last executing test programs: 4m59.972611918s ago: executing program 32 (id=159): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "67e8912b"}]}}, 0x0}, 0x0) 4m16.158187008s ago: executing program 4 (id=585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x70, 0x1, [@m_ipt={0x40, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x16, 0x6, "a3ff70cc5ea43af9389600932a12cd9e8641"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x80000f1, 0x37, 0xc698, 0x80000001, 0x6, 0x6, 0x1, 0x6b, 0x7f, 0x2, 0x80000000, 0x2, 0x20000002, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x7fff, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x80, 0x0, 0x1, 0xc, 0x8, 0x3, 0x43, 0x7, 0x8, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x3, 0x7, 0x9, 0x8, 0x8, 0x4, 0x101, 0x7, 0x6e, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x40001, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x1ff, 0x6, 0xb, 0x8, 0x7, 0x4, 0xffff, 0x6, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001400010004000000000000000a000000040000000c00088008fc9b00", @ANYRES32, @ANYBLOB="140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r8 = syz_open_pts(r0, 0x801) dup3(r8, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) 4m14.364988823s ago: executing program 4 (id=599): r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x22, 0x0, 0xad) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/227, 0xe3}], 0x1}, 0x10}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540100001a0001"], 0x154}, 0x1, 0x0, 0x0, 0xc000}, 0x4810) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89a3, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) listen(r2, 0x3) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3, 0x4}]}, 0xc, 0x0) 4m14.319464666s ago: executing program 4 (id=600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x174, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x68, 0x2, {{'cbc(aes)\x00'}, 0x100, "946409aea62e2fa8c979ae37eb82b23a8ddc00740290b430d9481d7a066d22cf"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x0, 0x70bd28}}]}, 0x174}, 0x1, 0x0, 0x0, 0xc5}, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904000000020600"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000149000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m13.000316193s ago: executing program 4 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x79}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4m12.935687967s ago: executing program 4 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m12.834881983s ago: executing program 4 (id=614): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) inotify_init1(0x800) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x2c00) (rerun: 64) r3 = gettid() fcntl$setown(r1, 0x8, r3) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) (async, rerun: 64) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0xc10) (async) rmdir(&(0x7f0000000100)='./control\x00') (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010104}, 0x6) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RCREATE(r6, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x80, 0x4}, 0x7}}, 0x18) 4m12.782618996s ago: executing program 33 (id=614): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) inotify_init1(0x800) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x2c00) (rerun: 64) r3 = gettid() fcntl$setown(r1, 0x8, r3) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) (async, rerun: 64) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0xc10) (async) rmdir(&(0x7f0000000100)='./control\x00') (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010104}, 0x6) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RCREATE(r6, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x80, 0x4}, 0x7}}, 0x18) 2m50.519441963s ago: executing program 3 (id=1538): r0 = socket$inet(0x2, 0xa, 0x6) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @empty}, 0x248, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x3, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000002ec0)) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)='X\x00\x00', 0x3}], 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0xffffffffffffff20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0xfffffffffffffff9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$link(0x8, r1, r1) fcntl$dupfd(r0, 0x406, r3) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2m49.694014762s ago: executing program 3 (id=1544): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000480)=[@set_irq_handler={0xc8, 0x20, {0xd1, 0x1}}, @rdmsr={0x66, 0x18, {0x8ec}}, @nested_vmlaunch={0x12f, 0x18}, @rdmsr={0x66, 0x18, {0x919}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x3d, 0x7fffffff, 0xffff, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @code={0xa, 0x47, {"66b815008ee866460f38824a00d1260fc7bc0065290000b8010000000f01d945f6260f225c2e66f3460f0964450f0159af0fe464d5d6"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xbd, 0x4, 0x7, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x0, 0x5}}, @cpuid={0x64, 0x18, {0x0, 0xa}}, @uexit={0x0, 0x18, 0x10001}, @wr_drn={0x68, 0x20, {0x0, 0x8001}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x14, 0x80000000, 0x1200000000, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2, 0x1, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x45}}], 0x267}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0xf066) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r2, 0x0, 0x700) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4080) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000200)={0x7, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m49.152364934s ago: executing program 3 (id=1556): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000500)='./file0/../file0\x00', 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000149000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m48.01458245s ago: executing program 3 (id=1559): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00', 0x273) fcntl$setstatus(r1, 0x4, 0x42000) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000523000/0x3000)=nil, 0x3000, 0x14) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x801063, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mmap(&(0x7f0000edf000/0x4000)=nil, 0x4000, 0x100000c, 0x810, r0, 0x266e0000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000001c00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="e83884cb28bd5a3a", 0x8}]) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r5 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r5, 0x5}], 0x1, 0x0, 0x0, 0x0) r6 = gettid() capset(&(0x7f0000000080)={0x20080522, r6}, &(0x7f0000000180)={0x43, 0xb2f5, 0x200, 0x7, 0x0, 0x8e9}) write(r5, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'pim6reg0\x00', 0x6}) 2m47.791290373s ago: executing program 3 (id=1566): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x6020400) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0x2020) 2m47.726761437s ago: executing program 3 (id=1567): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000149000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m47.682853649s ago: executing program 34 (id=1567): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000149000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m9.895374558s ago: executing program 2 (id=1793): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r1, 0x0, 0x2) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) (async) recvmmsg(r2, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40000020, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x200000) 2m9.085649235s ago: executing program 2 (id=1794): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109101, 0x0) close_range(r0, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 2m7.63544947s ago: executing program 2 (id=1796): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff}, 0x80009}], 0x1, 0x10002, 0x0) sendmsg$netlink(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000000380)={0x10, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x4000000) 2m7.63483112s ago: executing program 2 (id=1797): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4a23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x204, 0x0, 0x0, 0x0, 0x54, 0x0, 0xd2ff, 0x676, 0xda}) 2m7.510219657s ago: executing program 2 (id=1799): r0 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000001fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m7.403376923s ago: executing program 2 (id=1800): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m7.357604206s ago: executing program 35 (id=1800): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m24.111344074s ago: executing program 1 (id=2214): r0 = syz_usb_connect$cdc_ecm(0x0, 0xf8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x7f, 0x2, 0x8, 0xff, 0x6}, 0x101, &(0x7f0000001500)=ANY=[@ANYRES64], 0x2, [{0x8f, &(0x7f0000001340)=ANY=[@ANYBLOB="8f0310dac0ee810ae3e0ca97a910b89763c50e21c0c2cd8010b9bc9f41385292f64bd712ae62af331ef0368cbd1d3d51c8d42052e6257363c1f7f823e4d05a4c815a75d3cb115c38134e0e5bdddd05365817ab93dfcf8a73f791655304b356c0b2bd464ba66e3c1599c76ca0ba669078133aebd2537db06c3b6fe6bcc36d45de3bdd840b8c67b9c1df02317883155894656877df3ac276dc1c9a6fb57933"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r0, 0x7, 0x94, &(0x7f0000000600)="4e4007b318e6e0819eef837b3d23aac48f22d5861be2046b806f2cce1d34411776e4abb2888d7372af8b78c331c970ec16600fb3eac885359318ae6a138fa31f8dcd98c07f85984cdf031d628ce1f8dca1f166ac0bc2beec54318a16f943f2ac7c82a2d415710a19041e0ac622bbf22d3d5e884c007dca2cdb5c703721b1be326659fbd46b1dc2016401c50fdd6cdfd8f6aa7507") r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44840}, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r4, &(0x7f0000001480)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000014c0)='N', 0x1}], 0x2) r5 = creat(&(0x7f0000000240)='./file0\x00', 0xa1) bind$tipc(r5, &(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x24040004}, 0x4020) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000002c0)={0xffffffff84c87cc4, 0x8, 0x0, 0x0, 0x1, [0x7ff, 0x6026, 0x1a, 0x7]}) 1m23.517274669s ago: executing program 1 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) (async) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/18, 0x12}], 0x6, &(0x7f0000000500)=""/227, 0xe3}, 0x30103) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/176, 0xb0}], 0x1, &(0x7f0000000740)=""/201, 0xc9}, 0x40) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x200000, 0x8}, 0x18) mknodat(r4, &(0x7f0000000940)='./file0\x00', 0x4, 0xf) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x3, 0x8, {{0x50, 0x4, 0x0, 0x9, 0x140, 0x67, 0x0, 0x40, 0x2f, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x13, 0x5c, [@multicast1, @rand_addr=0x64010100, @multicast2, @local]}, @cipso={0x86, 0x5d, 0x3, [{0x7, 0x4, "c2e1"}, {0x0, 0x9, "c7249a87d4842c"}, {0x6, 0x11, "ee81834474ebbf5f687709adebbead"}, {0x7, 0xe, "a1f9a3ebcfdf5653fea20230"}, {0x6, 0x7, "7bce16b07e"}, {0x7, 0x10, "441d65a2b2d6c01a85293b9775b6"}, {0x6, 0x7, "479b599628"}, {0x1, 0x3, 'N'}, {0x0, 0xa, "29d3235d4294c0c6"}]}, @timestamp={0x44, 0x24, 0x32, 0x0, 0x2, [0x2, 0x4, 0x8, 0x5, 0xf, 0x40000000, 0x4, 0x7ff]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x5, [0x0, 0x4, 0x5, 0xbc0, 0x95, 0x8e, 0x8]}, @cipso={0x86, 0x15, 0x0, [{0x5, 0xf, "11c964daf808924150f35a7703"}]}, @rr={0x7, 0x7, 0x81, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_prespec={0x44, 0x44, 0x22, 0x3, 0xd, [{@local, 0x12d3a0}, {@remote, 0xd}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x67}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x5}, {@loopback, 0x800}, {@empty, 0x1}, {@private=0xa010101, 0xc26}]}, @noop, @generic={0x88, 0xe, "7c42b89f4d7887c3e1ea3024"}, @rr={0x7, 0x7, 0x2c, [@broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x700, 0x7, 0x6, 0xa5, {{0x11, 0x4, 0x2, 0x31, 0x44, 0x64, 0x0, 0xf8, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x2d, [@local]}, @ra={0x94, 0x4}, @generic={0x94, 0x9, "05be97bef61f80"}, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0x4, [{@multicast1, 0x401}, {@local, 0x9}, {@multicast1, 0x9}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000d40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x6008000) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000dc0)=&(0x7f0000000d80)) (async) prctl$PR_CAPBSET_DROP(0x18, 0xd) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40040) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@dev, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001040)=0xe8) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc) (async) sendmsg$sock(r2, &(0x7f0000001340)={&(0x7f0000001080)=@caif=@util={0x25, "c5817e9a3fd101b83823e4562ba3027f"}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001100)="b3c2007ee0ac8895806618a31c09fbe4b3fa28ce69d3d2bc67abccfa3f3ffa2f65afa49c1b9f63f7bf64df2d21fd4ccba9c3a89a4acccc22387a3bc48e1616c9cf558a4e92e1a9ac0fc6ad1c98bf713d410fad63", 0x54}, {&(0x7f0000001180)="6abb8697eb56c2b1f432e41fc11620726f409fbc84fb10cbe29f", 0x1a}, {&(0x7f00000011c0)="eb2eb84b03d13f373d9fdb4ed03b1fe915e07132b74eadb121a1f26c96267795dd742b32213c1fc497e79766cb21ac1ee1dbb221f88f93ae813c3f515f469e", 0x3f}, {&(0x7f0000001200)="3235a8b1c08534ed17712a327a219dd5a269682b186d0a1d867b88c7729a6b0846ef558fe96669f1e95cd7b72dd37be5cc775697c2bc473ea2ae96f7827f4342bcdc10109a0056c6c9a0fe69bfaf57a4fc73c4209c500cf8c8db681ef28a05927d6e960623aa26ae10a16facb97d9a797a0112fae7bd55429bcda69b394aa664746c45ba8283ce583c0c33ee8d15ed5d1c8816e28338b1a91f635c054375f95525f4953f34dd18a3131393", 0xab}], 0x4, &(0x7f0000001300)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x4044) setxattr$trusted_overlay_nlink(&(0x7f0000001380)='\x00', &(0x7f00000013c0), &(0x7f0000001400)={'L-', 0x1}, 0x16, 0x3) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000001440)=0x1) (async) unlinkat(r4, &(0x7f0000001480)='./file0\x00', 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x111, 0x2, 0x0, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r3, 0x23a33000) 1m23.503822859s ago: executing program 1 (id=2221): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000084, 0x7}}], 0x3f}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7fff, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="a8b2ca600fe4e034ab3edb46ab60a4db6a91cf63c4e35891d2daf8f80e75bc91abf2342f7a2041a9c96874d05165c7a37148e67c47d5931f2466f42b30a293ed06e993055f69371420f8a7d78cd26f2e52ba5da6092a1127ee61030d052c52ca4afbe033d031f2f1fccd4d16877b18485b32ce1f172aacb3e5cbeeb9d40c75073146bf6c794c76dcdea405e5df41c01ef254a12ae648439dc727ac1247b15743503f241fc93cf8195a93123956b5bc77a40b041b5b8d25c4af7c294dd5c293287f06f58f436e0f6b1d013a801747376f662c3fe7", 0xd4, 0x44080, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @local, 0xa1}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x20, 0x0, &(0x7f0000048000), 0x2) futex(&(0x7f0000000000)=0x1, 0x7, 0x1fffffe, &(0x7f00000000c0), &(0x7f0000000080), 0x5) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000084, 0x7}}], 0x3f}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7fff, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="a8b2ca600fe4e034ab3edb46ab60a4db6a91cf63c4e35891d2daf8f80e75bc91abf2342f7a2041a9c96874d05165c7a37148e67c47d5931f2466f42b30a293ed06e993055f69371420f8a7d78cd26f2e52ba5da6092a1127ee61030d052c52ca4afbe033d031f2f1fccd4d16877b18485b32ce1f172aacb3e5cbeeb9d40c75073146bf6c794c76dcdea405e5df41c01ef254a12ae648439dc727ac1247b15743503f241fc93cf8195a93123956b5bc77a40b041b5b8d25c4af7c294dd5c293287f06f58f436e0f6b1d013a801747376f662c3fe7", 0xd4, 0x44080, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @local, 0xa1}, 0x1c) (async) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x20, 0x0, &(0x7f0000048000), 0x2) (async) futex(&(0x7f0000000000)=0x1, 0x7, 0x1fffffe, &(0x7f00000000c0), &(0x7f0000000080), 0x5) (async) 1m23.239321375s ago: executing program 1 (id=2223): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {}, 0x48, {0x2, 0x4e21, @local}, 'veth0_vlan\x00'}) ftruncate(0xffffffffffffffff, 0xc17a) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000003c0)=0x5) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r3 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000080)=0x430f, 0x8) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x6, 0x3, 0xc, 0x838, 0x20000002]}, &(0x7f0000000100)=0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000680)={{{0x1}}, 0x0, 0x0, 0x0}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0/file0\x00', 0x273) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0xa, 0xe9, 0x2, 0x2000ff, 0x7, "dd710616080073280000000000200800000200", 0x0, 0xc0}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000004c0)=0x8) r7 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) wait4(r7, 0x0, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.076176131s ago: executing program 1 (id=2233): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004038101014000000001e0109022400010000800309040000fe03000000092100000201220500090581030000000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000002c80), 0x8, 0x62400) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x12, {[@global=@item_012={0x2, 0x1, 0x8, "1e95"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @main=@item_012={0x1, 0x0, 0xa, "03"}, @local=@item_012={0x2, 0x2, 0x5, "a888"}, @main=@item_4={0x3, 0x0, 0x0, "fe2fd57b"}, @local=@item_012={0x2, 0x2, 0x5, "299d"}]}}, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) sendmmsg$inet6(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004890) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@generic={0x0, 0xf, 0x4}) 1m20.907255071s ago: executing program 1 (id=2234): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000002}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) fallocate(r5, 0x44, 0xffffffffffffffff, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000080)={@remote, r4}, 0x14) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) 1m20.815490666s ago: executing program 36 (id=2234): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000002}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) fallocate(r5, 0x44, 0xffffffffffffffff, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000080)={@remote, r4}, 0x14) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) 58.783541904s ago: executing program 7 (id=2431): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000340)=""/124, 0x7c}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x403, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @broadcast}}}}) 58.709100128s ago: executing program 7 (id=2432): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0) write(r2, &(0x7f0000000200), 0x0) fchdir(r1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0xa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d06, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x67, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002206000000a47b48a816874154734213fa6118d3ed80b38cb67137c1ef82abde0e1c764a7b380154f3cfe9a49fcf6bd1b6668ff14789a8d22b8dde65b383ca97fb42b4bdacb4c58a03793b122fb68e6bd9827e189e0a5907ef9ef343fa14d71314f9d0a35fdf5a8f40f1bbc3a20d7799953fb8c7ceec7d6d5ebab2198756c25edd970e50643f430bb4f4c603416bf71eef2af79e0c12bf74cbaa6e86057318a2e533254f62fd63176cfcc549d58e66399e06659b0028eb42e78ee18f6581175f6957a0a7c040"], 0x0}, 0x0) r9 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r10 = openat(r4, &(0x7f0000000080)='.\x00', 0x0, 0x85) lseek(r10, 0x0, 0x0) syz_usb_connect(0x0, 0x54, &(0x7f00000023c0)=ANY=[@ANYBLOB="1201100345060008ef170372f8aa0137c808cb024200028f0600000904d50202c7bc57020a240102000002010205240402050905030100020c00c90725010302a5000905000c20000001080904457f00ff0135f8"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x57, &(0x7f0000000240)=ANY=[@ANYBLOB="5703c30d0e9382f63f81aa13c0769c482e9ec997865fc347a85b0b631304d9948fe300efeafadbc6b4aea404e8c52e4338ed7deee92aa18869d9c698c6944bef40c30963d475d3855c9773ecd6f19c14cd2e2a3aacf4a1"]}, {0xb8, &(0x7f00000002c0)=@string={0xb8, 0x3, "68c4290dcbb8e27cbb18ecda5d70a96a8e71cea99b54eadcd5fa11864b9c632a225a421296394a533b981c97ac91762eb6158d6eed997b902bf24f73274c83bfe411a6dd18d91105cad6b3411255473d28d629c550c1912d553336477d32bba9b7142a29f8ae6f5d74622f80d82d4e626bdfca54983a20bc2919a3f70981357946c5befe86eaf806b634093c99fa442802c09f9248477ca510a67abcc56c5327f3731374b1c6f3913ee425adabb5a18042dae9c7571e"}}]}) 55.746424501s ago: executing program 7 (id=2446): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x20004040) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 52.6873344s ago: executing program 7 (id=2474): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'pim6reg1\x00', 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) clock_gettime(0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfc1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0xc015}, 0xab50471d188948dd) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x100, 0x4, &(0x7f0000000900)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) mount(&(0x7f0000000340)=@filename='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0/../file0\x00', &(0x7f00000003c0)='proc\x00', 0x80000, &(0x7f0000000400)='syz0\x00') 52.68677085s ago: executing program 7 (id=2475): mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$pagemap(r0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) syz_genetlink_get_family_id$mptcp(0x0, r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) madvise(&(0x7f000001e000/0x4000)=nil, 0x4000, 0x15) 52.613731764s ago: executing program 7 (id=2476): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r0, 0xf870628677765568, 0x100010, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000)="ebf49ba63756d73c37a4d03dc64ecc81bad224383f61e8872fc3f14b2ecbb6fcf0b53bd84b171f268c40b6161bde43219f1c6a", 0x33, r1}, 0x68) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6192, 0x80e80) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x3, 0x20, &(0x7f0000000100)="6c2a6206533ef9e14caef81cd3beba4492e155bf2f576f62f8bd84156ee44263"}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x7fffffffffffffff, 0x7}) ioctl$KVM_TDX_FINALIZE_VM(r4, 0xc008aeba, &(0x7f0000000280)) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000002c0)=""/212) r5 = syz_usb_connect$uac1(0x1, 0xe4, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0xf5, 0x80, 0x61, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x180, 0x0, "d1ddf138e5"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x3, 0x4, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x2, 0x6, "4e3ca3e20db8"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x9, "fcc1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x8, "05", "13"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf3, 0x4, 0x44, 0xa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0xce, "36bc0d9d21d77c3456"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0xf, 0x81}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xb, 0x6, "bd8672", "bf"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x5, "80cb23", 'B'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0xfe, 0xff, {0x7, 0x25, 0x1, 0x1, 0x87, 0x5}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x3, 0x2, 0x6, 0x10, 0x4}, 0x24, &(0x7f0000000500)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dee755ec7cc3eed8154389696b504e28"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb1f542b607ca65f3, 0xe, 0xb0, 0x800, 0x2}]}, 0x3, [{0x99, &(0x7f0000000540)=@string={0x99, 0x3, "415aaf2bd0e8594f538a7cc4281bc8d31b884acb683d92ee032892f12bd474ada5f68d16965a6c7a4c2d2756df71ff39104d9e6d9964f3b2ff49570a6eaa1796cc7e93b931109fdda3250e34aa26c13aa7a1d7b985f566b9376c52ace26848c9db0c885b1b11dfde0853ce41f638b8d6d2b6e0352502c747985cd2945dfc5a9fa0e4ca1aa1ca62746707df5249805c0ae3a9a08a2eb22b"}}, {0x35, &(0x7f0000000600)=@string={0x35, 0x3, "7c1d0aad1218f5aed838cd5f3c0145d893b739fe88e11cfde3c2d5a0643ad4c463e628f1e8f2b644a644e37488bb33dc858172"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x20, 0x4, 0xcf, {0xcf, 0x10, "7b4deaac5531e1c0bbcb1c757d5c7a2317df5a16a6f4614954d34a82dda21c3a2a92786ba31729036aed20d2285ebe80230a66b006897227f89ecf0992db4fc997f3a79db3b873fa403469e461032a376dd6a1d1d5dbdeacebd43ca570ef6d5b2307e6216ad06eab92b6353a80cf3a49b108d4825a6d0855cd6277aa2397f4df83e611f9f697071597f7db87617eea351cd0d89eb45ed6e05f0c6b529dba27f5b057f2e67e0e8f236700db6ac4340898e41ebf157919d6a095297fed3d85e9da6fb73a7eb897559f99d4fad4a1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x40, 0x31, 0x9a, "40058af0e09490f03b53346d7006b5df63f31ba75a5031d5d807a9c9dcd9de2cd77b98080cd53de11aaa94b30cf1d6a745048e1d25da0a98dcb45e2462c2a1db361e7fd1bdac056bfb010989cf214fe79eaaa110ef5a71045bae51c6a20325ea3691e571c7137462bee2a71ed9330343f5c64a60e887bbfc1fe310f2130aba9d9a236b773719ad413da2a54b6bdca71c687ed2b759ff6ef790ea"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x81, 0x3, '\x002r'}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "e8c2db"}, &(0x7f0000000a00)={0x20, 0x83, 0x2, "1477"}, &(0x7f0000000a40)={0x20, 0x84, 0x4, "1d06c50b"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "1cb9f1"}}) pipe2$watch_queue(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x61967ab5a74afe53, 0x7, 0x1, 0x3ff, {{0x12, 0x4, 0x0, 0x3e, 0x48, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x6, "1831de81"}, @timestamp_prespec={0x44, 0x2c, 0xcd, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x10}, {@empty, 0x5}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010100, 0x6}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000c40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, 0x6, 0x7f, 0x400, 0xadd9, 0x400000, r8}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000cc0)={0x1, 0x0, [{0x8e4, 0x0, 0x8}]}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x50}}, 0x40000) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ec0), r7) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x138, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8173f43485938580125ab8eb8fa1eeb9b690fd6e652e66abd0c130b0ec752b9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffff3bd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe05, @private0, 0xe}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x10) openat$incfs(r4, &(0x7f00000010c0)='.pending_reads\x00', 0x103080, 0x80) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001100)) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xc0, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6d, 0xa8, @random="42d1451e0ffe6c111424e736067c399f1269c999326fb8aa6ae54c53bf07efca268d8773cae052b48075130edeeeb4b49c5012630e4a7faab002c3f77e4f6a3d371da9175decfee8a885adf528fb51a01e31f5a33eccaf48f906cb6886089ad43b89474ac035c9e248"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xcb, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0xafe}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xb0, 0x1}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x250, 0x9, 0x3, 0x9, 0x50, 0x88}, 0x3d, &(0x7f0000001340)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x27, 0x10, 0xb, "0e28acedd97739b96ca7aed388ec7c73e531d2911bc0d00a8a5e328ff15b63f5e94b57c3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8d, 0x5, 0x0, 0x401, 0x5}]}, 0x2, [{0x59, &(0x7f0000001380)=@string={0x59, 0x3, "9a30dbeff990a64e71b0101d9518317efa05e4195cf24fc4c8d9eff732bf82246a27f108fd6554f5171dcd7d7462bdd123650af8b4c16cac4b28a53e4f76c64ec75c73596e38f592b0bb7e209742cfcf595b16207a1891"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0xc09}}]}) mount$overlay(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), 0x900410, &(0x7f0000001500)={[{@nfs_export_off}, {@default_permissions}, {@userxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x30, 0x64, 0x39, 0x63, 0x31, 0x36, 0x36], 0x2d, [0x30, 0x0, 0x62, 0x63], 0x2d, [0x38, 0x64, 0x37, 0x298766bd80261e50], 0x2d, [0x39, 0x61, 0x63, 0x61], 0x2d, [0x66, 0x62, 0x30, 0x39, 0x53, 0x61, 0x2, 0x38]}}}, {@hash}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000015c0), 0xf) 52.540559319s ago: executing program 37 (id=2476): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r0, 0xf870628677765568, 0x100010, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000)="ebf49ba63756d73c37a4d03dc64ecc81bad224383f61e8872fc3f14b2ecbb6fcf0b53bd84b171f268c40b6161bde43219f1c6a", 0x33, r1}, 0x68) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6192, 0x80e80) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x3, 0x20, &(0x7f0000000100)="6c2a6206533ef9e14caef81cd3beba4492e155bf2f576f62f8bd84156ee44263"}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x7fffffffffffffff, 0x7}) ioctl$KVM_TDX_FINALIZE_VM(r4, 0xc008aeba, &(0x7f0000000280)) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000002c0)=""/212) r5 = syz_usb_connect$uac1(0x1, 0xe4, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0xf5, 0x80, 0x61, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x180, 0x0, "d1ddf138e5"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x3, 0x4, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x2, 0x6, "4e3ca3e20db8"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x9, "fcc1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x8, "05", "13"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf3, 0x4, 0x44, 0xa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0xce, "36bc0d9d21d77c3456"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0xf, 0x81}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xb, 0x6, "bd8672", "bf"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x5, "80cb23", 'B'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0xfe, 0xff, {0x7, 0x25, 0x1, 0x1, 0x87, 0x5}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x3, 0x2, 0x6, 0x10, 0x4}, 0x24, &(0x7f0000000500)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dee755ec7cc3eed8154389696b504e28"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb1f542b607ca65f3, 0xe, 0xb0, 0x800, 0x2}]}, 0x3, [{0x99, &(0x7f0000000540)=@string={0x99, 0x3, "415aaf2bd0e8594f538a7cc4281bc8d31b884acb683d92ee032892f12bd474ada5f68d16965a6c7a4c2d2756df71ff39104d9e6d9964f3b2ff49570a6eaa1796cc7e93b931109fdda3250e34aa26c13aa7a1d7b985f566b9376c52ace26848c9db0c885b1b11dfde0853ce41f638b8d6d2b6e0352502c747985cd2945dfc5a9fa0e4ca1aa1ca62746707df5249805c0ae3a9a08a2eb22b"}}, {0x35, &(0x7f0000000600)=@string={0x35, 0x3, "7c1d0aad1218f5aed838cd5f3c0145d893b739fe88e11cfde3c2d5a0643ad4c463e628f1e8f2b644a644e37488bb33dc858172"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x20, 0x4, 0xcf, {0xcf, 0x10, "7b4deaac5531e1c0bbcb1c757d5c7a2317df5a16a6f4614954d34a82dda21c3a2a92786ba31729036aed20d2285ebe80230a66b006897227f89ecf0992db4fc997f3a79db3b873fa403469e461032a376dd6a1d1d5dbdeacebd43ca570ef6d5b2307e6216ad06eab92b6353a80cf3a49b108d4825a6d0855cd6277aa2397f4df83e611f9f697071597f7db87617eea351cd0d89eb45ed6e05f0c6b529dba27f5b057f2e67e0e8f236700db6ac4340898e41ebf157919d6a095297fed3d85e9da6fb73a7eb897559f99d4fad4a1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x40, 0x31, 0x9a, "40058af0e09490f03b53346d7006b5df63f31ba75a5031d5d807a9c9dcd9de2cd77b98080cd53de11aaa94b30cf1d6a745048e1d25da0a98dcb45e2462c2a1db361e7fd1bdac056bfb010989cf214fe79eaaa110ef5a71045bae51c6a20325ea3691e571c7137462bee2a71ed9330343f5c64a60e887bbfc1fe310f2130aba9d9a236b773719ad413da2a54b6bdca71c687ed2b759ff6ef790ea"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x81, 0x3, '\x002r'}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "e8c2db"}, &(0x7f0000000a00)={0x20, 0x83, 0x2, "1477"}, &(0x7f0000000a40)={0x20, 0x84, 0x4, "1d06c50b"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "1cb9f1"}}) pipe2$watch_queue(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x61967ab5a74afe53, 0x7, 0x1, 0x3ff, {{0x12, 0x4, 0x0, 0x3e, 0x48, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x6, "1831de81"}, @timestamp_prespec={0x44, 0x2c, 0xcd, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x10}, {@empty, 0x5}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010100, 0x6}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000c40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, 0x6, 0x7f, 0x400, 0xadd9, 0x400000, r8}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000cc0)={0x1, 0x0, [{0x8e4, 0x0, 0x8}]}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x50}}, 0x40000) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ec0), r7) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x138, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8173f43485938580125ab8eb8fa1eeb9b690fd6e652e66abd0c130b0ec752b9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffff3bd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe05, @private0, 0xe}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x10) openat$incfs(r4, &(0x7f00000010c0)='.pending_reads\x00', 0x103080, 0x80) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001100)) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xc0, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6d, 0xa8, @random="42d1451e0ffe6c111424e736067c399f1269c999326fb8aa6ae54c53bf07efca268d8773cae052b48075130edeeeb4b49c5012630e4a7faab002c3f77e4f6a3d371da9175decfee8a885adf528fb51a01e31f5a33eccaf48f906cb6886089ad43b89474ac035c9e248"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xcb, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0xafe}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xb0, 0x1}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x250, 0x9, 0x3, 0x9, 0x50, 0x88}, 0x3d, &(0x7f0000001340)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x27, 0x10, 0xb, "0e28acedd97739b96ca7aed388ec7c73e531d2911bc0d00a8a5e328ff15b63f5e94b57c3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8d, 0x5, 0x0, 0x401, 0x5}]}, 0x2, [{0x59, &(0x7f0000001380)=@string={0x59, 0x3, "9a30dbeff990a64e71b0101d9518317efa05e4195cf24fc4c8d9eff732bf82246a27f108fd6554f5171dcd7d7462bdd123650af8b4c16cac4b28a53e4f76c64ec75c73596e38f592b0bb7e209742cfcf595b16207a1891"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0xc09}}]}) mount$overlay(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), 0x900410, &(0x7f0000001500)={[{@nfs_export_off}, {@default_permissions}, {@userxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x30, 0x64, 0x39, 0x63, 0x31, 0x36, 0x36], 0x2d, [0x30, 0x0, 0x62, 0x63], 0x2d, [0x38, 0x64, 0x37, 0x298766bd80261e50], 0x2d, [0x39, 0x61, 0x63, 0x61], 0x2d, [0x66, 0x62, 0x30, 0x39, 0x53, 0x61, 0x2, 0x38]}}}, {@hash}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000015c0), 0xf) 51.944171234s ago: executing program 8 (id=2480): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x11, 0x2fd, 0x3, 0x0, 0x6, 0x0}) 51.942042224s ago: executing program 8 (id=2481): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x18, r1, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) socket$inet_udp(0x2, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 51.83981023s ago: executing program 8 (id=2482): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="391e3a15d0caa32457f7547ce5ba46a9a1639d3596c35f6311ae0be4874792f5fa7263d23b239b9f3d30905f5a8771775787d0ad632b8c4b9077755c6c2ceb33eaff75e3ebc69758451dcf2d8df45f0f83d033322d23d45d153781e03fe77c4a2e3d276412d18acff12fe5fa4a9f47f3d59ffd443f99839989e524ca59535c0b6f", 0x81}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d000000006411fffc010000000100000000000000000000ff0200000000000000000000000000014e204e2300"], 0x9e) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100) 51.819771751s ago: executing program 8 (id=2486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40, [{{0x9, 0x4, 0xc7, 0xb, 0x0, 0x25, 0xb8, 0xd2}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x100000e) socket$vsock_stream(0x28, 0x1, 0x28) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @main=@item_4={0x3, 0x0, 0xc, "83aaeb27"}]}}, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x2c1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2, &(0x7f0000000100)="813f0ea6", 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r6) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf250c0000002000058000000280080003000008000008000400000001000800010075647000"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r8 = eventfd2(0x7, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r8, 0x7, 0x2, r6}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f00000001c0)=0xffffffff, 0x4) 50.498432938s ago: executing program 8 (id=2498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc4, 0x200, 0x0, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc4, 0x200, 0x0, 0x6}) read(r2, &(0x7f00000021c0)=""/218, 0xda) (async) read(r2, &(0x7f00000021c0)=""/218, 0xda) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000500)) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000500)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x500) ioctl$EVIOCGREP(r6, 0x80084503, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r5, 0x5) accept4(r5, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240), 0x4) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x1, 0x7, 0x0, 0x7, 0x1, 0xa4, 0x7, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0x3000, 0xf, 0x3, 0x15, 0xa, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x6, 0x15, 0x7, 0x3, 0x8, 0x4, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000480)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000480)) 50.30011816s ago: executing program 8 (id=2499): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) prlimit64(r0, 0xd, &(0x7f0000000080)={0x10000, 0xb}, &(0x7f00000000c0)) setreuid(r1, r1) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x7, 0x9}]}, 0xc, 0x3) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) iopl(0x6) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) rmdir(&(0x7f00000001c0)='./file0\x00') (async, rerun: 64) r4 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf6, 0xc0, 0xe, [{{0x9, 0x4, 0x0, 0x7e, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xaf, 0x40, 0xff}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xd2, 0x5, 0x6, 0x20, 0x4}, 0x53, &(0x7f0000000280)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf5, 0x5, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf00f, 0xb, [0xff3f00, 0xff3f3f, 0xffc05f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "cb8e21e00a47fdfb8d9bc737f53b44a1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x9, 0xffff}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f0000000380)={0x0, 0x24, 0x46, {0x46, 0x21, "7f0ae232374c39d0a3c772ac968cb5ba9787eda895aa5d785f2006fa4da5633120184a60b100d5aaad343eb89737ca3035dd9099cb2a40b3626a33be1c7c920dfdcb9b16"}}, &(0x7f0000000400)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "61ff4418d5b23367dd4cc48abf374743697af4eb4d2fd51750de55c8761a96936f890ec6e20902d4449b9ad9290994e45cc1725566ea07135cd80f72938f6adf9125dcda29178f30b7452e53202fb266d816e0f01befd61a8fcb9191cd015143381e0d535a7393ecfed42e583319c0cfb32fbd38894d377ed08bcdf6a5a5428eb55b07c52430c0b25ad215c16a4a1012aa055573490b12c9fcc41cc3b1f5bc4f4280f702cc"}}, &(0x7f00000004c0)={0x0, 0xf, 0x143, {0x5, 0xf, 0x143, 0x5, [@generic={0x9c, 0x10, 0x1, "52d6f08616dd5b76b4c2602231ebe7ab5beb8b6fdfcde66909f5aa7780bf981ff2c81f7f3de452c982d7bf414c3d698ec84d53e841bbfa1c60964869d7a43f209a06e1c88fbd934ffe43cb8e43a9c73df06cb8e663730d630a6e58852b3408bb1e96922b32c7633985084726e597c5e1f68138274ebeaabaa7e3359a44e79d36fe547b8e58e183e5eb92cb52255e52a4f0768b099e73e0f33d"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x80, 0x7, 0x6}, @generic={0x89, 0x10, 0x1, "679ae749f3ed00365d5e6752bc17ee730fa49d8036d6daaea8a2e3a6d4e73056149146c710887b3f7e633d860e0e19e3d6c71089d614c67f920bb2f3a9e2b27c7fa2807e5d82f1d1c5134f1de7912d7c05259890502e10abce0afe7890249054cd07f14de90a346f6a40725ea5c050203aed569b3e7a9d44ae68e93e57bac427245fdefcd623"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x0, 0xfff0}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x18, 0x2b, 0x5, "9b19924a", "13c52211"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0xa2, 0x7, 0x6, 0x4, 0x4}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x5c, "e4ae9264cf18fc20d5667b41fb659943c67c530ef0850451b49bd4167d95e87bf7bf5965818fa13cf08d2f97400603405be3ae8af70a610f7afa87c402202c2e211158a1567c91c29b5c9361688c76c2c6e5b72e48df4061bee1b1e1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x40, [0x0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000008c0)={0x40, 0x9, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "01b9"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "04d2"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd}}) (async) nanosleep(&(0x7f0000000c00), &(0x7f0000000c40)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c80)=""/178, 0xb2}, {&(0x7f0000000d40)=""/172, 0xac}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/221, 0xdd}, {&(0x7f0000000f80)=""/162, 0xa2}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f0000001100)=""/240, 0xf0}, {&(0x7f0000001200)=""/106, 0x6a}], 0x8, &(0x7f0000001300)=""/72, 0x48}, 0x2}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/108, 0x6c}, {&(0x7f0000002480)=""/245, 0xf5}, {&(0x7f0000002580)=""/164, 0xa4}], 0x4, &(0x7f0000002680)=""/136, 0x88}, 0x7}, {{&(0x7f0000002740)=@caif=@util, 0x80, &(0x7f0000002800)=[{&(0x7f00000027c0)=""/17, 0x11}], 0x1, &(0x7f0000002840)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000003840)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000038c0)=""/189, 0xbd}, {&(0x7f0000003980)=""/8, 0x8}, {&(0x7f00000039c0)=""/110, 0x6e}], 0x3, &(0x7f0000003a80)=""/239, 0xef}, 0x4}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b80)=""/181, 0xb5}], 0x1, &(0x7f0000003c80)=""/126, 0x7e}, 0x400}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/133, 0x85}, {&(0x7f0000003dc0)=""/167, 0xa7}, {&(0x7f0000003e80)=""/19, 0x13}, {&(0x7f0000003ec0)=""/2, 0x2}, {&(0x7f0000003f00)=""/181, 0xb5}], 0x5, &(0x7f0000004040)=""/65, 0x41}, 0x2}, {{&(0x7f00000040c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004140)=""/229, 0xe5}, {&(0x7f0000004240)=""/141, 0x8d}, {&(0x7f0000004300)=""/145, 0x91}, {&(0x7f00000043c0)=""/139, 0x8b}, {&(0x7f0000004480)=""/68, 0x44}], 0x5}, 0x3}], 0x7, 0x100, 0x0) (async) r6 = fsopen(&(0x7f0000004740)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004800)=[@text64={0x40, &(0x7f0000004780)="66baf80cb810466c89ef66bafc0cedd8ea66baf80cb84440ff8fef66bafc0c66b8000066ef3667450f01c50f20d835200000000f22d8c744240003010000c74424024be6e39fff1c24c48161607c3f0026dd0f8318a4c461f850e0", 0x5b}], 0x1, 0x62, &(0x7f0000004840)=[@flags={0x3, 0x1600}, @dstype0={0x6, 0x1}], 0x2) (async) setsockopt$inet6_buf(r5, 0x29, 0x2a, &(0x7f0000004880)="2bc2e508d61d031a23065dbce63f388c23507899104eed1f87b04fbeb7b794617ffd28c6d3f369fc02265d290a3a2c40470a3646a6ca27769f143429a3d2eaa6ec2ac4ef5ce6994a08be5e6720e6dfd089ff29873d08343c3c721757bd6947149a3dfd388cc0a3061344eaf48628ac66113b83fc31169fe962ced98f2bd9c1f3ac19f9b90ee1fd97f6e4a31cde10f79917e2baa062dde9ea0a33e1ed86dd24e89e3639e161ddf69871f5355747a58bbf290c09063d1e35136845329b0b706a8f827f1702249304be3997885f5b96f9a4790e7f1ebfe84f32136d55", 0xdb) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000004980), &(0x7f00000049c0)=0x4) mount$overlay(0x0, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40), 0x800000, &(0x7f0000004a80)={[{@index_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@smackfshat={'smackfshat', 0x3d, 'vxfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@fowner_lt={'fowner<', r1}}]}) (async) setsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000004b00)=0x5, 0x4) (async, rerun: 64) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000004b40), 0x80000, 0x0) (rerun: 64) close_range(r5, r7, 0x0) recvmsg$can_raw(r7, &(0x7f0000005480)={&(0x7f0000004b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004c00)=""/150, 0x96}, {&(0x7f0000004cc0)=""/231, 0xe7}, {&(0x7f0000004dc0)=""/222, 0xde}, {&(0x7f0000004ec0)=""/108, 0x6c}, {&(0x7f0000004f40)=""/1, 0x1}, {&(0x7f0000004f80)=""/128, 0x80}, {&(0x7f0000005000)=""/81, 0x51}, {&(0x7f0000005080)=""/151, 0x97}, {&(0x7f0000005140)=""/80, 0x50}, {&(0x7f00000051c0)=""/250, 0xfa}], 0xa, &(0x7f0000005380)=""/243, 0xf3}, 0x40) r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000054c0)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x1, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x7, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000005740)={0xa, &(0x7f0000005500)={0xa, 0x6, 0x201, 0x4, 0x7, 0xff, 0x20, 0x7f}, 0x5e, &(0x7f0000005540)={0x5, 0xf, 0x5e, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x7, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0xf00, 0x80, [0x30, 0xc000, 0x1fe00c0, 0xff3f00, 0xff0000, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xb, 0x3, 0x9e3d}, @ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x0, 0xff00, 0x2, [0xc000, 0x3f, 0xff1f80, 0x3fc0, 0xcf, 0x0]}]}, 0x2, [{0xab, &(0x7f00000055c0)=@string={0xab, 0x3, "aa1c1931996d38baaa73f2afe01d22ef9c063dc3f5058b56139db6954b4ad4bbd651da14b78f6f73698c6e0aff936adddbf9f5502b25e36ebeb8b6bc8b8e5ce15eee51b37e4464b0909a2f6d83c6cf96a2a249c3ad0a06136ee404aace5357de09e89fd72fcafbd8c3d931dd277accba89ac7f0792fd911d1f969099b7e803200563f2909dea95cc2852aad807409ae65d4226e963f055f65ea23b274c2d64502def868c30f20053ca"}}, {0x82, &(0x7f0000005680)=@string={0x82, 0x3, "fe99b990a6f8c4d46341d838ff101042f9bb43651333dc18627fc66daa87f838c1e8335ffffd998ad2b44750da62faac4aa4012902993cd3188c7cfece6196475f96398966b69543961ed884192226d31127b6dedf6cd1311daec0991203c212b57c6a469264f38050dfb4ad7fb2522860cefab5ea63b7fbf1720fccc3c563ae"}}]}) syz_usb_control_io$printer(r8, &(0x7f00000058c0)={0x14, &(0x7f0000005780)={0x60, 0x1, 0x73, {0x73, 0xa, "26e1da7271aff8acbdef0241e9be6b81b2859a9c9ef53115661e458584a1b32bed40e6da40b5cad585d003ed9615b2ccfc23d47524e0698611de01783a6446a84afc3b38943ce44ecfd5385236ebf52812ba647f8f24c5ea33c2f0b4b473f9efadce37a8ed5e6978a34f9c480728df726b"}}, &(0x7f0000005800)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "d59d2f68aca3817c771cefc1e46ac156fe67cc286bffa8281b065ce19cfc7bc8a8b844e55fb684e44fe51f90998415483da940031f857de1396d43c706dec53da6435deae83921211a72a1fda47ec39825db1fa611e9f4d7934ae5c42731d6c9d305fcafe5af30e447ca10492609e8840b91a444ca36700d16a5aab920acd19dda438d3e16189cdfbc370d55385104d290c8186ffc3ed1f4fe33dcfb61252ba15914c6ef89707aa468de736266b8be8e9237522a"}}}, &(0x7f0000005bc0)={0x34, &(0x7f0000005900)={0x40, 0x17, 0x96, "1caf9988935c097e3e3a062267e001bb627c6109265ba823fe5e0687c995769bd3a083537db7e67b9057803d2b4f26c76833f670fabac8e1ddf3579d8b00cb6851177a7f6744dfecb9a34957f63ba4b3811c36fba9349e9b0dad8879cc6ee15b62595cc6569574516eb135e9dd976126eade2e494f0c7a42f22146dcc7e865752c30cc341185d0ab9d0809e704787fcd4d3c21be4c7a"}, &(0x7f00000059c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000005a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000005a40)={0x20, 0x0, 0xe4, {0xe2, "7468bb453dd2ddfde8190928d303963ab8637834212c0af570aeeaae0e2be117e2c3ed0be40741017f430b2640fa2382ac377464d65a33294978bbb07034e9a119ed918e11369e0d17a296e8eb79ba6fd94f2f51e890c68ac686b9437c9b0a2506bd21a778174531c80d74df5644a85f0937512d11dc6ae040fd27bf5a1d0612a590ce4449e03978f9798d2358c2a3c53d3c22672e16f21cdc21803b2e87797cf59c6ef3ce1ed931de40caa0ed221b67157cf6ace8dc78be7bd6a52bc5601eae350e7b47e509e8c00d0953302b3792aefc418b9d642816b479015d4c59adcee2fdc3"}}, &(0x7f0000005b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000005b80)={0x20, 0x0, 0x1, 0x6}}) (async) r9 = syz_usb_connect$cdc_ecm(0x3, 0x70, &(0x7f0000005c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xff, 0x40, 0x63, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xa, 0x24, 0x6, 0x0, 0x0, "94ee114a66"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9f, 0x3ff, 0x1, 0x3d}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6c, 0x7, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0xd, 0xc8, 0x7}}}}}]}}]}}, &(0x7f0000005dc0)={0xa, &(0x7f0000005c80)={0xa, 0x6, 0x110, 0xd7, 0x9, 0x0, 0x20, 0x6b}, 0x7f, &(0x7f0000005cc0)={0x5, 0xf, 0x7f, 0x5, [@generic={0x39, 0x10, 0xb, "ffdf9e7d9208a827694409dd3279a5eb91b25684a426d1af8b1065e3bd1cf5e46642049fc9c580501dc99dc5a4e35d475ee3ef958ea4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3c, "b477e3cf3832b192fade64ffc3d15434"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x1e}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf, 0x100, [0x0, 0xff00, 0x30, 0x1fec0cf]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x6, 0x8}]}, 0x2, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x1210}}, {0x19, &(0x7f0000005d80)=@string={0x19, 0x3, "be1ba3b725646f348d92a11b433194ad3054987ea282af"}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000005ec0)={0x14, &(0x7f0000005e00)={0x20, 0x31, 0x62, {0x62, 0x2, "1052d03fddc63cec26ae390fd5d7227b59df648a2be3a7fde97575c84d884aec32e700426384daf74cf9cd12660bb9730137793d23ba367cc711fa11b150c80ffb5f1f9e515aa2a82f56e1e6a075254a09ac92623ddd147cd35ad524121d7953"}}, &(0x7f0000005e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005fc0)={0x1c, &(0x7f0000005f00)={0x40, 0x17, 0x29, "a2ce67d78958b4cb4f489592d0829651a98766e7d06542e56186ec726b28f8c9b37147d1d216922661"}, &(0x7f0000005f40)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000005f80)={0x0, 0x8, 0x1, 0x2}}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x2, 0x9b, &(0x7f0000006000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xfd, 0xa0, 0x51, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ba"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x3844, 0xffff, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0xf, 0x11}, [@country_functional={0xe, 0x24, 0x7, 0x7, 0x5287, [0x9, 0xd, 0x9c, 0xd]}, @mbim={0xc, 0x24, 0x1b, 0xe0, 0x7, 0xfc, 0xd, 0x9, 0x4}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x8, [0xfa, 0x8a, 0x5, 0x5, 0x3, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x8, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf, 0xb, 0x4}}}}}}}]}}, &(0x7f00000061c0)={0xa, &(0x7f00000060c0)={0xa, 0x6, 0x300, 0x2, 0x6, 0x8, 0x20, 0x2}, 0x19, &(0x7f0000006100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "6f21a9dc62ea24d1525b7400ed4cdd78"}]}, 0x2, [{0x4, &(0x7f0000006140)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000006180)=@lang_id={0x4, 0x3, 0x843}}]}) (rerun: 64) 50.243410293s ago: executing program 38 (id=2499): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) prlimit64(r0, 0xd, &(0x7f0000000080)={0x10000, 0xb}, &(0x7f00000000c0)) setreuid(r1, r1) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x7, 0x9}]}, 0xc, 0x3) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) iopl(0x6) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) rmdir(&(0x7f00000001c0)='./file0\x00') (async, rerun: 64) r4 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf6, 0xc0, 0xe, [{{0x9, 0x4, 0x0, 0x7e, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xaf, 0x40, 0xff}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xd2, 0x5, 0x6, 0x20, 0x4}, 0x53, &(0x7f0000000280)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf5, 0x5, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf00f, 0xb, [0xff3f00, 0xff3f3f, 0xffc05f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "cb8e21e00a47fdfb8d9bc737f53b44a1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0x9, 0xffff}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f0000000380)={0x0, 0x24, 0x46, {0x46, 0x21, "7f0ae232374c39d0a3c772ac968cb5ba9787eda895aa5d785f2006fa4da5633120184a60b100d5aaad343eb89737ca3035dd9099cb2a40b3626a33be1c7c920dfdcb9b16"}}, &(0x7f0000000400)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "61ff4418d5b23367dd4cc48abf374743697af4eb4d2fd51750de55c8761a96936f890ec6e20902d4449b9ad9290994e45cc1725566ea07135cd80f72938f6adf9125dcda29178f30b7452e53202fb266d816e0f01befd61a8fcb9191cd015143381e0d535a7393ecfed42e583319c0cfb32fbd38894d377ed08bcdf6a5a5428eb55b07c52430c0b25ad215c16a4a1012aa055573490b12c9fcc41cc3b1f5bc4f4280f702cc"}}, &(0x7f00000004c0)={0x0, 0xf, 0x143, {0x5, 0xf, 0x143, 0x5, [@generic={0x9c, 0x10, 0x1, "52d6f08616dd5b76b4c2602231ebe7ab5beb8b6fdfcde66909f5aa7780bf981ff2c81f7f3de452c982d7bf414c3d698ec84d53e841bbfa1c60964869d7a43f209a06e1c88fbd934ffe43cb8e43a9c73df06cb8e663730d630a6e58852b3408bb1e96922b32c7633985084726e597c5e1f68138274ebeaabaa7e3359a44e79d36fe547b8e58e183e5eb92cb52255e52a4f0768b099e73e0f33d"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x80, 0x7, 0x6}, @generic={0x89, 0x10, 0x1, "679ae749f3ed00365d5e6752bc17ee730fa49d8036d6daaea8a2e3a6d4e73056149146c710887b3f7e633d860e0e19e3d6c71089d614c67f920bb2f3a9e2b27c7fa2807e5d82f1d1c5134f1de7912d7c05259890502e10abce0afe7890249054cd07f14de90a346f6a40725ea5c050203aed569b3e7a9d44ae68e93e57bac427245fdefcd623"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x0, 0xfff0}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x18, 0x2b, 0x5, "9b19924a", "13c52211"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0xa2, 0x7, 0x6, 0x4, 0x4}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x5c, "e4ae9264cf18fc20d5667b41fb659943c67c530ef0850451b49bd4167d95e87bf7bf5965818fa13cf08d2f97400603405be3ae8af70a610f7afa87c402202c2e211158a1567c91c29b5c9361688c76c2c6e5b72e48df4061bee1b1e1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x40, [0x0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000008c0)={0x40, 0x9, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "01b9"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "04d2"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd}}) (async) nanosleep(&(0x7f0000000c00), &(0x7f0000000c40)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c80)=""/178, 0xb2}, {&(0x7f0000000d40)=""/172, 0xac}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/221, 0xdd}, {&(0x7f0000000f80)=""/162, 0xa2}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f0000001100)=""/240, 0xf0}, {&(0x7f0000001200)=""/106, 0x6a}], 0x8, &(0x7f0000001300)=""/72, 0x48}, 0x2}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/108, 0x6c}, {&(0x7f0000002480)=""/245, 0xf5}, {&(0x7f0000002580)=""/164, 0xa4}], 0x4, &(0x7f0000002680)=""/136, 0x88}, 0x7}, {{&(0x7f0000002740)=@caif=@util, 0x80, &(0x7f0000002800)=[{&(0x7f00000027c0)=""/17, 0x11}], 0x1, &(0x7f0000002840)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000003840)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000038c0)=""/189, 0xbd}, {&(0x7f0000003980)=""/8, 0x8}, {&(0x7f00000039c0)=""/110, 0x6e}], 0x3, &(0x7f0000003a80)=""/239, 0xef}, 0x4}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b80)=""/181, 0xb5}], 0x1, &(0x7f0000003c80)=""/126, 0x7e}, 0x400}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/133, 0x85}, {&(0x7f0000003dc0)=""/167, 0xa7}, {&(0x7f0000003e80)=""/19, 0x13}, {&(0x7f0000003ec0)=""/2, 0x2}, {&(0x7f0000003f00)=""/181, 0xb5}], 0x5, &(0x7f0000004040)=""/65, 0x41}, 0x2}, {{&(0x7f00000040c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004140)=""/229, 0xe5}, {&(0x7f0000004240)=""/141, 0x8d}, {&(0x7f0000004300)=""/145, 0x91}, {&(0x7f00000043c0)=""/139, 0x8b}, {&(0x7f0000004480)=""/68, 0x44}], 0x5}, 0x3}], 0x7, 0x100, 0x0) (async) r6 = fsopen(&(0x7f0000004740)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004800)=[@text64={0x40, &(0x7f0000004780)="66baf80cb810466c89ef66bafc0cedd8ea66baf80cb84440ff8fef66bafc0c66b8000066ef3667450f01c50f20d835200000000f22d8c744240003010000c74424024be6e39fff1c24c48161607c3f0026dd0f8318a4c461f850e0", 0x5b}], 0x1, 0x62, &(0x7f0000004840)=[@flags={0x3, 0x1600}, @dstype0={0x6, 0x1}], 0x2) (async) setsockopt$inet6_buf(r5, 0x29, 0x2a, &(0x7f0000004880)="2bc2e508d61d031a23065dbce63f388c23507899104eed1f87b04fbeb7b794617ffd28c6d3f369fc02265d290a3a2c40470a3646a6ca27769f143429a3d2eaa6ec2ac4ef5ce6994a08be5e6720e6dfd089ff29873d08343c3c721757bd6947149a3dfd388cc0a3061344eaf48628ac66113b83fc31169fe962ced98f2bd9c1f3ac19f9b90ee1fd97f6e4a31cde10f79917e2baa062dde9ea0a33e1ed86dd24e89e3639e161ddf69871f5355747a58bbf290c09063d1e35136845329b0b706a8f827f1702249304be3997885f5b96f9a4790e7f1ebfe84f32136d55", 0xdb) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000004980), &(0x7f00000049c0)=0x4) mount$overlay(0x0, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40), 0x800000, &(0x7f0000004a80)={[{@index_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@smackfshat={'smackfshat', 0x3d, 'vxfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@fowner_lt={'fowner<', r1}}]}) (async) setsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000004b00)=0x5, 0x4) (async, rerun: 64) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000004b40), 0x80000, 0x0) (rerun: 64) close_range(r5, r7, 0x0) recvmsg$can_raw(r7, &(0x7f0000005480)={&(0x7f0000004b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004c00)=""/150, 0x96}, {&(0x7f0000004cc0)=""/231, 0xe7}, {&(0x7f0000004dc0)=""/222, 0xde}, {&(0x7f0000004ec0)=""/108, 0x6c}, {&(0x7f0000004f40)=""/1, 0x1}, {&(0x7f0000004f80)=""/128, 0x80}, {&(0x7f0000005000)=""/81, 0x51}, {&(0x7f0000005080)=""/151, 0x97}, {&(0x7f0000005140)=""/80, 0x50}, {&(0x7f00000051c0)=""/250, 0xfa}], 0xa, &(0x7f0000005380)=""/243, 0xf3}, 0x40) r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000054c0)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x1, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x7, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000005740)={0xa, &(0x7f0000005500)={0xa, 0x6, 0x201, 0x4, 0x7, 0xff, 0x20, 0x7f}, 0x5e, &(0x7f0000005540)={0x5, 0xf, 0x5e, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x7, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0xf00, 0x80, [0x30, 0xc000, 0x1fe00c0, 0xff3f00, 0xff0000, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xb, 0x3, 0x9e3d}, @ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x0, 0xff00, 0x2, [0xc000, 0x3f, 0xff1f80, 0x3fc0, 0xcf, 0x0]}]}, 0x2, [{0xab, &(0x7f00000055c0)=@string={0xab, 0x3, "aa1c1931996d38baaa73f2afe01d22ef9c063dc3f5058b56139db6954b4ad4bbd651da14b78f6f73698c6e0aff936adddbf9f5502b25e36ebeb8b6bc8b8e5ce15eee51b37e4464b0909a2f6d83c6cf96a2a249c3ad0a06136ee404aace5357de09e89fd72fcafbd8c3d931dd277accba89ac7f0792fd911d1f969099b7e803200563f2909dea95cc2852aad807409ae65d4226e963f055f65ea23b274c2d64502def868c30f20053ca"}}, {0x82, &(0x7f0000005680)=@string={0x82, 0x3, "fe99b990a6f8c4d46341d838ff101042f9bb43651333dc18627fc66daa87f838c1e8335ffffd998ad2b44750da62faac4aa4012902993cd3188c7cfece6196475f96398966b69543961ed884192226d31127b6dedf6cd1311daec0991203c212b57c6a469264f38050dfb4ad7fb2522860cefab5ea63b7fbf1720fccc3c563ae"}}]}) syz_usb_control_io$printer(r8, &(0x7f00000058c0)={0x14, &(0x7f0000005780)={0x60, 0x1, 0x73, {0x73, 0xa, "26e1da7271aff8acbdef0241e9be6b81b2859a9c9ef53115661e458584a1b32bed40e6da40b5cad585d003ed9615b2ccfc23d47524e0698611de01783a6446a84afc3b38943ce44ecfd5385236ebf52812ba647f8f24c5ea33c2f0b4b473f9efadce37a8ed5e6978a34f9c480728df726b"}}, &(0x7f0000005800)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "d59d2f68aca3817c771cefc1e46ac156fe67cc286bffa8281b065ce19cfc7bc8a8b844e55fb684e44fe51f90998415483da940031f857de1396d43c706dec53da6435deae83921211a72a1fda47ec39825db1fa611e9f4d7934ae5c42731d6c9d305fcafe5af30e447ca10492609e8840b91a444ca36700d16a5aab920acd19dda438d3e16189cdfbc370d55385104d290c8186ffc3ed1f4fe33dcfb61252ba15914c6ef89707aa468de736266b8be8e9237522a"}}}, &(0x7f0000005bc0)={0x34, &(0x7f0000005900)={0x40, 0x17, 0x96, "1caf9988935c097e3e3a062267e001bb627c6109265ba823fe5e0687c995769bd3a083537db7e67b9057803d2b4f26c76833f670fabac8e1ddf3579d8b00cb6851177a7f6744dfecb9a34957f63ba4b3811c36fba9349e9b0dad8879cc6ee15b62595cc6569574516eb135e9dd976126eade2e494f0c7a42f22146dcc7e865752c30cc341185d0ab9d0809e704787fcd4d3c21be4c7a"}, &(0x7f00000059c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000005a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000005a40)={0x20, 0x0, 0xe4, {0xe2, "7468bb453dd2ddfde8190928d303963ab8637834212c0af570aeeaae0e2be117e2c3ed0be40741017f430b2640fa2382ac377464d65a33294978bbb07034e9a119ed918e11369e0d17a296e8eb79ba6fd94f2f51e890c68ac686b9437c9b0a2506bd21a778174531c80d74df5644a85f0937512d11dc6ae040fd27bf5a1d0612a590ce4449e03978f9798d2358c2a3c53d3c22672e16f21cdc21803b2e87797cf59c6ef3ce1ed931de40caa0ed221b67157cf6ace8dc78be7bd6a52bc5601eae350e7b47e509e8c00d0953302b3792aefc418b9d642816b479015d4c59adcee2fdc3"}}, &(0x7f0000005b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000005b80)={0x20, 0x0, 0x1, 0x6}}) (async) r9 = syz_usb_connect$cdc_ecm(0x3, 0x70, &(0x7f0000005c00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xff, 0x40, 0x63, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0xd, {{0xa, 0x24, 0x6, 0x0, 0x0, "94ee114a66"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9f, 0x3ff, 0x1, 0x3d}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6c, 0x7, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0xd, 0xc8, 0x7}}}}}]}}]}}, &(0x7f0000005dc0)={0xa, &(0x7f0000005c80)={0xa, 0x6, 0x110, 0xd7, 0x9, 0x0, 0x20, 0x6b}, 0x7f, &(0x7f0000005cc0)={0x5, 0xf, 0x7f, 0x5, [@generic={0x39, 0x10, 0xb, "ffdf9e7d9208a827694409dd3279a5eb91b25684a426d1af8b1065e3bd1cf5e46642049fc9c580501dc99dc5a4e35d475ee3ef958ea4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3c, "b477e3cf3832b192fade64ffc3d15434"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x1e}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf, 0x100, [0x0, 0xff00, 0x30, 0x1fec0cf]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x6, 0x8}]}, 0x2, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x1210}}, {0x19, &(0x7f0000005d80)=@string={0x19, 0x3, "be1ba3b725646f348d92a11b433194ad3054987ea282af"}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000005ec0)={0x14, &(0x7f0000005e00)={0x20, 0x31, 0x62, {0x62, 0x2, "1052d03fddc63cec26ae390fd5d7227b59df648a2be3a7fde97575c84d884aec32e700426384daf74cf9cd12660bb9730137793d23ba367cc711fa11b150c80ffb5f1f9e515aa2a82f56e1e6a075254a09ac92623ddd147cd35ad524121d7953"}}, &(0x7f0000005e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005fc0)={0x1c, &(0x7f0000005f00)={0x40, 0x17, 0x29, "a2ce67d78958b4cb4f489592d0829651a98766e7d06542e56186ec726b28f8c9b37147d1d216922661"}, &(0x7f0000005f40)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000005f80)={0x0, 0x8, 0x1, 0x2}}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x2, 0x9b, &(0x7f0000006000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xfd, 0xa0, 0x51, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ba"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x3844, 0xffff, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0xf, 0x11}, [@country_functional={0xe, 0x24, 0x7, 0x7, 0x5287, [0x9, 0xd, 0x9c, 0xd]}, @mbim={0xc, 0x24, 0x1b, 0xe0, 0x7, 0xfc, 0xd, 0x9, 0x4}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x8, [0xfa, 0x8a, 0x5, 0x5, 0x3, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x8, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf, 0xb, 0x4}}}}}}}]}}, &(0x7f00000061c0)={0xa, &(0x7f00000060c0)={0xa, 0x6, 0x300, 0x2, 0x6, 0x8, 0x20, 0x2}, 0x19, &(0x7f0000006100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "6f21a9dc62ea24d1525b7400ed4cdd78"}]}, 0x2, [{0x4, &(0x7f0000006140)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000006180)=@lang_id={0x4, 0x3, 0x843}}]}) (rerun: 64) 4.338449176s ago: executing program 0 (id=3430): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r2, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xa}, @broadcast, @device_b, @random="5fcf6ac045cc", {0x4, 0x10}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x2004, 0x614, {0x0, 0x6, @default_ibss_ssid}, @val, @void, [{0xdd, 0x6, "409f5d70a458"}]}}]}, 0x54}}, 0x14) 4.25953147s ago: executing program 0 (id=3432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.25917047s ago: executing program 5 (id=3433): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() fcntl$setpipe(r0, 0x407, 0x5) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) timer_create(0x4, &(0x7f0000000380)={0x0, 0x13, 0x1, @thr={&(0x7f0000000180)="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", &(0x7f0000000280)="79c90809167b082352f999537299388a3bc70ab7c5815bbd9c5e4df8c33985c51b473c2901d54d3c1a07afe89fe2f145c302f241079b2b7745742d2d9a4e89e4de2040a18a279f66abf3f571589d5ac534b43fd563be1b3ec945b477c2ba3602b534524279ea7ac16250f653d8c8b2b13e505715ac2beb39c45988784bd8ccf58fbf7452749d89f1a2c909b05c9135fafa79330499c30989ef89ed0db0714b7ca20ee3d0ab931836c9d3ff88f9250a40cbd6c82e479cec650286b44be328f976e5b9dbdbceba60b4c5c621"}}, &(0x7f00000003c0)) 4.177232475s ago: executing program 0 (id=3434): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') writev(r3, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3.318049075s ago: executing program 5 (id=3436): unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 3.219280631s ago: executing program 0 (id=3439): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) 3.107283838s ago: executing program 5 (id=3440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="8a", 0xfffffffffffffd23, 0x1, 0x0, 0x0) 3.106733628s ago: executing program 0 (id=3448): unshare(0x20000400) unshare(0x400) 2.263035587s ago: executing program 5 (id=3441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.262287037s ago: executing program 0 (id=3442): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x8a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0xfffffffffffffff5, 0x8, {0x0, 0x0, 0x0, {0x4, 0x7, 0x200000004, 0x8, 0xfffd, 0x9, 0x4, 0x1, 0xffffffc1, 0x2000, 0x2, r2, r3, 0x100003, 0x1007fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f00000062c0)={0x2020}, 0x2020) 2.135326664s ago: executing program 5 (id=3446): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x2, 0x200, &(0x7f0000000a40)="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"}) 2.135056825s ago: executing program 5 (id=3447): syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x61, 0x5b, 0x12, 0x20, 0xcde, 0x22, 0x1709, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x55, 0x19, 0x40, 0x5, [{{0x9, 0x4, 0xae, 0x9d, 0x0, 0x2a, 0x5d, 0x59, 0x1}}]}}]}}, 0x0) 1.918864287s ago: executing program 6 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000040) 1.918544827s ago: executing program 6 (id=3459): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) setitimer(0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x1ff) 1.344616431s ago: executing program 9 (id=3460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.269211065s ago: executing program 9 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) 1.215486398s ago: executing program 9 (id=3462): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.215160678s ago: executing program 9 (id=3463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000300)={0x2, 0x4ea3, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="ef00a521", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="021fc3", 0x3}], 0x1}}], 0x2, 0x2400c040) 1.214773858s ago: executing program 9 (id=3464): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x98, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0xe]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.214200118s ago: executing program 9 (id=3465): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2058) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffd, 0x6, 0xfffffffe, 0x0, 0x0, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000797000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r3, 0x0) 1.023624079s ago: executing program 6 (id=3466): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 1.01209404s ago: executing program 6 (id=3467): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) 103.549093ms ago: executing program 6 (id=3468): r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000800)={0x0, 0x0}, 0x80000) ioprio_set$pid(0x1, 0x0, 0x4004) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0xd) 0s ago: executing program 6 (id=3469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file1/file2/file3/file5\x00', 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.248429][ T36] audit: type=1400 audit(1769434024.309:917): avc: denied { setopt } for pid=6168 comm="syz.5.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.367753][ T335] usb_ehset_test 7-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 245.377976][ T335] usb 7-1: USB disconnect, device number 45 [ 245.835435][ T335] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 245.857345][ T4708] tipc: Subscription rejected, illegal request [ 245.925280][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.934856][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.937296][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.954050][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.963072][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.973782][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.985821][ T36] audit: type=1400 audit(1769434025.069:918): avc: denied { setattr } for pid=6198 comm="syz.5.2096" name="" dev="pipefs" ino=38727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 245.988772][ T335] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.018975][ T335] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.032316][ T335] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 246.041656][ T335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.050684][ T335] usb 8-1: SerialNumber: syz [ 246.062314][ T335] usb 8-1: 0:2 : does not exist [ 246.067451][ T6204] tipc: Started in network mode [ 246.072373][ T6204] tipc: Node identity ac14140f, cluster identity 4711 [ 246.079425][ T6204] tipc: New replicast peer: 255.255.255.255 [ 246.085799][ T6204] tipc: Enabled bearer , priority 10 [ 246.093519][ T36] audit: type=1400 audit(1769434025.169:919): avc: denied { getopt } for pid=6203 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.465990][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2089'. [ 246.520904][ T335] usb 8-1: USB disconnect, device number 23 [ 246.565569][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.574947][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.193611][ T36] audit: type=1400 audit(1769434026.269:920): avc: denied { view } for pid=6240 comm="syz.7.2111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 247.217311][ T470] tipc: Node number set to 2886997007 [ 247.503027][ T36] audit: type=1326 audit(1769434026.579:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.6.2115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x0 [ 247.554300][ T470] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 247.583235][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.592071][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.707078][ T470] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.716254][ T470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.724605][ T470] usb 8-1: Product: syz [ 247.728832][ T470] usb 8-1: Manufacturer: syz [ 247.733462][ T470] usb 8-1: SerialNumber: syz [ 247.844337][ T396] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 247.974403][ T396] usb 7-1: device descriptor read/64, error -71 [ 248.117093][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.126264][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.214416][ T396] usb 7-1: device descriptor read/64, error -71 [ 248.346144][ T6252] netlink: 'syz.7.2114': attribute type 58 has an invalid length. [ 248.454626][ T396] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 248.584387][ T396] usb 7-1: device descriptor read/64, error -71 [ 248.824318][ T396] usb 7-1: device descriptor read/64, error -71 [ 248.836748][ T470] cdc_ncm 8-1:1.0: failed to get mac address [ 248.854443][ T470] cdc_ncm 8-1:1.0: bind() failure [ 248.861041][ T470] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 248.869569][ T470] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 248.879399][ T470] usb 8-1: USB disconnect, device number 24 [ 248.944534][ T396] usb usb7-port1: attempt power cycle [ 249.284329][ T396] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 249.315579][ T396] usb 7-1: device descriptor read/8, error -71 [ 249.445544][ T396] usb 7-1: device descriptor read/8, error -71 [ 249.609170][ T6272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=6272 comm=syz.1.2122 [ 249.634323][ T470] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 249.684360][ T396] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 249.705395][ T396] usb 7-1: device descriptor read/8, error -71 [ 249.764305][ T470] usb 8-1: device descriptor read/64, error -71 [ 249.835573][ T396] usb 7-1: device descriptor read/8, error -71 [ 249.944435][ T396] usb usb7-port1: unable to enumerate USB device [ 250.004366][ T470] usb 8-1: device descriptor read/64, error -71 [ 250.189754][ T6280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=6280 comm=syz.5.2125 [ 250.244276][ T470] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 250.273872][ T36] audit: type=1400 audit(1769434029.349:922): avc: denied { getopt } for pid=6293 comm="syz.5.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.374435][ T470] usb 8-1: device descriptor read/64, error -71 [ 250.600739][ T6304] SELinux: policydb string does not match my string SE Linux [ 250.608471][ T6304] SELinux: failed to load policy [ 250.614673][ T470] usb 8-1: device descriptor read/64, error -71 [ 250.703745][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.712570][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.726780][ T470] usb usb8-port1: attempt power cycle [ 250.904298][ T357] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 251.114286][ T470] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 251.135282][ T470] usb 8-1: device descriptor read/8, error -71 [ 251.204274][ T357] usb 7-1: Using ep0 maxpacket: 32 [ 251.215210][ T357] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.236091][ T357] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 251.245936][ T357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.254161][ T357] usb 7-1: Product: syz [ 251.258901][ T357] usb 7-1: Manufacturer: syz [ 251.263689][ T357] usb 7-1: SerialNumber: syz [ 251.269455][ T470] usb 8-1: device descriptor read/8, error -71 [ 251.278363][ T357] usb 7-1: config 0 descriptor?? [ 251.284488][ T357] usb 7-1: bad CDC descriptors [ 251.289499][ T357] usb 7-1: unsupported MDLM descriptors [ 251.389645][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.400085][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.579400][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.590230][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.609700][ T396] usb 7-1: USB disconnect, device number 50 [ 251.687960][ T6329] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2141'. [ 251.924865][ T470] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 251.936440][ T6344] futex_wake_op: syz.5.2147 tries to shift op by 144; fix this program [ 251.947424][ T6344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.954706][ T6344] IPv6: NLM_F_CREATE should be set when creating new route [ 251.956165][ T470] usb 8-1: device descriptor read/8, error -71 [ 251.962025][ T6344] IPv6: NLM_F_CREATE should be set when creating new route [ 252.095456][ T470] usb 8-1: device descriptor read/8, error -71 [ 252.131239][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.140859][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.204406][ T470] usb usb8-port1: unable to enumerate USB device [ 252.552921][ T6364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=6364 comm=syz.5.2156 [ 252.566254][ T6365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6365 comm=syz.5.2156 [ 252.718916][ T6375] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 252.728026][ T36] audit: type=1400 audit(1769434031.809:923): avc: denied { setcurrent } for pid=6374 comm="syz.1.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.752094][ T36] audit: type=1400 audit(1769434031.829:924): avc: denied { unmount } for pid=1434 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 252.794450][ T357] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 252.895426][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.904378][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.914262][ T36] audit: type=1400 audit(1769434031.989:925): avc: denied { map } for pid=6386 comm="syz.1.2164" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.956032][ T357] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.966566][ T357] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.975731][ T357] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.985840][ T357] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.995101][ T357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.007240][ T357] hub 8-1:1.0: bad descriptor, ignoring hub [ 253.013237][ T357] hub 8-1:1.0: probe with driver hub failed with error -5 [ 253.020631][ T357] cdc_wdm 8-1:1.0: skipping garbage [ 253.025939][ T357] cdc_wdm 8-1:1.0: skipping garbage [ 253.031223][ T357] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 253.065656][ T6389] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.073611][ T6389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.081156][ T6389] IPv6: NLM_F_CREATE should be set when creating new route [ 253.088475][ T6389] IPv6: NLM_F_CREATE should be set when creating new route [ 253.117275][ T6392] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 253.234790][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.243792][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.375424][ T6396] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2168'. [ 253.384731][ T6397] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2168'. [ 253.404474][ T396] usb 8-1: USB disconnect, device number 29 [ 253.412150][ T6399] netlink: 'syz.5.2169': attribute type 4 has an invalid length. [ 253.420056][ T6399] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2169'. [ 253.811583][ T36] audit: type=1400 audit(1769434032.889:926): avc: denied { execute } for pid=6421 comm="syz.7.2177" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 253.910608][ T6432] kvm: kvm [6431]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 253.934400][ T357] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 253.993204][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 254.085618][ T357] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.097368][ T357] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.108777][ T357] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 254.119970][ T357] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 254.129651][ T357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.148207][ T6420] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 254.372202][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.381341][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.534335][ T470] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 254.685740][ T470] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.697121][ T470] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.706937][ T470] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 254.716075][ T470] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.724908][ T470] usb 8-1: config 0 descriptor?? [ 254.964468][ T357] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 254.972552][ T357] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input46 [ 254.986358][ T357] usb 7-1: USB disconnect, device number 51 [ 254.992361][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 255.133042][ T470] hid-steam 0003:28DE:1142.002C: item fetching failed at offset 4/5 [ 255.138776][ T6473] netlink: 'syz.5.2193': attribute type 46 has an invalid length. [ 255.146196][ T470] hid-steam 0003:28DE:1142.002C: steam_probe:parse of hid interface failed [ 255.149273][ T6473] netlink: 'syz.5.2193': attribute type 28 has an invalid length. [ 255.158174][ T470] hid-steam 0003:28DE:1142.002C: probe with driver hid-steam failed with error -22 [ 255.173061][ T6473] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2193'. [ 255.503859][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.512602][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.728432][ T36] audit: type=1400 audit(1769434034.809:927): avc: denied { create } for pid=6491 comm="syz.5.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 256.059156][ T6498] /dev/nullb0: Can't lookup blockdev [ 256.065272][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.073987][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.082567][ T6498] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 256.090568][ T6498] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2202'. [ 256.374350][ T396] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 256.525572][ T396] usb 7-1: too many endpoints for config 0 interface 0 altsetting 3: 65, using maximum allowed: 30 [ 256.536659][ T396] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 256.549788][ T396] usb 7-1: config 0 interface 0 has no altsetting 0 [ 256.556827][ T396] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 256.566056][ T396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.575154][ T396] usb 7-1: config 0 descriptor?? [ 256.983737][ T396] uclogic 0003:5543:0064.002D: unbalanced delimiter at end of report description [ 256.993172][ T396] uclogic 0003:5543:0064.002D: parse failed [ 256.999238][ T396] uclogic 0003:5543:0064.002D: probe with driver uclogic failed with error -22 [ 257.154452][ T396] usb 8-1: USB disconnect, device number 30 [ 257.187442][ T470] usb 7-1: USB disconnect, device number 52 [ 257.514330][ T396] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 257.665878][ T396] usb 8-1: unable to get BOS descriptor or descriptor too short [ 257.674119][ T396] usb 8-1: not running at top speed; connect to a high speed hub [ 257.682728][ T396] usb 8-1: config 2 has an invalid interface number: 212 but max is 1 [ 257.690999][ T396] usb 8-1: config 2 has an invalid interface number: 226 but max is 1 [ 257.699234][ T396] usb 8-1: config 2 has no interface number 0 [ 257.705568][ T396] usb 8-1: config 2 has no interface number 1 [ 257.711701][ T396] usb 8-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 257.722748][ T396] usb 8-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 257.733574][ T396] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 257.744795][ T396] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 257.755907][ T396] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.765976][ T396] usb 8-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.779131][ T396] usb 8-1: config 2 interface 212 has no altsetting 0 [ 257.787560][ T396] usb 8-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 257.796723][ T396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.804962][ T396] usb 8-1: Product: syz [ 257.809129][ T396] usb 8-1: Manufacturer: syz [ 257.813729][ T396] usb 8-1: SerialNumber: syz [ 257.982285][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 257.989691][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 257.997288][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 258.004795][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 258.012270][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 258.019700][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 258.027078][ T6528] overlayfs: conflicting options: userxattr,metacopy=on [ 258.032321][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.042883][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.052108][ T6517] Invalid ELF header type: 2 != 1 [ 258.057371][ T36] audit: type=1400 audit(1769434037.129:928): avc: denied { module_load } for pid=6515 comm="syz.7.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 258.085370][ T396] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.226/input/input47 [ 258.098394][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.107427][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.116181][ T396] usb 8-1: USB disconnect, device number 31 [ 258.152605][ T36] audit: type=1400 audit(1769434037.229:929): avc: denied { accept } for pid=6533 comm="syz.5.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.434566][ T396] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 258.564306][ T396] usb 8-1: device descriptor read/64, error -71 [ 258.665633][ T36] audit: type=1400 audit(1769434037.749:930): avc: denied { setopt } for pid=6555 comm="syz.1.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.686021][ T36] audit: type=1400 audit(1769434037.769:931): avc: denied { map } for pid=6555 comm="syz.1.2220" path="socket:[40598]" dev="sockfs" ino=40598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.690164][ T6552] cgroup: Unknown subsys name 'rdma' [ 258.844284][ T396] usb 8-1: device descriptor read/64, error -71 [ 259.076443][ T36] audit: type=1326 audit(1769434038.159:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.5.2225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae5499aeb9 code=0x0 [ 259.104336][ T396] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 259.125109][ T335] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 259.254287][ T396] usb 8-1: device descriptor read/64, error -71 [ 259.294271][ T335] usb 7-1: Using ep0 maxpacket: 8 [ 259.300868][ T335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 259.309592][ T335] usb 7-1: config 5 has an invalid interface number: 42 but max is 0 [ 259.317797][ T335] usb 7-1: config 5 has no interface number 0 [ 259.323908][ T335] usb 7-1: config 5 interface 42 has no altsetting 0 [ 259.332140][ T335] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=28.48 [ 259.341347][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.349393][ T335] usb 7-1: Product: syz [ 259.353587][ T335] usb 7-1: Manufacturer: syz [ 259.358262][ T335] usb 7-1: SerialNumber: syz [ 259.504349][ T396] usb 8-1: device descriptor read/64, error -71 [ 259.573680][ T335] usb 7-1: USB disconnect, device number 53 [ 259.614453][ T396] usb usb8-port1: attempt power cycle [ 259.954371][ T396] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 259.975574][ T396] usb 8-1: device descriptor read/8, error -71 [ 260.105451][ T396] usb 8-1: device descriptor read/8, error -71 [ 260.290125][ T36] audit: type=1326 audit(1769434039.369:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.7.2228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa13df9aeb9 code=0x0 [ 260.349850][ T6587] 9pnet_fd: Insufficient options for proto=fd [ 261.163223][ T357] usb 2-1: USB disconnect, device number 118 [ 261.184328][ T335] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 261.345975][ T335] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 261.354309][ T335] usb 7-1: config 0 has no interface number 0 [ 261.362118][ T335] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 261.371591][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.379926][ T335] usb 7-1: Product: syz [ 261.384210][ T335] usb 7-1: Manufacturer: syz [ 261.385509][ T4708] bridge_slave_1: left allmulticast mode [ 261.390084][ T335] usb 7-1: SerialNumber: syz [ 261.401631][ T335] usb 7-1: config 0 descriptor?? [ 261.407203][ T4708] bridge_slave_1: left promiscuous mode [ 261.413650][ T4708] +$<: port 2(bridge_slave_1) entered disabled state [ 261.421739][ T4708] bridge_slave_0: left allmulticast mode [ 261.427706][ T4708] bridge_slave_0: left promiscuous mode [ 261.433472][ T4708] +$<: port 1(bridge_slave_0) entered disabled state [ 261.580438][ T4708] tipc: Left network mode [ 261.587999][ T4708] veth1_macvtap: left promiscuous mode [ 261.593646][ T4708] veth0_vlan: left promiscuous mode [ 261.652028][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.659322][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.667394][ T6598] bridge_slave_0: entered allmulticast mode [ 261.674802][ T6598] bridge_slave_0: entered promiscuous mode [ 261.684047][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.691347][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.698484][ T6598] bridge_slave_1: entered allmulticast mode [ 261.705357][ T6598] bridge_slave_1: entered promiscuous mode [ 261.769009][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.776134][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.783473][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.790609][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.817295][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.825590][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.837255][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.844404][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.853813][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.860959][ T4751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.868704][ T335] usb 7-1: Found UVC 0.08 device syz (046d:0823) [ 261.875973][ T335] usb 7-1: No valid video chain found. [ 261.885432][ T335] usb 7-1: USB disconnect, device number 54 [ 261.913208][ T6598] veth0_vlan: entered promiscuous mode [ 261.924774][ T6598] veth1_macvtap: entered promiscuous mode [ 261.988899][ T9] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 261.998998][ T9] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.320001][ T6625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=6625 comm=syz.6.2240 [ 262.332785][ T6625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=6625 comm=syz.6.2240 [ 262.345523][ T6625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6625 comm=syz.6.2240 [ 262.358330][ T6625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=6625 comm=syz.6.2240 [ 262.371050][ T357] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 262.458816][ T6631] syzkaller0: entered promiscuous mode [ 262.464543][ T6631] syzkaller0: entered allmulticast mode [ 262.524653][ T357] usb 9-1: Using ep0 maxpacket: 16 [ 262.535662][ T6635] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 262.535793][ T357] usb 9-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 262.544794][ T6635] rust_binder: Write failure EINVAL in pid:177 [ 262.554813][ T357] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 262.572368][ T357] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49522, setting to 1024 [ 262.584099][ T357] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.602057][ T357] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.611307][ T357] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.619711][ T357] usb 9-1: SerialNumber: syz [ 263.343953][ T357] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 263.354065][ T357] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 263.361181][ T357] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 263.374194][ T357] usb 9-1: USB disconnect, device number 2 [ 263.559158][ T6667] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 263.824295][ T470] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 263.974690][ T470] usb 9-1: Using ep0 maxpacket: 16 [ 263.981085][ T470] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.991270][ T470] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.001706][ T470] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 264.010840][ T470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.018909][ T470] usb 9-1: Product: syz [ 264.023091][ T470] usb 9-1: Manufacturer: syz [ 264.027777][ T470] usb 9-1: SerialNumber: syz [ 264.035575][ T470] r8152-cfgselector 9-1: Unknown version 0x0000 [ 264.042085][ T470] r8152-cfgselector 9-1: config 0 descriptor?? [ 264.364308][ T470] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 264.515433][ T470] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 264.526379][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.537334][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.547156][ T470] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 264.560281][ T470] usb 7-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 264.569461][ T470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.578193][ T470] usb 7-1: config 0 descriptor?? [ 264.986151][ T470] usbhid 7-1:0.0: can't add hid device: -71 [ 264.992271][ T470] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 265.001204][ T470] usb 7-1: USB disconnect, device number 55 [ 265.741218][ T6702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6702 comm=syz.5.2266 [ 265.771161][ T6704] /dev/loop0: Can't lookup blockdev [ 265.813522][ T6710] netlink: 'syz.5.2270': attribute type 5 has an invalid length. [ 265.822243][ T6710] netlink: 'syz.5.2270': attribute type 5 has an invalid length. [ 265.830170][ T6710] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2270'. [ 266.055150][ T9] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 266.205450][ T9] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.217169][ T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 266.228330][ T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 266.239435][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 266.248526][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.257704][ T6712] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 266.467709][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2271'. [ 266.631855][ T6732] netlink: 'syz.7.2278': attribute type 25 has an invalid length. [ 266.677028][ T357] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 266.857402][ T36] audit: type=1400 audit(1769434046.934:934): avc: denied { remount } for pid=6736 comm="syz.8.2280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 266.858076][ T6737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6737 comm=syz.8.2280 [ 266.984352][ T6752] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2286'. [ 266.993608][ T6752] z00X: renamed from gretap0 (while UP) [ 267.000185][ T6752] z00X: entered allmulticast mode [ 267.644789][ T9] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 267.652572][ T9] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input48 [ 267.674306][ T335] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 267.834350][ T335] usb 9-1: Using ep0 maxpacket: 16 [ 267.840792][ T335] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.850980][ T335] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.861879][ T335] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.871038][ T335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.879142][ T335] usb 9-1: Product: syz [ 267.883401][ T335] usb 9-1: Manufacturer: syz [ 267.888074][ T335] usb 9-1: SerialNumber: syz [ 267.895181][ T335] r8152-cfgselector 9-1: Unknown version 0x0000 [ 267.901489][ T335] r8152-cfgselector 9-1: config 0 descriptor?? [ 268.969654][ T6773] 9pnet_fd: Insufficient options for proto=fd [ 269.025197][ T36] audit: type=1400 audit(1769434049.104:935): avc: denied { accept } for pid=6778 comm="syz.5.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.072120][ T6783] fuse: Unknown parameter 'rootmod.v [ 269.072120][ T6783] E>3e' [ 269.081821][ T6783] overlayfs: failed to resolve './bus': -2 [ 269.089099][ T6783] fuse: Bad value for 'group_id' [ 269.095074][ T6783] fuse: Bad value for 'group_id' [ 269.159756][ T335] usb 7-1: USB disconnect, device number 56 [ 269.159792][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 269.298440][ T36] audit: type=1400 audit(1769434049.374:936): avc: denied { setattr } for pid=6794 comm="syz.6.2300" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 269.340689][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.349661][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.574310][ T31] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 269.724308][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 269.730891][ T31] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 269.742025][ T31] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.752129][ T31] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 269.765533][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 269.772166][ T31] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 269.781408][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.791626][ T31] usb 7-1: config 0 descriptor?? [ 270.007699][ T31] usb 7-1: USB disconnect, device number 57 [ 270.507927][ T31] r8152-cfgselector 9-1: USB disconnect, device number 4 [ 270.512246][ T36] audit: type=1400 audit(1769434050.584:937): avc: denied { unmount } for pid=6598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.814324][ T357] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 270.965458][ T357] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 270.975732][ T357] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.984719][ T357] usb 7-1: config 1 has no interface number 0 [ 270.990838][ T357] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.006039][ T357] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.015606][ T357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.023641][ T357] usb 7-1: Product: syz [ 271.027875][ T357] usb 7-1: Manufacturer: syz [ 271.032583][ T357] usb 7-1: SerialNumber: syz [ 271.040428][ T357] usb 7-1: selecting invalid altsetting 1 [ 271.239035][ T357] cdc_ncm 7-1:1.1: bind() failure [ 271.246955][ T357] usb 7-1: USB disconnect, device number 58 [ 271.417242][ T6848] fuse: Bad value for 'fd' [ 271.423193][ T6848] overlayfs: missing 'lowerdir' [ 271.442661][ T36] audit: type=1400 audit(1769434051.514:938): avc: denied { create } for pid=6849 comm="syz.8.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.684206][ T36] audit: type=1326 audit(1769434051.754:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.5.2324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae5499aeb9 code=0x7fec0000 [ 271.781507][ T6869] netlink: 'syz.6.2326': attribute type 1 has an invalid length. [ 271.790327][ T6869] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2326'. [ 271.801532][ T36] audit: type=1326 audit(1769434051.874:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.6.2326" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f067f19aeb9 code=0x0 [ 271.994307][ T396] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 272.153302][ T6872] cgroup: subsys name conflicts with all [ 272.156454][ T396] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.170401][ T396] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.180328][ T396] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 272.189765][ T396] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.202011][ T396] usb 9-1: config 0 descriptor?? [ 272.250696][ T36] audit: type=1400 audit(1769434052.324:941): avc: denied { map } for pid=6889 comm="syz.5.2329" path="socket:[43562]" dev="sockfs" ino=43562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 272.290363][ T6895] !@: renamed from xfrm0 (while UP) [ 272.362546][ T6902] x_tables: duplicate underflow at hook 1 [ 272.434813][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.443611][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.510360][ T396] usbhid 9-1:0.0: can't add hid device: -71 [ 272.516881][ T396] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 272.533296][ T6908] pim6reg1: entered promiscuous mode [ 272.536049][ T396] usb 9-1: USB disconnect, device number 5 [ 272.538856][ T6908] pim6reg1: entered allmulticast mode [ 272.640186][ T6911] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 272.921277][ T6937] overlayfs: conflicting options: userxattr,metacopy=on [ 272.929693][ T36] audit: type=1400 audit(1769434053.004:942): avc: denied { create } for pid=6936 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.931581][ T4708] tipc: Subscription rejected, illegal request [ 273.024369][ T357] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 273.174334][ T357] usb 7-1: Using ep0 maxpacket: 16 [ 273.181086][ T357] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.191219][ T357] usb 7-1: config 0 interface 0 has no altsetting 0 [ 273.197934][ T357] usb 7-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 273.207075][ T357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.216028][ T357] usb 7-1: config 0 descriptor?? [ 273.524632][ T6948] cgroup: Bad value for 'name' [ 273.628623][ T357] usbhid 7-1:0.0: can't add hid device: -71 [ 273.635879][ T357] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 273.646443][ T357] usb 7-1: USB disconnect, device number 59 [ 273.884336][ T396] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 274.034363][ T396] usb 9-1: Using ep0 maxpacket: 16 [ 274.040890][ T396] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.051128][ T396] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.061602][ T396] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.070781][ T396] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.078904][ T396] usb 9-1: Product: syz [ 274.083102][ T396] usb 9-1: Manufacturer: syz [ 274.087784][ T396] usb 9-1: SerialNumber: syz [ 274.296199][ T396] usb 9-1: 0:2 : does not exist [ 274.304139][ T396] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 274.315727][ T396] usb 9-1: USB disconnect, device number 6 [ 274.327914][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.464298][ T335] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 274.594333][ T335] usb 7-1: device descriptor read/64, error -71 [ 274.834301][ T335] usb 7-1: device descriptor read/64, error -71 [ 275.074339][ T335] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 275.154320][ T357] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 275.204334][ T335] usb 7-1: device descriptor read/64, error -71 [ 275.305637][ T357] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.315856][ T357] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.325626][ T357] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 275.334828][ T357] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.342992][ T357] usb 9-1: SerialNumber: syz [ 275.350081][ T357] usb 9-1: 0:2 : does not exist [ 275.444371][ T335] usb 7-1: device descriptor read/64, error -71 [ 275.554421][ T335] usb usb7-port1: attempt power cycle [ 275.752180][ T357] usb 9-1: USB disconnect, device number 7 [ 275.894337][ T335] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 275.915410][ T335] usb 7-1: device descriptor read/8, error -71 [ 276.015369][ T6996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6996 comm=syz.5.2363 [ 276.028617][ T6996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6996 comm=syz.5.2363 [ 276.045411][ T335] usb 7-1: device descriptor read/8, error -71 [ 276.270977][ T36] audit: type=1400 audit(1769434056.344:943): avc: denied { ioctl } for pid=7007 comm="syz.8.2366" path="socket:[42623]" dev="sockfs" ino=42623 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.295666][ T335] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 276.315410][ T335] usb 7-1: device descriptor read/8, error -71 [ 276.445606][ T335] usb 7-1: device descriptor read/8, error -71 [ 276.554458][ T335] usb usb7-port1: unable to enumerate USB device [ 276.574356][ T357] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 276.666549][ T7018] process '/newroot/422/file0' started with executable stack [ 276.725450][ T357] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.733575][ T357] usb 9-1: config 0 has no interface number 0 [ 276.739933][ T357] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.751018][ T357] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.760977][ T357] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 276.770254][ T357] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.779322][ T357] usb 9-1: config 0 descriptor?? [ 277.187654][ T357] uclogic 0003:256C:006D.002F: unknown main item tag 0x0 [ 277.194856][ T357] uclogic 0003:256C:006D.002F: unknown main item tag 0x0 [ 277.201914][ T357] uclogic 0003:256C:006D.002F: unknown main item tag 0x0 [ 277.209053][ T357] uclogic 0003:256C:006D.002F: unknown main item tag 0x0 [ 277.216196][ T357] uclogic 0003:256C:006D.002F: unknown main item tag 0x0 [ 277.223494][ T357] uclogic 0003:256C:006D.002F: No inputs registered, leaving [ 277.232174][ T357] uclogic 0003:256C:006D.002F: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input1 [ 277.388735][ T357] usb 9-1: USB disconnect, device number 8 [ 278.085720][ T7058] batadv_slave_0: entered promiscuous mode [ 278.093038][ T36] audit: type=1400 audit(1769434058.164:944): avc: denied { bind } for pid=7056 comm="syz.8.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.130775][ T7061] netlink: 'syz.5.2387': attribute type 15 has an invalid length. [ 278.645419][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2391'. [ 278.689171][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.697998][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.865718][ T7056] batadv_slave_0: left promiscuous mode [ 278.885787][ T7082] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 278.893465][ T7082] SELinux: failed to load policy [ 278.924298][ T357] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 279.074286][ T357] usb 7-1: Using ep0 maxpacket: 32 [ 279.080829][ T357] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 279.089580][ T357] usb 7-1: config 0 has no interface number 0 [ 279.095802][ T357] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 279.105906][ T357] usb 7-1: config 0 interface 196 has no altsetting 0 [ 279.114517][ T357] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 279.123655][ T357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.131735][ T357] usb 7-1: Product: syz [ 279.135984][ T357] usb 7-1: Manufacturer: syz [ 279.140596][ T357] usb 7-1: SerialNumber: syz [ 279.146008][ T357] usb 7-1: config 0 descriptor?? [ 279.151294][ T7072] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 279.361640][ T357] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 279.369344][ T357] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 279.378769][ T357] usb 7-1: USB disconnect, device number 64 [ 279.821542][ T7106] netlink: 'syz.8.2404': attribute type 27 has an invalid length. [ 279.829669][ T7106] lo: entered promiscuous mode [ 279.834535][ T7106] lo: entered allmulticast mode [ 279.840324][ T7106] tunl0: entered promiscuous mode [ 279.845448][ T7106] tunl0: entered allmulticast mode [ 279.850850][ T7106] gre0: entered promiscuous mode [ 279.855909][ T7106] gre0: entered allmulticast mode [ 279.861396][ T7106] gretap0: entered promiscuous mode [ 279.866696][ T7106] gretap0: entered allmulticast mode [ 279.872796][ T7106] erspan0: entered promiscuous mode [ 279.878341][ T7106] erspan0: entered allmulticast mode [ 279.884435][ T7106] ip_vti0: entered promiscuous mode [ 279.889733][ T7106] ip_vti0: entered allmulticast mode [ 279.895766][ T7106] ip6_vti0: entered promiscuous mode [ 279.901195][ T7106] ip6_vti0: entered allmulticast mode [ 279.907078][ T7106] sit0: entered promiscuous mode [ 279.912159][ T7106] sit0: entered allmulticast mode [ 279.917854][ T7106] ip6tnl0: entered promiscuous mode [ 279.923360][ T7106] ip6tnl0: entered allmulticast mode [ 279.929790][ T7106] ip6gre0: entered promiscuous mode [ 279.935171][ T7106] ip6gre0: entered allmulticast mode [ 279.940885][ T7106] syz_tun: entered promiscuous mode [ 279.946189][ T7106] syz_tun: entered allmulticast mode [ 279.952109][ T7106] ip6gretap0: entered promiscuous mode [ 279.957705][ T7106] ip6gretap0: entered allmulticast mode [ 279.963733][ T7106] bridge0: entered promiscuous mode [ 279.969010][ T7106] bridge0: entered allmulticast mode [ 279.975002][ T7106] vcan0: entered promiscuous mode [ 279.980563][ T7106] vcan0: entered allmulticast mode [ 279.986008][ T7106] dummy0: entered promiscuous mode [ 279.991396][ T7106] dummy0: entered allmulticast mode [ 279.997135][ T7106] veth0: entered promiscuous mode [ 280.002252][ T7106] veth0: entered allmulticast mode [ 280.008300][ T7106] veth1: entered promiscuous mode [ 280.013428][ T7106] veth1: entered allmulticast mode [ 280.019539][ T7106] wg0: entered promiscuous mode [ 280.024503][ T7106] wg0: entered allmulticast mode [ 280.029941][ T7106] wg1: entered promiscuous mode [ 280.035041][ T7106] wg1: entered allmulticast mode [ 280.040313][ T7106] wg2: entered promiscuous mode [ 280.045499][ T7106] wg2: entered allmulticast mode [ 280.050848][ T7106] veth0_to_bridge: entered promiscuous mode [ 280.056912][ T7106] veth0_to_bridge: entered allmulticast mode [ 280.063827][ T7106] veth1_to_bridge: entered promiscuous mode [ 280.069991][ T7106] veth1_to_bridge: entered allmulticast mode [ 280.076925][ T7106] veth0_to_bond: entered promiscuous mode [ 280.082720][ T7106] veth0_to_bond: entered allmulticast mode [ 280.089590][ T7106] bond_slave_0: entered promiscuous mode [ 280.095390][ T7106] bond_slave_0: entered allmulticast mode [ 280.101512][ T7106] veth1_to_bond: entered promiscuous mode [ 280.107469][ T7106] veth1_to_bond: entered allmulticast mode [ 280.113749][ T7106] bond_slave_1: entered promiscuous mode [ 280.119729][ T7106] bond_slave_1: entered allmulticast mode [ 280.125971][ T7106] veth0_to_team: entered promiscuous mode [ 280.131836][ T7106] veth0_to_team: entered allmulticast mode [ 280.138279][ T7106] team_slave_0: entered promiscuous mode [ 280.144055][ T7106] team_slave_0: entered allmulticast mode [ 280.150370][ T7106] veth1_to_team: entered promiscuous mode [ 280.156178][ T7106] veth1_to_team: entered allmulticast mode [ 280.162404][ T7106] team_slave_1: entered promiscuous mode [ 280.168100][ T7106] team_slave_1: entered allmulticast mode [ 280.174185][ T7106] veth0_to_batadv: entered promiscuous mode [ 280.180188][ T7106] veth0_to_batadv: entered allmulticast mode [ 280.187157][ T7106] batadv_slave_0: entered promiscuous mode [ 280.193057][ T7106] batadv_slave_0: entered allmulticast mode [ 280.199617][ T7106] veth1_to_batadv: entered promiscuous mode [ 280.205837][ T7106] veth1_to_batadv: entered allmulticast mode [ 280.212559][ T7106] batadv_slave_1: entered promiscuous mode [ 280.218799][ T7106] batadv_slave_1: entered allmulticast mode [ 280.225644][ T7106] xfrm0: entered promiscuous mode [ 280.231101][ T7106] xfrm0: entered allmulticast mode [ 280.236894][ T7106] veth0_to_hsr: entered promiscuous mode [ 280.242580][ T7106] veth0_to_hsr: entered allmulticast mode [ 280.249018][ T7106] hsr_slave_0: entered promiscuous mode [ 280.254847][ T7106] hsr_slave_0: entered allmulticast mode [ 280.261046][ T7106] veth1_to_hsr: entered promiscuous mode [ 280.267462][ T7106] veth1_to_hsr: entered allmulticast mode [ 280.273809][ T7106] hsr_slave_1: entered promiscuous mode [ 280.279767][ T7106] hsr_slave_1: entered allmulticast mode [ 280.286446][ T7106] veth1_virt_wifi: entered promiscuous mode [ 280.292439][ T7106] veth1_virt_wifi: entered allmulticast mode [ 280.299332][ T7106] veth0_virt_wifi: entered promiscuous mode [ 280.305429][ T7106] veth0_virt_wifi: entered allmulticast mode [ 280.312051][ T7106] veth1_vlan: entered promiscuous mode [ 280.317879][ T7106] veth1_vlan: entered allmulticast mode [ 280.324098][ T7106] veth0_vlan: entered allmulticast mode [ 280.331013][ T7106] vlan0: entered promiscuous mode [ 280.336401][ T7106] vlan0: entered allmulticast mode [ 280.342206][ T7106] vlan1: entered promiscuous mode [ 280.347686][ T7106] vlan1: entered allmulticast mode [ 280.353509][ T7106] veth1_macvtap: entered allmulticast mode [ 280.360211][ T7106] veth0_macvtap: entered promiscuous mode [ 280.366342][ T7106] veth0_macvtap: entered allmulticast mode [ 280.372788][ T7106] macsec0: entered promiscuous mode [ 280.378403][ T7106] macsec0: entered allmulticast mode [ 280.384855][ T7106] syztnl0: entered promiscuous mode [ 280.390171][ T7106] syztnl0: entered allmulticast mode [ 280.440167][ T7118] 9pnet_fd: Insufficient options for proto=fd [ 280.441009][ T36] audit: type=1400 audit(1769434060.514:945): avc: denied { create } for pid=7117 comm="syz.8.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 280.764352][ T335] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 280.914362][ T335] usb 7-1: Using ep0 maxpacket: 32 [ 280.921092][ T335] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.933934][ T335] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.943402][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.951516][ T335] usb 7-1: Product: syz [ 280.955885][ T335] usb 7-1: Manufacturer: syz [ 280.960613][ T335] usb 7-1: SerialNumber: syz [ 281.571075][ T335] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 281.577676][ T335] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 281.585171][ T335] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 281.698528][ T36] audit: type=1400 audit(1769434061.774:946): avc: denied { unmount } for pid=6598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 281.754422][ T36] audit: type=1400 audit(1769434061.834:947): avc: denied { read } for pid=7144 comm="syz.8.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.775840][ T7145] kvm: pic: non byte write [ 281.778667][ T335] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 281.788255][ T335] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 281.802595][ T335] usb 7-1: USB disconnect, device number 65 [ 281.809105][ T7145] kvm: pic: non byte write [ 281.817922][ T335] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 281.842413][ T36] audit: type=1400 audit(1769434061.914:948): avc: denied { create } for pid=7148 comm="syz.5.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 282.369839][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.381253][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.437295][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 282.604355][ T335] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 282.754332][ T335] usb 7-1: Using ep0 maxpacket: 32 [ 282.760928][ T335] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.771936][ T335] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.783888][ T335] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.793039][ T335] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 282.801429][ T335] usb 7-1: Product: syz [ 282.805658][ T335] usb 7-1: Manufacturer: syz [ 282.812299][ T335] hub 7-1:4.0: USB hub found [ 282.964864][ T36] audit: type=1326 audit(1769434063.044:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7183 comm="syz.5.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae5499aeb9 code=0x0 [ 283.011952][ T335] hub 7-1:4.0: 2 ports detected [ 283.503363][ T7196] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7196 comm=syz.8.2433 [ 283.612930][ T7163] netlink: 'syz.6.2423': attribute type 13 has an invalid length. [ 283.621212][ T7163] erspan0: refused to change device tx_queue_len [ 284.029614][ T335] hub 7-1:4.0: activate --> -90 [ 284.432169][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 284.439307][ T335] hub 7-1:4.0: hub_ext_port_status failed (err = -71) [ 284.439516][ T470] usb 7-1: USB disconnect, device number 66 [ 284.447401][ T335] usb 7-1-port1: attempt power cycle [ 284.624328][ T357] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 284.777218][ T357] usb 9-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.788329][ T357] usb 9-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.798186][ T357] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 284.807314][ T357] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.817841][ T357] usbhid 9-1:8.0: can't add hid device: -22 [ 284.823998][ T357] usbhid 9-1:8.0: probe with driver usbhid failed with error -22 [ 285.061403][ T7208] kvm: user requested TSC rate below hardware speed [ 285.334287][ T357] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 285.485467][ T357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 285.496370][ T357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.506135][ T357] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 285.515269][ T357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.523980][ T357] usb 7-1: config 0 descriptor?? [ 285.531504][ T357] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 285.721974][ T36] audit: type=1400 audit(1769434065.794:950): avc: denied { lock } for pid=7200 comm="syz.8.2435" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.740522][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.754417][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.769394][ T470] usb 7-1: USB disconnect, device number 71 [ 285.802051][ T7222] netlink: 'syz.6.2440': attribute type 4 has an invalid length. [ 286.144322][ T470] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 286.294291][ T470] usb 7-1: Using ep0 maxpacket: 32 [ 286.300802][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.311872][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.322264][ T470] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 286.331366][ T470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.340080][ T470] usb 7-1: config 0 descriptor?? [ 286.549835][ T470] logitech 0003:046D:C29C.0030: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 286.588022][ T7250] overlayfs: failed to clone upperpath [ 286.661483][ T7254] 9pnet: p9_errstr2errno: server reported unknown error p [ 286.749694][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.758458][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.766803][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.775423][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.783674][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.792364][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.800715][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.809378][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.817617][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.826206][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.037071][ T470] logitech 0003:046D:C29C.0030: no inputs found [ 287.046112][ T470] usb 7-1: USB disconnect, device number 72 [ 287.395129][ T335] usb 9-1: USB disconnect, device number 9 [ 287.553848][ T36] audit: type=1400 audit(1769434067.624:951): avc: denied { mount } for pid=7265 comm="syz.6.2456" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 287.730756][ T7274] netlink: 'syz.5.2459': attribute type 16 has an invalid length. [ 287.738822][ T335] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 287.746596][ T7274] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2459'. [ 287.775204][ T7276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7276 comm=syz.5.2460 [ 287.894298][ T396] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 287.914298][ T335] usb 9-1: Using ep0 maxpacket: 32 [ 287.920825][ T335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.931955][ T335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.941847][ T335] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 287.951084][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.959968][ T335] usb 9-1: config 0 descriptor?? [ 288.045620][ T396] usb 7-1: unable to get BOS descriptor or descriptor too short [ 288.054447][ T396] usb 7-1: config 3 has an invalid interface number: 86 but max is 0 [ 288.062635][ T396] usb 7-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 288.072922][ T396] usb 7-1: config 3 has no interface number 0 [ 288.079087][ T396] usb 7-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid maxpacket 56804, setting to 1024 [ 288.090372][ T396] usb 7-1: config 3 interface 86 altsetting 11 bulk endpoint 0xC has invalid maxpacket 1024 [ 288.100546][ T396] usb 7-1: config 3 interface 86 has no altsetting 0 [ 288.108114][ T396] usb 7-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 288.117309][ T396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.125398][ T396] usb 7-1: SerialNumber: syz [ 288.131447][ T7272] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 288.350773][ T7272] syzkaller0: entered allmulticast mode [ 288.372425][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.381123][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.446701][ T335] savu 0003:1E7D:2D5A.0031: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 288.706073][ T470] usb 9-1: USB disconnect, device number 10 [ 288.745165][ T7293] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2464'. [ 288.866849][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2471'. [ 289.395585][ T36] audit: type=1326 audit(1769434069.474:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.5.2473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae5499aeb9 code=0x0 [ 289.509462][ T36] audit: type=1400 audit(1769434069.584:953): avc: denied { mounton } for pid=7314 comm="syz.7.2474" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 289.607677][ T4734] bridge_slave_1: left allmulticast mode [ 289.613449][ T4734] bridge_slave_1: left promiscuous mode [ 289.619369][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.627653][ T4734] bridge_slave_0: left allmulticast mode [ 289.633367][ T4734] bridge_slave_0: left promiscuous mode [ 289.639362][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.827138][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.834320][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.841436][ T7318] bridge_slave_0: entered allmulticast mode [ 289.847926][ T7318] bridge_slave_0: entered promiscuous mode [ 289.854840][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.861912][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.869091][ T7318] bridge_slave_1: entered allmulticast mode [ 289.875604][ T7318] bridge_slave_1: entered promiscuous mode [ 289.943156][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.950335][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.957707][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.964799][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.991508][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.999148][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.009983][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.017158][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.026973][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.034073][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.067829][ T7318] veth0_vlan: entered promiscuous mode [ 290.085893][ T7318] veth1_macvtap: entered promiscuous mode [ 290.095542][ T7329] fuse: Bad value for 'user_id' [ 290.100698][ T7329] fuse: Bad value for 'user_id' [ 290.143586][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2477'. [ 290.318857][ T36] audit: type=1400 audit(1769434070.394:954): avc: denied { remount } for pid=7341 comm="syz.8.2482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.610983][ T396] usb 7-1: bad CDC descriptors [ 290.618364][ T396] usb 7-1: USB disconnect, device number 73 [ 290.655058][ T9] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 290.806320][ T9] usb 9-1: config 24 has an invalid interface number: 199 but max is 0 [ 290.815382][ T9] usb 9-1: config 24 has no interface number 0 [ 290.821593][ T9] usb 9-1: config 24 interface 199 has no altsetting 0 [ 290.831107][ T9] usb 9-1: string descriptor 0 read error: -22 [ 290.837428][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 290.846728][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.014879][ T36] audit: type=1400 audit(1769434071.094:955): avc: denied { create } for pid=7365 comm="syz.6.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.035944][ T7366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7366 comm=syz.6.2490 [ 291.064538][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.073352][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.103692][ T7377] input: syz1 as /devices/virtual/input/input52 [ 291.111753][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2486'. [ 291.121407][ T7351] tipc: Trying to set illegal importance in message [ 291.155927][ T357] usb 9-1: USB disconnect, device number 11 [ 291.474328][ T470] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 291.474328][ T9] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 291.604313][ T9] usb 7-1: device descriptor read/64, error -71 [ 291.617257][ T36] audit: type=1400 audit(1769434071.694:956): avc: denied { accept } for pid=7382 comm="syz.5.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 291.638117][ T470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.649548][ T470] usb 10-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 291.659401][ T7385] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2496'. [ 291.660559][ T470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.689833][ T470] usb 10-1: config 0 descriptor?? [ 291.699945][ T7387] veth1: entered allmulticast mode [ 291.706290][ T7387] overlayfs: failed to clone upperpath [ 291.712254][ T7386] veth1: left allmulticast mode [ 291.766426][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.774500][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.854294][ T9] usb 7-1: device descriptor read/64, error -71 [ 292.094292][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 292.104507][ T470] logitech 0003:046D:C293.0032: invalid report_count 50514 [ 292.112094][ T470] logitech 0003:046D:C293.0032: item 0 2 1 9 parsing failed [ 292.120036][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.120331][ T470] logitech 0003:046D:C293.0032: parse failed [ 292.130261][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.133471][ T470] logitech 0003:046D:C293.0032: probe with driver logitech failed with error -22 [ 292.144011][ T7390] bridge_slave_0: entered allmulticast mode [ 292.156698][ T7390] bridge_slave_0: entered promiscuous mode [ 292.163613][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.170781][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.178119][ T7390] bridge_slave_1: entered allmulticast mode [ 292.184700][ T7390] bridge_slave_1: entered promiscuous mode [ 292.234323][ T9] usb 7-1: device descriptor read/64, error -71 [ 292.247569][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.254704][ T7390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.262161][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.269286][ T7390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.296888][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.305847][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.306199][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.324005][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.334020][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.341155][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.351081][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.358204][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.360049][ T396] usb 10-1: USB disconnect, device number 2 [ 292.412751][ T7412] SELinux: security_context_str_to_sid () failed with errno=-22 [ 292.420971][ T7390] veth0_vlan: entered promiscuous mode [ 292.440103][ T7390] veth1_macvtap: entered promiscuous mode [ 292.474320][ T9] usb 7-1: device descriptor read/64, error -71 [ 292.504594][ T36] audit: type=1400 audit(1769434072.574:957): avc: denied { append } for pid=7414 comm="syz.0.2500" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.584625][ T9] usb usb7-port1: attempt power cycle [ 292.794327][ T396] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.924274][ T9] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 292.934347][ T396] usb 1-1: device descriptor read/64, error -71 [ 292.965334][ T9] usb 7-1: device descriptor read/8, error -71 [ 292.994342][ T7434] netlink: 'syz.5.2512': attribute type 4 has an invalid length. [ 293.105252][ T9] usb 7-1: device descriptor read/8, error -71 [ 293.185651][ T396] usb 1-1: device descriptor read/64, error -71 [ 293.344292][ T9] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 293.365411][ T9] usb 7-1: device descriptor read/8, error -71 [ 293.424315][ T396] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 293.495479][ T9] usb 7-1: device descriptor read/8, error -71 [ 293.554314][ T396] usb 1-1: device descriptor read/64, error -71 [ 293.563896][ T7454] incfs: Error accessing: ./file0. [ 293.569366][ T7454] incfs: mount failed -20 [ 293.614369][ T9] usb usb7-port1: unable to enumerate USB device [ 293.629462][ T36] audit: type=1326 audit(1769434073.704:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.9.2518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c7d9aeb9 code=0x0 [ 293.759536][ T7480] overlayfs: regular lower layers cannot follow data lower layers [ 293.804294][ T396] usb 1-1: device descriptor read/64, error -71 [ 293.914457][ T396] usb usb1-port1: attempt power cycle [ 294.254340][ T396] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 294.275742][ T396] usb 1-1: device descriptor read/8, error -71 [ 294.405453][ T396] usb 1-1: device descriptor read/8, error -71 [ 294.495672][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=7490 comm=syz.5.2531 [ 294.510060][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2531'. [ 294.644295][ T396] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.665278][ T396] usb 1-1: device descriptor read/8, error -71 [ 294.674313][ T470] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 294.795464][ T396] usb 1-1: device descriptor read/8, error -71 [ 294.825595][ T470] usb 10-1: config index 0 descriptor too short (expected 7768, got 18) [ 294.834090][ T470] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 294.843381][ T470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.852205][ T470] usb 10-1: config 0 descriptor?? [ 294.860080][ T470] ftdi_sio 10-1:0.0: Ignoring interface reserved for JTAG [ 294.904578][ T396] usb usb1-port1: unable to enumerate USB device [ 295.204289][ T470] usb 7-1: new low-speed USB device number 78 using dummy_hcd [ 295.334536][ T470] usb 7-1: device descriptor read/64, error -71 [ 295.574324][ T470] usb 7-1: device descriptor read/64, error -71 [ 295.703540][ T7511] netlink: 'syz.0.2538': attribute type 4 has an invalid length. [ 295.715573][ T36] audit: type=1400 audit(1769434075.794:959): avc: denied { lock } for pid=7510 comm="syz.0.2538" path="socket:[47301]" dev="sockfs" ino=47301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 295.739773][ T36] audit: type=1400 audit(1769434075.794:960): avc: denied { append } for pid=7510 comm="syz.0.2538" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.824406][ T470] usb 7-1: new low-speed USB device number 79 using dummy_hcd [ 295.954308][ T470] usb 7-1: device descriptor read/64, error -71 [ 296.024287][ T67] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 296.174288][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 296.183529][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.193964][ T67] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.202961][ T470] usb 7-1: device descriptor read/64, error -71 [ 296.211159][ T67] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.220731][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.229010][ T67] usb 1-1: Product: syz [ 296.233217][ T67] usb 1-1: Manufacturer: syz [ 296.237964][ T67] usb 1-1: SerialNumber: syz [ 296.314386][ T470] usb usb7-port1: attempt power cycle [ 296.446416][ T67] usb 1-1: 0:2 : does not exist [ 296.453955][ T67] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 296.465351][ T67] usb 1-1: USB disconnect, device number 18 [ 296.477048][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.654340][ T470] usb 7-1: new low-speed USB device number 80 using dummy_hcd [ 296.675304][ T470] usb 7-1: device descriptor read/8, error -71 [ 296.807027][ T470] usb 7-1: device descriptor read/8, error -71 [ 296.807061][ T7523] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2542'. [ 297.054320][ T470] usb 7-1: new low-speed USB device number 81 using dummy_hcd [ 297.075426][ T470] usb 7-1: device descriptor read/8, error -71 [ 297.125605][ T7528] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 297.142302][ T7528] cgroup: Invalid name [ 297.173030][ T36] audit: type=1400 audit(1769434077.244:961): avc: denied { listen } for pid=7529 comm="syz.0.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.215680][ T470] usb 7-1: device descriptor read/8, error -71 [ 297.324429][ T470] usb usb7-port1: unable to enumerate USB device [ 297.389949][ T470] usb 10-1: USB disconnect, device number 3 [ 297.464280][ T67] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 297.625673][ T67] usb 1-1: config 0 interface 0 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.636812][ T67] usb 1-1: config 0 interface 0 altsetting 36 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 297.648058][ T67] usb 1-1: config 0 interface 0 has no altsetting 0 [ 297.654946][ T67] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 297.664149][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.672976][ T67] usb 1-1: config 0 descriptor?? [ 297.678388][ T7534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.895997][ T36] audit: type=1400 audit(1769434077.974:962): avc: denied { create } for pid=7546 comm="syz.5.2552" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 297.916307][ T36] audit: type=1400 audit(1769434077.974:963): avc: denied { write } for pid=7546 comm="syz.5.2552" name="file2" dev="rootfs" ino=47379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 297.938789][ T36] audit: type=1400 audit(1769434077.974:964): avc: denied { open } for pid=7546 comm="syz.5.2552" path="/file2" dev="rootfs" ino=47379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 297.961014][ T36] audit: type=1400 audit(1769434077.974:965): avc: denied { ioctl } for pid=7546 comm="syz.5.2552" path="/file2" dev="rootfs" ino=47379 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 298.140733][ T67] uclogic 0003:28BD:0075.0033: interface is invalid, ignoring [ 298.321846][ T36] audit: type=1400 audit(1769434078.394:966): avc: denied { shutdown } for pid=7556 comm="syz.9.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.343745][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.353626][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.370008][ T396] usb 1-1: USB disconnect, device number 19 [ 298.384356][ T619] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 298.536190][ T619] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.549631][ T619] usb 7-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 298.558775][ T619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.567676][ T619] usb 7-1: config 0 descriptor?? [ 298.614322][ T67] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 298.764710][ T67] usb 10-1: too many configurations: 212, using maximum allowed: 8 [ 298.773569][ T67] usb 10-1: config 0 has no interfaces? [ 298.780575][ T67] usb 10-1: config 0 has no interfaces? [ 298.787228][ T67] usb 10-1: config 0 has no interfaces? [ 298.793654][ T67] usb 10-1: config 0 has no interfaces? [ 298.800315][ T67] usb 10-1: config 0 has no interfaces? [ 298.810019][ T67] usb 10-1: config 0 has no interfaces? [ 298.824739][ T67] usb 10-1: config 0 has no interfaces? [ 298.831110][ T67] usb 10-1: config 0 has no interfaces? [ 298.838302][ T67] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 298.847524][ T67] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.855848][ T67] usb 10-1: Product: syz [ 298.860188][ T67] usb 10-1: Manufacturer: syz [ 298.865069][ T67] usb 10-1: SerialNumber: syz [ 298.881258][ T67] usb 10-1: config 0 descriptor?? [ 298.951568][ T7574] fuse: Bad value for 'user_id' [ 298.957886][ T7574] fuse: Bad value for 'user_id' [ 299.053772][ T619] wacom 0003:056A:00B9.0034: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 299.065911][ T619] wacom 0003:056A:00B9.0034: hidraw0: USB HID v0.06 Device [HID 056a:00b9] on usb-dummy_hcd.6-1/input0 [ 299.084415][ T619] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B9.0034/input/input54 [ 299.106306][ T67] usb 10-1: USB disconnect, device number 4 [ 299.182691][ T357] usb 7-1: USB disconnect, device number 82 [ 299.771877][ T7611] netlink: 'syz.5.2573': attribute type 3 has an invalid length. [ 299.859418][ T36] audit: type=1400 audit(1769434079.934:967): avc: denied { create } for pid=7629 comm="syz.9.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.901861][ T36] audit: type=1400 audit(1769434079.974:968): avc: denied { create } for pid=7633 comm="syz.6.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.929998][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2584'. [ 300.195980][ T7687] netlink: 'syz.6.2612': attribute type 12 has an invalid length. [ 300.312855][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2621'. [ 301.000411][ T7797] netlink: 'syz.5.2663': attribute type 4 has an invalid length. [ 301.009785][ T7797] netlink: 'syz.5.2663': attribute type 4 has an invalid length. [ 301.342674][ T7834] tipc: Enabled bearer , priority 0 [ 301.362354][ T7834] syzkaller0: entered promiscuous mode [ 301.368008][ T7834] syzkaller0: entered allmulticast mode [ 301.373869][ T7834] tipc: Resetting bearer [ 301.381356][ T7833] tipc: Resetting bearer [ 301.393468][ T7833] tipc: Disabling bearer [ 301.619191][ T7870] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2698'. [ 301.966105][ T36] audit: type=1400 audit(1769434082.044:969): avc: denied { create } for pid=7908 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 302.215287][ T7945] pimreg: tun_chr_ioctl cmd 1074025677 [ 302.220874][ T7945] pimreg: linktype set to 773 [ 302.515287][ T36] audit: type=1326 audit(1769434082.594:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.6.2763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x0 [ 302.854309][ T67] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 303.005580][ T67] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.018883][ T67] usb 7-1: New USB device found, idVendor=056a, idProduct=007b, bcdDevice= 0.00 [ 303.028675][ T67] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.037619][ T67] usb 7-1: config 0 descriptor?? [ 303.223632][ T36] audit: type=1400 audit(1769434083.294:971): avc: denied { create } for pid=8029 comm="syz.9.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.387988][ T36] audit: type=1326 audit(1769434083.464:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.5.2785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae5499aeb9 code=0x0 [ 303.444291][ T36] audit: type=1326 audit(1769434083.514:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.5.2785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fae5499aeb9 code=0x0 [ 303.475909][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.489827][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.500538][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.509247][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.539091][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.549344][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.550229][ T8061] batadv_slave_1: entered promiscuous mode [ 303.556971][ T67] wacom 0003:056A:007B.0035: unknown main item tag 0x0 [ 303.570377][ T67] wacom 0003:056A:007B.0035: Unknown device_type for 'HID 056a:007b'. Ignoring. [ 303.599159][ T8061] batadv_slave_1: left promiscuous mode [ 303.721418][ T619] usb 7-1: USB disconnect, device number 83 [ 304.724284][ T396] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 304.875506][ T396] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.884343][ T396] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.894587][ T396] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.903674][ T396] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.916191][ T396] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.925452][ T396] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.933601][ T396] usb 10-1: Product: syz [ 304.939028][ T396] usb 10-1: Manufacturer: syz [ 304.946710][ T396] cdc_wdm 10-1:1.0: skipping garbage [ 304.952061][ T396] cdc_wdm 10-1:1.0: skipping garbage [ 304.958150][ T396] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 304.964291][ T396] cdc_wdm 10-1:1.0: Unknown control protocol [ 305.023583][ T36] audit: type=1400 audit(1769434085.094:974): avc: denied { getopt } for pid=8138 comm="syz.0.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.989496][ T8177] netlink: 4904 bytes leftover after parsing attributes in process `syz.0.2838'. [ 305.998765][ T8177] wg1: entered promiscuous mode [ 307.502277][ T396] usb 10-1: USB disconnect, device number 5 [ 307.774295][ T67] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 307.925390][ T67] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.934147][ T67] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.944476][ T67] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.953601][ T67] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 307.964697][ T67] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 307.977415][ T67] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.986549][ T67] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.994659][ T67] usb 7-1: Product: syz [ 307.998901][ T67] usb 7-1: Manufacturer: syz [ 308.005451][ T67] cdc_wdm 7-1:1.0: skipping garbage [ 308.010732][ T67] cdc_wdm 7-1:1.0: skipping garbage [ 308.016784][ T67] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 308.022753][ T67] cdc_wdm 7-1:1.0: Unknown control protocol [ 308.408538][ T67] usb 7-1: USB disconnect, device number 84 [ 308.813262][ T8279] tipc: Failed to remove unknown binding: 66,1,1/0:1943075391/1943075393 [ 309.094252][ T396] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 309.264285][ T396] usb 10-1: Using ep0 maxpacket: 16 [ 309.272037][ T396] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 309.283577][ T396] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 309.415458][ T36] audit: type=1326 audit(1769434089.494:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.0.2897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f958c39aeb9 code=0x0 [ 309.572491][ T8328] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2906'. [ 309.799779][ T8363] loop7: detected capacity change from 0 to 7 [ 309.806800][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.816053][ C1] buffer_io_error: 2 callbacks suppressed [ 309.816090][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.830579][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.839902][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.847854][ T8363] loop7: unable to read partition table [ 309.853615][ T8363] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 309.868253][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.877489][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.936691][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.945917][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.961462][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.970700][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.979290][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.988507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 309.998909][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.008115][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 310.294092][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.301346][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.308775][ T8374] bridge_slave_0: entered allmulticast mode [ 310.315452][ T8374] bridge_slave_0: entered promiscuous mode [ 310.322739][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.329882][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.337110][ T8374] bridge_slave_1: entered allmulticast mode [ 310.343522][ T8374] bridge_slave_1: entered promiscuous mode [ 310.415558][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.422673][ T8374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.430054][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.437151][ T8374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.467378][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.492392][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.499550][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.527339][ T8374] veth0_vlan: entered promiscuous mode [ 310.541821][ T8374] veth1_macvtap: entered promiscuous mode [ 310.570145][ T8396] fuse: root generation should be zero [ 311.034362][ T619] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 311.166922][ T36] audit: type=1400 audit(1769434091.244:976): avc: denied { lock } for pid=8443 comm="syz.6.2955" path="socket:[50414]" dev="sockfs" ino=50414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 311.214786][ T619] usb 6-1: Using ep0 maxpacket: 8 [ 311.221115][ T619] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 311.229509][ T619] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.239655][ T619] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.249532][ T619] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 311.261561][ T619] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.271733][ T619] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.284840][ T619] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.293933][ T619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.690918][ T396] usb 10-1: string descriptor 0 read error: -71 [ 311.697418][ T396] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.706647][ T396] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.719030][ T396] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 311.731179][ T396] usb 10-1: no configuration chosen from 1 choice [ 311.744178][ T396] usb 10-1: USB disconnect, device number 6 [ 311.768222][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2961'. [ 311.958577][ T8465] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2963'. [ 313.835265][ T619] usb 6-1: USB disconnect, device number 94 [ 314.394294][ T619] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 314.544269][ T619] usb 7-1: Using ep0 maxpacket: 16 [ 314.561789][ T619] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 314.571178][ T619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.584981][ T619] usb 7-1: Product: syz [ 314.589282][ T619] usb 7-1: Manufacturer: syz [ 314.594011][ T619] usb 7-1: SerialNumber: syz [ 314.604811][ T619] r8152-cfgselector 7-1: Unknown version 0x0000 [ 314.614026][ T619] r8152-cfgselector 7-1: config 0 descriptor?? [ 314.823760][ T619] r8152-cfgselector 7-1: Unknown version 0x0000 [ 314.837825][ T619] r8152-cfgselector 7-1: bad CDC descriptors [ 314.847991][ T619] r8152-cfgselector 7-1: USB disconnect, device number 85 [ 315.373185][ T36] audit: type=1400 audit(1769434095.444:977): avc: denied { append } for pid=8625 comm="syz.6.3033" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 315.786916][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3036'. [ 316.484685][ T396] usb 7-1: new low-speed USB device number 86 using dummy_hcd [ 316.645547][ T396] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.657147][ T396] usb 7-1: config 0 has no interface number 0 [ 316.663356][ T396] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 316.674406][ T396] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 316.685232][ T396] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.694349][ T396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.704379][ T396] usb 7-1: config 0 descriptor?? [ 316.709816][ T8677] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 316.924937][ T396] usb 7-1: USB disconnect, device number 86 [ 317.344561][ T36] audit: type=1326 audit(1769434097.424:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.3071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f958c39aeb9 code=0x0 [ 317.667596][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3074'. [ 317.924295][ T396] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 318.050721][ T8758] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3082'. [ 318.074273][ T396] usb 7-1: Using ep0 maxpacket: 16 [ 318.080677][ T396] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.091878][ T396] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.101863][ T396] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.114922][ T396] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.124056][ T396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.142945][ T396] usb 7-1: config 0 descriptor?? [ 318.162506][ T8767] netlink: 'syz.9.3087': attribute type 11 has an invalid length. [ 318.272684][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3094'. [ 318.566703][ T396] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0036/input/input62 [ 318.592784][ T396] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 318.695855][ T8832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 318.798626][ T396] usb 7-1: USB disconnect, device number 87 [ 318.936694][ T36] audit: type=1400 audit(1769434099.014:979): avc: denied { read write } for pid=8851 comm="syz.9.3125" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.975368][ T36] audit: type=1400 audit(1769434099.014:980): avc: denied { open } for pid=8851 comm="syz.9.3125" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.087535][ T8860] kvm: pic: non byte read [ 319.092231][ T8860] kvm: pic: level sensitive irq not supported [ 319.092279][ T8860] kvm: pic: non byte read [ 319.103010][ T8860] kvm: pic: level sensitive irq not supported [ 319.103057][ T8860] kvm: pic: non byte read [ 319.114309][ T8860] kvm: pic: level sensitive irq not supported [ 319.114369][ T8860] kvm: pic: non byte read [ 319.125323][ T8860] kvm: pic: level sensitive irq not supported [ 319.125383][ T8860] kvm: pic: non byte read [ 319.136229][ T8860] kvm: pic: level sensitive irq not supported [ 319.136278][ T8860] kvm: pic: non byte read [ 319.147072][ T8860] kvm: pic: level sensitive irq not supported [ 319.147120][ T8860] kvm: pic: non byte read [ 319.544301][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 319.635677][ T8893] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 319.635704][ T8893] rust_binder: Read failure Err(EFAULT) in pid:89 [ 319.694268][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 319.710825][ T31] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 319.722337][ T31] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.735703][ T31] usb 10-1: config 0 interface 0 has no altsetting 0 [ 319.742692][ T31] usb 10-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 319.752298][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.761390][ T31] usb 10-1: config 0 descriptor?? [ 320.174026][ T31] input: HID 28bd:0933 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:0933.0037/input/input63 [ 320.198824][ T31] uclogic 0003:28BD:0933.0037: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.9-1/input0 [ 320.370698][ T10] usb 10-1: USB disconnect, device number 7 [ 320.651905][ T36] audit: type=1400 audit(1769434100.724:981): avc: denied { bind } for pid=8921 comm="syz.5.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.916022][ T8937] futex_wake_op: syz.9.3163 tries to shift op by 144; fix this program [ 321.174310][ T396] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 321.335693][ T396] usb 10-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 321.351950][ T396] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 179, using maximum allowed: 30 [ 321.364268][ T396] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 179 [ 321.377817][ T396] usb 10-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 321.403121][ T396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.416607][ T396] usb 10-1: config 0 descriptor?? [ 321.634065][ T8937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.641371][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 321.648643][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 321.681327][ T396] usb 10-1: string descriptor 0 read error: -71 [ 321.701192][ T396] usb 10-1: USB disconnect, device number 8 [ 322.575924][ T9032] input: syz1 as /devices/virtual/input/input64 [ 322.647891][ T9040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.858393][ T9061] input: syz1 as /devices/virtual/input/input65 [ 322.877360][ T619] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.887125][ T9063] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 322.895082][ T619] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.905353][ T619] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.913085][ T619] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.924322][ T396] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 322.937802][ T619] rtc rtc0: __rtc_set_alarm: err=-22 [ 322.946009][ T36] audit: type=1326 audit(1769434103.024:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 322.976506][ T36] audit: type=1326 audit(1769434103.024:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.004674][ T36] audit: type=1326 audit(1769434103.024:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.035633][ T36] audit: type=1326 audit(1769434103.024:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.059194][ T36] audit: type=1326 audit(1769434103.054:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.087449][ T36] audit: type=1326 audit(1769434103.054:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.112736][ T36] audit: type=1326 audit(1769434103.054:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.136536][ T36] audit: type=1326 audit(1769434103.054:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.160406][ T36] audit: type=1326 audit(1769434103.054:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.6.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067f19aeb9 code=0x7ffc0000 [ 323.184062][ T396] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.212622][ T396] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.222622][ T396] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.235686][ T396] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.244900][ T396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.257789][ T396] usb 10-1: config 0 descriptor?? [ 323.318041][ T9087] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 323.670080][ T396] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 323.694392][ T396] plantronics 0003:047F:FFFF.0038: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 324.060111][ T9094] input: syz1 as /devices/virtual/input/input66 [ 324.137996][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3235'. [ 324.172747][ T9108] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 324.964520][ C1] plantronics 0003:047F:FFFF.0038: usb_submit_urb(ctrl) failed: -1 [ 325.490261][ T9134] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 326.004253][ T10] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 326.012421][ T10] usb 10-1: device reset changed ep0 maxpacket size! [ 326.019917][ T396] usb 10-1: USB disconnect, device number 9 [ 326.164293][ T396] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 326.264464][ T9185] random: crng reseeded on system resumption [ 326.324247][ T396] usb 10-1: Using ep0 maxpacket: 32 [ 326.330765][ T396] usb 10-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.343129][ T396] usb 10-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.356207][ T396] usb 10-1: config 0 interface 0 has no altsetting 0 [ 326.362970][ T396] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 326.372319][ T396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.381527][ T396] usb 10-1: config 0 descriptor?? [ 326.554264][ T67] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 326.725519][ T67] usb 6-1: config 65 has an invalid interface number: 95 but max is 0 [ 326.734123][ T67] usb 6-1: config 65 has no interface number 0 [ 326.742932][ T67] usb 6-1: string descriptor 0 read error: -22 [ 326.749213][ T67] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 326.758424][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.788237][ T9138] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 326.809562][ T396] usbhid 10-1:0.0: can't add hid device: -71 [ 326.815766][ T396] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 326.825076][ T396] usb 10-1: USB disconnect, device number 10 [ 327.297110][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.324278][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.331752][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.354306][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.363353][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.389333][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.397557][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.405869][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.413512][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.425573][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.437420][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.448614][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.456506][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.464153][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.471895][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.486437][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.504055][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.513340][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.524576][ T67] usb 6-1: USB disconnect, device number 95 [ 327.542502][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.556981][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.564865][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.586471][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.595467][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.603781][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.611493][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.619313][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.627467][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.635210][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.642705][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.650431][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.658589][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.667127][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.674980][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.682563][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.690336][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.698552][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.706279][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.713888][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.721691][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.729397][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.737050][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.744694][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.752176][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.759886][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.773135][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.781191][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.788988][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.798796][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.807913][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.824261][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.831855][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.848254][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.855823][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.863268][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.864363][ T396] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 327.871984][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.894749][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.902303][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.910047][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.922806][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.930564][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.939413][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.949424][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.957239][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.964920][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.972471][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.980162][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.987823][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 327.995560][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.003117][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.010576][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.018240][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.025848][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.033385][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.040866][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.048476][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.055903][ T396] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 328.055943][ T396] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 328.066739][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.095516][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.105593][ T396] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.107130][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.118779][ T396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.127607][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.142646][ T396] usb 10-1: config 0 descriptor?? [ 328.144464][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.150395][ T396] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 328.156339][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.170368][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.177986][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.186201][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.193641][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.211306][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.230239][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.238513][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.246163][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.253656][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.261388][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.273960][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.283035][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.292220][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.304240][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.312743][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.320748][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.328450][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.336149][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.343624][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.354305][ T31] hid-generic 0000:0000:0004.0039: unknown main item tag 0x0 [ 328.363955][ T31] hid-generic 0000:0000:0004.0039: hidraw0: HID v0.03 Device [syz1] on syz0 [ 328.398822][ T9251] fido_id[9251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.571789][ T9278] loop5: detected capacity change from 0 to 7 [ 328.663277][ T9280] loop5: detected capacity change from 7 to 0 [ 328.705839][ T9278] Invalid logical block size (6) [ 328.794254][ T396] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 328.964685][ T396] usb 7-1: Using ep0 maxpacket: 8 [ 328.974722][ T396] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 328.987732][ T396] usb 7-1: config 179 has no interface number 0 [ 328.994172][ T396] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 328.999946][ T9291] kvm: emulating exchange as write [ 329.011242][ T396] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 329.033221][ T396] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 329.044972][ T396] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 329.057045][ T9294] xt_NFQUEUE: number of total queues is 0 [ 329.063599][ T396] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.084385][ T396] usb 7-1: config 179 interface 65 has no altsetting 0 [ 329.091508][ T396] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 329.100889][ T396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.121636][ T396] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input67 [ 329.174361][ T96] input input67: unable to receive magic message: -110 [ 329.194026][ T96] input input67: unable to receive magic message: -32 [ 329.204068][ T96] input input67: unable to receive magic message: -32 [ 329.323852][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.333257][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.342193][ T396] usb 7-1: USB disconnect, device number 88 [ 329.342261][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 329.365313][ T396] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 329.969786][ T9306] loop5: detected capacity change from 0 to 7 [ 330.057361][ T9307] loop5: detected capacity change from 7 to 0 [ 330.105431][ T9306] Invalid logical block size (6) [ 330.125211][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 330.125231][ T36] audit: type=1400 audit(1769434110.204:1019): avc: denied { append } for pid=9308 comm="syz.6.3318" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.592656][ T31] usb 10-1: USB disconnect, device number 11 [ 330.613248][ T9320] fuse: Bad value for 'fd' [ 330.622146][ T9320] overlayfs: missing 'lowerdir' [ 330.741158][ T9333] loop5: detected capacity change from 0 to 7 [ 330.872274][ T9335] loop5: detected capacity change from 7 to 0 [ 330.904375][ T9337] Invalid logical block size (6) [ 330.944272][ T9] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 331.057539][ T9342] kvm: pic: non byte write [ 331.109716][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.110265][ T36] audit: type=1326 audit(1769434111.184:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.118880][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.152466][ T36] audit: type=1326 audit(1769434111.224:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.152788][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.184367][ T36] audit: type=1326 audit(1769434111.224:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.186609][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.214132][ T36] audit: type=1326 audit(1769434111.224:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.242989][ T36] audit: type=1326 audit(1769434111.224:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.250836][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.275754][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.283940][ T36] audit: type=1326 audit(1769434111.224:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.285081][ T9] usb 7-1: Product: syz [ 331.308410][ T36] audit: type=1326 audit(1769434111.224:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.314679][ T9] usb 7-1: Manufacturer: syz [ 331.341688][ T36] audit: type=1326 audit(1769434111.224:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.353549][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 331.370469][ T36] audit: type=1326 audit(1769434111.224:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.5.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 331.375401][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 331.403139][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 331.409205][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 331.530516][ T9358] cgroup: subsys name conflicts with all [ 332.373815][ T9378] loop5: detected capacity change from 0 to 7 [ 332.378540][ T9379] loop4: detected capacity change from 0 to 1 [ 332.479641][ T9382] loop5: detected capacity change from 7 to 0 [ 332.492898][ T9385] kvm: pic: non byte write [ 332.524732][ T9378] Invalid logical block size (6) [ 332.872055][ T9412] kvm: pic: non byte write [ 333.400216][ T9442] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 333.725733][ T357] usb 7-1: USB disconnect, device number 89 [ 334.467494][ T9477] loop5: detected capacity change from 0 to 8063 [ 334.481023][ T352] Buffer I/O error on dev loop5, logical block 1007, async page read [ 334.494546][ T9477] loop5: detected capacity change from 8063 to 8943 [ 334.517161][ T352] Buffer I/O error on dev loop5, logical block 1117, async page read [ 334.584873][ T352] Buffer I/O error on dev loop5, logical block 1117, async page read [ 334.635161][ T352] Buffer I/O error on dev loop5, logical block 1117, async page read [ 335.537072][ T9508] loop5: detected capacity change from 0 to 2519 [ 335.570842][ T9508] loop5: detected capacity change from 2519 to 4295 [ 336.225297][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 336.225320][ T36] audit: type=1326 audit(1769434115.924:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.284435][ T36] audit: type=1326 audit(1769434115.924:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.320906][ T36] audit: type=1326 audit(1769434115.934:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.346764][ T36] audit: type=1326 audit(1769434115.934:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.372783][ T36] audit: type=1326 audit(1769434115.934:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.396441][ T36] audit: type=1326 audit(1769434115.964:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.514132][ T36] audit: type=1326 audit(1769434115.964:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.537835][ T36] audit: type=1326 audit(1769434115.964:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.561559][ T36] audit: type=1326 audit(1769434115.964:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 336.944288][ T36] audit: type=1326 audit(1769434115.964:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc5b9aeb9 code=0x7ffc0000 [ 337.125675][ T9558] loop5: detected capacity change from 0 to 17431 [ 337.151239][ T9558] loop5: detected capacity change from 17431 to 24631 [ 337.177125][ T352] Buffer I/O error on dev loop5, logical block 3078, async page read [ 337.207378][ T352] Buffer I/O error on dev loop5, logical block 3078, async page read [ 337.227081][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 340.304273][ T9] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 340.454235][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 340.584261][ T9] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 340.734300][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 340.739867][ T9] usb usb6-port1: attempt power cycle [ 341.094291][ T9] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 341.114637][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 341.244270][ T9] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 341.264632][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 341.270215][ T9] usb usb6-port1: unable to enumerate USB device [ 342.227903][ T9705] ------------[ cut here ]------------ [ 342.233450][ T9705] WARNING: CPU: 1 PID: 9705 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 342.243986][ T9705] Modules linked in: [ 342.248005][ T9705] CPU: 1 UID: 0 PID: 9705 Comm: syz.6.3469 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 342.259618][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.269714][ T9705] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 342.276032][ T9705] Code: 7f 76 73 ff eb 08 e8 a8 cc 0a ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 89 cc 0a ff <0f> 0b 45 31 e4 eb cb e8 7d cc 0a ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 342.295831][ T9705] RSP: 0018:ffffc90001817af0 EFLAGS: 00010287 [ 342.301940][ T9705] RAX: ffffffff827cbb77 RBX: ffff88812c740770 RCX: 0000000000080000 [ 342.309999][ T9705] RDX: ffffc90002294000 RSI: 000000000000022f RDI: 0000000000000230 [ 342.318037][ T9705] RBP: ffffc90001817b30 R08: ffff8881385ab900 R09: 0000000000000002 [ 342.326090][ T9705] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 342.334097][ T9705] R13: 0000000000002004 R14: 1ffffffff0e3f896 R15: dffffc0000000000 [ 342.342150][ T9705] FS: 00007f06800e26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 342.351243][ T9705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.357923][ T9705] CR2: 00007f06800e1ff8 CR3: 00000001260da000 CR4: 00000000003526b0 [ 342.365953][ T9705] Call Trace: [ 342.369249][ T9705] [ 342.372203][ T9705] current_check_refer_path+0x8ee/0xd40 [ 342.377814][ T9705] ? hook_file_free_security+0xc0/0xc0 [ 342.383319][ T9705] hook_path_rename+0x44/0x60 [ 342.388055][ T9705] security_path_rename+0x1d8/0x2a0 [ 342.393303][ T9705] do_renameat2+0x634/0xc40 [ 342.397910][ T9705] ? __cfi_do_renameat2+0x10/0x10 [ 342.402975][ T9705] ? strncpy_from_user+0x14d/0x270 [ 342.408157][ T9705] ? __kasan_check_write+0x18/0x20 [ 342.413307][ T9705] ? __kasan_check_write+0x18/0x20 [ 342.418478][ T9705] __x64_sys_renameat2+0xdc/0x100 [ 342.423589][ T9705] x64_sys_call+0x2e18/0x2ee0 [ 342.428352][ T9705] do_syscall_64+0x57/0xf0 [ 342.432829][ T9705] ? clear_bhb_loop+0x50/0xa0 [ 342.437680][ T9705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 342.443615][ T9705] RIP: 0033:0x7f067f19aeb9 [ 342.448098][ T9705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.467911][ T9705] RSP: 002b:00007f06800e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 342.476395][ T9705] RAX: ffffffffffffffda RBX: 00007f067f415fa0 RCX: 00007f067f19aeb9 [ 342.484449][ T9705] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 342.492451][ T9705] RBP: 00007f067f208c1f R08: 0000000000000000 R09: 0000000000000000 [ 342.500491][ T9705] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 342.508611][ T9705] R13: 00007f067f416038 R14: 00007f067f415fa0 R15: 00007ffc87501078 [ 342.516656][ T9705] [ 342.519707][ T9705] ---[ end trace 0000000000000000 ]---