last executing test programs: 3.43635953s ago: executing program 0 (id=60): syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007"], 0x0) 3.114363709s ago: executing program 3 (id=62): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0xb8a0, 0x0, 0x1000085, 0xffffffff}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4) fadvise64(r3, 0x0, 0x7a, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0x0, 0x0, 0x12dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000600)=[@uexit={0x0, 0x18, 0x68}, @set_irq_handler={0xc8, 0x20, {0x1e}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4cc, 0x8, 0xd, 0x6dc}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_code={0x12e, 0x62, {0x0, "36420f23ae2666440f380b1c1d231f0000b9800000c00f3235000400000f30c4c10a5809c4c3254a0d0000000003660fc7746704460f01c4dcd5c442d5983435e6000000c4817573dc11"}}, @set_irq_handler={0xc8, 0x20, {0x8, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xccfb}}, @nested_load_code={0x12e, 0x4e, {0x0, "6565660f388010f30f09c4a2219889050000002e0f0159bd6540abb8010000000f01c10f01df65f30f1ef8c4214f5d1a3e65660ff407"}}, @nested_vmresume={0x130, 0x18}, @set_irq_handler={0xc8, 0x20, {0xdd, 0x2}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x4, 0x40}}], 0x1f8}) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000200)={[0x2000, 0xffff1000, 0xa000, 0x2], 0x8000000000000000, 0x50, 0xf}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000552000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r9 = userfaultfd(0x801) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @msi={0x9, 0x10000, 0x2, 0xe38}}]}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 2.952668968s ago: executing program 3 (id=63): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d4b1dda2e78e50dd7ec0faf416ae4bac455f0f7a364f02e918210ed940ec5dd64144b243429f78546881976c7763423c1bb3aa3dde302f4af992a77fc96b778d0dd22e5f07a664080fef06d11f58ec726487dfe65b5b290c811a7976990aa22e78fa732006e3df37aa6ce357dc372", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2.57468849s ago: executing program 1 (id=65): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00', &(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000180)) r7 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00009ef000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x2, 0x2, 0x80}, {0x4000000a, 0x1f, 0x0, 0xb, 0x1, 0x8, 0x5}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x30000009}) close(r9) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r13, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r12, &(0x7f00000001c0)='m', 0x1, 0x1}]) ioctl$KVM_SET_PIT(r12, 0x8048ae66, &(0x7f00000000c0)={[{0x2, 0x58, 0x7, 0x50, 0x70, 0x2, 0xc, 0x2, 0x7, 0xfd, 0xa, 0x7f, 0x3}, {0x0, 0xfffa, 0x5, 0x7, 0x3, 0x24, 0x43, 0x83, 0x9, 0x8, 0x8, 0x27, 0x24}, {0x7fffffff, 0xc2, 0x7d, 0x5, 0x4, 0x5, 0xd, 0x6, 0x9, 0xa, 0x4, 0x3, 0x1}], 0x6}) 2.23625829s ago: executing program 0 (id=66): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x3000, 0x6}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0xa9, 0xc, 0x8001, 0x20, @local, @mcast2, 0x8, 0x7f00, 0xaf, 0x2}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @rand_addr=0x64010102, @broadcast}, 0xc) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000e5f000/0x3000)=nil, 0x3000}}) mlock(&(0x7f000095a000/0x2000)=nil, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4b0900, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x2}, &(0x7f0000000200)=0x28) madvise(&(0x7f0000b0b000/0x3000)=nil, 0x3000, 0x70) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) r6 = eventfd(0x4) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x3, r5, &(0x7f00000002c0)="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", 0xfd, 0x6a5a, 0x0, 0x1, r6}, &(0x7f0000000400)) r7 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x840) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000540)={0x40, 0x8, 0x0, 0xffffffff, 0x4, "8d9cd1801e4d339561c03578abfa8ab680a39f"}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000f67000/0x4000)=nil, &(0x7f0000c77000/0x2000)=nil, 0x4000, 0x1}) close_range(r5, r3, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) r11 = getuid() fstat(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000900)='./file0\x00', 0x100, 0x8, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000000a40)='./file0\x00', 0x400, 0x200, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {}, [{0x2, 0x0, r10}, {0x2, 0x4, r11}, {0x2, 0x1, r12}, {0x2, 0xc, r13}, {0x2, 0x2188be4cb0dd046f, r14}], {0x4, 0x3}, [{0x8, 0x1, r15}, {0x8, 0x6, r16}, {0x8, 0x2, 0xee01}], {}, {0x20, 0x1}}, 0x64, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000c00)) 2.204524502s ago: executing program 0 (id=67): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup(r0) pipe(&(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0xe) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xc2, r3, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r6, 0x8010aebb, &(0x7f0000000040)={0x1000, 0x11a000}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.112515617s ago: executing program 0 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) unshare(0x62040200) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000880)=@svm={0x2, 0x1, 0x1080, {0xe000}, {"f1ed90edee4fe5255583dc3832f238317b4cab745c342ec62584a24e13f7dd2b408901ab2db3700db05d4eaf4cc0c6c2f3227d9de91390b7cbd7dba6c6b0f815d7e412c05e8a4db4d982f4a46fc71a0a9165675efd4f4ac4c808f8b4abb8f50ac34d0206041d89b3710171f027eac6d4b8fda34ca2093b1a6d8f00d124a318d05da9dd7fd9705642bfcacf4d9e9b1e162d6ef6a3d6f045941f0c219977a1f3b23ebe4aa30b35e106687600ef347f52c17b0ede412a154e3da4d2f6e03e28ff0da9e31d29b38255ef126adada4c875bf86a7be9667bb44c5b5cc743a7736c3667169778983cddffeb1f820d69cb3f63fdabf8a74c161c2ae00ba3ac9749d02af9aee61652a838a15c660710ceee552bc1842c1bd216274672338554274e52fd845058b6d676fe93c338f2d791019fe78ccd957c382383e727af7eedee6e42002a631b6369431247a916138386e46f13fa0b340113ecc0bd4905bac439f659aef61f7077d5647d12b042e792a82971f8b36cf5a1769a1e790692a20ccad4a9d27db04ee28840b7db1dcfbf1562a7f5d4a7eae4de48c80e4cc807495f71107f06311ab0e9542251da69d84a08657e428d03e62ee4f5416a2881f6485877bc36022f804532f840b8d8b398190a1b5a33f6136c8f3113ce4138e5a76834721674efbed6b68f93001bc26b69e600f609b566710ea8372e3b04f90dc53ed27582871bfd56d5ada033be04d823772e23ab67e0cf73f9a155a1e8317cdda98c05bef87b25f51b9a3a0f4f722ef09b24cba3117e4efd6f28ea8714ded1a6470de26331d84423139df90dd0949689b2045da7766694c0cb99ef42373f185dacbd3d17894c04e79c22f062d2e613cde1f3f62b2f8b2943cae4d30a93443835e436a5a0079c383d6da1ce290b2c2a63e151598a9b6cc69f2eeccc9bd06fa7f5ab66dc12a00aab8cfca43cd316c3254afbeece392b899797810ee7a46d15a271d1ffb41d734c5151e934e812cb1e9a8267387f62830bbb2d2492d5027bd2464298ea2ebf730354bc4a0e0a842483f7af76b5d30e358a1d2dcd59658346b0e1788a807798fc68a430584b42641c0b6283c62d07f4d549970b3517d7b681fba9aa19586d4baa748ab2902254d7f6d743e7b884d88c1af0e5a1de8115ef5baacff533439837da7894e6750765c88600fd53b4b1d922c62e833ccb60b31638b0a03a354a4d2dd26f157bd71d4228e393a61f6e7aab92424bd130036e3817a9441a992109414929b3dc82f9a15bd19e567c2a0d763745879369ceb9a5c5521133dca851cfc09c8bc5cfe2039730dfe37a86bb78314a4b269b16e08e1091fd915fc8e00e35e428e721a9080e577365b61e588a047928251526b847f25fce078cd1b03c8e320d293501bb0a10acd38dde99a10557fa9223941bed389a93d719d0ec8b410ee8c6521466a4cd17227cb65eaf892b80f0feb926004ed3154d8dad8d9e01abdb3eea3ef704cadd3d2e588f8f3494c2b434b3a042bee119e3a4f19610db7eab1b2a9b4c7cd9c79b30728231b1c713b5f62a4c4e9e4b873c1da44369c294c63c262933613dc38559ea6c93721a10d3186858f5b50da1e30e1c2dbe2a5960714fac7339a30e6740eccb3d7e888ad735b5bdecac53c778b04babe32870b06ffdc338f0d9691dcbb77d6bb3b395e6a7bc8facae77370220869a7bf2da671efbd83278b648d4982a83b2037f7263e3a52daad3056113b3116573ede16206a9ef543dc0aa192fc14e6325e8c189da33b635928ee8bda895fca1e9f6dc48a3fc868e4d6c340d322e3fa8eaddd767eedcf637872fdd21f1dcabfe26dcfec6e9cc01215a2a350d710677513807fd6059cb272069e45ba16d49b331ee6f1330d362d5772cade3f426a3967a2b28ee28161a088bf461ee39d0d79a0694f596f6c8e2923f9e356ec249b6437ce0886008607524178c6a2d1e08aad5ceba70c122146ec4baec71d6a4a029975474317105b5029d472ad484005393f3081f6de12cd9325acc69f8552486cc5b5e255210acaf70aec2b17511129f97a10882dd1fc9eb4587e2f1d9fadc4aa6189b5eb8be1bbefbc41b46ac24498a1f695b87213c971ba8fd3e4eb3154e8bc790935e1448b3005d261961b3f8efa1c32b1c1dcbad139a0d0f5e87614f84486d65dea48126bb2b1e8242067eb67f33ce442036fa6ed4f84ea5d645bd1405081385b40c7d4f647d07258b25d3535a2398bebe4498d604ec2a7c63af9bf184d76e05bd419b42a00f6c04dbcf273f06884191cf15bf0007f803a54999dc27414d377c681db7714d54776bbec08e3428e84a0516912e160e95fe76d0f3cb546c150d75b20ce9c951b24902866f212476e65e0ab1371823071590804863546fd17c2d5b8f3891f013dea1460fc39345a3c3d253987cc9967a6e4336eae9dba87250631cfaf2ee7091e4fb199f4b49cfafe9ec8a27b88b76e9741f6d14c7bae6c757f2605527c49fc421f3ddb2fb3b5f68160477db3f423db8646f5aea52528d610c6c7aa888d07e43fa42ca9e0a35d9868768f4005a975c8ed927f6b5bbbdc68b175e51f623b56dd2b79d7b4faa4a1e27b91978f9a1eedf550e6c5b624bcfed831c71fbe4a60621b038a3600ef29758991ad30feeb31ee4e69d96fb514703357234c8e97baced26eee4ee3a2d7877fd191df835a2441c7e5b195598c5e9f59ca62e609c3d1d8f8e6fd9bd1edfb44e6cc2b5c83f64211f1a9cb387c12f3352164a1a7dd936d9264039211d1c75aa528d3fa91734f085cf87b8f571e1e54531568e5a064e3320dcd2f6ef925ac35417f9b11d2531d76bb41185ffa8b5051021ed6fd88140fe5929902ceb116697e94cba395b4bfa7fc309f179f67cbf46ab5160e63471629d2e50eeec2912320c5f63652cf8ae74fc86a79a6a888124bb780511232d9f0452b818b21b899e423d62df0651ab81bad8175f4c887ab4dbca02bf99aaef49add70deaa1dfb33586bd1644bf8e46488e19af541abbbe4701e770411ba0077fb1b470dad9100520d802cffe83684078e820761ac11f3d89c580ea8c7c062ca2ad411f9381fb633fe1be993d50bf3eec1ee0d5f4947b9a5621ce7aa5d34331ba8681ff64c02909b762915773599e8cab4ceff5da2e393dc766b651d193db76257f51a7f71cdc306030a2737a593fd95f1ce06136eb68f466634d8ea9830fbe92d73ec03405c3cf022f25273497d4cee33378167c30a5bc6b5acaec581d3767b7da3311b31ccf1a3d8b82daf0f523b98809df67c4cb5c2f5ffd1be708d6b59015a867ebf7397e65a1216f0547b4fb0fb7c7bcdd2f01263af7b30af748a75e430cd7e19db7236e7b5867d7056228afae6624ec1a4ba3064f0d1fd80fa3a5cbfbc1f016ea2e9714fd89e60c1d49c8a309fb800b4bcd69b337fcd593bf96899bc7926f0cd5e3ec78bcb8d96fcb09b43520a49b4f2fffe99068bea22d8e87c06c313ad0c5e7f6a5cc1efb651365d23fed1740a93a9fe34b5dbf0408a9958ce58d667527f8dc1cc9122877f4de2d4feab1d4abc8c36e25523632c92619981020879f759c3a70f0a6c5251345179cfb6b39d8fdf7f95ddad1b94a903163773d7fb251a7190d9e57b651c3d9e0041d7a97c74e9ba75f02996c1141fb22d1b4317f4f2908bb2abc39bbbaef8a225233e0baf4dac2ed141bfc7c39271ba73190f3b78d7d4fb520e56d5bec38a18e9d56b18203a93e8b9aea8f301aea3b9f122966495c211103533d0837cc1982197f3c75d09e7970bd77be8498209622455e112f6df5420e4d3823fee8f3527a393872c6e7351c816a866b226c672d9883dc2e64b4a37fcd7ba939d1de9cc5ef7cb8714d1607b4c054801901b2641420e2d5558173466dc8f51a1578f4507d9706d8a718f526064f969d139d3b069ceef7df6ba956175481ede857f021b5751387c056e8cf5f74be56722e046b411b46e1c0bd703f9cf45e7ff65d1d04da71ad2288d6d0dc0b5d9e970fe7cc91f319298f32d6b1550eedcded4e561f769d72719e964b0d7158af46e81d61a7a2af2053d8b1fcb6f07987b200ae4821bf4c3b5640cf6628c78571b0c7cc9d16131858926b7af574e9e9ba84729d4e065f4b5776be7a031e8902e42af06b180865672c169d0187132a61b422d7a86ef803fdc2b8914aa5c62a7cad0acb2b68252523ea0685318019242b41f363073e8f91e8c09570893e56146209a4ba95f4ddd72eaae4c78c5c171811c8a5d63eaeb116b0edfa2c001f1d247d42edd441e87e2c2b4c532bc66e31b3bcb8755b6b800016f7be765dc3e91fdf76bbf0d01de741808a74174015471755019a44833d68d4d18a3c805a4793fc5d56dd9d981edaa87bc4df7a57b714bc5e43818497732bb0dfba6a0e08bc82c16229bab5915b74a955a866988a36a66c9411cd4b81580e076cc8c3666a75ad67efc8777eab5e891adb0add6cb9b70de5da192d8bbe66245368d6f1399789f48d3c378461e47537bb18a0477a4872ab836eb30aa055aca5d3c255f14f69d1e241070523a237f3a5eb312a196ae9223d5c53a8cc632bb198c3115dc478a3dbe3021dce6acd8e4e966ea97c245fa899ef88b335730df7f79e2caaf0b0c46304012db59281861d95c347d2add232583e2f8c13678c9026f83fd0727ea6858b9d8c5666d03d23fcc78eec67439041528c279dc25e4337990aeec6dd4579f0d0b1625e1f09c1eec59d3f1a38e5aa1e56afc80743cb1fd3b8ae96cef9f95ce652ffcf09e364921721aa1166b67ca862ee7366d8d8b6aaa89ee84b955ecabbee59e11e76cb09cf24bdb05d7a48880ea52628e5ec04e327f675097c8df54cb8fff59088e9f038b8c49aa533b6468100806b6d3a499b290571b03a94ad588a11e51094801ddb1dfaf3beb6544783e3a8ca006587d2ba8fb72350801465376d815939504b05e2c4599430c9c7acdc6af030f29850ccebd752dd6adc55f5ba01f3e2d9abb8788a986063790fff0493d6074ec6eb172c8e6ab5592f8b8dc7459565647dfe055a08c07157bb8e1d64f35c852bb70cb7b181a7c3a12a3b5620d427d900cb90e33cffcc03fecd8ee7c6f4882a417d2dc87b6fe7af982d744f55ca25e0d71f75cced8486b8f414a02dc3fa454d87adc13083c69bdaee83a2ab275e75f20626d793454e94a67bc58529cc1fd2e2fc04a1f97377654d526126842f04840969ecba244343e281c0144fb2f851d5c70fb60a4de62c72bc4f38c6561370b18f083dee2f9c7256df96cd24e4e955bf239c1bb600152ea9697c4cccbdc00f464a133faecd779b320d6382d99aef7014da3b114635251f105017fa541c2f82cda387b9e6258c0470393652a1986d96017c3b55852e262c9539b5101ee3c25a8525711fa82d1f31b20cec4cd476bff25eff4f86ba5b5902d4239d0854512fc2b8d528079a0ed47fec7452efc1a9009cf887819aba19977173dafbf56cbb91b7a44d8d457e5b7e0ef16dcc2df0bb22029d5739164e01df541016deec53719f41a0cbd8243917975304bed7b5118e126befb744924d7555a492cc4085b34b071198c3b3ad67ff187d395413f0a041bc15aea35f18b5c1680e62b53a6eab1eabf1adbb1a0f8613304bbf89defa492d0d8f19147d7ca3c607521dfe7d7f19b942b411ae7d7e392dcc1efecd262caa4606481eeb713b249ad25ac228836cff678f3c2813cfcb9a30265dd7d4eabd2d0a63b1824e0ff5f330c1b609e2e971e74ff1f7a7e68cd0d6a30a432789f76c646566a6024f26d6a67be8aee9d65d6c61"}}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x85, &(0x7f00000000c0)=@string={0x85, 0x3, "f9bc28b8229ddfd8a71511fdeed2e7664e88f5e001d27b78decab2ff65dbbd607caf52c72e27635a16b7ff3f7aa0330b8157a95cfe4c22d404da1c3699c100e28bb3b471ad430600000000000000bebd305e65d848f8956d56986c2b6934cb8402a7463c532797ff7df5daaf7aaf3041b4d8805f1bd6499d25057cbc4eb683e86714df"}}, {0x68, &(0x7f0000000180)=@string={0x68, 0x3, "3913f7d1e231163610c383eab7bf0b2bfdd0993441a4fbeb16cbad225c17a57e3cea928bb2aad6d43c73bc0960c4007096e3a628a75bbc7ae4b2ef3df59eecafab60c111805b8bca0b663115bc704527b8a4784f190f2fd48cff7fc4aca2088df37262b09379"}}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) (async) unshare(0x62040200) (async) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000880)=@svm={0x2, 0x1, 0x1080, {0xe000}, {"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"}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2f, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x85, &(0x7f00000000c0)=@string={0x85, 0x3, "f9bc28b8229ddfd8a71511fdeed2e7664e88f5e001d27b78decab2ff65dbbd607caf52c72e27635a16b7ff3f7aa0330b8157a95cfe4c22d404da1c3699c100e28bb3b471ad430600000000000000bebd305e65d848f8956d56986c2b6934cb8402a7463c532797ff7df5daaf7aaf3041b4d8805f1bd6499d25057cbc4eb683e86714df"}}, {0x68, &(0x7f0000000180)=@string={0x68, 0x3, "3913f7d1e231163610c383eab7bf0b2bfdd0993441a4fbeb16cbad225c17a57e3cea928bb2aad6d43c73bc0960c4007096e3a628a75bbc7ae4b2ef3df59eecafab60c111805b8bca0b663115bc704527b8a4784f190f2fd48cff7fc4aca2088df37262b09379"}}]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) 1.582587608s ago: executing program 1 (id=72): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28131, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000000000000000000000000000000000000000000000000000140000000000000006000000000000b56400ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcff758c341100002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0x8000000, 0x59352}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000400), 0x12) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x2}}, 0x30) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.54380401s ago: executing program 1 (id=73): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000680)=0x4) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x11) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x20, 0x700, 0x529, 0x9, {{0x36, 0x4, 0x1, 0x3e, 0xd8, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x6b, 0x0, 0x7, [0x0, 0x56c]}, @noop, @timestamp_prespec={0x44, 0x34, 0x27, 0x3, 0x1, [{@loopback, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7f}, {@multicast2, 0x7e7f0979}, {@multicast1, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}, {@multicast1, 0x14}]}, @cipso={0x86, 0x73, 0xffffffffffffffff, [{0x5, 0xc, "2f37c3026b4c78984b8b"}, {0x6, 0x10, "b149aa55139f9e9e23e54e6ad6f8"}, {0x0, 0x11, "4114c4660f2089fe8110ab37fe51e2"}, {0x7, 0xd, "58a17529b2992972dbd90e"}, {0x0, 0xb, "76e43d330e34237faa"}, {0x6, 0x12, "3cb153ee56348e9f25fe74850bc58ab2"}, {0x7, 0x3, '\v'}, {0x0, 0xc, "01c08702babefe9b6400"}, {0x0, 0x7, "113516a4dd"}]}, @lsrr={0x83, 0xb, 0xa4, [@remote, @local]}, @noop, @end]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff14000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250400000058000180140002006772653000000000000000000000000008000300030000000800030002000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r5, @ANYBLOB="1400020000002000018008000100a87247c526c2c372369cd0a22132a1685d2122a2cdf2add7f16a7fe9ba6f357bb8739cb10a30c991e7e6106512ebdcf63df9a8630ee7e3004c2f980cee3bd63a093e2e11b963373a2994c386262f415885b78ad4ea34e45f35bdd432f2181263133099da4cca2daf8fc25a3c8cbec9b7702e2fab22bf2361bbef60dc814053c7c8f6076f09e9590c0a811d1d2e91bfdd757310a9da2b3e569fbba0a9be9ae9af6d3d624d0f0d4f41bf65c992dd28fdf4b6f7ffc7b070bbf375571121c651158dd6dd6cf7b1286e0f", @ANYRES32=r7, @ANYBLOB="140002006272696467655f736c6176655f31000020000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r8, @ANYBLOB], 0xac}}, 0x10) prctl$PR_SET_TSC(0x1a, 0x1) dup(r2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000740)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @random="2833b1656532", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) 1.274115396s ago: executing program 1 (id=74): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, '\xfc*z\x9d\xea?F\xc6_Y\xa7\xd1\x8d\xd2\x92\xb7\xe8C\xe3Vq\xf1fQ\xc8\x84\xdc\x03\x8er\x0eP\xe1/\x81\xc4E\x15i\xf3}\xd4#\xfd\x9cc\xe0v\xe7k\xfb9\x98iv\xed\x93\xa0`g\xdd\xc5\xc5\x89\xb7\xe0\xa8/\xe6[E\x88P\xff\x98\x1f\xefK\x9b\xe4\x92\xf6\xe7\x1f\xf0\x92m\x9c \xfeAJ\x15\xb8l\xe4a\xe8\x8bp\xea\x01WC\x98\xc2\xd4m\x99\xd4b \x8c\xa2\xa6g\x9f\x1b\xddF\x8dH\x81\xb6\xf6%}\f!h\xd5\xaa?\b\x92\xe6\xda\xf1\xab\x86Z\xca\xe9\xd6`|D)6\x8a\x9e\x7f\xc1)\xd2\x94\xe2Q\x9a\x16\xca'}}]}) 1.20695426s ago: executing program 1 (id=75): syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007"], 0x0) 637.613843ms ago: executing program 3 (id=76): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000500000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x3, 0x3}, 0x10) 589.872336ms ago: executing program 3 (id=77): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028d35aa8002000eaa57b00090080020efffeffe898000000ff1c000000ffffffffffffe7eb65000000000000000200"/88, 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = dup(r8) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) setuid(0xee01) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) 572.150677ms ago: executing program 3 (id=78): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x0) getpriority(0x1, 0x0) ioprio_set$pid(0x0, r0, 0x2004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x98, 0x200) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) set_robust_list(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r4, 0x1000007, 0x13, r3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000000080)=0x8001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0xfffffffffffffff8) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r4, 0x5, 0x110, r8, 0x0) 514.768881ms ago: executing program 0 (id=79): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BLKRRPART(r1, 0x125f, 0x0) 408.719276ms ago: executing program 2 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x580a8, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000000014,mode=00000000000000000003000,gid=', @ANYRESDEC]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0) 355.1661ms ago: executing program 2 (id=82): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000002c0)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f0000000000)={[{@noswap}]}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) 302.500152ms ago: executing program 2 (id=83): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xb0, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@replay_esn_val={0x44, 0x17, {0xa, 0x70bd28, 0x70bd29, 0x70bd2a, 0x70bd2a, 0x6, [0x6, 0x8000, 0x7, 0xb, 0x40, 0x6, 0x8, 0x5, 0x10001, 0x1]}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@private1}}]}, 0xb0}}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0x8, 0x4) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x2, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x20, 0x14, 0x9, 0x2, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x20004000) 301.989573ms ago: executing program 0 (id=84): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0}, 0x0) 290.345183ms ago: executing program 3 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010100001600"], 0x6) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000319000000192263c445269b6cddddb3744dfd00"/31], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x10400) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000040)={0x2, 0xffffffff, 0x2, 0x400, 0x8, 0x7e}) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r5, 0x3, &(0x7f0000001680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfe00, r1, &(0x7f0000000000)="8a", 0x1, 0x9}, 0x0, 0x0]) io_getevents(r5, 0xfffffffffffffff4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000080)={0x77359400}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xaa, 0xf2, 0xbf, 0x20, 0x1b5c, 0x104, 0x3000, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x5, 0x80, 0x6, [{{0x9, 0x4, 0xfe, 0x5, 0x0, 0xf9, 0x3c, 0x2a, 0x6a}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) 287.050933ms ago: executing program 2 (id=86): r0 = creat(&(0x7f0000000500)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000000)) (async) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000000)) close_range(r3, r4, 0x0) copy_file_range(r1, &(0x7f0000000040)=0x9, r0, &(0x7f0000000080)=0x1, 0x2a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0'}, 0xb) close(r0) (async) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 230.689907ms ago: executing program 2 (id=87): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/net/tun\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa, 0xe0201) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001400090003000000ffdbdf250500000008000100", @ANYRES32, @ANYBLOB="0ffdfd5d3a171af018385d22dee86291fb51f98b79ec211f0d369fae215e2a763e6f99a3e1e37497e3c293e50495ba1fea5d2f2bfab6616c53837b554767715f428579016bfc89c79b64c268c86cdaae0eef16700d7838f344d6742c8b6d279b3d9ac2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 227.096147ms ago: executing program 2 (id=88): mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x128) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]}) (async, rerun: 32) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040cbfcf37300000000000109022400010000000809040000010300050009210200060122030009058103ff03040000"], 0x0) (rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x1, 0x9, 0x9, 0x1}, {0x8, 0x6, 0x3, 0x81}, {0x10, 0x80, 0x3, 0x14}, {0x2, 0x1, 0x4, 0x4}]}) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x5, {0x5, 0x21, "ccc0eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=89): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "31f078aa"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='readahead=0000000100000002176']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 20.110022][ T36] audit: type=1400 audit(1769777885.449:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.111196][ T282] cgroup: Unknown subsys name 'net' [ 20.132771][ T36] audit: type=1400 audit(1769777885.449:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.160283][ T36] audit: type=1400 audit(1769777885.479:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.180211][ T282] cgroup: Unknown subsys name 'devices' [ 20.364233][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.369837][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.543126][ T36] audit: type=1400 audit(1769777885.889:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.566337][ T36] audit: type=1400 audit(1769777885.889:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.591684][ T36] audit: type=1400 audit(1769777885.889:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.600459][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.623525][ T36] audit: type=1400 audit(1769777885.969:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.649125][ T36] audit: type=1400 audit(1769777885.969:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.680610][ T36] audit: type=1400 audit(1769777886.019:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.706314][ T36] audit: type=1400 audit(1769777886.019:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.706589][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.519535][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.526623][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.533885][ T289] bridge_slave_0: entered allmulticast mode [ 21.540074][ T289] bridge_slave_0: entered promiscuous mode [ 21.547880][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.554952][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.562287][ T289] bridge_slave_1: entered allmulticast mode [ 21.568639][ T289] bridge_slave_1: entered promiscuous mode [ 21.590043][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.597185][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.604278][ T292] bridge_slave_0: entered allmulticast mode [ 21.610443][ T292] bridge_slave_0: entered promiscuous mode [ 21.625610][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.632764][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.639816][ T292] bridge_slave_1: entered allmulticast mode [ 21.646225][ T292] bridge_slave_1: entered promiscuous mode [ 21.685928][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.693055][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.700224][ T290] bridge_slave_0: entered allmulticast mode [ 21.706767][ T290] bridge_slave_0: entered promiscuous mode [ 21.715945][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.723041][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.730146][ T290] bridge_slave_1: entered allmulticast mode [ 21.736478][ T290] bridge_slave_1: entered promiscuous mode [ 21.757775][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.764968][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.772050][ T291] bridge_slave_0: entered allmulticast mode [ 21.778238][ T291] bridge_slave_0: entered promiscuous mode [ 21.798710][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.805787][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.812874][ T291] bridge_slave_1: entered allmulticast mode [ 21.819034][ T291] bridge_slave_1: entered promiscuous mode [ 21.949663][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.956731][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.964045][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.971060][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.979774][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.986828][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.994125][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.001239][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.009526][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.016690][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.024002][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.031038][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.056080][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.063266][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.070536][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.077587][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.107159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.115297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.122931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.130379][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.137830][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.145619][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.152836][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.160150][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.178399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.185473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.203768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.210822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.225797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.232948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.241357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.248598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.256491][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.263641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.272036][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.279104][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.292561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.299696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.326150][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.333209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.356778][ T290] veth0_vlan: entered promiscuous mode [ 22.371257][ T289] veth0_vlan: entered promiscuous mode [ 22.386236][ T290] veth1_macvtap: entered promiscuous mode [ 22.403266][ T292] veth0_vlan: entered promiscuous mode [ 22.420491][ T291] veth0_vlan: entered promiscuous mode [ 22.427715][ T289] veth1_macvtap: entered promiscuous mode [ 22.452941][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.469998][ T292] veth1_macvtap: entered promiscuous mode [ 22.491371][ T332] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 22.500387][ T332] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3'. [ 22.511406][ T291] veth1_macvtap: entered promiscuous mode [ 22.595068][ T342] netlink: 'syz.3.4': attribute type 27 has an invalid length. [ 22.604243][ T335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.621993][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.629169][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.652011][ T335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=335 comm=syz.0.1 [ 22.852530][ T336] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.952289][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.003452][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.014651][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.024620][ T336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.032231][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.037769][ T336] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.054250][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.063400][ T336] usb 2-1: config 0 descriptor?? [ 23.122199][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 23.128480][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.138777][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.153087][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 23.162233][ T45] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 23.170595][ T45] usb 4-1: Product: syz [ 23.174975][ T45] usb 4-1: Manufacturer: syz [ 23.182723][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 23.202247][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 23.208619][ T9] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 23.217057][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.227537][ T9] usb 1-1: config 0 has no interface number 0 [ 23.233672][ T9] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 23.244690][ T9] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 23.255315][ T9] usb 1-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.268256][ T9] usb 1-1: config 0 interface 96 has no altsetting 0 [ 23.276641][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f [ 23.285770][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.294029][ T9] usb 1-1: Product: syz [ 23.298206][ T9] usb 1-1: Manufacturer: syz [ 23.303125][ T9] usb 1-1: SerialNumber: syz [ 23.308350][ T9] usb 1-1: config 0 descriptor?? [ 23.390189][ T45] usb 4-1: USB disconnect, device number 2 [ 23.439986][ T363] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.482295][ T336] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 23.492432][ T336] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 23.517631][ T9] usb 1-1: USB disconnect, device number 2 [ 23.944928][ T373] ======================================================= [ 23.944928][ T373] WARNING: The mand mount option has been deprecated and [ 23.944928][ T373] and is ignored by this kernel. Remove the mand [ 23.944928][ T373] option from the mount to silence this warning. [ 23.944928][ T373] ======================================================= [ 24.058996][ T390] fuse: Bad value for 'user_id' [ 24.064781][ T390] fuse: Bad value for 'user_id' [ 24.154068][ T400] input: syz0 as /devices/virtual/input/input5 [ 24.176836][ T403] binder: Unknown parameter 'contextĚ' [ 24.176895][ T402] binder: Unknown parameter 'contextĚ' [ 24.183316][ T403] process 'syz.3.24' launched './file1' with NULL argv: empty string added [ 24.443537][ T415] tipc: MTU too low for tipc bearer [ 24.453163][ T336] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 24.465662][ T31] usb 2-1: USB disconnect, device number 2 [ 24.466683][ T418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28'. [ 24.482668][ T418] tipc: Invalid UDP bearer configuration [ 24.482694][ T418] tipc: Enabling of bearer rejected, failed to enable media [ 24.603248][ T336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.614561][ T336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.625043][ T336] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.634139][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.643189][ T336] usb 1-1: config 0 descriptor?? [ 24.649024][ T336] hub 1-1:0.0: USB hub found [ 24.848900][ T336] hub 1-1:0.0: 1 port detected [ 25.051630][ T336] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 25.058099][ T336] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 25.067248][ T336] usbhid 1-1:0.0: can't add hid device: -71 [ 25.073335][ T336] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.104717][ T336] usb 1-1: USB disconnect, device number 3 [ 25.342222][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.411329][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 25.411351][ T36] audit: type=1400 audit(1769777890.749:190): avc: denied { nlmsg_write } for pid=442 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 25.438045][ T36] audit: type=1400 audit(1769777890.749:191): avc: denied { getopt } for pid=442 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.492390][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 25.498873][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.510035][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.519825][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 25.529088][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.538220][ T9] usb 3-1: config 0 descriptor?? [ 25.633559][ T36] audit: type=1400 audit(1769777890.979:192): avc: denied { create } for pid=447 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.653498][ T364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.653801][ T36] audit: type=1400 audit(1769777890.979:193): avc: denied { connect } for pid=447 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.803263][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 25.813043][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 25.825648][ T364] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 25.834765][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.842809][ T364] usb 4-1: Product: syz [ 25.846985][ T364] usb 4-1: Manufacturer: syz [ 25.851572][ T364] usb 4-1: SerialNumber: syz [ 25.856865][ T364] usb 4-1: config 0 descriptor?? [ 25.945358][ T9] kye 0003:0458:5017.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 25.956678][ T9] kye 0003:0458:5017.0002: hidraw0: USB HID v0.81 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 25.967638][ T9] kye 0003:0458:5017.0002: tablet-enabling feature report not found [ 25.975837][ T9] kye 0003:0458:5017.0002: tablet enabling failed [ 25.992232][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.066367][ T364] usb 4-1: USB disconnect, device number 3 [ 26.076734][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.142258][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 26.145207][ T336] usb 3-1: USB disconnect, device number 2 [ 26.150925][ T65] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 26.161685][ T65] usb 1-1: config 0 has no interface number 0 [ 26.168884][ T65] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 26.180887][ T65] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 26.189973][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.198101][ T65] usb 1-1: Product: syz [ 26.202320][ T65] usb 1-1: Manufacturer: syz [ 26.206907][ T65] usb 1-1: SerialNumber: syz [ 26.212280][ T65] usb 1-1: config 0 descriptor?? [ 26.217709][ T450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 26.426066][ T450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 26.657829][ T36] audit: type=1400 audit(1769777891.999:194): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.812276][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.962276][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 26.968484][ T31] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 26.979574][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 26.988004][ T31] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 26.997118][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.005136][ T31] usb 4-1: Product: syz [ 27.009294][ T31] usb 4-1: Manufacturer: syz [ 27.014008][ T31] usb 4-1: SerialNumber: syz [ 27.220631][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.229603][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.423974][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 27.430032][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 27.439008][ T31] usb 4-1: USB disconnect, device number 4 [ 27.442319][ T364] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.623480][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.634519][ T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.644470][ T364] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 27.654357][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.663347][ T364] usb 3-1: config 0 descriptor?? [ 27.933611][ T36] audit: type=1400 audit(1769777893.279:195): avc: denied { getopt } for pid=464 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.072817][ T364] logitech 0003:046D:C298.0003: hidraw0: USB HID v2.00 Device [HID 046d:c298] on usb-dummy_hcd.2-1/input0 [ 28.084355][ T364] logitech 0003:046D:C298.0003: no inputs found [ 28.192244][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 28.273439][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.282027][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.291106][ T336] usb 3-1: USB disconnect, device number 3 [ 28.343367][ T31] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 28.351572][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.361692][ T31] usb 4-1: config 0 has no interface number 0 [ 28.367801][ T31] usb 4-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.382369][ T31] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 28.391688][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.399891][ T31] usb 4-1: Product: syz [ 28.404078][ T31] usb 4-1: Manufacturer: syz [ 28.408660][ T31] usb 4-1: SerialNumber: syz [ 28.413960][ T31] usb 4-1: config 0 descriptor?? [ 28.419803][ T31] plusb 4-1:0.231: probe with driver plusb failed with error -22 [ 28.622600][ T336] usb 4-1: USB disconnect, device number 5 [ 28.802077][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.812004][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.819212][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.955966][ T65] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 28.966597][ T65] asix 1-1:0.188: probe with driver asix failed with error -71 [ 28.975749][ T65] usb 1-1: USB disconnect, device number 4 [ 28.991015][ T36] audit: type=1400 audit(1769777894.329:196): avc: denied { map } for pid=478 comm="syz.1.48" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.992112][ T479] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 29.031395][ T36] audit: type=1400 audit(1769777894.369:197): avc: denied { create } for pid=478 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.050773][ T36] audit: type=1400 audit(1769777894.369:198): avc: denied { write } for pid=478 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.076875][ T36] audit: type=1400 audit(1769777894.419:199): avc: denied { map } for pid=480 comm="syz.1.49" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.136763][ T488] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 29.152213][ T336] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.303719][ T336] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 29.314661][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.325580][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.335448][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 29.342233][ T364] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.348432][ T336] usb 3-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 29.365232][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.374071][ T336] usb 3-1: config 0 descriptor?? [ 29.422237][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.503525][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.514730][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.525497][ T364] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.534603][ T364] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 29.542896][ T364] usb 2-1: Manufacturer: syz [ 29.548832][ T364] usb 2-1: config 0 descriptor?? [ 29.583557][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.594663][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.604476][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.617425][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.626552][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.635461][ T31] usb 4-1: config 0 descriptor?? [ 29.787769][ T336] usbhid 3-1:0.0: can't add hid device: -71 [ 29.793984][ T336] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 29.802219][ T426] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.811407][ T336] usb 3-1: USB disconnect, device number 4 [ 29.963324][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.974654][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.985367][ T426] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.994476][ T426] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 30.002593][ T426] usb 1-1: Manufacturer: syz [ 30.008182][ T426] usb 1-1: config 0 descriptor?? [ 30.042960][ T31] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x6 [ 30.050670][ T31] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 30.060483][ T31] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 30.258944][ T496] kvm: MWAIT instruction emulated as NOP! [ 30.384588][ T364] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input6 [ 30.396709][ T364] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input7 [ 30.408621][ T364] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input8 [ 30.422041][ T364] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input9 [ 30.434318][ T364] uclogic 0003:256C:006D.0004: input,hidraw1: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 30.602299][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 30.624042][ T426] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 30.632935][ T426] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 30.640449][ T426] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 30.650816][ T426] usb 1-1: USB disconnect, device number 5 [ 30.753263][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.764553][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 30.775886][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 30.785062][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.793646][ T31] usb 3-1: config 0 descriptor?? [ 30.798998][ T505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.090679][ T426] usb 2-1: USB disconnect, device number 3 [ 31.106910][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 31.106927][ T36] audit: type=1400 audit(1769777896.449:202): avc: denied { read write } for pid=511 comm="syz.1.59" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.136214][ T36] audit: type=1400 audit(1769777896.449:203): avc: denied { open } for pid=511 comm="syz.1.59" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.209353][ T31] wacom 0003:056A:00B5.0007: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 31.219419][ T31] wacom 0003:056A:00B5.0007: hidraw1: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.2-1/input0 [ 31.236556][ T31] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B5.0007/input/input10 [ 31.392303][ T499] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 31.409995][ T505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 31.419071][ T505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=505 comm=syz.2.58 [ 31.432551][ T65] usb 3-1: USB disconnect, device number 5 [ 31.465258][ T36] audit: type=1400 audit(1769777896.809:204): avc: denied { read } for pid=520 comm="syz.3.62" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.489323][ T36] audit: type=1400 audit(1769777896.809:205): avc: denied { open } for pid=520 comm="syz.3.62" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.513842][ T36] audit: type=1400 audit(1769777896.809:206): avc: denied { ioctl } for pid=520 comm="syz.3.62" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.539850][ T36] audit: type=1400 audit(1769777896.809:207): avc: denied { append } for pid=520 comm="syz.3.62" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.573854][ T499] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 31.582095][ T499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.592285][ T499] usb 1-1: config 0 has no interface number 0 [ 31.598446][ T499] usb 1-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.613551][ T499] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 31.622693][ T499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.630691][ T499] usb 1-1: Product: syz [ 31.634936][ T499] usb 1-1: Manufacturer: syz [ 31.639589][ T499] usb 1-1: SerialNumber: syz [ 31.645056][ T499] usb 1-1: config 0 descriptor?? [ 31.650928][ T499] plusb 1-1:0.231: probe with driver plusb failed with error -22 [ 31.854082][ T336] usb 1-1: USB disconnect, device number 6 [ 31.999349][ T36] audit: type=1400 audit(1769777897.339:208): avc: denied { block_suspend } for pid=528 comm="syz.1.65" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.020711][ T426] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 32.172678][ T426] usb 4-1: device firmware changed [ 32.177972][ T31] usb 4-1: USB disconnect, device number 6 [ 32.312222][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.366934][ T36] audit: type=1400 audit(1769777897.709:209): avc: denied { getopt } for pid=532 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.463341][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.474443][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.483798][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.486626][ T538] futex_wake_op: syz.0.68 tries to shift op by -1; fix this program [ 32.498796][ T31] usb 4-1: config 0 descriptor?? [ 32.804358][ T36] audit: type=1400 audit(1769777898.149:210): avc: denied { write } for pid=543 comm="syz.2.69" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.827094][ T36] audit: type=1400 audit(1769777898.149:211): avc: denied { open } for pid=543 comm="syz.2.69" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.873261][ T547] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 32.909705][ T31] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 32.919303][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input13 [ 32.985209][ T31] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 33.027420][ T552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.72'. [ 33.042611][ T364] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.132271][ T65] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.212224][ T364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.220744][ T364] usb 1-1: config 128 has an invalid interface number: 172 but max is 0 [ 33.229277][ T364] usb 1-1: config 128 has no interface number 0 [ 33.235650][ T364] usb 1-1: config 128 interface 172 has no altsetting 0 [ 33.245548][ T364] usb 1-1: string descriptor 0 read error: -22 [ 33.251791][ T364] usb 1-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=d2.0a [ 33.261055][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.271629][ T364] cdc_acm 1-1:128.172: invalid descriptor buffer length [ 33.283381][ T65] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 33.291597][ T65] usb 3-1: config 0 has no interface number 0 [ 33.297766][ T65] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 33.309307][ T65] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid maxpacket 24840, setting to 64 [ 33.318826][ T560] netlink: 72 bytes leftover after parsing attributes in process `syz.1.74'. [ 33.330452][ T560] cgroup: Name too long [ 33.331212][ T65] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 33.344246][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.353845][ T65] usb 3-1: Product: syz [ 33.358043][ T65] usb 3-1: Manufacturer: syz [ 33.362841][ T65] usb 3-1: SerialNumber: syz [ 33.368397][ T65] usb 3-1: config 0 descriptor?? [ 33.373862][ T549] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.381113][ T549] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.392219][ T65] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c2:ea:70:db:57:e8 [ 33.412830][ T525] fuse: Bad value for 'group_id' [ 33.417802][ T525] fuse: Bad value for 'group_id' [ 33.442825][ T65] usb 4-1: USB disconnect, device number 7 [ 33.471358][ T538] futex_wake_op: syz.0.68 tries to shift op by -1; fix this program [ 33.500993][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.509535][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.519459][ T364] usb 1-1: USB disconnect, device number 7 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 33.592209][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.600328][ T9] usb 3-1: USB disconnect, device number 6 [ 33.607213][ T9] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 33.753309][ T31] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 33.761902][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.772378][ T31] usb 2-1: config 0 has no interface number 0 [ 33.778475][ T31] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.793295][ T31] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 33.802736][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.814889][ T31] usb 2-1: Product: syz [ 33.819067][ T31] usb 2-1: Manufacturer: syz OK [ 33.826305][ T31] usb 2-1: SerialNumber: syz [ 33.833022][ T31] usb 2-1: config 0 descriptor?? [ 33.849095][ T31] plusb 2-1:0.231: probe with driver plusb failed with error -22 Stopping iptables: OK Stopping system message bus: done [ 33.964054][ T625] netlink: 'syz.3.76': attribute type 5 has an invalid length. [ 33.971642][ T625] netlink: 'syz.3.76': attribute type 5 has an invalid length. [ 33.981169][ T625] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.76'. [ 34.061793][ T364] usb 2-1: USB disconnect, device number 4 Stopping klogd: OK Stopping acpid: [ 34.276906][ T652] Zero length message leads to an empty skb [ 34.310949][ T656] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.338339][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.346834][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.355290][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.363726][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.372124][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.380628][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.389170][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.397565][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.405977][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.414393][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.422819][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.431222][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.439699][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.448120][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.456816][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.465284][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.473752][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.482192][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.490700][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.499137][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.507550][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.515961][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.524397][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.532843][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.541232][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.549679][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.552209][ T364] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.565549][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.565752][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.573099][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.589271][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.597932][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.606659][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.615201][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.623680][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.632111][ T665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 34.732278][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 34.738538][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.749656][ T65] usb 3-1: New USB device found, idVendor=fccb, idProduct=73f3, bcdDevice= 0.00 [ 34.758723][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.769610][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.780049][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.788459][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.798371][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.811491][ T364] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.824497][ T65] usb 3-1: config 0 descriptor?? [ 34.829501][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.838588][ T364] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.848140][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.855654][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.864200][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.872447][ T9] usb 4-1: config 0 descriptor?? [ 34.878666][ T364] usb 1-1: config 0 descriptor?? [ 35.013389][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.024315][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.034198][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 35.043255][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.048171][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.052081][ T10] usb 2-1: config 0 descriptor?? [ 35.059808][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.072659][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.081188][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.089498][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.098040][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.106063][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.114527][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.122575][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.131080][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.141862][ T65] hid-generic 0003:FCCB:73F3.0009: hidraw0: USB HID v0.02 Device [HID fccb:73f3] on usb-dummy_hcd.2-1/input0 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 35.282063][ T9] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x6 [ 35.290037][ T9] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 35.298351][ T364] usbhid 1-1:0.0: can't add hid device: -71 [ 35.307003][ T364] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.316783][ T364] usb 1-1: USB disconnect, device number 8 [ 35.323508][ T9] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 35.432506][ T336] usb 4-1: USB disconnect, device number 8 [ 35.434177][ T65] usb 3-1: USB disconnect, device number 7 Connection to 10.128.1.15 closed by remote host. [ 35.492221][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 35.500078][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.552979][ T10] usb 2-1: USB disconnect, device number 5 [ 35.597007][ T334] bridge_slave_1: left allmulticast mode [ 35.608296][ T334] bridge_slave_1: left promiscuous mode [ 35.614188][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.621876][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.044787][ T334] bridge_slave_1: left allmulticast mode [ 36.050435][ T334] bridge_slave_1: left promiscuous mode [ 36.056487][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.064004][ T334] bridge_slave_0: left allmulticast mode [ 36.069643][ T334] bridge_slave_0: left promiscuous mode [ 36.075518][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.083131][ T334] bridge_slave_1: left allmulticast mode [ 36.088840][ T334] bridge_slave_1: left promiscuous mode [ 36.094555][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.102116][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.109847][ T334] bridge_slave_1: left allmulticast mode [ 36.115638][ T334] bridge_slave_1: left promiscuous mode [ 36.121303][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.128953][ T334] bridge_slave_0: left allmulticast mode [ 36.135637][ T334] bridge_slave_0: left promiscuous mode [ 36.141322][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.376489][ T334] veth1_macvtap: left promiscuous mode [ 36.382016][ T334] veth0_vlan: left promiscuous mode [ 36.387808][ T334] veth1_macvtap: left promiscuous mode [ 36.393379][ T334] veth0_vlan: left promiscuous mode [ 36.399016][ T334] veth1_macvtap: left promiscuous mode [ 36.404554][ T334] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 37.559841][ T678] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 37.566456][ T678] ACPI: PM: Preparing to enter system sleep state S5 [ 37.573378][ T678] kvm: exiting hardware virtualization [ 37.578868][ T678] reboot: Power down serialport: VM disconnected.