337773][ T331] usb 3-1: Manufacturer: syz [ 501.342485][ T331] usb 3-1: SerialNumber: syz [ 501.347929][ T331] usb 3-1: config 0 descriptor?? [ 501.353864][ T331] smsc75xx v1.0.0 [ 501.697780][ T65] usb 2-1: 0:2 : does not exist [ 501.707442][ T65] usb 2-1: USB disconnect, device number 77 [ 501.721460][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 502.088083][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7305'. [ 502.218694][T21642] netlink: 'syz.1.7307': attribute type 3 has an invalid length. [ 502.520243][ T65] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 502.557532][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 502.568418][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 502.577924][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 502.588853][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 502.598598][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 502.608954][ T331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 502.618520][ T331] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 502.628823][ T331] usb 3-1: USB disconnect, device number 11 [ 502.670283][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 502.678942][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 502.688071][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.696552][ T65] usb 2-1: Product: syz [ 502.700922][ T65] usb 2-1: Manufacturer: syz [ 502.705554][ T65] usb 2-1: SerialNumber: syz [ 502.712367][ T65] r8152-cfgselector 2-1: Unknown version 0x0000 [ 503.226768][T21672] overlayfs: failed to resolve './file1/file0': -2 [ 503.393069][T21674] netlink: 'syz.9.7322': attribute type 3 has an invalid length. [ 504.158748][T21711] netlink: 'syz.9.7340': attribute type 3 has an invalid length. [ 504.408158][T21731] netlink: 'syz.5.7349': attribute type 3 has an invalid length. [ 504.625170][ T36] audit: type=1400 audit(2000000397.441:17554): avc: denied { read } for pid=21748 comm="syz.2.7357" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 504.647745][ T36] audit: type=1400 audit(2000000397.441:17555): avc: denied { open } for pid=21748 comm="syz.2.7357" path="/30/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 504.684061][T21756] netlink: 'syz.2.7360': attribute type 4 has an invalid length. [ 504.694054][T21756] netlink: 'syz.2.7360': attribute type 4 has an invalid length. [ 505.091977][T21776] overlayfs: failed to clone upperpath [ 505.299636][ T45] r8152-cfgselector 2-1: USB disconnect, device number 78 [ 505.383967][T21795] 9pnet_fd: Insufficient options for proto=fd [ 505.498038][T21815] fuse: Bad value for 'fd' [ 505.825875][T21842] bridge0: mtu greater than device maximum [ 506.505559][ T36] audit: type=1400 audit(2000000399.321:17556): avc: denied { write } for pid=21906 comm="syz.1.7430" name="file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 506.951653][T21938] netlink: 'syz.9.7443': attribute type 3 has an invalid length. [ 508.504819][T22014] netlink: 'syz.5.7472': attribute type 3 has an invalid length. [ 509.080212][ T36] audit: type=1400 audit(2000000401.891:17557): avc: denied { mounton } for pid=22042 comm="syz.1.7483" path="/66/file0/file1" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 509.540728][T22032] 9pnet_fd: p9_fd_create_tcp (22032): problem connecting socket to 127.0.0.1 [ 510.166273][T22113] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.173452][T22113] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.190280][T22113] bridge_slave_0: entered allmulticast mode [ 510.196972][T22113] bridge_slave_0: entered promiscuous mode [ 510.202905][ T9931] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 510.211956][T22113] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.219343][T22113] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.226621][T22113] bridge_slave_1: entered allmulticast mode [ 510.233232][T22113] bridge_slave_1: entered promiscuous mode [ 510.360324][ T9931] usb 3-1: Using ep0 maxpacket: 16 [ 510.367153][ T9931] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 510.376910][ T9931] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 57, changing to 7 [ 510.387981][ T9931] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 49964, setting to 1024 [ 510.399675][ T9931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.408113][ T9931] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 510.417329][ T9931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.425467][ T9931] usb 3-1: Product: syz [ 510.429660][ T9931] usb 3-1: Manufacturer: syz [ 510.434348][ T9931] usb 3-1: SerialNumber: syz [ 510.439480][ T2804] bridge_slave_1: left allmulticast mode [ 510.445582][ T9931] usb 3-1: config 0 descriptor?? [ 510.445625][ T2804] bridge_slave_1: left promiscuous mode [ 510.456426][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.469172][ T2804] bridge_slave_0: left allmulticast mode [ 510.475130][ T2804] bridge_slave_0: left promiscuous mode [ 510.480971][ T2804] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.604819][ T2804] tipc: Left network mode [ 510.611560][ T2804] veth1_macvtap: left promiscuous mode [ 510.617077][ T2804] veth0_vlan: left promiscuous mode [ 510.668303][T22113] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.675395][T22113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.682710][T22113] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.689754][T22113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.730757][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.742364][ T2805] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.749468][ T2805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.783991][T22113] veth0_vlan: entered promiscuous mode [ 510.795915][T22113] veth1_macvtap: entered promiscuous mode [ 511.082941][T22179] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7540'. [ 511.092322][T22179] netlink: 'syz.5.7540': attribute type 1 has an invalid length. [ 511.660220][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 511.810471][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 511.817132][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 511.828433][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.838939][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.848844][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 511.860308][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 511.870566][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 511.879779][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.888555][ T10] usb 10-1: config 0 descriptor?? [ 511.893966][T22175] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 512.214197][T22224] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7561'. [ 512.383550][T22253] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7575'. [ 512.973536][ T9931] usb 3-1: USB disconnect, device number 12 [ 513.002458][T22283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.430234][ T9931] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 513.581458][ T9931] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 513.589697][ T9931] usb 3-1: config 0 has no interface number 0 [ 513.595930][ T9931] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 513.608427][ T9931] usb 3-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=85.fd [ 513.617585][ T9931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.625640][ T9931] usb 3-1: Product: syz [ 513.630003][ T9931] usb 3-1: Manufacturer: syz [ 513.634914][ T9931] usb 3-1: SerialNumber: syz [ 513.638594][T22316] 9pnet_fd: Insufficient options for proto=fd [ 513.646115][ T9931] usb 3-1: config 0 descriptor?? [ 513.654692][ T9931] usb 3-1: Found UVC 0.00 device syz (05e3:0505) [ 513.661372][ T9931] usb 3-1: No valid video chain found. [ 513.856594][ T9931] usb 3-1: USB disconnect, device number 13 [ 513.867926][T22336] netlink: 'syz.1.7614': attribute type 3 has an invalid length. [ 514.069238][ T65] usb 10-1: USB disconnect, device number 10 [ 514.121204][ T36] audit: type=1400 audit(2000000407.944:17558): avc: denied { append } for pid=22365 comm="syz.9.7628" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 514.474319][T22379] netlink: 'syz.5.7634': attribute type 3 has an invalid length. [ 514.650225][ T62] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 514.810168][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 514.816808][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.828202][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.838055][ T62] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 514.847151][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.856257][ T62] usb 3-1: config 0 descriptor?? [ 515.030195][ T9931] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 515.181907][ T9931] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 515.193683][ T9931] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.206054][ T9931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.214489][ T9931] usb 10-1: Product: syz [ 515.218852][ T9931] usb 10-1: Manufacturer: syz [ 515.225821][ T9931] usb 10-1: SerialNumber: syz [ 515.265599][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x6 [ 515.274266][ T62] apple 0003:05AC:024B.0020: ignoring exceeding usage max [ 515.284091][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.291432][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.298418][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.305467][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.312503][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.319475][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.326595][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.333992][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.341100][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.348087][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.355305][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.362760][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.370003][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.377020][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.384074][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.391037][ T36] audit: type=1326 audit(2000000410.208:17559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.1.7666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6d058ebe9 code=0x0 [ 515.414477][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.421567][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.428477][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.435551][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.442875][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.450884][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.451296][ T9931] cdc_ncm 10-1:1.0: bind() failure [ 515.457879][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.465047][ T9931] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 515.470772][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.478893][ T9931] cdc_ncm 10-1:1.1: bind() failure [ 515.485801][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.493265][ T9931] usb 10-1: USB disconnect, device number 11 [ 515.496422][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.509559][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.517840][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.525168][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.532199][ T62] apple 0003:05AC:024B.0020: unknown main item tag 0x0 [ 515.540104][ T62] apple 0003:05AC:024B.0020: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 515.554951][ T62] usb 3-1: USB disconnect, device number 14 [ 515.567226][T22451] fido_id[22451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 517.150203][ T45] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 517.300189][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 517.306787][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.317977][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.328138][ T45] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 517.337493][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.346491][ T45] usb 10-1: config 0 descriptor?? [ 517.530181][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 517.681322][ T31] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 517.689513][ T31] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 517.699867][ T31] usb 3-1: config 0 has no interface number 0 [ 517.707614][ T31] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 517.716760][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.724808][ T31] usb 3-1: Product: syz [ 517.728991][ T31] usb 3-1: Manufacturer: syz [ 517.733635][ T31] usb 3-1: SerialNumber: syz [ 517.739019][ T31] usb 3-1: config 0 descriptor?? [ 517.754851][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.761862][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.768782][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.775732][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.782713][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.789610][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.796529][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.803454][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.810424][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.817470][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.824471][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.831422][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.838321][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.845245][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.852203][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.859089][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.866016][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.872958][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.879881][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.886895][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.894344][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.901281][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.908191][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.915192][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.922354][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.929691][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.936640][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.943746][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.950732][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.957638][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.965973][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.973754][ T31] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 517.980464][ T31] usb 3-1: No valid video chain found. [ 517.986445][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 517.994227][ T31] usb 3-1: USB disconnect, device number 15 [ 518.000355][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.007275][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.016257][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.023481][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.030841][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.038309][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.045751][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.053175][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.060305][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.067243][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.074245][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.081184][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.088193][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.095257][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.102347][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.109341][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.116276][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.123217][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.130259][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.137165][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.144204][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.151175][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.158063][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.165109][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.172323][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.179490][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.186982][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.194062][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.201146][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.208104][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.215075][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.222188][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.229177][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.236092][ T45] apple 0003:05AC:024B.0021: unknown main item tag 0x0 [ 518.248898][ T45] apple 0003:05AC:024B.0021: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.9-1/input0 [ 518.269050][ T45] usb 10-1: USB disconnect, device number 12 [ 518.285407][T22596] fido_id[22596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 518.710048][T22628] netlink: 'syz.5.7747': attribute type 4 has an invalid length. [ 518.720895][T22628] netlink: 'syz.5.7747': attribute type 4 has an invalid length. [ 518.811317][ T36] audit: type=1400 audit(2000000413.628:17560): avc: denied { setattr } for pid=22644 comm="syz.2.7755" name="/" dev="configfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 518.889144][T22655] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7760'. [ 519.083875][T22679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7771'. [ 519.240187][ T65] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 519.400168][ T65] usb 10-1: Using ep0 maxpacket: 8 [ 519.406568][ T65] usb 10-1: config 0 has no interfaces? [ 519.413717][ T65] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 519.422934][ T65] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.431116][ T65] usb 10-1: Product: syz [ 519.435396][ T65] usb 10-1: Manufacturer: syz [ 519.440173][ T65] usb 10-1: SerialNumber: syz [ 519.450273][ T65] usb 10-1: config 0 descriptor?? [ 519.464868][T22704] syzkaller0: entered promiscuous mode [ 519.470535][T22704] syzkaller0: entered allmulticast mode [ 519.660491][ T45] usb 10-1: USB disconnect, device number 13 [ 519.760220][ T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 519.911295][ T65] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.925726][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.932687][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 519.941951][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.951026][ T65] usb 3-1: config 0 descriptor?? [ 520.363246][ T65] wacom 0003:056A:00BA.0022: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 520.380998][ T65] wacom 0003:056A:00BA.0022: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.2-1/input0 [ 520.393520][ T65] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BA.0022/input/input45 [ 520.563310][ T502] usb 3-1: USB disconnect, device number 16 [ 521.580171][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 521.740192][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 521.746836][ T65] usb 3-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 521.758310][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 521.767478][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.781892][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.791038][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.799040][ T65] usb 3-1: Product: syz [ 521.803244][ T65] usb 3-1: Manufacturer: syz [ 521.833102][ T65] usb 3-1: SerialNumber: syz [ 522.044149][ T65] cdc_ncm 3-1:1.0: skipping garbage [ 522.049428][ T65] cdc_ncm 3-1:1.0: skipping garbage [ 522.054742][ T65] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 522.061590][ T65] cdc_ncm 3-1:1.0: bind() failure [ 522.069035][ T65] usb 3-1: USB disconnect, device number 17 [ 522.842229][T22870] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.849344][T22870] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.856510][T22870] bridge_slave_0: entered allmulticast mode [ 522.863007][T22870] bridge_slave_0: entered promiscuous mode [ 522.869457][T22870] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.876576][T22870] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.883759][T22870] bridge_slave_1: entered allmulticast mode [ 522.890470][T22870] bridge_slave_1: entered promiscuous mode [ 522.944434][T22870] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.950201][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 522.951530][T22870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.966420][T22870] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.973504][T22870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.997338][ T2802] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.004766][ T2802] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.016261][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.023363][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.032744][ T2802] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.039824][ T2802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.069618][T22870] veth0_vlan: entered promiscuous mode [ 523.082255][T22870] veth1_macvtap: entered promiscuous mode [ 523.101829][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.112685][ T45] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 523.121210][ T45] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 523.132312][ T45] usb 3-1: config 129 has no interface number 0 [ 523.138616][ T45] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 523.151900][ T45] usb 3-1: config 129 interface 135 has no altsetting 0 [ 523.160344][ T45] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 523.169448][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.177834][ T45] usb 3-1: Product: syz [ 523.182095][ T45] usb 3-1: Manufacturer: 巁焙骛綿 [ 523.188249][ T45] usb 3-1: SerialNumber: syz [ 523.399841][ T45] usb 3-1: USB disconnect, device number 18 [ 523.450309][ T331] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 523.554663][T22910] kvm: kvm [22909]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x3030303030303030 [ 523.600333][ T331] usb 6-1: Using ep0 maxpacket: 8 [ 523.606683][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 523.620070][ T331] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 523.629205][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.640287][ T331] usb 6-1: config 0 descriptor?? [ 523.703328][T22916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 524.020524][T22943] can: request_module (can-proto-6) failed. [ 524.022864][T22945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7889'. [ 524.050367][ T65] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 524.052954][ T331] hid-generic 0003:1B1C:1B09.0023: ignoring exceeding usage max [ 524.080818][ T331] hid-generic 0003:1B1C:1B09.0023: unknown main item tag 0x0 [ 524.088571][ T331] hid-generic 0003:1B1C:1B09.0023: unknown main item tag 0x0 [ 524.104223][ T331] hid-generic 0003:1B1C:1B09.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.5-1/input0 [ 524.201264][ T65] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.215450][ T65] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.225539][ T65] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.235298][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.243518][ T65] usb 10-1: SerialNumber: syz [ 524.257918][ T331] usb 6-1: USB disconnect, device number 25 [ 524.322741][T22985] tipc: Enabling of bearer rejected, media not registered [ 524.381657][T22988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7911'. [ 524.457559][ T65] usb 10-1: 0:2 : does not exist [ 524.469562][ T65] usb 10-1: USB disconnect, device number 14 [ 524.484761][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 524.592130][T23010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7922'. [ 525.079880][ T331] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 525.321577][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.329721][ T331] usb 3-1: not running at top speed; connect to a high speed hub [ 525.338303][ T331] usb 3-1: config 1 interface 0 has no altsetting 0 [ 525.346508][ T331] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 525.355658][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.363748][ T331] usb 3-1: Product: syz [ 525.367965][ T331] usb 3-1: Manufacturer: syz [ 525.372632][ T331] usb 3-1: SerialNumber: syz [ 525.582876][ T331] usbhid 3-1:1.0: can't add hid device: -71 [ 525.588960][ T331] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 525.598253][ T331] usb 3-1: USB disconnect, device number 19 [ 525.751375][ T2804] bridge_slave_1: left allmulticast mode [ 525.757094][ T2804] bridge_slave_1: left promiscuous mode [ 525.762835][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.770824][ T2804] bridge_slave_0: left allmulticast mode [ 525.776523][ T2804] bridge_slave_0: left promiscuous mode [ 525.782374][ T2804] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.950444][ T2804] tipc: Left network mode [ 525.970321][ T65] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 526.091804][ T2804] veth1_macvtap: left promiscuous mode [ 526.097430][ T2804] veth0_vlan: left promiscuous mode [ 526.121283][ T65] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 526.135941][ T65] usb 6-1: config 160 has no interface number 0 [ 526.149682][ T65] usb 6-1: config 160 interface 200 altsetting 30 endpoint 0x8 has invalid maxpacket 59278, setting to 1024 [ 526.161461][ T65] usb 6-1: config 160 interface 200 has no altsetting 0 [ 526.170040][ T65] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 526.179298][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.189525][ T65] usb 6-1: Product: syz [ 526.193865][ T65] usb 6-1: Manufacturer: syz [ 526.198524][ T65] usb 6-1: SerialNumber: syz [ 526.206434][T23088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 526.420494][ T65] usb 6-1: MIDIStreaming interface descriptor not found [ 526.432752][ T65] usb 6-1: USB disconnect, device number 26 [ 526.444813][T21055] udevd[21055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 527.190207][ T62] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 527.350168][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 527.356702][ T62] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 527.365353][ T62] usb 3-1: config 0 has no interface number 0 [ 527.371990][ T62] usb 3-1: config 0 interface 184 has no altsetting 0 [ 527.431800][ T62] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 527.440967][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.449210][ T62] usb 3-1: Product: syz [ 527.453486][ T62] usb 3-1: Manufacturer: syz [ 527.458188][ T62] usb 3-1: SerialNumber: syz [ 527.466958][ T62] usb 3-1: config 0 descriptor?? [ 527.473181][ T62] smsc75xx v1.0.0 [ 527.570182][ T502] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 527.721318][ T502] usb 6-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 527.732614][ T502] usb 6-1: config 1 interface 0 has no altsetting 0 [ 527.740981][ T502] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 527.750211][ T502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.758237][ T502] usb 6-1: Product: syz [ 527.763474][ T502] usb 6-1: Manufacturer: syz [ 527.768098][ T502] usb 6-1: SerialNumber: syz [ 527.773887][T23205] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 527.984247][ T502] usbhid 6-1:1.0: can't add hid device: -71 [ 527.990436][ T502] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 527.999365][ T502] usb 6-1: USB disconnect, device number 27 [ 528.074616][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 528.086288][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 528.504074][T23227] kvm: apic: phys broadcast and lowest prio [ 528.790232][ T331] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 528.941399][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 52660, setting to 64 [ 528.952553][ T331] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 528.961747][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.970582][ T331] usb 6-1: config 0 descriptor?? [ 528.975857][T23230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 528.984078][ T331] hub 6-1:0.0: USB hub found [ 529.184528][ T331] hub 6-1:0.0: 1 port detected [ 529.385169][ T331] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 529.391645][ T331] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 529.400716][ T331] usbhid 6-1:0.0: can't add hid device: -71 [ 529.406702][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 529.430669][ T331] usb 6-1: USB disconnect, device number 28 [ 529.499893][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 529.510894][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 529.520581][ T62] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 529.530075][ T62] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 529.539378][ T62] usb 3-1: USB disconnect, device number 20 [ 529.710214][ T502] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 529.860325][ T502] usb 10-1: Using ep0 maxpacket: 32 [ 529.866881][ T502] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 529.875346][ T502] usb 10-1: config 0 has no interface number 0 [ 529.883138][ T502] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 529.892604][ T502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.901095][ T502] usb 10-1: Product: syz [ 529.905689][ T502] usb 10-1: Manufacturer: syz [ 529.910452][ T502] usb 10-1: SerialNumber: syz [ 529.916901][ T502] usb 10-1: config 0 descriptor?? [ 529.923740][ T502] smsc95xx v2.0.0 [ 530.240180][ T331] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 530.325786][ T502] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 530.336748][ T502] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.390174][ T331] usb 6-1: Using ep0 maxpacket: 32 [ 530.396326][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.407367][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.417193][ T331] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.426310][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.435344][ T331] usb 6-1: config 0 descriptor?? [ 530.441400][ T331] hub 6-1:0.0: USB hub found [ 530.642521][ T331] hub 6-1:0.0: 1 port detected [ 530.747203][ T502] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 530.758255][ T502] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 530.767682][ T502] usb 10-1: USB disconnect, device number 15 [ 530.930724][ T36] audit: type=1326 audit(2000000425.748:17561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23291 comm="syz.2.8044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f719178ebe9 code=0x0 [ 531.248427][ T331] hub 6-1:0.0: activate --> -90 [ 531.412338][T23315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23315 comm=syz.9.8054 [ 531.650545][ T331] usb 6-1-port1: cannot reset (err = -71) [ 531.656521][ T9931] usb 6-1: USB disconnect, device number 29 [ 531.662559][ T331] usb 6-1-port1: attempt power cycle [ 531.900871][T23348] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 532.154732][T23356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8073'. [ 532.939537][ T36] audit: type=1400 audit(2000000427.748:17562): avc: denied { unmount } for pid=22113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 533.041613][ T36] audit: type=1400 audit(2000000427.858:17563): avc: denied { create } for pid=23419 comm="syz.9.8100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 533.491325][T23466] overlayfs: missing 'lowerdir' [ 533.580172][ T502] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 533.731581][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 533.742913][ T502] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 533.752025][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.760811][ T502] usb 3-1: config 0 descriptor?? [ 534.169885][ T502] logitech 0003:046D:C626.0024: unbalanced delimiter at end of report description [ 534.179357][ T502] logitech 0003:046D:C626.0024: parse failed [ 534.185422][ T502] logitech 0003:046D:C626.0024: probe with driver logitech failed with error -22 [ 534.371020][ T65] usb 3-1: USB disconnect, device number 21 [ 534.580904][ T36] audit: type=1326 audit(2000000429.398:17564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23523 comm="syz.1.8147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6d058ebe9 code=0x0 [ 535.410156][ T62] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 535.570174][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 535.590935][ T62] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 535.610179][ T62] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.619975][ T62] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 535.650976][ T62] usb 3-1: config 0 interface 0 has no altsetting 0 [ 535.700159][ T62] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 535.709259][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.731112][ T62] usb 3-1: config 0 descriptor?? [ 535.868686][ T36] audit: type=1400 audit(2000000430.678:17565): avc: denied { mounton } for pid=23575 comm="syz.1.8169" path="/339/file0" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.892678][ T36] audit: type=1400 audit(2000000430.698:17566): avc: denied { setattr } for pid=23575 comm="syz.1.8169" name="file0" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.920204][ T502] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 536.080163][ T502] usb 6-1: Using ep0 maxpacket: 32 [ 536.091208][ T502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 536.110265][ T502] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 536.118663][ T502] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 536.140051][ T502] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 536.149479][ T502] usb 6-1: config 128 has no interface number 0 [ 536.159954][ T502] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 536.180165][ T502] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.195965][ T502] usb 6-1: config 128 interface 127 has no altsetting 0 [ 536.211557][ T502] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 536.219962][T23609] block device autoloading is deprecated and will be removed. [ 536.230164][ T502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.238291][ T502] usb 6-1: Product: syz [ 536.250152][ T502] usb 6-1: Manufacturer: syz [ 536.254795][ T502] usb 6-1: SerialNumber: syz [ 536.350236][ T62] usbhid 3-1:0.0: can't add hid device: -71 [ 536.356256][ T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 536.372295][ T62] usb 3-1: USB disconnect, device number 22 [ 536.480941][ T502] usb 6-1: USB disconnect, device number 34 [ 536.489704][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 536.750172][ T65] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 536.901239][ T65] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.919407][ T65] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.929646][ T65] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 536.943625][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.952076][ T65] usb 10-1: SerialNumber: syz [ 537.161445][ T65] usb 10-1: 0:2 : does not exist [ 537.169639][ T65] usb 10-1: USB disconnect, device number 16 [ 537.178635][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 537.250217][ T331] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 537.279527][ T36] audit: type=1400 audit(2000000432.088:17567): avc: denied { rename } for pid=23651 comm="syz.5.8204" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 537.401361][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.414083][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.424097][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.437280][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.446563][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.455414][ T331] usb 3-1: config 0 descriptor?? [ 537.680383][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 537.831225][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.845542][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.855624][ T10] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 537.864890][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.866433][ T331] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 537.879397][ T10] usb 6-1: config 0 descriptor?? [ 537.886545][ T331] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 538.130870][ T62] usb 3-1: USB disconnect, device number 23 [ 538.170192][ T331] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 538.266114][T23721] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8235'. [ 538.275471][T23721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.304306][ T36] audit: type=1326 audit(2000000433.118:17568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.1.8236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6d058ebe9 code=0x0 [ 538.327519][ T331] usb 10-1: Using ep0 maxpacket: 16 [ 538.334086][ T331] usb 10-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 538.345051][ T331] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.354981][ T331] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 538.368177][ T331] usb 10-1: config 0 interface 0 has no altsetting 0 [ 538.375317][ T331] usb 10-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 538.384599][ T331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.395348][ T331] usb 10-1: config 0 descriptor?? [ 538.502412][ T10] hid-led 0003:27B8:01ED.0026: probe with driver hid-led failed with error -71 [ 538.513746][ T10] usb 6-1: USB disconnect, device number 35 [ 538.781110][T23728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 538.799552][T23728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 538.974862][T23734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.018733][ T331] usbhid 10-1:0.0: can't add hid device: -71 [ 539.024959][ T331] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 539.034882][ T331] usb 10-1: USB disconnect, device number 17 [ 539.300275][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 539.451683][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 539.460053][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 539.469028][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 539.479329][ T10] usb 6-1: config 220 has no interface number 2 [ 539.485656][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 539.498840][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 539.505643][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 539.512555][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 539.526115][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 539.535609][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.543671][ T10] usb 6-1: Product: syz [ 539.547899][ T10] usb 6-1: Manufacturer: syz [ 539.554410][ T10] usb 6-1: SerialNumber: syz [ 539.580159][T22755] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 539.730177][T22755] usb 3-1: Using ep0 maxpacket: 32 [ 539.736806][T22755] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 539.745099][T22755] usb 3-1: config 0 has no interface number 0 [ 539.751273][T22755] usb 3-1: config 0 interface 184 has no altsetting 0 [ 539.759581][T22755] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 539.776719][T22755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.790284][ T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 539.797693][ T10] usb 6-1: No valid video chain found. [ 539.805333][T22755] usb 3-1: Product: syz [ 539.809541][T22755] usb 3-1: Manufacturer: syz [ 539.815999][ T10] usb 6-1: selecting invalid altsetting 0 [ 539.823228][T22755] usb 3-1: SerialNumber: syz [ 539.831334][T22755] usb 3-1: config 0 descriptor?? [ 539.840956][ T10] usb 6-1: USB disconnect, device number 36 [ 539.847600][T22755] smsc75xx v1.0.0 [ 540.371260][ T36] audit: type=1400 audit(2000000435.188:17569): avc: denied { watch watch_reads } for pid=23803 comm="syz.5.8273" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 540.840208][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 540.848477][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 540.864247][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 540.873977][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 540.884992][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 540.894816][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 540.905339][T22755] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 540.915003][T22755] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 540.926405][T22755] usb 3-1: USB disconnect, device number 24 [ 541.021239][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.032811][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.041947][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.049974][ T10] usb 6-1: Product: syz [ 541.054254][ T10] usb 6-1: Manufacturer: syz [ 541.058870][ T10] usb 6-1: SerialNumber: syz [ 541.111705][T23848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8295'. [ 541.260155][ T62] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 541.410182][ T62] usb 10-1: Using ep0 maxpacket: 16 [ 541.417616][ T62] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.427894][ T62] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.438305][ T62] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.447490][ T62] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.455631][ T62] usb 10-1: Product: syz [ 541.459897][ T62] usb 10-1: Manufacturer: syz [ 541.464611][ T62] usb 10-1: SerialNumber: syz [ 541.650198][ T502] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 541.673193][ T62] usb 10-1: 0:2 : does not exist [ 541.678388][ T62] usb 10-1: unit 22 not found! [ 541.686785][ T62] usb 10-1: USB disconnect, device number 18 [ 541.810839][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.821903][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.831981][ T502] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.845421][ T502] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.854677][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.863701][ T502] usb 3-1: config 0 descriptor?? [ 542.071044][ T10] cdc_ncm 6-1:1.0: bind() failure [ 542.090271][ T10] usb 6-1: USB disconnect, device number 37 [ 542.274505][ T502] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 542.290186][ T502] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 542.420240][T22755] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 542.530785][ T331] usb 3-1: USB disconnect, device number 25 [ 542.571680][T22755] usb 10-1: unable to get BOS descriptor or descriptor too short [ 542.580287][T22755] usb 10-1: config 5 has an invalid interface number: 42 but max is 0 [ 542.588547][T22755] usb 10-1: config 5 has no interface number 0 [ 542.594902][T22755] usb 10-1: config 5 interface 42 has no altsetting 0 [ 542.603432][T22755] usb 10-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice=6b.2b [ 542.612744][T22755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.620984][T22755] usb 10-1: Product: syz [ 542.625260][T22755] usb 10-1: Manufacturer: syz [ 542.629961][T22755] usb 10-1: SerialNumber: syz [ 542.844760][T22755] snd-usb-audio 10-1:5.42: probe with driver snd-usb-audio failed with error -2 [ 542.857907][T22755] usb 10-1: USB disconnect, device number 19 [ 542.867946][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:5.42/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 542.993698][ T36] audit: type=1400 audit(2000000437.808:17570): avc: denied { watch } for pid=23909 comm="syz.1.8324" path="/412/file1" dev="tmpfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 543.100265][ T502] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 543.250288][ T502] usb 6-1: Using ep0 maxpacket: 16 [ 543.256670][ T502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.267673][ T502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.277511][ T502] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 543.286622][ T502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.294695][ T331] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 543.303142][ T502] usb 6-1: config 0 descriptor?? [ 543.368484][T23921] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 543.378067][ T36] audit: type=1400 audit(2000000438.188:17571): avc: denied { relabelto } for pid=23920 comm="syz.9.8329" name="146" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 543.404319][ T36] audit: type=1400 audit(2000000438.188:17572): avc: denied { associate } for pid=23920 comm="syz.9.8329" name="146" dev="tmpfs" ino=757 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 543.431579][ T36] audit: type=1400 audit(2000000438.188:17573): avc: denied { write } for pid=23920 comm="syz.9.8329" name="146" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 543.457517][ T36] audit: type=1400 audit(2000000438.188:17574): avc: denied { add_name } for pid=23920 comm="syz.9.8329" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 543.461090][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 543.482116][ T36] audit: type=1400 audit(2000000438.188:17575): avc: denied { associate } for pid=23920 comm="syz.9.8329" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 543.509062][ T36] audit: type=1400 audit(2000000438.188:17576): avc: denied { read write open } for pid=23920 comm="syz.9.8329" path="/146/file1" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 543.533142][ T36] audit: type=1400 audit(2000000438.198:17577): avc: denied { remove_name } for pid=22113 comm="syz-executor" name="file1" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 543.560538][ T36] audit: type=1400 audit(2000000438.198:17578): avc: denied { unlink } for pid=22113 comm="syz-executor" name="file1" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 543.583601][ T36] audit: type=1400 audit(2000000438.198:17579): avc: denied { rmdir } for pid=22113 comm="syz-executor" name="146" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 543.617490][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.627041][ T331] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 543.636137][ T331] usb 3-1: config 1 has no interface number 1 [ 543.643207][ T331] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 543.658298][ T331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.667452][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.675517][ T331] usb 3-1: Product: syz [ 543.679877][ T331] usb 3-1: Manufacturer: syz [ 543.684765][ T331] usb 3-1: SerialNumber: syz [ 543.690521][T23912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 543.734257][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.741834][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.749592][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.757169][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.764706][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.772266][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.779788][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.787361][ T502] holtek_mouse 0003:04D9:A081.0028: unknown main item tag 0x0 [ 543.796089][ T502] holtek_mouse 0003:04D9:A081.0028: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.5-1/input0 [ 543.901609][ T331] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 543.910073][ T331] usb 3-1: 2:1 : sample bitwidth 146 in over sample bytes 2 [ 543.917521][ T331] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 543.926893][ T331] usb 3-1: USB disconnect, device number 26 [ 543.936445][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 543.954546][ T10] usb 6-1: USB disconnect, device number 38 [ 544.010201][T22755] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 544.167794][T22755] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 544.177083][T22755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.185473][T22755] usb 10-1: Product: syz [ 544.189884][T22755] usb 10-1: Manufacturer: syz [ 544.194637][T22755] usb 10-1: SerialNumber: syz [ 544.200065][T22755] usb 10-1: config 0 descriptor?? [ 544.566448][T23962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 544.713174][T23970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178 [ 544.751993][ T502] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 544.763570][T23982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.778917][T23982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.913110][T23993] SELinux: Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped). [ 545.020171][ T502] usb 3-1: Using ep0 maxpacket: 16 [ 545.026545][ T502] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 545.040451][ T502] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.050266][ T502] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 545.063466][ T502] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.070184][ T502] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 545.079308][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.088219][ T502] usb 3-1: config 0 descriptor?? [ 545.668783][T24002] netlink: 'syz.1.8363': attribute type 3 has an invalid length. [ 545.696411][ T502] usbhid 3-1:0.0: can't add hid device: -71 [ 545.702600][ T502] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 545.711387][ T502] usb 3-1: USB disconnect, device number 27 [ 546.240080][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8375'. [ 546.562737][T24061] kvm: apic: phys broadcast and lowest prio [ 546.782127][ T10] usb 10-1: USB disconnect, device number 20 [ 547.032173][T24094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8402'. [ 547.130175][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 547.280201][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 547.286601][ T10] usb 10-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.297790][ T10] usb 10-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.310836][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 547.319029][ T10] usb 10-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 547.328913][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.337587][ T10] usb 10-1: Product: syz [ 547.341918][ T10] usb 10-1: Manufacturer: syz [ 547.346616][ T10] usb 10-1: SerialNumber: syz [ 547.558192][ T10] usbhid 10-1:1.0: can't add hid device: -71 [ 547.564371][ T10] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 547.574509][ T10] usb 10-1: USB disconnect, device number 21 [ 548.300202][T22755] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 548.460438][T22755] usb 10-1: Using ep0 maxpacket: 8 [ 548.467063][T22755] usb 10-1: unable to get BOS descriptor or descriptor too short [ 548.475661][T22755] usb 10-1: config 5 has an invalid interface number: 5 but max is 0 [ 548.484031][T22755] usb 10-1: config 5 has no interface number 0 [ 548.490461][T22755] usb 10-1: config 5 interface 5 has no altsetting 0 [ 548.499076][T22755] usb 10-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice=38.03 [ 548.508974][T22755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.517252][T22755] usb 10-1: Product: syz [ 548.521656][T22755] usb 10-1: Manufacturer: syz [ 548.526366][T22755] usb 10-1: SerialNumber: syz [ 548.533690][T22755] r8152-cfgselector 10-1: Unknown version 0x0000 [ 548.743608][T22755] r8152 10-1:5.5: Expected endpoints are not found [ 548.754380][T22755] r8152-cfgselector 10-1: USB disconnect, device number 22 [ 548.970273][ T65] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 549.120235][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 549.126377][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.137354][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.147252][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 549.156329][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.165980][ T65] usb 3-1: config 0 descriptor?? [ 549.301150][T24194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.432751][T24226] usb usb7: usbfs: process 24226 (syz.9.8461) did not claim interface 0 before use [ 549.520628][T24239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8467'. [ 549.546805][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 549.546826][ T36] audit: type=1400 audit(2000000700.356:17585): avc: denied { watch watch_reads } for pid=24243 comm="syz.1.8469" path="/file0" dev="ramfs" ino=100581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 549.580016][ T65] logitech 0003:046D:C626.0029: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 549.660203][ T502] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 549.785404][ T65] usb 3-1: USB disconnect, device number 28 [ 549.860214][ T502] usb 6-1: Using ep0 maxpacket: 8 [ 549.867545][ T502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 549.879050][ T502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.899275][ T502] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.909491][ T502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 549.919781][ T502] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 549.928975][ T502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.950028][ T502] usb 6-1: config 0 descriptor?? [ 550.187829][ T65] usb 6-1: USB disconnect, device number 39 [ 550.276115][ T36] audit: type=1400 audit(2000000701.086:17586): avc: denied { read write } for pid=24289 comm="syz.9.8488" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 550.299002][ T36] audit: type=1400 audit(2000000701.086:17587): avc: denied { open } for pid=24289 comm="syz.9.8488" path="/176/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 550.560207][T22755] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 550.647053][T24309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1107 sclass=netlink_xfrm_socket pid=24309 comm=syz.1.8496 [ 550.721205][T22755] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 550.732393][T22755] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.745992][T22755] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 550.759413][T22755] usb 10-1: config 0 interface 0 has no altsetting 0 [ 550.766203][T22755] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 550.775426][T22755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.784755][T22755] usb 10-1: config 0 descriptor?? [ 550.854947][ T36] audit: type=1400 audit(2000000701.666:17588): avc: denied { read } for pid=24318 comm="syz.5.8501" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 550.878916][ T36] audit: type=1400 audit(2000000701.666:17589): avc: denied { open } for pid=24318 comm="syz.5.8501" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 550.903705][ T36] audit: type=1400 audit(2000000701.696:17590): avc: denied { ioctl } for pid=24318 comm="syz.5.8501" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 551.194004][T22755] hid-generic 0003:044E:120C.002A: unbalanced collection at end of report description [ 551.204618][T22755] hid-generic 0003:044E:120C.002A: probe with driver hid-generic failed with error -22 [ 551.398535][T22755] usb 10-1: USB disconnect, device number 23 [ 551.817203][T24347] SELinux: policydb version 0 does not match my version range 15-33 [ 551.825440][T24347] SELinux: failed to load policy [ 552.171411][ T502] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 552.310212][ T331] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 552.324292][ T502] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 552.333589][ T502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.343062][ T502] usb 6-1: config 0 descriptor?? [ 552.460174][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 552.466419][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.477508][ T31] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 552.485220][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.495613][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.508533][ T331] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.517827][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.526913][ T331] usb 3-1: config 0 descriptor?? [ 552.660153][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 552.666504][ T31] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 552.674914][ T31] usb 10-1: config 0 has no interface number 0 [ 552.681176][ T31] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 552.693814][ T31] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 552.703036][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.711178][ T31] usb 10-1: Product: syz [ 552.715460][ T31] usb 10-1: Manufacturer: syz [ 552.720198][ T31] usb 10-1: SerialNumber: syz [ 552.725827][ T31] usb 10-1: config 0 descriptor?? [ 552.935023][ T331] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 552.945477][ T331] HID 045e:07da: Invalid code 65791 type 1 [ 552.951724][ T331] HID 045e:07da: Invalid code 768 type 1 [ 552.957489][ T331] HID 045e:07da: Invalid code 769 type 1 [ 552.963198][ T331] HID 045e:07da: Invalid code 770 type 1 [ 552.968960][ T331] HID 045e:07da: Invalid code 771 type 1 [ 552.974651][ T331] HID 045e:07da: Invalid code 772 type 1 [ 552.980327][ T331] HID 045e:07da: Invalid code 773 type 1 [ 552.985976][ T331] HID 045e:07da: Invalid code 774 type 1 [ 552.991665][ T331] HID 045e:07da: Invalid code 775 type 1 [ 552.997336][ T331] HID 045e:07da: Invalid code 776 type 1 [ 553.011195][ T331] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002B/input/input53 [ 553.024958][ T331] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 553.141455][ T331] usb 3-1: USB disconnect, device number 29 [ 553.688090][T24407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8538'. [ 553.697114][T24407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8538'. [ 554.580175][ T502] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 554.730156][ T502] usb 3-1: Using ep0 maxpacket: 32 [ 554.735740][ T502] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 554.744421][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.755326][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.766174][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.777135][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.787983][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.798976][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.809993][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.820889][ T502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.831090][ T502] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.840207][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.848855][ T502] usb 3-1: config 0 descriptor?? [ 554.855166][ T502] hub 3-1:0.0: Invalid hub with more than one config or interface [ 554.863282][ T502] hub 3-1:0.0: probe with driver hub failed with error -22 [ 554.947454][ T502] usb 6-1: USB disconnect, device number 40 [ 555.056443][ T331] usb 3-1: USB disconnect, device number 30 [ 555.240476][ T65] usb 10-1: USB disconnect, device number 24 [ 555.700191][ T65] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 555.852737][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.863859][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.874087][ T65] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.887254][ T65] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.896529][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.907774][ T65] usb 10-1: config 0 descriptor?? [ 555.945601][ T502] hid-generic 000C:0007:0007.002C: unknown main item tag 0x1 [ 555.953112][ T502] hid-generic 000C:0007:0007.002C: item fetching failed at offset 6/29 [ 555.961655][ T502] hid-generic 000C:0007:0007.002C: probe with driver hid-generic failed with error -22 [ 555.971413][ T331] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 556.120206][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 556.128200][ T331] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 556.137576][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.145855][ T331] usb 3-1: Product: syz [ 556.150096][ T331] usb 3-1: Manufacturer: syz [ 556.154771][ T331] usb 3-1: SerialNumber: syz [ 556.160448][ T331] usb 3-1: config 0 descriptor?? [ 556.166575][ T331] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 556.174502][ T331] usb 3-1: Detected FT232H [ 556.320228][ T65] usbhid 10-1:0.0: can't add hid device: -71 [ 556.326521][ T65] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 556.335571][ T65] usb 10-1: USB disconnect, device number 25 [ 556.366990][ T331] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 556.776959][ T331] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 556.977700][ T65] usb 3-1: USB disconnect, device number 31 [ 556.985045][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 556.994802][ T65] ftdi_sio 3-1:0.0: device disconnected [ 557.080271][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 557.090343][ T331] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 557.231661][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 557.241491][ T331] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.242614][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.251276][ T331] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 557.262936][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.272620][ T331] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.282600][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 557.301438][ T331] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 557.316020][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 557.319561][ T331] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 557.325638][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 557.337583][ T331] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 557.345898][ T10] usb 6-1: Manufacturer: syz [ 557.353919][ T331] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 557.360406][ T10] usb 6-1: config 0 descriptor?? [ 557.366755][ T331] usb 10-1: Product: syz [ 557.375776][ T331] usb 10-1: Manufacturer: syz [ 557.382271][ T331] cdc_wdm 10-1:1.0: skipping garbage [ 557.387618][ T331] cdc_wdm 10-1:1.0: skipping garbage [ 557.393624][ T331] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 557.399647][ T331] cdc_wdm 10-1:1.0: Unknown control protocol [ 557.730179][T22755] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 557.777512][ T10] appleir 0003:05AC:8243.002D: unknown main item tag 0x0 [ 557.784952][ T10] appleir 0003:05AC:8243.002D: No inputs registered, leaving [ 557.793891][ T10] appleir 0003:05AC:8243.002D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 557.881298][T22755] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.889967][T22755] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 557.900415][T22755] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.909390][T22755] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 557.920470][T22755] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 557.932699][T22755] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 557.941808][T22755] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 557.949838][T22755] usb 3-1: Product: syz [ 557.954040][T22755] usb 3-1: Manufacturer: syz [ 557.960557][T22755] cdc_wdm 3-1:1.0: skipping garbage [ 557.965821][T22755] cdc_wdm 3-1:1.0: skipping garbage [ 557.971915][T22755] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 557.977837][T22755] cdc_wdm 3-1:1.0: Unknown control protocol [ 558.363264][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.372877][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.382198][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.390851][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.399323][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.407962][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.416559][T24503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.425125][T24503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.433891][T22755] usb 3-1: USB disconnect, device number 32 [ 559.190190][T22755] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 559.341512][T22755] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.351372][T22755] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.361132][T22755] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.375455][T22755] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 559.384640][T22755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.392700][T22755] usb 3-1: Product: syz [ 559.396893][T22755] usb 3-1: Manufacturer: syz [ 559.401565][T22755] usb 3-1: SerialNumber: syz [ 559.408664][T22755] hub 3-1:1.0: bad descriptor, ignoring hub [ 559.415477][T22755] hub 3-1:1.0: probe with driver hub failed with error -5 [ 559.609102][T22755] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 559.810052][ T36] audit: type=1400 audit(2000000710.626:17591): avc: denied { read write } for pid=24509 comm="syz.2.8587" name="lp0" dev="devtmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 559.834043][ T36] audit: type=1400 audit(2000000710.626:17592): avc: denied { open } for pid=24509 comm="syz.2.8587" path="/dev/usb/lp0" dev="devtmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 559.861743][ T45] usb 10-1: USB disconnect, device number 26 [ 559.900383][ T498] usb 3-1: USB disconnect, device number 33 [ 559.907105][ T498] usblp0: removed [ 559.910882][ T10] usb 6-1: reset high-speed USB device number 41 using dummy_hcd [ 559.919651][ T10] usb 6-1: device reset changed ep0 maxpacket size! [ 559.927139][ T65] usb 6-1: USB disconnect, device number 41 [ 560.060180][ T65] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 560.170191][ T45] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 560.210159][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 560.216322][ T65] usb 6-1: config 1 interface 0 altsetting 82 bulk endpoint 0x1 has invalid maxpacket 64 [ 560.226257][ T65] usb 6-1: config 1 interface 0 altsetting 82 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.239295][ T65] usb 6-1: config 1 interface 0 has no altsetting 0 [ 560.247376][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 560.256485][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.264604][ T65] usb 6-1: Product: syz [ 560.268847][ T65] usb 6-1: Manufacturer: syz [ 560.273494][ T65] usb 6-1: SerialNumber: syz [ 560.279118][T24515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 560.286404][T24515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 560.330208][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 560.336540][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.347106][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.356160][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 560.367479][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 560.378772][ T45] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 560.388070][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.398572][ T45] hub 10-1:1.0: bad descriptor, ignoring hub [ 560.404987][ T45] hub 10-1:1.0: probe with driver hub failed with error -5 [ 560.413400][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 560.418747][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 560.424791][ T45] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 560.430861][ T45] cdc_wdm 10-1:1.0: Unknown control protocol [ 560.499561][ T65] usb 6-1: USB disconnect, device number 42 [ 560.650213][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 560.710281][ T45] usb 10-1: USB disconnect, device number 27 [ 560.810216][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 560.816663][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.827738][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 560.836833][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.845968][ T10] usb 3-1: config 0 descriptor?? [ 561.040183][ T45] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 561.190186][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 561.196453][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.206729][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.215764][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 561.227060][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 561.238350][ T45] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 561.247559][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.252692][T24523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.264562][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 561.265017][T24523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.269884][ T45] cdc_wdm 10-1:1.0: skipping garbage [ 561.281461][ T10] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 561.289129][ T45] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 561.296370][ T45] cdc_wdm 10-1:1.0: Unknown control protocol [ 561.301599][ T498] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 561.312167][ T10] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 561.319360][ T10] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 561.330253][ T10] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 561.337533][ T10] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 561.345803][ T10] koneplus 0003:1E7D:2D51.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 561.482305][ T45] usb 10-1: USB disconnect, device number 28 [ 561.490584][ T498] usb 6-1: Using ep0 maxpacket: 16 [ 561.497529][ T498] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.508229][ T498] usb 6-1: config 0 interface 0 has no altsetting 0 [ 561.516367][ T498] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 561.525515][ T498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.533575][ T498] usb 6-1: Product: syz [ 561.537772][ T498] usb 6-1: Manufacturer: syz [ 561.542604][ T498] usb 6-1: SerialNumber: syz [ 561.547599][T24523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.557245][ T498] usb 6-1: config 0 descriptor?? [ 561.562383][T24523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.571721][ T10] koneplus 0003:1E7D:2D51.002E: couldn't init struct koneplus_device [ 561.579820][ T10] koneplus 0003:1E7D:2D51.002E: couldn't install mouse [ 561.592667][ T10] koneplus 0003:1E7D:2D51.002E: probe with driver koneplus failed with error -71 [ 561.604285][ T10] usb 3-1: USB disconnect, device number 34 [ 562.310266][T24622] input: syz0 as /devices/virtual/input/input55 [ 564.075633][ T331] usb 6-1: USB disconnect, device number 43 [ 564.118934][T24714] tun0: tun_chr_ioctl cmd 2147767506 [ 564.513485][T24752] cgroup: name respecified [ 564.595045][ T36] audit: type=1400 audit(2000000715.406:17593): avc: denied { create } for pid=24763 comm="syz.2.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 564.722031][T24785] kvm: user requested TSC rate below hardware speed [ 564.729183][T24785] kvm: vcpu 0: requested 22 ns lapic timer period limited to 200000 ns [ 565.023730][T24813] cgroup: No subsys list or none specified [ 565.789769][T24889] binfmt_misc: register: failed to install interpreter file ./file0/file2 [ 565.912569][T24909] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 567.829147][T25008] overlayfs: failed to clone upperpath [ 568.062389][ T65] kernel write not supported for file [eventfd] (pid: 65 comm: kworker/0:3) [ 568.084240][T25038] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 568.090195][T25038] pim6reg0: linktype set to 778 [ 568.783185][T25090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 569.230999][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.238067][T25144] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.245273][T25144] bridge_slave_0: entered allmulticast mode [ 569.251887][T25144] bridge_slave_0: entered promiscuous mode [ 569.258418][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.265622][T25144] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.272840][T25144] bridge_slave_1: entered allmulticast mode [ 569.279250][T25144] bridge_slave_1: entered promiscuous mode [ 569.333806][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.340902][T25144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.348202][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.355288][T25144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.378035][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.385449][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.395103][ T2802] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.402450][ T2802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.411892][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.419024][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.460738][T25144] veth0_vlan: entered promiscuous mode [ 569.473990][T25144] veth1_macvtap: entered promiscuous mode [ 569.502892][ T36] audit: type=1400 audit(2000000720.316:17594): avc: denied { mounton } for pid=25144 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 570.474086][ T36] audit: type=1400 audit(2000000721.286:17595): avc: denied { module_load } for pid=25214 comm="syz.5.8891" path="/sys/kernel/address_bits" dev="sysfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 571.407584][T25254] cgroup: No subsys list or none specified [ 571.498794][T22755] kernel write not supported for file /787/clear_refs (pid: 22755 comm: kworker/0:5) [ 571.753533][T25289] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 571.914588][T25308] netlink: 'syz.5.8933': attribute type 3 has an invalid length. [ 572.125492][T25324] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.132729][T25324] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.139984][T25324] bridge_slave_0: entered allmulticast mode [ 572.146477][T25324] bridge_slave_0: entered promiscuous mode [ 572.153269][T25324] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.160471][T25324] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.167729][T25324] bridge_slave_1: entered allmulticast mode [ 572.174273][T25324] bridge_slave_1: entered promiscuous mode [ 572.230666][T25324] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.237772][T25324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.245170][T25324] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.252270][T25324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.275444][ T2804] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.283105][ T2804] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.293550][ T2802] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.300662][ T2802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.325812][ T2802] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.332968][ T2802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.350179][T22755] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 572.372670][T25324] veth0_vlan: entered promiscuous mode [ 572.386087][T25324] veth1_macvtap: entered promiscuous mode [ 572.500161][T22755] usb 6-1: Using ep0 maxpacket: 32 [ 572.510576][T22755] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 572.518811][T22755] usb 6-1: config 0 has no interface number 0 [ 572.526161][T22755] usb 6-1: config 0 interface 184 has no altsetting 0 [ 572.540756][T22755] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 572.549865][T22755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.563171][T22755] usb 6-1: Product: syz [ 572.567753][T22755] usb 6-1: Manufacturer: syz [ 572.574973][T22755] usb 6-1: SerialNumber: syz [ 572.583478][T22755] usb 6-1: config 0 descriptor?? [ 572.595430][T22755] smsc75xx v1.0.0 [ 573.127364][T25426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 573.190910][ T36] audit: type=1326 audit(2000000724.006:17596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25428 comm="syz.9.8983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f836c98ebe9 code=0x0 [ 573.214375][T22755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 573.225499][T22755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 574.207183][ T36] audit: type=1400 audit(2000000725.016:17597): avc: denied { watch } for pid=25487 comm="syz.1.9008" path="/45/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 574.363571][T25496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 574.526235][T25515] syz_tun: entered promiscuous mode [ 574.537137][T25515] syz_tun: left promiscuous mode [ 574.588665][T25519] kvm: emulating exchange as write [ 574.635718][ T36] audit: type=1400 audit(2000000725.446:17598): avc: denied { remount } for pid=25523 comm="syz.9.9023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 574.656021][T22755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 574.667060][T22755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 574.687253][T22755] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 574.697133][T22755] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 574.708813][T22755] usb 6-1: USB disconnect, device number 44 [ 574.753042][T25535] 8021q: VLANs not supported on ip6tnl0 [ 574.853181][T25544] kvm: user requested TSC rate below hardware speed [ 575.270193][ T45] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 575.420164][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 575.426996][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 575.435603][ T45] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 575.444023][ T45] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 575.454344][ T45] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 575.463422][ T45] usb 2-1: config 128 has no interface number 0 [ 575.469701][ T45] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 575.480962][ T45] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.491453][ T45] usb 2-1: config 128 interface 127 has no altsetting 0 [ 575.501635][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 575.511076][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.519285][ T45] usb 2-1: Product: syz [ 575.523667][ T45] usb 2-1: Manufacturer: syz [ 575.528296][ T45] usb 2-1: SerialNumber: syz [ 575.545429][ T36] audit: type=1400 audit(2000000726.356:17599): avc: denied { setattr } for pid=25579 comm="syz.5.9045" name="file5" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 575.751642][ T45] usb 2-1: USB disconnect, device number 79 [ 575.767046][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 576.615369][T25645] netlink: 'syz.1.9074': attribute type 4 has an invalid length. [ 577.422909][ T2801] bridge_slave_1: left allmulticast mode [ 577.434129][ T2801] bridge_slave_1: left promiscuous mode [ 577.446446][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.461741][ T2801] bridge_slave_0: left allmulticast mode [ 577.476811][ T2801] bridge_slave_0: left promiscuous mode [ 577.490260][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.740376][ T2801] tipc: Left network mode [ 577.803008][ T36] audit: type=1400 audit(2000000728.616:17600): avc: denied { open } for pid=25661 comm="syz.1.9082" path="/64/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 578.529162][ T36] audit: type=1400 audit(2000000729.336:17601): avc: denied { unmount } for pid=25144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 579.191216][T25787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 581.030236][T25877] caif0: tun_chr_ioctl cmd 1074025677 [ 581.035856][T25877] caif0: linktype set to 270 [ 581.640198][ T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 581.791416][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.802381][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.812185][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.825201][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.834286][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.843009][ T45] usb 1-1: config 0 descriptor?? [ 582.257600][ T45] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 582.270448][ T45] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 582.385820][T25796] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 582.398475][T25796] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 582.406943][T25796] CPU: 1 UID: 0 PID: 25796 Comm: syz.1.9136 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 582.418639][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.428826][T25796] RIP: 0010:fuse_file_release+0x29e/0x400 [ 582.434609][T25796] Code: 00 74 12 48 89 df e8 91 f1 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 44 f0 a0 ff 48 ba 00 00 00 00 00 fc [ 582.454354][T25796] RSP: 0000:ffffc9000119fae0 EFLAGS: 00010202 [ 582.460457][T25796] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881197acc00 [ 582.468467][T25796] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888132587078 [ 582.476475][T25796] RBP: ffffc9000119fb28 R08: 0000000000000003 R09: 0000000000000004 [ 582.484487][T25796] R10: dffffc0000000000 R11: fffff52000233f2c R12: 000000000000a002 [ 582.492497][T25796] R13: ffff888133014d80 R14: ffff888132587000 R15: 00000000000000c8 [ 582.500504][T25796] FS: 000055555ec5c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 582.509478][T25796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.516101][T25796] CR2: 000000110c27d426 CR3: 0000000146efe000 CR4: 00000000003526b0 [ 582.520983][ T65] usb 1-1: USB disconnect, device number 35 [ 582.524107][T25796] Call Trace: [ 582.533322][T25796] [ 582.536287][T25796] fuse_release+0x13e/0x1b0 [ 582.540841][T25796] ? __cfi_fuse_release+0x10/0x10 [ 582.546085][T25796] __fput+0x1fe/0xa00 [ 582.550100][T25796] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 582.555705][T25796] ____fput+0x20/0x30 [ 582.559730][T25796] task_work_run+0x1e3/0x250 [ 582.564365][T25796] ? __cfi_task_work_run+0x10/0x10 [ 582.569526][T25796] ? __kasan_check_write+0x18/0x20 [ 582.574678][T25796] ? task_work_add+0x258/0x3f0 [ 582.579486][T25796] get_signal+0x1307/0x14f0 [ 582.584029][T25796] ? __kasan_check_write+0x18/0x20 [ 582.589193][T25796] ? _raw_spin_lock+0x8c/0x120 [ 582.594009][T25796] ? __cfi__raw_spin_lock+0x10/0x10 [ 582.599252][T25796] ? fput+0x1ac/0x240 [ 582.603289][T25796] arch_do_signal_or_restart+0x96/0x720 [ 582.608895][T25796] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 582.615102][T25796] ? __kasan_check_write+0x18/0x20 [ 582.620272][T25796] syscall_exit_to_user_mode+0x58/0xb0 [ 582.625781][T25796] do_syscall_64+0x64/0xf0 [ 582.630244][T25796] ? clear_bhb_loop+0x50/0xa0 [ 582.634967][T25796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 582.640902][T25796] RIP: 0033:0x7feaecd8ebe9 [ 582.645358][T25796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.649189][ T36] audit: type=1400 audit(2000000733.456:17602): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 582.664995][T25796] RSP: 002b:00007fff201f9e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 582.665030][T25796] RAX: 0000000000000000 RBX: 000000000008d74a RCX: 00007feaecd8ebe9 [ 582.665053][T25796] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 582.665069][T25796] RBP: 00007feaecfc7da0 R08: 0000000000000001 R09: 00000008201fa11f [ 582.665086][T25796] R10: 0000001b2f720000 R11: 0000000000000246 R12: 00007feaecfc5fac [ 582.712303][ T36] audit: type=1400 audit(2000000733.456:17603): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.719368][T25796] R13: 00007feaecfc5fa0 R14: ffffffffffffffff R15: 00007fff201f9f40 [ 582.719397][T25796] [ 582.748337][ T36] audit: type=1400 audit(2000000733.456:17604): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.748895][T25796] Modules linked in: [ 582.765365][ T36] audit: type=1400 audit(2000000733.456:17605): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.781433][T25796] [ 582.782757][T25796] ---[ end trace 0000000000000000 ]--- [ 582.796358][ T36] audit: type=1400 audit(2000000733.456:17606): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 582.846443][T25796] RIP: 0010:fuse_file_release+0x29e/0x400 [ 582.852374][T25796] Code: 00 74 12 48 89 df e8 91 f1 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 44 f0 a0 ff 48 ba 00 00 00 00 00 fc [ 582.852431][ T36] audit: type=1400 audit(2000000733.456:17607): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 582.895393][T25796] RSP: 0000:ffffc9000119fae0 EFLAGS: 00010202 [ 582.901614][T25796] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff8881197acc00 [ 582.909722][T25796] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff888132587078 [ 582.918045][T25796] RBP: ffffc9000119fb28 R08: 0000000000000003 R09: 0000000000000004 [ 582.918119][ T36] audit: type=1400 audit(2000000733.456:17608): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 582.949160][T25796] R10: dffffc0000000000 R11: fffff52000233f2c R12: 000000000000a002 [ 582.957673][T25796] R13: ffff888133014d80 R14: ffff888132587000 R15: 00000000000000c8 [ 582.966038][T25796] FS: 000055555ec5c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 582.975360][T25796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.982456][T25796] CR2: 00007f450af94198 CR3: 0000000146efe000 CR4: 00000000003526b0 [ 582.990964][T25796] Kernel panic - not syncing: Fatal exception [ 582.997431][T25796] Kernel Offset: disabled [ 583.001769][T25796] Rebooting in 86400 seconds..