last executing test programs: 2m37.973095217s ago: executing program 3 (id=486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000100)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x66) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) 2m37.930792488s ago: executing program 3 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000080)={0xad8, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xac0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7ff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xfe, 0x4, 0x4, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0x8000, 0x1ff8, 0x9, 0x4, 0x1, 0x29e2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3]}, @beacon_params=[@NL80211_ATTR_IE={0xe6, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3b, 0x4, @broadcast, 0x9, @void, 0x8, 0xfffffffc, @device_a, 0x10}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xb2, 0x3}}, @cf={0x4, 0x6, {0x7f, 0xfc, 0x0, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x8}}, @fast_bss_trans={0x37, 0xa3, {0xf, 0x3, "a5bfa6db4c548e7ed4df155967459d1d", "948297167caba62bd4b2f8715996e9df5c2454e181fa300cfd25d9a5191a280d", "15b353e8c19abbbdda53047abe5c832366ae92755179294c3804c2f541a890fb", [{0x3, 0x13, "6d1147bfe6d53698367434303b5b452d09206f"}, {0x3, 0x20, "46eb800aa0e4d9a0baab29310fba3abc7e5cbd3bfaa9c660c759b1d23c9a8f7e"}, {0x1, 0x18, "c7f9ce6ccecaf1dec2844d16f85bf2b35bcfe08aeb2b30ef"}]}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xd4, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x58, 0x51, 0x4}}, @link_id={0x65, 0x12}, @chsw_timing={0x68, 0x4, {0x800, 0xb}}, @chsw_timing={0x68, 0x4, {0x5, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0xbf, 0x30}}, @measure_req={0x26, 0x9f, {0xe, 0x81, 0xae, "7805f4fae70084f996ca04d8d1f12e4a474c37848531bc6c34e170773485e2105496d05ce6d38c92c7c969eb02d2ddf51c9b89e43935d2a2a8ffdadf4e79a9cd82d77a0da6fbbbf188e17a1c903a73bcb1623d28d31703b99a0532a76cd4da2ea29ebabd049652fdc853f8ef9aa352f5cf37839eb46cf9424ea38084d09252e6bde11149054cb7c398d7daebeaf4ebdc15971565a9bf95701ca53730"}}]}, @NL80211_ATTR_BEACON_TAIL={0x17e, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0x74, 0x5a}}, @fast_bss_trans={0x37, 0x82, {0xe3, 0x3, "0e6a925c786e94e1eedd8fa7b903132b", "183fc27f9ce62b62c7a8930548c7759df160faef897fae57b44a27a3072bceee", "6a7e5b0f1a05c76e20fce24d3d4802c92a36998173e8a0702c4a6ef50feed457", [{0x3, 0x20, "d464617544a8115cd12087ca3111f043bd6458108fb969f6f340593fba642c1e"}, {0x1, 0x7, "0c6fca1b6b7445"}, {0x4, 0x3, "89be55"}]}}, @measure_req={0x26, 0xef, {0x6, 0xad, 0x6, "90f9051f748e1fc45de970f3b8737d29fe55dd0e742bf5be995d335909a85553c06b21d01fbc2dad67b626f6ae5fd0a857b8bfddbad81b627ca11a8823787417bafd7b78000d75a790c129097fcf8e0adf9c67fbcec70c0537f2f11f77e7265d50d5c880ae74d8b9643eee0dcfc5f6497a7e5f5a50a47711f4c74be5e9b8030059960ae703e90ab0e5db29f9dadf5eba76575c186dd5e553969d89447abf66b2094af210af57dc1cfb50dbd9f61796fc3b1f3a14d27cc28c3eee7814c0cec9c2701ff564d4202ee15e4c62c381dc57b633689a8c087f752eb885fb3c1af36ef871aa5c54e045133a6a0fcff9"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20a, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xb6, 0x7}}, @random={0xa, 0x99, "a295b5d871730a59b545ea0598ea7b37bd215f7ffcdc4bf9aafd0f2ff46b00db59e487a3cc6938a4a89ac9d4a922a7aed7287c60e2ca75703ff800ef7a7f5ab58e561fe1ec952b1d17baca7a3de2bff25d78be29ad319236335165c07231343fc2f76bf6efa3bb8561c0bddd061c0286e5a9b1e03d665b75f1650920d18938688a20e81550a1a62b638758248696d82f3c8d11aeca297c335d"}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x5, 0x0, {0x86cc, 0x13cd, 0x0, 0x40, 0x0, 0x1, 0x1}, 0x8, 0x6, 0xa}}, @perr={0x84, 0x7c, {0xa, 0x8, [{{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x15}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x3c}, {{}, @device_b, 0x5, @void, 0x24}, {{}, @broadcast, 0x15e, @void, 0x33}, {{}, @broadcast, 0xd, @void, 0x6}, {{}, @device_a, 0x0, @void, 0x3e}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x1b}, {{}, @broadcast, 0x7f, @void, 0x1f}]}}, @dsss={0x3, 0x1, 0x83}, @cf={0x4, 0x6, {0xac, 0x9, 0xfff, 0x5}}, @random_vendor={0xdd, 0xb7, "9fea0d7d5ee74b186fc14840d6fbb04c58c0bf5b7b88d0f3d19fe9550c766604fae1a6ef79f09ed6b652013e6166d70a227c5bcabdd2c3270b7e3c006e45432c40799f6904155e9baccda9839026f930532b76d0c378108c13cf249c6d5cc4337cff57a7d622fb2f624139ee27f58d296acbf8affef54c6e076fd28beb7633acca1f8b8f57686e5b29d0ba117e611fe8e9e3d0c00454764444558a8068cb844dd733e216a809b322e54a6ae6963c1712dee59299c45a9e"}]}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@challenge={0x10, 0x1, 0x8b}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x87, 0xf, [@challenge={0x10, 0x1, 0x41}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x62, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x7, 0x40, 0xff, @device_b, 0x9, @value=@device_b, 0x2, 0x8, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0xff}, {{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{0x1}, @device_b, 0x2}, {{}, @device_a, 0x5}, {{}, @device_a, 0x200}]}}, @link_id={0x65, 0x12, {@random="2dabff8c1a8d"}}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mic={0x8c, 0x18, {0xf91, "bafcb002fbd3", @long="1b8da3b2d2da2732309e54ccbf3c359e"}}]}, @NL80211_ATTR_FTM_RESPONDER={0xcc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x98, 0x3, "bf9405e64fe5c023a1b24edd6fd2685354fc31ba3aaba6f09a768f758805b98b0f5c28cd0f532bc42ccd072362d32aa5c448add3a2c5925c6d4718b12b43ac586d9745b4962a7f469c94d1f4afbb16ecdf9567e12bb619a01d08d9747a73cf62e3ca82ad5f48ab88428d65d34576eba41ab4e035b3ecf7633d0c850837d822f58a32c076d0b8b94ce1a04b18e8a3a48b4135dc9f"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "e8caf173ecec9ee51a239e0d42ccb29593d394ede42389389c0d0443960b7876412486b79587db"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x181, 0xf, [@gcr_ga={0xbd, 0x6}, @supported_rates={0x1, 0x5, [{0x3, 0x1}, {0x30}, {0x6c, 0x1}, {0x2, 0x1}, {0x5}]}, @tim={0x5, 0x84, {0x2, 0x1f, 0x8, "71d89e34aa8c42232648641671e94a7584c2f70c295e9b489e00bb1d4a50bb246f92bdfcfb60d5c70ef28aae752d2d4b6c27708702e2ee001139e401b328b23cdba8d2a16057c62ca3f83e94fe33b6cc3312143d534ee73ddbb2c9672d6b65fc20ebdb0f9fc090c0444cfb28d24e176e9c3c0be68f789880bdb9d6d45aec93a02c"}}, @supported_rates={0x1, 0x5, [{0x0, 0x1}, {0x12}, {0x4, 0x1}, {0x18}, {0x4, 0x1}]}, @perr={0x84, 0xd4, {0xc, 0xc, [{{0x0, 0x1}, @device_b, 0x2693}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x36}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x34}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x38}, {{}, @device_b, 0x0, @void, 0x2f}, {{0x0, 0x1}, @broadcast, 0x8000, @value=@device_b, 0x5}, {{}, @device_a, 0x3, @void, 0xc}, {{}, @device_a, 0x1, @void, 0x2f}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x19}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x1d}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0x95}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x4, 0xffff, 0x1, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x5, 0xf]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x221, 0x80, [@random={0x0, 0xb9, "0d1eaf7992a36f2f25211c0352787b6ad214742d4a23db38c8830dbaf58e866ece43d68a705545e7745ddd5724ffe1a6392ebadb219b1dd650a3ced85e04fc34b8e3286b6d85850a2096270a868e7857644fd5cc74eee154adb52c6e9c9a8503962105bd6aad7e65d0aeccdfc82f6877dc883e56f4b4feba64b8bda3984980d359b982ebefe8694ae1bbb23880aec9ca6611187aea47ed4d45f6fee9f715b5084c28df501fe21b1cf010e2a9b07d55edb85486c365d4ef0b67"}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0x6, @void, @val="8f25a88e748e31c41b5ca29b70f40390"}}, @challenge={0x10, 0x1, 0xb}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x5, [{0xc, 0x1}, {0xb}, {0x60, 0x1}, {0x1b}, {0x18}]}, @chsw_timing={0x68, 0x4, {0x3, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x4, 0x1, @device_a, 0x8, 0x38000000, 0x348}}, @tim={0x5, 0x88, {0xd, 0xd9, 0x2, "2514bfd141d82f0faef0c8d2bd62ab51367d9a8d55679fd03cd20bdd036c648b535ab6f3382c6939601c31d8d75548938a02cfd677ade2238daa3962d639f2a51a2e3bda6a4102225757078f8a198600d3be162cd40d1caa964c37c87d1652a73b5223b3f810af822d1676c680038b52bdb5d74642487e11ed0ab7171cd1aa98f8bb7be15b"}}, @perr={0x84, 0x8f, {0x6, 0x9, [{{}, @broadcast, 0x7, @void, 0x15}, {{0x0, 0x1}, @device_a, 0xa9, @value, 0x2a}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x31}, {{}, @device_a, 0xdd0, @void, 0x11}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x28}, {{}, @broadcast, 0xbeb, @void, 0x28}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x3a}, {{}, @broadcast, 0x2, @void, 0x23}, {{}, @device_a, 0x9, @void, 0xa}]}}]}]]}]}, 0xad8}, 0x1, 0x0, 0x0, 0x40004}, 0x40) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) (rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000d80), r0) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1f) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x108, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '[/((+%[-\xcf/)^:$\\[^::&/,\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-.#{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x12:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-*(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!,\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffa}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x5c5df000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x99207000) munlockall() (async) munlockall() (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000001100)={0x2, 0x0, [{0xc0000001, 0x3, 0x50354790319c2a6e, 0x10, 0x1c0, 0xc, 0x6}, {0x40000018, 0x1, 0x0, 0x40a, 0x1, 0x2, 0x2ff}]}) (async) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14, 0x800) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000001200)=0x3, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x7c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x18000) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x98, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x25}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1a}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x11d846718c49f890}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x804) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r0) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xcc, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xed6}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x37a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2c85}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x19}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000085}, 0x4) (async) syz_clone(0x848000, &(0x7f0000001700)="c7f496d9f21f45a45df4f602cd2e62853a57a2b3f3bfe5ef9dcf3d32e7883822981ac9c090a199d7031712964c2a2f503509fd9e7c4f7996c914a32346482b5d72aa35dea872a2ea15b261b321427600b6f1ef66db091d9374ade9786b1fffec94aa16f33329face556c145c4d4bbf0099dd9bfce926734bc3cda7e8266e2855b303c6c8785cf48ca8523fa1f8ff208b96168c3ef948ca2bb668a32772361c8a78e1fe4b0fa01760e8a2222d9dbc918f6ac7aca38253d575324f0857a7881ae3a69ce7d1f2f852816a5cc8e14e7ef7458765a877c6e4c62dd9cfa020e9b15ad190e2512220123a8ce1", 0xe9, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="17887e7afc74249b6e6594300842") (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000001b40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001940)={0x184, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20048094}, 0x40001) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000001b80)) 2m37.90299616s ago: executing program 3 (id=488): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/149, 0x95}], 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x84002, 0x370fb75782ae803d) move_mount(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x352) syz_open_dev$hiddev(&(0x7f0000000240), 0x9, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9d1f271a6c889e55}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000380)) r3 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x12, 0x5, 0x800000, 0x3}}) write$char_usb(r1, &(0x7f0000000440)="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", 0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)) ioctl$FICLONE(r2, 0x40049409, r0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, 0x0, 0x7, 0x5, 0x0, 0x0, {0xe, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd220}]}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x10000000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000015c0)={0x40, 0x2, 0x2}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x5c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) openat$cgroup_freezer_state(r1, &(0x7f0000001780), 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000017c0)=""/20, &(0x7f0000001800)=0x14) syz_open_pts(r1, 0x8001) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) close(r6) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000001d80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f00000018c0)={0x440, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000000, 0x17}}}}, [@NL80211_ATTR_BEACON_TAIL={0xe3, 0xf, [@prep={0x83, 0x1f, {{}, 0x5, 0xf0, @broadcast, 0x9bb, @void, 0xca2, 0x400, @device_a, 0x7ff}}, @perr={0x84, 0xbc, {0x2, 0xc, [{{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x39}, {{}, @device_a, 0x9, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x41}, {{}, @device_a, 0x3, @void, 0x40}, {{}, @device_a, 0xfffffe00, @void, 0x22}, {{}, @device_b, 0x5, @void, 0x4}, {{}, @broadcast, 0xfffffffa, @void, 0x2}, {{0x0, 0x1}, @device_a, 0xd6dd, @value=@broadcast, 0x3d}, {{}, @device_b, 0x1, @void, 0x1e}, {{}, @device_a, 0x5}, {{0x0, 0x1}, @device_b, 0xfa8, @value=@device_b, 0x25}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x18}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x311, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf}, @device_a, @device_a, @from_mac=@device_b, {0x2, 0xa}}, 0x24, @default, 0xa400, @void, @val={0x1, 0x5, [{0x1b}, {0x48, 0x1}, {0x9}, {0x1b, 0x1}, {0xb, 0x1}]}, @val={0x3, 0x1}, @val={0x4, 0x6, {0x6, 0x6b, 0x6, 0x8}}, @void, @val={0x5, 0x59, {0x2, 0x68, 0xec, "345832999e374b36095a828c065435dba61df99ba9b3294de07671fd4906b751d59fbc9b82bbc7480aba263226c6e033e669084333c436b60e502d6f3da5b987aef8baebd216dd4369b68be87d4eefde5a7a9d2cdac5"}}, @val={0x25, 0x3, {0x1, 0x4, 0x6}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x98, 0xe, 0x67}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xffffffff, 0x4, 0x0, 0x22c, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x3, 0x8}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0xfb, 0x9}}, @val={0x76, 0x6, {0x6, 0x7, 0x39, 0x1}}, [{0xdd, 0xc1, "603a880eb0ed8076761eec4d9fa4686ec8247a4a710837d7948d625e1c3aa3f869bde8b029bc7529a88cda3dea2f77f40c407e874adce8fe62f2432b6e813502b6fa58e9eff896a1a7e3c9cb145bdcce4e30af4f6cea74bd07097b72299ebfd301a17ef099ecfae501d0aa41fc0991604d51a8a5979d60e05bb2cf732cdb368dc96249699904c53057d379d6b0cee584868dd5bd4e5ca21e8caf30f74323febb2010eae36ae903405311ef8b81c2864d3ca6dc6a65643f958b1e28acc5873eeb7e"}, {0xdd, 0xf3, "55eca508f7fcede74eb073512a93505a9c98e9d276248b340e48b367e18b7d7603fb9bc83047d8687f1558f9cee87955679bced31a2329078c83c3995dcad34ec1c7ef8b92b963f838abc9265d2c151c8bd5a5451b03b963797f9425e42ac0d93f40aa33e5117efa0c2d80c8ba8fa74a6fbbd60ee33f60e87243611193438cb491a45e7404b6271fd18b7ad0ac6924a5ca666a93ebae9a1ba0b31877500af7f8592710a7e3cde9af5993a70306c5d734fee9196923a68a32f0f4c37c32642eeb0e4e29485daaa1aecda77962678f82b451f0274bc56a721768116be69e2991c3366ee28852e9c9db1518f9702ffd210cbefea6"}, {0xdd, 0x4a, "873fafc44eeb82a1fc8f888b36f61a86d28aa1387eac68c8dfe9be410ac5cce9b5d66519e1a563e5fa034eb9ce2944147d18c94226b0d84b1b3bc7fb7753497a093e94c76d41ec8596c0"}, {0xdd, 0x3b, "bc2f8e5c65b171f6ccad5ef502b0d75982d0df439b4d8e8bc8b3591222162649d4c23714155732cf7fe2d481868fc834e4b258ac03a769ff9f1aea"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@cf={0x4, 0x6, {0x8, 0xbe, 0x5, 0x9b71}}, @rann={0x7e, 0x15, {{0x1, 0x2e}, 0xa4, 0x4, @device_b, 0x60000, 0x10000, 0xffffffff}}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x4000880}, 0x815) read$FUSE(r1, &(0x7f0000001dc0)={0x2020}, 0x2020) r8 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000003e00)) 2m37.000785973s ago: executing program 3 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r3, 0x8, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000200)) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000580)="ebe18fc81a6bd2a9a26da4abf7195e8165e3cc60d346c39bdff34e0320be161998f21240a8222b5ffef97c2a76671da38e018a37ba20da13284cc49c32", 0x3d}], 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r8 = accept4$unix(r6, &(0x7f0000000180), &(0x7f0000000240)=0x6e, 0x18a3f044c1c753e4) ioctl(r8, 0x1000, &(0x7f0000000280)="c1c518652d64573ad884fddf269dd0fc063d472cf555b5d96a7be6828fea181ead0738c9c0948ef01b213680c36b46115150c755ca9a7f2c1dd815f535d8763a1b198e10371b3867a5965e06c05a579828dbd00da2a5e98a32c306abc76b0e4a7cef4e9e399c75e9fa77bf7801d7d9e227f6219f3340b7d45b7dbbaa5e4d9a8a7bb1450e9fdf9cd3ab7bf63f7b3b8d88aa125efb40c20581fb27152404d11313d729a8ddecade4a029a0d4170c9870338186a77a69ad9bcc85e5685252abec7d25fc9466f0453596f6cc5a0de24bb172890a41507e9fea247208dbe9411d461eb774eaa76de947e05de985b3bfd1bcb1") sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18040000", @ANYRES16=r1, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x4010}, 0x20040800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)={0x4, 0x0, [{0x883, 0x0, 0xb}, {0x2e8}]}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xccb3}) 2m36.942799836s ago: executing program 3 (id=503): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.885228149s ago: executing program 3 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84000, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m36.885069899s ago: executing program 32 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84000, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m21.505601916s ago: executing program 4 (id=632): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) 2m21.25665757s ago: executing program 4 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)) (fail_nth: 1) 2m21.224590192s ago: executing program 4 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)) 2m21.165360776s ago: executing program 4 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000400)='.\x00', 0x200) mremap(&(0x7f00000b7000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000314000/0x3000)=nil) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) statx(r3, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)) 2m20.961303468s ago: executing program 4 (id=640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0xa1, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m20.911309721s ago: executing program 4 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)) (fail_nth: 2) 2m20.856037524s ago: executing program 33 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)) (fail_nth: 2) 47.291019263s ago: executing program 0 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 47.023378047s ago: executing program 0 (id=1513): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x5) 46.947985642s ago: executing program 0 (id=1514): r0 = getpgid(0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000006c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{{}, {0x1, 0x0, 0x1, 0x1}}], 0x8) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000800) syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000001280)={0x20, 0x8, 0x35, "61853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b3cf480f9ee91d3b9030eb06a1e206f55994c0f34a40293fb7bb7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x20, 0x11, 0x5, "b64036b456"}, 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = pidfd_getfd(r2, r2, 0x0) setns(r7, 0x66020000) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 43.735565697s ago: executing program 0 (id=1554): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="44001000", @ANYRES16, @ANYRESHEX=0x0], 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x400c092) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mkdir(&(0x7f0000001080)='./file0\x00', 0x105) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setreuid(0xee01, 0x0) r3 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='map_files\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f701020301090224daf5804300000904fb"], 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000140)=""/46, 0x2e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000140)=@svm={0x103, 0x1, 0x1080, {0x41000}, {"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"}}) 42.856119168s ago: executing program 5 (id=1562): r0 = getpgid(0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000006c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{{}, {0x1, 0x0, 0x1, 0x1}}], 0x8) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000800) syz_usb_control_io(r3, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000001280)={0x20, 0x8, 0x35, "61853749739ff8b1ee48be3e313f7430a5cadf4189b08e3e1ba18b3cf480f9ee91d3b9030eb06a1e206f55994c0f34a40293fb7bb7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x20, 0x11, 0x5, "b64036b456"}, 0x0, 0x0, &(0x7f0000001b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = pidfd_getfd(r2, r2, 0x0) setns(r7, 0x66020000) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 40.846874104s ago: executing program 5 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0xa, r0, 'id0\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81000180}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x3c, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x2c, 0x0, 0x0, 0x0, [@typed={0x25, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d2527efc319e94cdc26f2f15645bd5601a1c5e3"}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x20, r2, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 40.581213039s ago: executing program 5 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x4f) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) read(r2, &(0x7f0000000240)=""/60, 0x3c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000001200)={0xb7e, {{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}}, {{0xa, 0x4e20, 0x1157, @mcast1, 0x2}}}, 0x108) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) r6 = syz_usb_connect(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYRES16=r5, @ANYRESHEX=r0, @ANYRES16=r5, @ANYBLOB="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"], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f00000002c0), 0x4) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 40.454358317s ago: executing program 0 (id=1579): mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x7) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) 40.364631152s ago: executing program 0 (id=1582): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x14, r1, 0x1, 0x4000}, 0x14}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000140)=0x24) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "6d180a87"}]}}, 0x0}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xf0, 0xbf}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f00000002c0)={{0x2, 0x0, 0xc, 0x1, 0x6, 0xef, 0x4, 0xcd, 0x5, 0x20, 0x9, 0x7}, {0x5000, 0x1, 0x3, 0x8a, 0x40, 0x0, 0xb, 0x5, 0x81, 0x4, 0x2}, {0x1000, 0x2000, 0x0, 0xa, 0x8, 0x6, 0x49, 0x13, 0x6, 0x6, 0x0, 0x7}, {0xdddd0000, 0x2707066b93c2e94a, 0x8, 0xfa, 0x2, 0x7f, 0xff, 0x86, 0xed, 0x3, 0xe3, 0xff}, {0xeeee8000, 0xdddd1000, 0x10, 0x1, 0x0, 0x9, 0x1, 0x5, 0x2, 0xb, 0x81, 0x50}, {0xffff5fff, 0x1000, 0x0, 0x7, 0xff, 0x8, 0x69, 0x1, 0x7, 0x6, 0x6, 0x9}, {0x70000, 0xe000, 0xc, 0x6, 0x3, 0xe, 0x2, 0x5, 0x5, 0x5, 0x9, 0x9}, {0x7000, 0xe000, 0xd, 0x7, 0x3, 0x7, 0xa, 0x4f, 0x6, 0x0, 0x9, 0x6}, {0xffff1000, 0x1ff}, {0xa000, 0xfffb}, 0x50000032, 0x0, 0xf000, 0x0, 0x1, 0x2801, 0xb000, 0x1, [0x7, 0x0, 0x9, 0x100]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 38.166199519s ago: executing program 1 (id=1599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x1800, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 38.162621909s ago: executing program 1 (id=1600): prctl$PR_MCE_KILL(0x26, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x20000080) 38.119603411s ago: executing program 1 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async, rerun: 32) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8, 0x80000) (rerun: 32) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) r2 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r3 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) read$FUSE(r1, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000100)={0x18, 0x0, r5, {0x101}}, 0x18) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffe}, {}, 0x40000002}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0xe8) (rerun: 32) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) (async, rerun: 64) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) (rerun: 64) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 38.004428148s ago: executing program 2 (id=1602): socket$inet6(0xa, 0x3, 0x3c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) dup(r0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 38.004079818s ago: executing program 2 (id=1603): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x3, 0x6, 0xfffffff7, 0x1ff, 0xc6, "024f4f1d9b1c209d62a75bbfc0a43f879e8276", 0x10b, 0xfffffff2}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007340)=[{{&(0x7f0000000040)={0xa, 0x4ea0, 0x80008, @rand_addr=' \x01\x00', 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000044c0)}}], 0x1, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x80, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setreuid(r2, r3) setresuid(r3, r2, r2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x8001, 0x0, 0x800000ee, 0x7, "0f44a8e82a6d137f20487596f2a3e403c7fef8", 0x7, 0xff}) write$binfmt_elf32(r5, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x6, 0x4, 0x13f, 0x3, 0x6, 0x1000, 0x86, 0x38, 0x2cb, 0x3, 0x7, 0x20, 0x3, 0xc41, 0x6, 0x1}, [{0x1, 0xa, 0x9, 0x40, 0x1, 0x7f, 0x0, 0x7}, {0x70000007, 0x2, 0x6, 0x6, 0x23a2, 0x9, 0x10, 0xfffffffc}, {0x70000000, 0x4, 0x7, 0xf3, 0x8, 0x9, 0xfff, 0x3}], "12980c07febf4cd6ac8950e4e90711d77347d4596e20466f08f54217682b476f5020b8e1b0faf19766bfb2f55b970681e92df9875eae542cc2f9a1843bb07ecc27087877a89c37e9860136fcadc014c6c3c161b766ac6de5502450deda496ef0c98e2d2d5bca69e54f446a5833c8d2e2818587be2f3c0d5719eb6bb06342c827c019c4af02c37f074199747af105e5c4b5055306fd76e0e37af0f6cd926f80c5c4f3555cb9"}, 0x13d) 37.953859821s ago: executing program 2 (id=1604): r0 = syz_socket_connect_nvme_tcp() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getgroups(0x2, &(0x7f0000000680)=[r3, r3]) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)={0xc4, 0x37, 0x78880d87739e28d3, 0x70bd2a, 0x25dfdbff, "", [@generic, @generic="1cf9234ca4d81645c8f445cf6698e975652b28a9d6e119f198734febd9386f8c63a1a4b68297f9df426739ceafcdb9f20c75ec73bf8d73e70bc213f641830e01267b2288b01804dbe39628e965063e7c887af32309824f4ee511d3a026a07d80e7e82b52ca5b3f3be4f913c78337e6f38049dc750f2574e070d3e96fba8df77ddf1fd7e421ead79d93964ec9cbf2e7ffbc3822a98def36e4220cd9d3a023dd950ac748a1f34119c33374331c26ea0c245a1b72"]}, 0xc4}, {&(0x7f0000000180)={0x108, 0x30, 0x10, 0x70bd27, 0x25dfdbfe, "", [@generic="ddd550d9d9f3fd8209a8b6575564787a3b5db0cd705f9c16318f87e2984e0e1c4fadaa119bacbdb4e677930173ed336d6f52230e018a88fc583e5639e9255ea4b48fa3985efdf37a6f709b827fb21250980fad5618a7943a3669b0aca44f240a75f73b89a80bfac3063aaa680ced57dfeed2534a9d29497431471a75a356d085490c2f322ae835c8db0da9b67ec3b99566abd7d7021f4e250cf6d7037171ce120633b7458808177b78b5b108ef6ddb192e6479e991e515498b26181a9fa0c7e79608b5cb34e560c8204bae2902042cf6651edf4752f99fa56575a10dd42ef24eb7141eead0f4682cfc62e06ac77cc4a329a10a7e28d5"]}, 0x108}, {&(0x7f00000002c0)={0x130, 0xfe01, 0x204, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x5d, 0x131, 0x0, 0x1, [@typed={0x7, 0x54, 0x0, 0x0, @str='#%\x00'}, @generic="28df6d065f3bce3b147f311d0bffd2fc6ac3b949c847aa94bfad9cc003a07785f91cd9d5b086afa814a878fe20a68d5e27a02d329f44117bf6685d9362", @typed={0x4, 0x147}, @typed={0xe, 0xdd, 0x0, 0x0, @str='.]%$]\xb8[&}\x00'}]}, @typed={0xa6, 0xca, 0x0, 0x0, @binary="23065c79f0d85c82689c29a0c742091eb9cdcf0fc8f6f109b0b4687e8da7e989276297a1dfb179059c428b5516db7909df792a0cd9623fc3e51850bafc0e809eb02ff20946880f2654e6f0778b1b1abe79318e9a1db33e5ea52910dc0452a41fc4b6b47b5f1917b6e9b6b5d520d9b7af28cf3540c26f9b5d53caba7cf5d0812a1f9d60d65621d21afb9375413e4743362a28bf2e28be5a55a28b59fdf348990a23a1"}, @typed={0x8, 0x10c, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x152, 0x0, 0x0, @u32=0x7fff}, @typed={0x8, 0xef, 0x0, 0x0, @fd=r5}]}, 0x130}, {&(0x7f0000000400)={0x104, 0x23, 0x800, 0x70bd29, 0x25dfdbfe, "", [@nested={0xf3, 0x28, 0x0, 0x1, [@generic="c1682359ecc130a6ee211f77f70bf2f925104f3950e3b605d8", @nested={0x4, 0xf7}, @generic="eba850090eb459681c0e304f678241875118f1cbd5852cd42a72f98742150752d1af2840f387b75f2123cf89ad16ee633efeed88a82e3dd26a70846617b05421c48eb9c3bee4a823d7eed699f8c39e6dbed27cc81a467f201e718ba8487315fd0dba2b13f53e7184189f8aec27b2dc1ebe98917d7fd47280697f6088bade48e6fa11e82a586f17600e6a07a720b0e2b4007318ad3954abaacbb3ac899832f4d473e2af6d5e14975169a849a7b8678546ea0c6ea7540ca639b5702293d8a3c5e888e19f4aa579", @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @nested={0x4, 0x24}]}]}, 0x104}, {&(0x7f0000000540)={0xb4, 0x20, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@generic="07d204d579521d39a73ce378617c0c89c91fd9c57f8fd0cdc03c987d6f8db7ff7dd9cc96ffe4bc05dfaf5417c469934ef96840dc9c59bcdee55448afa2f127bbe4bbf398e6fdb88f069aca2bfc4f13fa839ce1cd50c3049c00ad82b89419d5428da0bd22bb9a51b99e0c330f11036dca8c9ed718bc7bc2d08f5d1c3ebb8e5bd8c5248843173d363e61feb0fb9edf2d8ff018bd92d6dc6172524f5dc6e368b6497b"]}, 0xb4}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x68, 0xc0081}, 0x20000010) (async) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x15, 0x1, '\'-\x05)}]+#][#/^&J*\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '.(,+]*{\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44010) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) readahead(r9, 0x8937, 0x2) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000900)={0x0, r8, 0xd, 0x8000000000000000, 0x3, 0x6}) (async) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/31, 0x1f}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/74, 0x4a}], 0x4) (async) userfaultfd(0x80000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r11, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r12, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) (async) setsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f0000000d00)="7865659ac5e47ef7570e451f262dbce90d6760f364bcbda2e9a510847c81c8fc33a20ced73ca795ac44604bb5383ce7077d95f71988f94625c92d38f027b2c6d9afca4626229b860de2b2f356608e4b6086e98e424f2871047d2581279729d0858ec007c8aca93e9bceef6d96820d60aac86d27e9a7ce2e5a641a1d8572afe56415a0b4fd1997c6b1f154a1e7dd07f2cca5e1de5150e63590ea2af107a268901be4164cd84ea81bc8064b5f4eec7b4cbfd81792b89af3f4f45fbd7bc4e5d1917343a695f1b07aa4854e7678b91f8d092d046dea054666c49959bba79e111201c24", 0xe1) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r11, 0xf50f, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000e40)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x241, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e00)='gre0\x00', 0x401, 0x5, 0x6}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000011c0)={&(0x7f0000000ec0), 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x248, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x4000, 0x1, 0x7, 0x1, 0xffffffff, 0xffa, 0x9]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}]}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xc3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x78}]}}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x537e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x140000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xf72}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff8000}]}, @CTA_TIMEOUT={0x8}]}, 0x248}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r12, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001780)={0x1, 0xf3}, 0x8) r14 = accept4$unix(0xffffffffffffffff, &(0x7f00000017c0), &(0x7f0000001840)=0x6e, 0x80000) r15 = getgid() (async) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000001b80)=0x0) sendmmsg$unix(r14, &(0x7f0000001c40)=[{{&(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001900)="b884374e5b3fe9cc4c15085b112bc0fa9c67912162e0d064fe29bcdf56bd66a684b972d921bddb40bc45a692591eef589d0fee94f242572f9e4eab9d4b89732f750bd8f8d9432e839480acfa44682999f57165d50e7c9dfcdf44bb08938d98e49db206b6fde293651917edbcec8b082328f10bc6c86049f14f00159693dd28b26c79e81195668966e57872ac1e946fe8863c8e620d93b0406af79831754f43fd629f3e580b08e1d26efd1a668608e5c973864d2530d91ef48ec7b85a085cc15eb96cd22307b3538137e7c8435cc7732f05828c34b076b5f762f762e592491d1e706f72", 0xe3}, {&(0x7f0000001a00)="405d6169c2238adb7aef83d700be8e8a29db1984182e45b016de548406f5f4f5d4a84ff8610ca3", 0x27}, {&(0x7f0000001a40)="785881189b996a0acf3533c34d7aa887aadd7d18f1cf918655e341", 0x1b}, {&(0x7f0000001a80)="34869a2b3995cddce7ed3ca554cdef9dbaf9330acfe034cb43f7363f2ea4e4cb28cf131bbcf7970055c609805deef703713b9964055931e7276694280bbfa35286719b8680644a08d0a78ae0bf93da8c650ae9adb935e96ddc47816ac7b8e4cd9b6ee8252b43a297fe97bf7396592bd603a2eab0b5aede433eef3f2bda575fc865e9a26f332b7ac9a8d5244405eb16a69180646c09238c4787f797f6a8f81d005d27c291ae44fded043585b64275431c0338105331b4d14446a294", 0xbb}], 0x4, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r2, r6}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r7}}}], 0x60, 0x4c041}}], 0x1, 0x20008004) (async) socketpair(0x15, 0x1, 0x5, &(0x7f0000001c80)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r17, &(0x7f0000002040)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001d40)={0x28c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xfff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2a6}, {0x6, 0x16, 0xd}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0xa0}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 37.931939963s ago: executing program 2 (id=1605): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x8800000, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) getpeername(r2, &(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x80) recvfrom$inet(r2, &(0x7f00000007c0)=""/7, 0x7, 0x16682, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004200)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000040)="e778d1a64c23411268bd2d8b03e0b532a84668b72f905efe5fd94948a37d0e35bac0b82d9452df01dadcd98bf855fcad071428a41c8677d513c677abda4ab61bf04132dc9b60b729acbb6471dcad614fa9a69a9acf51681b11a2c3c3e9c7496769a5f6807af858e4f92a00f0fcc95ff1efbb2f1dc948dde6defeeb8c7ad6d9d85e8d", 0x82}, {&(0x7f00000001c0)="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", 0x53b}], 0x2, &(0x7f00000013c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x4880) 37.334439407s ago: executing program 1 (id=1606): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) setxattr(&(0x7f0000001180)='./bus\x00', &(0x7f00000011c0)=@random={'trusted.', '\x00'}, &(0x7f0000001200)='(\x00', 0x2, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1]) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0x5460, 0x1000000000000) r4 = fsmount(r2, 0x0, 0x8) socket$inet6(0xa, 0x80002, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0x40}}}}}]}}]}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80081, 0x0) syz_usb_control_io(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0xe0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "3523a906"}]}}, 0x0}, 0x0) readlinkat(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=""/4096, 0x1000) ioctl$int_in(r0, 0x5421, &(0x7f0000001280)) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4b4a25a5, 0x0, 0x0, 0x0, 0x24, 0x0, 0x3, 0x0, 0x9}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240), 0xac0, 0x0) 36.005121753s ago: executing program 2 (id=1607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = open(&(0x7f0000000380)='./file0\x00', 0x20040, 0x1c1) truncate(&(0x7f0000000600)='./file0\x00', 0x1) finit_module(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 35.783126177s ago: executing program 5 (id=1608): unshare(0x64000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 25.894841707s ago: executing program 5 (id=1609): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x17c0, &(0x7f0000000040)={0x0, 0xbb1, 0x20, 0x3, 0x2b0}, &(0x7f00000000c0), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r2, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x40, 0x18, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000001c0)={0x20, 0x30, 0x1, '\t\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.284555002s ago: executing program 1 (id=1610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x315, 0x440080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xb4, 0x0, &(0x7f00000004c0)="e13073be318eb73481e55037f1534944a2441c1abb32dd0985f36905d0d10bff5906f363d4b1ae1b1771e3a6c91ca05b1575f7c3fcb1e3ad92dd438a8d7c943969c68bba0d36e5dea66d5fe084f285ebaa53d8dc31f1aa7c689e10f8677b6bb18808a34c04d93df09c109cd161dfae9b74e46a530bba8b226184c5285679804fb2340bd6fabbdb67f93cac1a3762efb664db456d6b9b8527c003b615fe14c6cda3d7b14a77bccd3795fc190684a0e2090cc488a0"}) poll(&(0x7f0000000180)=[{r0, 0x9080}, {r1, 0x400}, {r0, 0x40}, {r0, 0x4000}], 0x4, 0xf5) 23.701329283s ago: executing program 34 (id=1582): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x14, r1, 0x1, 0x4000}, 0x14}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000140)=0x24) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "6d180a87"}]}}, 0x0}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xf0, 0xbf}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f00000002c0)={{0x2, 0x0, 0xc, 0x1, 0x6, 0xef, 0x4, 0xcd, 0x5, 0x20, 0x9, 0x7}, {0x5000, 0x1, 0x3, 0x8a, 0x40, 0x0, 0xb, 0x5, 0x81, 0x4, 0x2}, {0x1000, 0x2000, 0x0, 0xa, 0x8, 0x6, 0x49, 0x13, 0x6, 0x6, 0x0, 0x7}, {0xdddd0000, 0x2707066b93c2e94a, 0x8, 0xfa, 0x2, 0x7f, 0xff, 0x86, 0xed, 0x3, 0xe3, 0xff}, {0xeeee8000, 0xdddd1000, 0x10, 0x1, 0x0, 0x9, 0x1, 0x5, 0x2, 0xb, 0x81, 0x50}, {0xffff5fff, 0x1000, 0x0, 0x7, 0xff, 0x8, 0x69, 0x1, 0x7, 0x6, 0x6, 0x9}, {0x70000, 0xe000, 0xc, 0x6, 0x3, 0xe, 0x2, 0x5, 0x5, 0x5, 0x9, 0x9}, {0x7000, 0xe000, 0xd, 0x7, 0x3, 0x7, 0xa, 0x4f, 0x6, 0x0, 0x9, 0x6}, {0xffff1000, 0x1ff}, {0xa000, 0xfffb}, 0x50000032, 0x0, 0xf000, 0x0, 0x1, 0x2801, 0xb000, 0x1, [0x7, 0x0, 0x9, 0x100]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.41763571s ago: executing program 2 (id=1612): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="1c00ffff0000", 0x6, 0x0, 0xfcfdffffffffffff, 0x2}]) 21.932022815s ago: executing program 1 (id=1613): modify_ldt$write2(0x11, &(0x7f0000000080)={0x200, 0x1000, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 17.597493275s ago: executing program 5 (id=1614): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x400) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x40, 0x3, 0x1000, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x2d, [@empty, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp={0x44, 0x18, 0x99, 0x0, 0x6, [0x75, 0xf7, 0x9, 0x6ba1351c, 0x8]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@initdev, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810024}, 0xc, &(0x7f0000001640)={&(0x7f0000000280)={0x1394, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf528}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "d23011fc7482044d15c091da425438b53fd6aa6599dbe299fe3a1a327e20a20bcb323cb90b56304ef540d056634f775fd58df3c7fb6bcc9b74ae2c3eba90fe3ee4f42b5031cbcbaa53b22332aed58e5120e71fd19b2336534ac0b5676231778397152cb32244b7fbb190a4264b4e379079e6f570b52189ac48615c50a381b27a5698799439fc2426cea60a8cd0e7f7b605201c259568bcd0d98c935c316404a5f6c33f07d030"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "e36c421d999b3bc04174066d86bf63"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "3e57eba9040b587e0277af4368352c1ead535cc34acae399ffc4cd4fad5eb385b1d2a2b343fd748227d9dafd1ed17d09fc999614bf22c23b9c238287af8b0227550e4053a430faf0d4d7f866af57fd735a5ed201367a145c1a574768bb755c210122b5e702b2f6e113a390fc96d9042b0f78aaab1813573af341af8aa3101a33ab2dff44ee931a30bb70420a2f970ae81a7306d068a551eae7a8be382aa1fe7228450098090784044a256b00cf241cd633d09f4ba14a8b72aa603e33d0dc4e3231c07d2c670b364cd69a8277953473cc5a8a8d3b4ab4bc9898"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1058, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x1394}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x64, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x64}}, 0x40800) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001840)={0xe9, {{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x103}}}, 0x88) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) fsetxattr$security_ima(r7, &(0x7f0000001940), &(0x7f0000001980)=@v2={0x3, 0x1, 0x17, 0x800, 0x97, "e142effcbef563c16cb05c3f63c7bcdf224b50e02cb46664d2258e598dc1feec81f5e20c49ff3ef753fa847494948ed9c68ba13525bfceeb56ef4d26c860d8f02259411718c61357df5dbe654f870c88e3684b6d0b218d441d3ce3b93b7c008e536aac796726b7839b9433662c6da9ceb09ca018c8e36292c1700df25b640c6baa124b4ff0a08e9a3395ce3261db859adcf62dc9bd37fa"}, 0xa0, 0x0) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001a40)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x4}) (async) r9 = socket$inet6(0xa, 0x0, 0xfdb) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001ac0)={'erspan0\x00', &(0x7f0000001a80)={'gre0\x00', r3, 0x7800, 0x1, 0x8, 0x518f, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000001b00)={0xffffffffffffffff, 0x1, 0x9, r10, 0xff}, 0xc) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000001b40)={0x8, 'wg2\x00', {'ipvlan0\x00'}, 0x4}) (async) write$P9_RREMOVE(r7, &(0x7f0000001b80)={0x7, 0x7b, 0x2}, 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x54, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4004) (async) read$FUSE(r0, &(0x7f0000001d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000003dc0)={0x18, 0x0, r14, {0xfffffffb}}, 0x18) (async) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000003e00)={'\x00', 0x2, 0x3ff, 0x7fffffff, 0x8, 0x9588, r17}) (async) getgroups(0x2, &(0x7f0000003f00)=[r16, r16]) setxattr$system_posix_acl(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)='system.posix_acl_access\x00', &(0x7f0000003f40)={{}, {}, [{0x2, 0x5, r15}, {0x2, 0x0, r15}, {0x2, 0x1, r15}, {0x2, 0x2, r15}, {0x2, 0x0, r15}, {0x2, 0x1, r15}, {0x2, 0x2, r15}, {0x2, 0x7, r15}], {0x4, 0xd35126c7ae1be87e}, [{0x8, 0x0, r18}, {0x8, 0x7, r16}, {0x8, 0x1, r16}, {0x8, 0x1, r16}, {0x8, 0x4, r16}]}, 0x8c, 0x2) (async) recvmsg$inet_nvme(r0, &(0x7f0000004340)={&(0x7f0000004000)=@qipcrtr, 0x80, &(0x7f0000004300)=[{&(0x7f0000004080)=""/25, 0x19}, {&(0x7f00000040c0)=""/212, 0xd4}, {&(0x7f00000041c0)=""/53, 0x35}, {&(0x7f0000004200)=""/246, 0xf6}], 0x4}, 0x1) 6.124602727s ago: executing program 35 (id=1612): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="1c00ffff0000", 0x6, 0x0, 0xfcfdffffffffffff, 0x2}]) 4.647348332s ago: executing program 36 (id=1613): modify_ldt$write2(0x11, &(0x7f0000000080)={0x200, 0x1000, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 0s ago: executing program 37 (id=1614): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x400) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x40, 0x3, 0x1000, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @local, {[@rr={0x7, 0x13, 0x2d, [@empty, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp={0x44, 0x18, 0x99, 0x0, 0x6, [0x75, 0xf7, 0x9, 0x6ba1351c, 0x8]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@initdev, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810024}, 0xc, &(0x7f0000001640)={&(0x7f0000000280)={0x1394, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf528}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "d23011fc7482044d15c091da425438b53fd6aa6599dbe299fe3a1a327e20a20bcb323cb90b56304ef540d056634f775fd58df3c7fb6bcc9b74ae2c3eba90fe3ee4f42b5031cbcbaa53b22332aed58e5120e71fd19b2336534ac0b5676231778397152cb32244b7fbb190a4264b4e379079e6f570b52189ac48615c50a381b27a5698799439fc2426cea60a8cd0e7f7b605201c259568bcd0d98c935c316404a5f6c33f07d030"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "e36c421d999b3bc04174066d86bf63"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "3e57eba9040b587e0277af4368352c1ead535cc34acae399ffc4cd4fad5eb385b1d2a2b343fd748227d9dafd1ed17d09fc999614bf22c23b9c238287af8b0227550e4053a430faf0d4d7f866af57fd735a5ed201367a145c1a574768bb755c210122b5e702b2f6e113a390fc96d9042b0f78aaab1813573af341af8aa3101a33ab2dff44ee931a30bb70420a2f970ae81a7306d068a551eae7a8be382aa1fe7228450098090784044a256b00cf241cd633d09f4ba14a8b72aa603e33d0dc4e3231c07d2c670b364cd69a8277953473cc5a8a8d3b4ab4bc9898"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1058, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x1394}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x64, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x64}}, 0x40800) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001840)={0xe9, {{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x103}}}, 0x88) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) fsetxattr$security_ima(r7, &(0x7f0000001940), &(0x7f0000001980)=@v2={0x3, 0x1, 0x17, 0x800, 0x97, "e142effcbef563c16cb05c3f63c7bcdf224b50e02cb46664d2258e598dc1feec81f5e20c49ff3ef753fa847494948ed9c68ba13525bfceeb56ef4d26c860d8f02259411718c61357df5dbe654f870c88e3684b6d0b218d441d3ce3b93b7c008e536aac796726b7839b9433662c6da9ceb09ca018c8e36292c1700df25b640c6baa124b4ff0a08e9a3395ce3261db859adcf62dc9bd37fa"}, 0xa0, 0x0) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001a40)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x4}) (async) r9 = socket$inet6(0xa, 0x0, 0xfdb) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001ac0)={'erspan0\x00', &(0x7f0000001a80)={'gre0\x00', r3, 0x7800, 0x1, 0x8, 0x518f, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000001b00)={0xffffffffffffffff, 0x1, 0x9, r10, 0xff}, 0xc) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000001b40)={0x8, 'wg2\x00', {'ipvlan0\x00'}, 0x4}) (async) write$P9_RREMOVE(r7, &(0x7f0000001b80)={0x7, 0x7b, 0x2}, 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x54, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4004) (async) read$FUSE(r0, &(0x7f0000001d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000003dc0)={0x18, 0x0, r14, {0xfffffffb}}, 0x18) (async) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000003e00)={'\x00', 0x2, 0x3ff, 0x7fffffff, 0x8, 0x9588, r17}) (async) getgroups(0x2, &(0x7f0000003f00)=[r16, r16]) setxattr$system_posix_acl(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)='system.posix_acl_access\x00', &(0x7f0000003f40)={{}, {}, [{0x2, 0x5, r15}, {0x2, 0x0, r15}, {0x2, 0x1, r15}, {0x2, 0x2, r15}, {0x2, 0x0, r15}, {0x2, 0x1, r15}, {0x2, 0x2, r15}, {0x2, 0x7, r15}], {0x4, 0xd35126c7ae1be87e}, [{0x8, 0x0, r18}, {0x8, 0x7, r16}, {0x8, 0x1, r16}, {0x8, 0x1, r16}, {0x8, 0x4, r16}]}, 0x8c, 0x2) (async) recvmsg$inet_nvme(r0, &(0x7f0000004340)={&(0x7f0000004000)=@qipcrtr, 0x80, &(0x7f0000004300)=[{&(0x7f0000004080)=""/25, 0x19}, {&(0x7f00000040c0)=""/212, 0xd4}, {&(0x7f00000041c0)=""/53, 0x35}, {&(0x7f0000004200)=""/246, 0xf6}], 0x4}, 0x1) kernel console output (not intermixed with test programs): : device descriptor read/8, error -71 [ 123.237560][ T2823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.246261][ T2823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.256545][ T2823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 123.262616][ T64] usb 6-1: device descriptor read/8, error -71 [ 123.378233][ T64] usb usb6-port1: unable to enumerate USB device [ 123.695633][ T2823] No source specified [ 123.700922][ T2823] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.765'. [ 123.725066][ T2835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.733715][ T2835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.925717][ T2823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 124.178053][ T330] cdc_ncm 2-1:1.0: bind() failure [ 124.185294][ T330] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 124.193721][ T330] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 124.208174][ T330] usb 2-1: USB disconnect, device number 59 [ 124.251745][ T2847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.260487][ T2847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.292766][ T2849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:871 [ 124.292905][ T2849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:871 [ 124.328082][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.346484][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.497006][ T361] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 124.585479][ T2857] netlink: 'syz.0.780': attribute type 27 has an invalid length. [ 124.657974][ T361] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.668420][ T361] usb 6-1: config 1 interface 0 has no altsetting 0 [ 124.675388][ T361] usb 6-1: language id specifier not provided by device, defaulting to English [ 124.685453][ T361] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 124.694740][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.702838][ T361] usb 6-1: Product: syz [ 124.707066][ T361] usb 6-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 124.720265][ T361] usb 6-1: SerialNumber: syz [ 124.942701][ T361] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 124.953983][ T361] usb 6-1: USB disconnect, device number 15 [ 124.961774][ T2866] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 125.104546][ T330] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 125.265721][ T330] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 125.277171][ T330] usb 2-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.288392][ T330] usb 2-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.298421][ T330] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 125.311705][ T330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.318480][ T330] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 125.327610][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.336746][ T330] usb 2-1: config 0 descriptor?? [ 125.394742][ T2876] fuse: Unknown parameter '' [ 125.412771][ T2881] mmap: syz.2.790 (2881): VmData 29077504 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 125.440612][ T2881] kvm_intel: kvm [2880]: vcpu4, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 125.450044][ T2881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 125.568284][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:891 [ 125.743915][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 125.773180][ T330] koneplus 0003:1E7D:2E22.0010: unexpected long global item [ 125.781126][ T330] koneplus 0003:1E7D:2E22.0010: parse failed [ 125.787266][ T330] koneplus 0003:1E7D:2E22.0010: probe with driver koneplus failed with error -22 [ 125.891082][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.899833][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.928031][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 125.937188][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.945206][ T9] usb 6-1: Product: syz [ 125.949472][ T9] usb 6-1: Manufacturer: syz [ 125.954097][ T9] usb 6-1: SerialNumber: syz [ 125.995712][ T2862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.004414][ T2862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.014521][ T361] usb 2-1: USB disconnect, device number 60 [ 126.530732][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.540729][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.554663][ T36] audit: type=1400 audit(1769781446.450:428): avc: denied { watch watch_reads } for pid=2911 comm="syz.2.799" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 126.682788][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 126.688928][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 126.703219][ T9] usb 6-1: USB disconnect, device number 16 [ 126.969498][ T330] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 127.129325][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 127.135634][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.150646][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.171541][ T330] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 127.187029][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.207280][ T36] audit: type=1400 audit(1769781447.060:429): avc: denied { nlmsg_write } for pid=2920 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.237735][ T330] usb 2-1: config 0 descriptor?? [ 127.257373][ T36] audit: type=1400 audit(1769781447.089:430): avc: denied { audit_write } for pid=2920 comm="syz.5.803" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.284051][ T36] audit: type=1107 audit(1769781447.089:431): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.418755][ T36] audit: type=1400 audit(1769781447.267:432): avc: denied { read append } for pid=2936 comm="syz.2.808" name="file2" dev="tmpfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.537240][ T36] audit: type=1400 audit(1769781447.267:433): avc: denied { open } for pid=2936 comm="syz.2.808" path="/341/file2" dev="tmpfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.669920][ T36] audit: type=1326 audit(1769781447.492:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.2.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafae59aeb9 code=0x0 [ 127.774532][ T330] kye 0003:0458:5017.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 127.786056][ T330] kye 0003:0458:5017.0011: hidraw0: USB HID v0.81 Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 127.797263][ T330] kye 0003:0458:5017.0011: tablet-enabling feature report not found [ 127.805560][ T330] kye 0003:0458:5017.0011: tablet enabling failed [ 127.832830][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 127.988779][ T330] usb 2-1: USB disconnect, device number 61 [ 127.998690][ T31] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 128.008449][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.016632][ T31] usb 6-1: Product: syz [ 128.020824][ T31] usb 6-1: Manufacturer: syz [ 128.025485][ T31] usb 6-1: SerialNumber: syz [ 128.499633][ T2960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 128.730691][ T31] rtl8150 6-1:1.0: couldn't reset the device [ 128.746530][ T31] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 128.757273][ T31] usb 6-1: USB disconnect, device number 17 [ 129.314315][ T2980] overlayfs: failed to resolve './file0': -2 [ 129.367255][ T2985] netlink: 37 bytes leftover after parsing attributes in process `syz.2.826'. [ 129.461929][ T36] audit: type=1326 audit(1769781449.171:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.5.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f6a8139aeb9 code=0x0 [ 129.530876][ T36] audit: type=1400 audit(1769781449.237:436): avc: denied { execute } for pid=3003 comm="syz.2.832" name="file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.566738][ T3009] loop6: detected capacity change from 0 to 7 [ 129.573662][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.582880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.592264][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.601473][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.609539][ T368] loop6: unable to read partition table [ 129.612479][ T3008] overlayfs: failed to clone upperpath [ 129.622426][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.631671][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.644309][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.653574][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.661552][ T3009] loop6: unable to read partition table [ 129.667374][ T3009] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 129.678670][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.689016][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.697645][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.706858][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.715369][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.724937][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.732862][ T3010] loop6: unable to read partition table [ 129.733863][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.747737][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.756217][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.760343][ T361] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 129.765420][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.771672][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.790143][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.855692][ T3016] kvm: kvm [3014]: vcpu34, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 129.873560][ T3016] kvm: kvm [3014]: vcpu34, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 129.900239][ T3016] kvm_intel: kvm [3014]: vcpu34, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 129.917505][ T3016] kvm: kvm [3014]: vcpu34, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 129.926910][ T3016] kvm: kvm [3014]: vcpu34, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 129.945602][ T361] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 129.954918][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.962966][ T361] usb 2-1: Product: syz [ 129.975673][ T361] usb 2-1: Manufacturer: syz [ 129.980612][ T361] usb 2-1: SerialNumber: syz [ 130.078374][ T36] audit: type=1400 audit(1769781449.753:437): avc: denied { create } for pid=3026 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.423661][ T3037] kvm: kvm [3036]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 130.455014][ T3037] kvm: kvm [3036]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 130.662696][ T3040] kvm: kvm [3039]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 130.671762][ T3040] kvm: kvm [3039]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 130.688408][ T361] rtl8150 2-1:1.0: couldn't reset the device [ 130.699893][ T361] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 130.714158][ T361] usb 2-1: USB disconnect, device number 62 [ 130.971299][ T3049] 9pnet_fd: p9_fd_create_unix (3049): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.025027][ T3053] overlayfs: failed to clone upperpath [ 131.200761][ T45] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 131.221329][ T3059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.229948][ T3059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.361740][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.372758][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 131.382024][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.390898][ T45] usb 6-1: config 0 descriptor?? [ 131.467442][ T31] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 131.579184][ T3061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.856'. [ 131.627911][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 131.634519][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.643333][ T31] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 131.651861][ T31] usb 2-1: config 13 has no interface number 0 [ 131.658380][ T31] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 131.668558][ T31] usb 2-1: config 13 interface 50 has no altsetting 0 [ 131.677033][ T31] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 131.686171][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.694213][ T31] usb 2-1: Product: syz [ 131.698430][ T31] usb 2-1: Manufacturer: syz [ 131.703198][ T31] usb 2-1: SerialNumber: syz [ 131.708921][ T3057] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 131.827311][ T45] pyra 0003:1E7D:2C24.0012: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 131.933340][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 131.943301][ T31] usb 2-1: USB disconnect, device number 63 [ 131.955255][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.040572][ T361] usb 6-1: USB disconnect, device number 18 [ 132.529577][ T3076] tipc: Started in network mode [ 132.534674][ T3076] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 132.543861][ T3076] tipc: Enabling of bearer rejected, failed to enable media [ 132.628567][ T3085] netlink: 680 bytes leftover after parsing attributes in process `syz.5.864'. [ 132.830388][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 132.830408][ T36] audit: type=1400 audit(1769781452.333:441): avc: denied { mounton } for pid=3091 comm="syz.5.867" path="/43/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.031926][ T3095] SELinux: syz.1.868 (3095) set checkreqprot to 1. This is no longer supported. [ 133.045920][ T36] audit: type=1400 audit(1769781452.540:442): avc: denied { module_load } for pid=3094 comm="syz.1.868" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 133.101932][ T3097] overlayfs: failed to clone upperpath [ 133.163806][ T3101] rust_binder: Write failure EFAULT in pid:534 [ 133.164741][ T3101] rust_binder: Write failure EFAULT in pid:534 [ 133.192329][ T36] audit: type=1400 audit(1769781452.671:443): avc: denied { append } for pid=3104 comm="syz.1.872" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.350929][ T3109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'. [ 133.441369][ T3116] overlayfs: failed to clone upperpath [ 133.461060][ T45] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 133.620250][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 133.626528][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.634779][ T45] usb 2-1: config 0 has no interface number 0 [ 133.640900][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 133.653538][ T45] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 133.662624][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.670674][ T45] usb 2-1: Product: syz [ 133.674906][ T45] usb 2-1: Manufacturer: syz [ 133.679499][ T45] usb 2-1: SerialNumber: syz [ 133.684893][ T45] usb 2-1: config 0 descriptor?? [ 133.904861][ T361] usb 2-1: USB disconnect, device number 64 [ 133.982632][ T45] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 134.144182][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 134.152291][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 134.161082][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.171487][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.183478][ T45] usb 6-1: string descriptor 0 read error: -22 [ 134.189757][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.199073][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.209942][ T45] usb 6-1: 0:2 : does not exist [ 134.517758][ T3133] netlink: 'syz.1.882': attribute type 16 has an invalid length. [ 134.525945][ T3133] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.882'. [ 134.750987][ T3142] overlayfs: failed to clone upperpath [ 134.967878][ T36] audit: type=1326 audit(1769781454.341:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.2.889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafae59aeb9 code=0x0 [ 135.338989][ T36] audit: type=1400 audit(1769781454.698:445): avc: denied { create } for pid=3151 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.358906][ T36] audit: type=1400 audit(1769781454.698:446): avc: denied { setattr } for pid=3151 comm="syz.1.890" name="[io_uring]" dev="anon_inodefs" ino=20196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.379226][ T3154] 9pnet_fd: Insufficient options for proto=fd [ 135.393605][ T45] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 135.406665][ T45] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 135.422630][ T45] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 135.439566][ T45] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 135.453166][ T36] audit: type=1400 audit(1769781454.791:447): avc: denied { create } for pid=3157 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.457784][ T45] usb 6-1: USB disconnect, device number 19 [ 135.508654][ T3159] FAULT_INJECTION: forcing a failure. [ 135.508654][ T3159] name failslab, interval 1, probability 0, space 0, times 0 [ 135.521528][ T3159] CPU: 0 UID: 0 PID: 3159 Comm: syz.5.894 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 135.521569][ T3159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.521584][ T3159] Call Trace: [ 135.521592][ T3159] [ 135.521601][ T3159] __dump_stack+0x21/0x30 [ 135.521633][ T3159] dump_stack_lvl+0x140/0x1c0 [ 135.521660][ T3159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.521688][ T3159] dump_stack+0x19/0x20 [ 135.521713][ T3159] should_fail_ex+0x3d7/0x530 [ 135.521736][ T3159] should_failslab+0xac/0x100 [ 135.521768][ T3159] __kmalloc_node_noprof+0x6c/0x4f0 [ 135.521794][ T3159] ? __kvmalloc_node_noprof+0x128/0x300 [ 135.521828][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.521855][ T3159] __kvmalloc_node_noprof+0x128/0x300 [ 135.521879][ T3159] ? get_user_pages_fast_only+0x76/0xc0 [ 135.521901][ T3159] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 135.521927][ T3159] ? hva_to_pfn+0x226/0xab0 [ 135.521958][ T3159] __kvm_mmu_topup_memory_cache+0x5e6/0x850 [ 135.521988][ T3159] ? folio_mark_accessed+0x34b/0x620 [ 135.522023][ T3159] ? __cfi_mutex_unlock+0x10/0x10 [ 135.522047][ T3159] kvm_mmu_topup_memory_cache+0x24/0x30 [ 135.522076][ T3159] kvm_mmu_load+0xa2/0x2890 [ 135.522100][ T3159] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 135.522128][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.522152][ T3159] ? kvm_release_page_clean+0x10a/0x150 [ 135.522184][ T3159] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 135.522212][ T3159] vcpu_run+0x4dad/0x7840 [ 135.522253][ T3159] ? signal_pending+0xc0/0xc0 [ 135.522276][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.522301][ T3159] ? xfd_validate_state+0x68/0x140 [ 135.522327][ T3159] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 135.522348][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.522373][ T3159] ? fpregs_mark_activate+0x68/0x160 [ 135.522395][ T3159] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 135.522416][ T3159] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 135.522439][ T3159] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 135.522468][ T3159] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 135.522494][ T3159] ? kstrtoull+0x13b/0x1e0 [ 135.522514][ T3159] ? kstrtouint+0x78/0xf0 [ 135.522533][ T3159] ? ioctl_has_perm+0x1bc/0x500 [ 135.522555][ T3159] ? __asan_memcpy+0x5a/0x80 [ 135.522580][ T3159] ? ioctl_has_perm+0x408/0x500 [ 135.522601][ T3159] ? has_cap_mac_admin+0xd0/0xd0 [ 135.522624][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.522650][ T3159] ? mutex_lock_killable+0x97/0x1d0 [ 135.522673][ T3159] ? __cfi_mutex_lock_killable+0x10/0x10 [ 135.522698][ T3159] ? proc_fail_nth_write+0x184/0x220 [ 135.522721][ T3159] kvm_vcpu_ioctl+0xa48/0x1000 [ 135.522753][ T3159] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.522784][ T3159] ? __cfi_vfs_write+0x10/0x10 [ 135.522809][ T3159] ? __kasan_check_write+0x18/0x20 [ 135.522842][ T3159] ? mutex_unlock+0x90/0x240 [ 135.522863][ T3159] ? __cfi_mutex_unlock+0x10/0x10 [ 135.522884][ T3159] ? __fget_files+0x2c5/0x340 [ 135.522915][ T3159] ? __fget_files+0x2c5/0x340 [ 135.522946][ T3159] ? bpf_lsm_file_ioctl+0xd/0x20 [ 135.522966][ T3159] ? security_file_ioctl+0x3e/0x110 [ 135.522987][ T3159] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.523017][ T3159] __se_sys_ioctl+0x132/0x1b0 [ 135.523048][ T3159] __x64_sys_ioctl+0x7f/0xa0 [ 135.523079][ T3159] x64_sys_call+0x1878/0x2ee0 [ 135.523109][ T3159] do_syscall_64+0x57/0xf0 [ 135.523138][ T3159] ? clear_bhb_loop+0x50/0xa0 [ 135.523168][ T3159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.523196][ T3159] RIP: 0033:0x7f6a8139aeb9 [ 135.523215][ T3159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.523234][ T3159] RSP: 002b:00007f6a82238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.523257][ T3159] RAX: ffffffffffffffda RBX: 00007f6a81615fa0 RCX: 00007f6a8139aeb9 [ 135.523273][ T3159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 135.523286][ T3159] RBP: 00007f6a82238090 R08: 0000000000000000 R09: 0000000000000000 [ 135.523300][ T3159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.523314][ T3159] R13: 00007f6a81616038 R14: 00007f6a81615fa0 R15: 00007fff760605a8 [ 135.523332][ T3159] [ 136.104331][ T3173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3173 comm=syz.1.900 [ 136.263583][ T361] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 136.426665][ T361] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 136.435877][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.444055][ T361] usb 6-1: Product: syz [ 136.448293][ T361] usb 6-1: Manufacturer: syz [ 136.452972][ T361] usb 6-1: SerialNumber: syz [ 136.735377][ T3186] FAULT_INJECTION: forcing a failure. [ 136.735377][ T3186] name failslab, interval 1, probability 0, space 0, times 0 [ 136.748074][ T3186] CPU: 0 UID: 0 PID: 3186 Comm: syz.0.905 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 136.748108][ T3186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.748119][ T3186] Call Trace: [ 136.748125][ T3186] [ 136.748132][ T3186] __dump_stack+0x21/0x30 [ 136.748156][ T3186] dump_stack_lvl+0x140/0x1c0 [ 136.748176][ T3186] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.748199][ T3186] ? __kasan_kmalloc+0x96/0xb0 [ 136.748222][ T3186] dump_stack+0x19/0x20 [ 136.748240][ T3186] should_fail_ex+0x3d7/0x530 [ 136.748257][ T3186] should_failslab+0xac/0x100 [ 136.748279][ T3186] kmem_cache_alloc_noprof+0x42/0x410 [ 136.748300][ T3186] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 136.748323][ T3186] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 136.748344][ T3186] ? folio_mark_accessed+0x34b/0x620 [ 136.748370][ T3186] kvm_mmu_topup_memory_cache+0x24/0x30 [ 136.748393][ T3186] kvm_mmu_load+0xa2/0x2890 [ 136.748415][ T3186] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 136.748435][ T3186] ? __kasan_check_write+0x18/0x20 [ 136.748476][ T3186] ? kvm_release_page_clean+0x10a/0x150 [ 136.748515][ T3186] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 136.748536][ T3186] vcpu_run+0x4dad/0x7840 [ 136.748565][ T3186] ? signal_pending+0xc0/0xc0 [ 136.748582][ T3186] ? __kasan_check_write+0x18/0x20 [ 136.748600][ T3186] ? xfd_validate_state+0x68/0x140 [ 136.748619][ T3186] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 136.748634][ T3186] ? __kasan_check_write+0x18/0x20 [ 136.748652][ T3186] ? fpregs_mark_activate+0x68/0x160 [ 136.748668][ T3186] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 136.748683][ T3186] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 136.748700][ T3186] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 136.748720][ T3186] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 136.748739][ T3186] ? kstrtoull+0x13b/0x1e0 [ 136.748753][ T3186] ? kstrtouint+0x78/0xf0 [ 136.748769][ T3186] ? ioctl_has_perm+0x1bc/0x500 [ 136.748785][ T3186] ? __asan_memcpy+0x5a/0x80 [ 136.748803][ T3186] ? ioctl_has_perm+0x408/0x500 [ 136.748819][ T3186] ? has_cap_mac_admin+0xd0/0xd0 [ 136.748834][ T3186] ? __kasan_check_write+0x18/0x20 [ 136.748852][ T3186] ? mutex_lock_killable+0x97/0x1d0 [ 136.748870][ T3186] ? __cfi_mutex_lock_killable+0x10/0x10 [ 136.748888][ T3186] ? proc_fail_nth_write+0x184/0x220 [ 136.748905][ T3186] kvm_vcpu_ioctl+0xa48/0x1000 [ 136.748928][ T3186] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.748950][ T3186] ? __cfi_vfs_write+0x10/0x10 [ 136.748970][ T3186] ? __kasan_check_write+0x18/0x20 [ 136.748988][ T3186] ? mutex_unlock+0x90/0x240 [ 136.749003][ T3186] ? __cfi_mutex_unlock+0x10/0x10 [ 136.749025][ T3186] ? __fget_files+0x2c5/0x340 [ 136.749048][ T3186] ? __fget_files+0x2c5/0x340 [ 136.749069][ T3186] ? bpf_lsm_file_ioctl+0xd/0x20 [ 136.749085][ T3186] ? security_file_ioctl+0x3e/0x110 [ 136.749099][ T3186] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.749121][ T3186] __se_sys_ioctl+0x132/0x1b0 [ 136.749144][ T3186] __x64_sys_ioctl+0x7f/0xa0 [ 136.749166][ T3186] x64_sys_call+0x1878/0x2ee0 [ 136.749187][ T3186] do_syscall_64+0x57/0xf0 [ 136.749209][ T3186] ? clear_bhb_loop+0x50/0xa0 [ 136.749232][ T3186] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.749253][ T3186] RIP: 0033:0x7f8399b9aeb9 [ 136.749266][ T3186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.749280][ T3186] RSP: 002b:00007f839aa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.749298][ T3186] RAX: ffffffffffffffda RBX: 00007f8399e15fa0 RCX: 00007f8399b9aeb9 [ 136.749310][ T3186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 136.749321][ T3186] RBP: 00007f839aa96090 R08: 0000000000000000 R09: 0000000000000000 [ 136.749331][ T3186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.749341][ T3186] R13: 00007f8399e16038 R14: 00007f8399e15fa0 R15: 00007ffca1ca40a8 [ 136.749354][ T3186] [ 137.510275][ T361] rtl8150 6-1:1.0: couldn't reset the device [ 137.516442][ T361] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 137.525739][ T361] usb 6-1: USB disconnect, device number 20 [ 138.042355][ T3201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.911'. [ 138.051384][ T3201] tipc: Invalid UDP bearer configuration [ 138.051414][ T3201] tipc: Enabling of bearer rejected, failed to enable media [ 138.331385][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 138.492491][ T10] usb 6-1: config 127 has an invalid interface number: 4 but max is 0 [ 138.500782][ T10] usb 6-1: config 127 has no interface number 0 [ 138.507181][ T10] usb 6-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= 8.a3 [ 138.516289][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.740570][ T3203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.749221][ T3203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.758185][ T10] usb 6-1: string descriptor 0 read error: -71 [ 138.764926][ T10] ums-datafab 6-1:127.4: USB Mass Storage device detected [ 138.802004][ T10] ums-sddr55 6-1:127.4: USB Mass Storage device detected [ 138.833370][ T3219] netlink: 328 bytes leftover after parsing attributes in process `syz.2.918'. [ 138.843374][ T3219] overlayfs: failed to resolve './file1': -2 [ 138.858022][ T10] usb 6-1: USB disconnect, device number 21 [ 139.438974][ T36] audit: type=1400 audit(1769781458.535:448): avc: denied { getopt } for pid=3240 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.471240][ T3243] overlayfs: failed to clone upperpath [ 139.567991][ T45] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 139.598821][ T3261] netlink: 'syz.1.934': attribute type 30 has an invalid length. [ 139.620293][ T3263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'. [ 139.729309][ T3266] overlayfs: failed to clone upperpath [ 139.751774][ T45] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 139.760984][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.769016][ T45] usb 6-1: Product: syz [ 139.773278][ T45] usb 6-1: Manufacturer: syz [ 139.777901][ T45] usb 6-1: SerialNumber: syz [ 140.435358][ T45] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 140.659908][ T3303] fuse: Bad value for 'group_id' [ 140.670816][ T3303] fuse: Bad value for 'group_id' [ 140.683062][ C0] usb 6-1: Rx status -71 [ 140.687427][ C0] usb 6-1: eth1: intr status -71 [ 140.693239][ C0] usb 6-1: Rx status -71 [ 140.697611][ C0] usb 6-1: eth1: intr status -71 [ 140.702707][ C0] usb 6-1: Rx status -71 [ 140.707029][ C0] usb 6-1: eth1: intr status -71 [ 140.718446][ C0] usb 6-1: Rx status -71 [ 140.722802][ C0] usb 6-1: eth1: intr status -71 [ 140.729052][ C0] usb 6-1: Rx status -71 [ 140.733387][ C0] usb 6-1: eth1: intr status -71 [ 140.738540][ C0] usb 6-1: Rx status -71 [ 140.742860][ C0] usb 6-1: eth1: intr status -71 [ 140.747919][ C0] usb 6-1: Rx status -71 [ 140.752237][ C0] usb 6-1: eth1: intr status -71 [ 140.757689][ T10] usb 6-1: USB disconnect, device number 22 [ 140.763682][ C0] usb 6-1: Rx status -71 [ 140.763717][ C0] usb 6-1: eth1: intr status -71 [ 140.772646][ T150] usb 6-1: device reset failed [ 140.784279][ T3305] bridge0: entered allmulticast mode [ 140.911328][ T3323] overlayfs: missing 'lowerdir' [ 141.565307][ T36] audit: type=1400 audit(1769781460.533:449): avc: denied { read } for pid=31 comm="kworker/1:0" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21470 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.581428][ T3359] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 142.008696][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 142.172275][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.181704][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.189934][ T10] usb 6-1: Product: syz [ 142.194348][ T10] usb 6-1: Manufacturer: syz [ 142.199090][ T10] usb 6-1: SerialNumber: syz [ 142.855588][ T10] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 143.083027][ T10] usb 6-1: USB disconnect, device number 23 [ 143.083084][ C0] usb 6-1: eth1: intr status -71 [ 143.096031][ T150] usb 6-1: device reset failed [ 143.350279][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 144.729065][ T3438] overlayfs: failed to clone upperpath [ 144.980891][ T3442] syzkaller0: entered promiscuous mode [ 144.986602][ T3442] syzkaller0: entered allmulticast mode [ 145.312773][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 145.451686][ T31] usb 6-1: device descriptor read/64, error -71 [ 145.665971][ T3463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.717841][ T31] usb 6-1: device descriptor read/64, error -71 [ 145.973645][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 146.112202][ T31] usb 6-1: device descriptor read/64, error -71 [ 146.368011][ T31] usb 6-1: device descriptor read/64, error -71 [ 146.485380][ T31] usb usb6-port1: attempt power cycle [ 146.634992][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 146.683855][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 146.683872][ T36] audit: type=1326 audit(1769781465.337:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.2.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafae59aeb9 code=0x0 [ 146.847641][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 146.870059][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.008674][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.263419][ T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 147.285799][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.424356][ T31] usb 6-1: device descriptor read/8, error -71 [ 147.540586][ T31] usb usb6-port1: unable to enumerate USB device [ 147.835937][ T3528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 148.383935][ T3541] capability: warning: `syz.1.1015' uses 32-bit capabilities (legacy support in use) [ 148.521056][ T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 148.659691][ T31] usb 6-1: device descriptor read/64, error -71 [ 148.775708][ T36] audit: type=1400 audit(1769781467.298:451): avc: denied { setopt } for pid=3550 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.795482][ T36] audit: type=1400 audit(1769781467.316:452): avc: denied { listen } for pid=3550 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.827198][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.835762][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.844082][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.852644][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.860943][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.869839][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.878056][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.886616][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.968793][ T31] usb 6-1: device descriptor read/64, error -71 [ 149.224586][ T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 149.363110][ T31] usb 6-1: device descriptor read/64, error -71 [ 149.629582][ T31] usb 6-1: device descriptor read/64, error -71 [ 149.746907][ T31] usb usb6-port1: attempt power cycle [ 150.081955][ T36] audit: type=1400 audit(1769781468.527:453): avc: denied { create } for pid=3572 comm="syz.1.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 150.109358][ T31] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 150.138433][ T31] usb 6-1: device descriptor read/8, error -71 [ 150.148232][ T3580] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.217443][ T3580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1028'. [ 150.281044][ T31] usb 6-1: device descriptor read/8, error -71 [ 150.535569][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 150.558115][ T31] usb 6-1: device descriptor read/8, error -71 [ 150.696591][ T31] usb 6-1: device descriptor read/8, error -71 [ 150.760860][ T3596] x_tables: duplicate underflow at hook 2 [ 150.812767][ T31] usb usb6-port1: unable to enumerate USB device [ 151.899983][ T31] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 152.059764][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 152.066340][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.075045][ T31] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 152.083394][ T31] usb 6-1: config 4 has an invalid descriptor of length 55, skipping remainder of the config [ 152.093720][ T31] usb 6-1: config 4 has no interface number 0 [ 152.101178][ T31] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 152.110302][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.118526][ T31] usb 6-1: Product: syz [ 152.122722][ T31] usb 6-1: Manufacturer: syz [ 152.127397][ T31] usb 6-1: SerialNumber: syz [ 152.213472][ T36] audit: type=1400 audit(1769781470.516:454): avc: denied { create } for pid=3624 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.240733][ T3628] SELinux: syz.0.1047 (3628) set checkreqprot to 1. This is no longer supported. [ 152.276059][ T36] audit: type=1326 audit(1769781470.581:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3632 comm="syz.1.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff66399aeb9 code=0x0 [ 152.351652][ T31] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 152.358215][ T31] usb 6-1: No valid video chain found. [ 152.369043][ T31] usb 6-1: USB disconnect, device number 32 [ 153.201699][ T3652] netlink: 'syz.1.1056': attribute type 12 has an invalid length. [ 153.381466][ T45] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 153.542593][ T45] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.550835][ T45] usb 6-1: config 0 has no interface number 0 [ 153.557093][ T45] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.568081][ T45] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.577884][ T45] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 153.586994][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.595805][ T45] usb 6-1: config 0 descriptor?? [ 153.855360][ T3673] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1063'. [ 154.040132][ T45] usbhid 6-1:0.1: can't add hid device: -71 [ 154.046236][ T45] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 154.055078][ T45] usb 6-1: USB disconnect, device number 33 [ 154.429074][ T36] audit: type=1400 audit(1769781472.608:456): avc: denied { module_load } for pid=3676 comm="syz.1.1065" path="/bus" dev="ramfs" ino=23047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 154.430371][ T3677] Invalid ELF header magic: != ELF [ 154.559186][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 154.595283][ T3695] netlink: 680 bytes leftover after parsing attributes in process `syz.1.1072'. [ 154.852327][ T45] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 155.013432][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.024529][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.034367][ T45] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 155.043466][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.052292][ T45] usb 6-1: config 0 descriptor?? [ 155.484414][ T3703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1076'. [ 155.496893][ T45] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 155.504224][ T45] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 155.511574][ T45] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 155.519362][ T45] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 155.527151][ T45] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 155.535814][ T45] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 155.708589][ T767] usb 6-1: USB disconnect, device number 34 [ 156.322564][ T3721] tipc: Enabling of bearer rejected, failed to enable media [ 156.395791][ T3736] fuse: Unknown parameter 'f' [ 156.397946][ T36] audit: type=1400 audit(1769781474.447:457): avc: denied { mounton } for pid=3734 comm="syz.1.1090" path="/289/file0" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.401637][ T3736] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 156.425360][ T3737] cgroup2: Unknown parameter '@' [ 156.426818][ T3736] : renamed from bond_slave_1 [ 156.678491][ T3759] 9pnet_fd: Insufficient options for proto=fd [ 156.845484][ T361] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 156.986887][ T361] usb 6-1: device descriptor read/64, error -71 [ 157.239911][ T361] usb 6-1: device descriptor read/64, error -71 [ 157.284044][ T3777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pid=3777 comm=syz.2.1101 [ 157.297500][ T3777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3777 comm=syz.2.1101 [ 157.312337][ T3777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3777 comm=syz.2.1101 [ 157.338366][ T36] audit: type=1400 audit(1769781475.338:458): avc: denied { create } for pid=3778 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 157.359468][ T3779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1102'. [ 157.495692][ T361] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 157.634261][ T361] usb 6-1: device descriptor read/64, error -71 [ 157.755409][ T3786] bpf: Bad value for 'uid' [ 157.760633][ T36] audit: type=1326 audit(1769781475.723:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.1.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff66399aeb9 code=0x0 [ 157.815299][ T3787] overlayfs: failed to clone lowerpath [ 157.890058][ T361] usb 6-1: device descriptor read/64, error -71 [ 158.007391][ T361] usb usb6-port1: attempt power cycle [ 158.369700][ T361] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 158.392098][ T361] usb 6-1: device descriptor read/8, error -71 [ 158.530883][ T361] usb 6-1: device descriptor read/8, error -71 [ 158.785416][ T361] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 158.807895][ T361] usb 6-1: device descriptor read/8, error -71 [ 158.876693][ T3811] rust_binder: Write failure EINVAL in pid:383 [ 158.946914][ T361] usb 6-1: device descriptor read/8, error -71 [ 159.073334][ T361] usb usb6-port1: unable to enumerate USB device [ 159.903622][ T36] audit: type=1400 audit(1769781477.730:460): avc: denied { create } for pid=3866 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 159.932883][ T3872] netlink: 'syz.1.1132': attribute type 13 has an invalid length. [ 159.966800][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 160.780723][ T3892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2665071234 (85282279488 ns) > initial count (83970453792 ns). Using initial count to start timer. [ 160.976968][ T3903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1144'. [ 160.986541][ T3903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 160.996147][ T3904] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1144'. [ 161.848346][ T3926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 161.861302][ T3928] futex_wake_op: syz.5.1153 tries to shift op by 144; fix this program [ 162.062961][ T3936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1155'. [ 162.197855][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.227550][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.234730][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.324086][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 162.462684][ T31] usb 6-1: device descriptor read/64, error -71 [ 162.497768][ T3950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:398 [ 162.511342][ T36] audit: type=1400 audit(1769781480.189:461): avc: denied { accept } for pid=3951 comm="syz.0.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 162.718438][ T31] usb 6-1: device descriptor read/64, error -71 [ 162.859556][ T3962] overlayfs: failed to clone upperpath [ 162.974293][ T31] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 163.112884][ T31] usb 6-1: device descriptor read/64, error -71 [ 163.368682][ T31] usb 6-1: device descriptor read/64, error -71 [ 163.485957][ T31] usb usb6-port1: attempt power cycle [ 163.848285][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 163.880341][ T31] usb 6-1: device descriptor read/8, error -71 [ 164.019978][ T31] usb 6-1: device descriptor read/8, error -71 [ 164.306678][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 164.328950][ T31] usb 6-1: device descriptor read/8, error -71 [ 164.361237][ T4006] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1184'. [ 164.370342][ T4006] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1184'. [ 164.478438][ T31] usb 6-1: device descriptor read/8, error -71 [ 164.594581][ T31] usb usb6-port1: unable to enumerate USB device [ 164.960900][ T4012] netlink: 2860 bytes leftover after parsing attributes in process `syz.2.1187'. [ 164.970286][ T4013] netlink: 2860 bytes leftover after parsing attributes in process `syz.2.1187'. [ 165.575073][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 165.734845][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 165.741475][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.751927][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.762896][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.773225][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.781557][ T10] usb 6-1: Product: syz [ 165.785778][ T10] usb 6-1: Manufacturer: syz [ 165.790687][ T10] usb 6-1: SerialNumber: syz [ 165.804400][ T4038] tmpfs: Invalid uid '0x00000000ffffffff' [ 165.961524][ T4044] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1198'. [ 166.012976][ T10] usb 6-1: 0:2 : does not exist [ 166.024858][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 166.045856][ T10] usb 6-1: USB disconnect, device number 43 [ 166.060900][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.673483][ T36] audit: type=1400 audit(1769781484.091:462): avc: denied { getopt } for pid=4064 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.832728][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 166.992581][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 166.999391][ T31] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 167.007715][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.017877][ T31] usb 6-1: config 0 has no interface number 0 [ 167.023970][ T31] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 167.035794][ T31] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 167.047425][ T31] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 167.058400][ T31] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 167.068298][ T31] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 167.078268][ T31] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 167.091406][ T31] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 167.100514][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.109165][ T31] usb 6-1: config 0 descriptor?? [ 167.114517][ T4054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 167.126123][ T31] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 167.136615][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.870954][ T31] usb 6-1: USB disconnect, device number 44 [ 168.120067][ T4091] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1217'. [ 168.271655][ T31] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 168.433039][ T31] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 168.441245][ T31] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.451192][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 168.459733][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.468870][ T31] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.477196][ T31] usb 6-1: Product: syz [ 168.481539][ T31] usb 6-1: Manufacturer: syz [ 168.486216][ T31] usb 6-1: SerialNumber: syz [ 168.491462][ T31] usb 6-1: config 0 descriptor?? [ 168.497318][ T31] hub 6-1:0.0: bad descriptor, ignoring hub [ 168.503277][ T31] hub 6-1:0.0: probe with driver hub failed with error -5 [ 168.511063][ T31] usb 6-1: selecting invalid altsetting 0 [ 168.713950][ T4101] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 168.825989][ T31] usb 6-1: USB disconnect, device number 45 [ 169.806985][ T36] audit: type=1400 audit(1769781487.037:463): avc: denied { mount } for pid=4129 comm="syz.1.1231" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 169.956481][ T4137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 170.296855][ T31] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 170.464505][ T36] audit: type=1400 audit(1769781487.647:464): avc: denied { create } for pid=4148 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 170.485365][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.495195][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 170.507786][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.517053][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.525588][ T31] usb 6-1: Product: syz [ 170.529955][ T31] usb 6-1: Manufacturer: syz [ 170.534691][ T31] usb 6-1: SerialNumber: syz [ 170.547140][ T31] usb 6-1: config 0 descriptor?? [ 170.590212][ T36] audit: type=1400 audit(1769781487.760:465): avc: denied { create } for pid=4154 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.610672][ T36] audit: type=1400 audit(1769781487.779:466): avc: denied { write } for pid=4154 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.631273][ T36] audit: type=1400 audit(1769781487.779:467): avc: denied { nlmsg_write } for pid=4154 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.777124][ T31] usb 6-1: USB disconnect, device number 46 [ 171.194061][ T36] audit: type=1400 audit(1769781488.332:468): avc: denied { execmem } for pid=4168 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.586493][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 171.746399][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 171.752901][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.763854][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.773744][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.787141][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 171.796344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.808435][ T10] usb 6-1: config 0 descriptor?? [ 171.824262][ T4177] overlay: ./bus is not a directory [ 172.992287][ T4202] overlay: ./bus is not a directory [ 173.078608][ T4213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:420 [ 173.101709][ T36] audit: type=1400 audit(1769781490.122:469): avc: denied { write } for pid=4214 comm="syz.0.1264" path="socket:[25050]" dev="sockfs" ino=25050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.134664][ T36] audit: type=1400 audit(1769781490.122:470): avc: denied { append } for pid=4214 comm="syz.0.1264" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 173.181645][ T4222] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1266'. [ 173.195725][ T4226] overlayfs: failed to clone upperpath [ 173.343748][ T4240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:439 [ 177.062874][ T36] audit: type=1326 audit(1769781493.837:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.1290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafae59aeb9 code=0x0 [ 177.598980][ T10] usbhid 6-1:0.0: can't add hid device: -32 [ 177.605029][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 177.626904][ T31] usb 6-1: USB disconnect, device number 47 [ 177.701663][ T4284] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1291'. [ 177.834894][ T4293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 178.098975][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 178.272974][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 178.282286][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.290409][ T10] usb 6-1: Product: syz [ 178.294725][ T10] usb 6-1: Manufacturer: syz [ 178.299611][ T10] usb 6-1: SerialNumber: syz [ 178.739227][ T4305] netlink: 420 bytes leftover after parsing attributes in process `syz.0.1300'. [ 178.950542][ T10] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 179.177608][ T10] usb 6-1: USB disconnect, device number 48 [ 179.177662][ C1] usb 6-1: Rx status -71 [ 179.188199][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 179.196890][ T150] usb 6-1: device reset failed [ 179.796115][ T4344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255 [ 179.989229][ T4350] kvm: kvm [4349]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 180.007356][ T4350] kvm: kvm [4349]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 180.153671][ T36] audit: type=1400 audit(1769781496.736:472): avc: denied { setattr } for pid=4354 comm="syz.5.1311" name="NETLINK" dev="sockfs" ino=25887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.305727][ T4364] netlink: 'syz.2.1315': attribute type 4 has an invalid length. [ 180.433242][ T45] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 180.595723][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 180.605299][ T45] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 180.617438][ T45] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 180.628905][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 180.637374][ T45] usb 6-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 180.646783][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.655007][ T45] usb 6-1: Product: syz [ 180.659678][ T45] usb 6-1: Manufacturer: syz [ 180.664360][ T45] usb 6-1: SerialNumber: syz [ 180.670733][ T4355] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 180.678160][ T4355] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 180.722847][ T4366] netlink: 'syz.2.1315': attribute type 4 has an invalid length. [ 180.886402][ T4374] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1320'. [ 180.960983][ T4382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1322'. [ 181.119723][ T45] usbhid 6-1:1.0: can't add hid device: -71 [ 181.125902][ T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 181.134942][ T45] usb 6-1: USB disconnect, device number 49 [ 181.650818][ T36] audit: type=1400 audit(1769781498.143:473): avc: denied { map } for pid=4395 comm="syz.1.1327" path="socket:[25450]" dev="sockfs" ino=25450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.683363][ T4399] /dev/sg0: Can't lookup blockdev [ 181.776885][ T4408] fuse: Bad value for 'fd' [ 181.781526][ T4409] fuse: Bad value for 'fd' [ 182.042700][ T361] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 182.204137][ T361] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 182.212252][ T361] usb 6-1: config 0 has no interface number 0 [ 182.218554][ T361] usb 6-1: config 0 interface 5 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.231479][ T361] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 182.240624][ T361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.249579][ T361] usb 6-1: config 0 descriptor?? [ 184.979633][ T369] usb 6-1: USB disconnect, device number 50 [ 185.336218][ T369] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 185.499041][ T369] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 185.508281][ T369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.516936][ T369] usb 6-1: Product: syz [ 185.521321][ T369] usb 6-1: Manufacturer: syz [ 185.526134][ T369] usb 6-1: SerialNumber: syz [ 185.574120][ T4472] rust_binder: Error while translating object. [ 185.574183][ T4472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 185.581141][ T4472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:481 [ 185.664675][ T4475] overlay: Unknown parameter 'subj_role' [ 185.682709][ T4475] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 185.691103][ T4475] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1359'. [ 185.747414][ T4480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 186.179952][ T369] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 186.425733][ T36] audit: type=1400 audit(1769781502.628:474): avc: denied { relabelfrom } for pid=4513 comm="syz.1.1368" name="NETLINK" dev="sockfs" ino=26766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.432001][ C1] usb 6-1: Rx status -71 [ 186.453176][ T36] audit: type=1400 audit(1769781502.628:475): avc: denied { relabelto } for pid=4513 comm="syz.1.1368" name="NETLINK" dev="sockfs" ino=26766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 186.455772][ C1] usb 6-1: eth1: intr status -71 [ 186.486831][ C1] usb 6-1: Rx status -71 [ 186.491294][ C1] usb 6-1: eth1: intr status -71 [ 186.496768][ C1] usb 6-1: Rx status -71 [ 186.501212][ C1] usb 6-1: eth1: intr status -71 [ 186.506520][ T369] usb 6-1: USB disconnect, device number 51 [ 186.512545][ C1] usb 6-1: Rx status -71 [ 186.512585][ C1] usb 6-1: eth1: intr status -71 [ 186.520585][ T150] usb 6-1: device reset failed [ 187.097756][ T4538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 187.281244][ T36] audit: type=1400 audit(1769781503.425:476): avc: denied { listen } for pid=4547 comm="syz.5.1377" path=0000204E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 187.595938][ T767] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 187.755770][ T767] usb 6-1: Using ep0 maxpacket: 8 [ 187.761984][ T767] usb 6-1: unable to get BOS descriptor or descriptor too short [ 187.770857][ T767] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 187.779649][ T767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.790143][ T767] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.799551][ T767] usb 6-1: config 1 has no interface number 1 [ 187.805760][ T767] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.818916][ T767] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.831916][ T767] usb 6-1: config 1 interface 2 has no altsetting 0 [ 187.840643][ T767] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.849807][ T767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.858040][ T767] usb 6-1: Product: syz [ 187.862519][ T767] usb 6-1: Manufacturer: syz [ 187.867778][ T767] usb 6-1: SerialNumber: syz [ 188.631838][ T767] usb 6-1: USB disconnect, device number 52 [ 188.650203][ T4584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:290 [ 188.922531][ T4588] Invalid ELF header len 1 [ 189.024383][ T767] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 189.206589][ T767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 189.216526][ T767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 189.227059][ T767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 189.236893][ T767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 189.249100][ T767] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 189.258417][ T767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.272817][ T767] usb 6-1: Product: syz [ 189.277661][ T767] usb 6-1: Manufacturer: syz [ 189.286318][ T767] usb 6-1: SerialNumber: syz [ 189.301573][ T767] usb 6-1: config 0 descriptor?? [ 189.312666][ T767] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 189.339251][ T36] audit: type=1400 audit(1769781505.358:477): avc: denied { associate } for pid=4600 comm="syz.1.1395" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 189.364935][ T36] audit: type=1400 audit(1769781505.358:478): avc: denied { remount } for pid=4591 comm="syz.1.1395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 189.529384][ T4586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.539188][ T4586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.549123][ T767] scsi host1: usb-storage 6-1:0.0 [ 189.559945][ T767] usb 6-1: USB disconnect, device number 53 [ 189.987064][ T4614] Invalid ELF header len 1 [ 190.200749][ T4617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:295 [ 190.580442][ T767] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 190.752349][ T767] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 190.760655][ T767] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.770783][ T767] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.779975][ T767] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.789451][ T767] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.797705][ T767] usb 6-1: Product: syz [ 190.801973][ T767] usb 6-1: Manufacturer: syz [ 190.806719][ T767] usb 6-1: SerialNumber: syz [ 190.814625][ T767] usb 6-1: config 0 descriptor?? [ 190.820719][ T767] hub 6-1:0.0: bad descriptor, ignoring hub [ 190.826771][ T767] hub 6-1:0.0: probe with driver hub failed with error -5 [ 190.834660][ T767] usb 6-1: selecting invalid altsetting 0 [ 191.156360][ T767] usb 6-1: USB disconnect, device number 54 [ 191.902018][ T767] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 192.061921][ T767] usb 6-1: Using ep0 maxpacket: 16 [ 192.068562][ T767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.080299][ T767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.090301][ T767] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 192.099593][ T767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.108376][ T767] usb 6-1: config 0 descriptor?? [ 192.497872][ T4649] Invalid ELF header len 1 [ 192.549994][ T767] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 192.741062][ T4649] rust_binder: Error in use_page_slow: ESRCH [ 192.741084][ T4649] rust_binder: use_range failure ESRCH [ 192.747211][ T4649] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 192.752893][ T4649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 192.761172][ T4649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:501 [ 192.781427][ T767] usb 6-1: USB disconnect, device number 55 [ 192.831322][ T4663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 193.110286][ T4669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:506 [ 193.391514][ T4678] netlink: 'syz.2.1432': attribute type 27 has an invalid length. [ 193.413930][ T4678] sit0: left promiscuous mode [ 193.439840][ T1565] ip6_tunnel: M xmit: Local address not yet configured! [ 193.447171][ T1565] ip6_tunnel: M xmit: Local address not yet configured! [ 193.456847][ T4678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4678 comm=syz.2.1432 [ 193.479669][ T767] ip6_tunnel: M xmit: Local address not yet configured! [ 193.513699][ T36] audit: type=1400 audit(1769781509.270:479): avc: denied { append } for pid=4684 comm="syz.5.1435" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.515788][ T4685] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 193.545955][ T4685] rust_binder: Write failure EINVAL in pid:308 [ 193.562327][ T4689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 193.640320][ T4691] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1438'. [ 193.692775][ T767] ip6_tunnel: M xmit: Local address not yet configured! [ 193.820629][ T9] ip6_tunnel: M xmit: Local address not yet configured! [ 193.959325][ T767] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 194.120884][ T767] usb 6-1: unable to get BOS descriptor or descriptor too short [ 194.129155][ T767] usb 6-1: not running at top speed; connect to a high speed hub [ 194.137135][ T767] usb 6-1: too many configurations: 170, using maximum allowed: 8 [ 194.145977][ T767] usb 6-1: config index 0 descriptor too short (expected 16402, got 18) [ 194.154453][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.163085][ T767] usb 6-1: config 251 has no interface number 0 [ 194.169396][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.177419][ T767] usb 6-1: config index 1 descriptor too short (expected 16402, got 18) [ 194.185931][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.194683][ T767] usb 6-1: config 251 has no interface number 0 [ 194.201244][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.209258][ T767] usb 6-1: config index 2 descriptor too short (expected 16402, got 18) [ 194.217873][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.226711][ T767] usb 6-1: config 251 has no interface number 0 [ 194.233020][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.241676][ T767] usb 6-1: config index 3 descriptor too short (expected 16402, got 18) [ 194.250325][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.258983][ T767] usb 6-1: config 251 has no interface number 0 [ 194.265307][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.273837][ T767] usb 6-1: config index 4 descriptor too short (expected 16402, got 18) [ 194.282630][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.291283][ T767] usb 6-1: config 251 has no interface number 0 [ 194.297589][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.305470][ T767] usb 6-1: config index 5 descriptor too short (expected 16402, got 18) [ 194.314360][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.322768][ T767] usb 6-1: config 251 has no interface number 0 [ 194.329064][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.337595][ T767] usb 6-1: config index 6 descriptor too short (expected 16402, got 18) [ 194.346073][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.354674][ T767] usb 6-1: config 251 has no interface number 0 [ 194.360976][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.370788][ T767] usb 6-1: config index 7 descriptor too short (expected 16402, got 18) [ 194.379431][ T767] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 194.395493][ T767] usb 6-1: config 251 has no interface number 0 [ 194.402199][ T767] usb 6-1: config 251 interface 156 has no altsetting 0 [ 194.410923][ T767] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 194.423149][ T767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=229 [ 194.431916][ T767] usb 6-1: Product: syz [ 194.436266][ T767] usb 6-1: Manufacturer: syz [ 194.441265][ T767] usb 6-1: SerialNumber: syz [ 194.451893][ T4706] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1444'. [ 194.571858][ T4709] overlayfs: failed to clone upperpath [ 195.348477][ T36] audit: type=1326 audit(1769781510.996:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4707 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66399aeb9 code=0x7fc00000 [ 195.761643][ T4730] Invalid ELF header len 1 [ 196.356189][ T4736] bridge0: port 3(veth0_to_bridge) entered blocking state [ 196.363504][ T4736] bridge0: port 3(veth0_to_bridge) entered disabled state [ 196.371391][ T4736] veth0_to_bridge: entered allmulticast mode [ 196.378509][ T4736] veth0_to_bridge: entered promiscuous mode [ 196.384981][ T4736] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.399818][ T4736] bridge0: port 3(veth0_to_bridge) entered blocking state [ 196.407277][ T4736] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 196.417036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.429467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.441805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.454219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.466673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.478954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.491442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.503708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.516002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.528479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.802324][ T767] usb 6-1: cannot find UAC_HEADER [ 196.817612][ T767] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 196.833420][ T767] usb 6-1: USB disconnect, device number 56 [ 196.852503][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.878673][ T4746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315 [ 196.924098][ T4748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1463'. [ 197.013590][ T4753] Invalid ELF header len 1 [ 197.317854][ T4758] rust_binder: Error in use_page_slow: ESRCH [ 197.317886][ T4758] rust_binder: use_range failure ESRCH [ 197.323959][ T4758] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 197.348562][ T4758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.358789][ T4758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:320 [ 197.440989][ T4769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323 [ 197.732290][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 197.806964][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 197.905382][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 197.927944][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.938827][ T9] usb 6-1: Product: syz [ 197.952119][ T9] usb 6-1: Manufacturer: syz [ 197.962882][ T9] usb 6-1: SerialNumber: syz [ 198.007871][ T4788] Invalid ELF header len 1 [ 198.622256][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:d8:bf:4f:60:83 [ 198.640964][ T9] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 198.885868][ T9] usb 6-1: USB disconnect, device number 57 [ 199.023938][ T4824] Invalid ELF header len 1 [ 200.089002][ T36] audit: type=1400 audit(1769781515.434:481): avc: denied { read } for pid=4866 comm="syz.2.1500" path="socket:[28146]" dev="sockfs" ino=28146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.191713][ T4871] Invalid ELF header len 1 [ 200.704417][ T4892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 201.354247][ T4921] Invalid ELF header len 1 [ 201.750598][ C1] net_ratelimit: 48417 callbacks suppressed [ 201.750622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.769006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.781333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.793673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.805930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.818288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.830762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.843151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.855491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.861970][ T4937] overlayfs: failed to clone lowerpath [ 201.868206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.073952][ T4944] Invalid ELF header len 1 [ 202.296576][ T4945] rust_binder: Error in use_page_slow: ESRCH [ 202.296608][ T4945] rust_binder: use_range failure ESRCH [ 202.313848][ T4945] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 202.323607][ T4945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 202.335842][ T4945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:354 [ 202.503750][ T4951] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1535'. [ 202.718729][ T4966] Invalid ELF header len 1 [ 202.816475][ T361] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 203.000234][ T361] usb 6-1: Using ep0 maxpacket: 8 [ 203.015818][ T361] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.035976][ T361] usb 6-1: config 1 has no interface number 1 [ 203.050995][ T361] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 203.076304][ T361] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 203.105720][ T361] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.125570][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.140064][ T361] usb 6-1: Product: syz [ 203.144309][ T361] usb 6-1: Manufacturer: syz [ 203.153140][ T361] usb 6-1: SerialNumber: syz [ 203.385114][ T4956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.399935][ T4956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.417610][ T361] usb 6-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 203.438503][ T361] usb 6-1: USB disconnect, device number 58 [ 203.805338][ T4991] Invalid ELF header len 1 [ 204.116468][ T5000] overlayfs: failed to clone upperpath [ 204.141540][ T5000] overlayfs: failed to clone upperpath [ 204.158254][ T5005] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 204.170166][ T36] audit: type=1400 audit(1769781519.262:482): avc: denied { read } for pid=4998 comm="syz.0.1554" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.201783][ T36] audit: type=1400 audit(1769781519.262:483): avc: denied { open } for pid=4998 comm="syz.0.1554" path="/211/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.229988][ T5009] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 204.241708][ T36] audit: type=1400 audit(1769781519.262:484): avc: denied { ioctl } for pid=4998 comm="syz.0.1554" path="/211/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.296043][ T5013] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1557'. [ 204.323580][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1557'. [ 204.581305][ T36] audit: type=1107 audit(1769781519.656:485): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' `DNyn*J{>j54iq4i Ho# _ /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.722910][ T36] audit: type=1400 audit(1769781656.380:493): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2851]" dev="pipefs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 350.760260][ T37] task:syz.0.1582 state:D stack:0 pid:5108 tgid:5105 ppid:291 flags:0x00004006 [ 350.760327][ T37] Call Trace: [ 350.760337][ T37] [ 350.760349][ T37] __schedule+0x134f/0x1ea0 [ 350.880879][ T37] ? __sched_text_start+0x10/0x10 [ 350.886009][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 350.891905][ T37] ? rcu_barrier_entrain+0x36c/0x4f0 [ 350.897239][ T37] schedule+0xc5/0x240 [ 350.901395][ T37] schedule_timeout+0xc7/0x3b0 [ 350.906214][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 350.911683][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 350.917291][ T37] ? generic_exec_single+0x206/0x500 [ 350.922686][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 350.928432][ T37] wait_for_common+0x369/0x650 [ 350.933302][ T37] ? wait_for_completion+0x40/0x40 [ 350.938468][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 350.945074][ T37] ? xa_find+0x145/0x170 [ 350.949366][ T37] wait_for_completion+0x1c/0x40 [ 350.954408][ T37] rcu_barrier+0x415/0x540 [ 350.958871][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 350.964314][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 350.969119][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 350.974315][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 350.979996][ T37] ? __kasan_check_write+0x18/0x20 [ 350.985178][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 350.990874][ T37] ? free_pages+0x86/0x90 [ 350.995261][ T37] kvm_put_kvm+0xb04/0x12c0 [ 350.999804][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 351.005075][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 351.010749][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 351.016014][ T37] kvm_vm_release+0x47/0x70 [ 351.020568][ T37] __fput+0x1fe/0xa00 [ 351.024582][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.030198][ T37] ____fput+0x20/0x30 [ 351.034224][ T37] task_work_run+0x1e5/0x260 [ 351.038974][ T37] ? __cfi_task_work_run+0x10/0x10 [ 351.044149][ T37] ? __kasan_check_write+0x18/0x20 [ 351.049653][ T37] do_exit+0x9e3/0x2650 [ 351.053858][ T37] ? down_interruptible+0x5b/0xe0 [ 351.058964][ T37] ? __cfi_do_exit+0x10/0x10 [ 351.063616][ T37] ? raw_ioctl+0x333d/0x37e0 [ 351.068264][ T37] ? __kasan_check_write+0x18/0x20 [ 351.073453][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 351.078619][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.084253][ T37] do_group_exit+0x229/0x2f0 [ 351.088963][ T37] ? __kasan_check_write+0x18/0x20 [ 351.094140][ T37] get_signal+0x1398/0x14e0 [ 351.098705][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 351.104346][ T37] ? __fget_files+0x2c5/0x340 [ 351.109062][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 351.115294][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 351.120205][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 351.125755][ T37] do_syscall_64+0x63/0xf0 [ 351.130220][ T37] ? clear_bhb_loop+0x50/0xa0 [ 351.135533][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.141467][ T37] RIP: 0033:0x7f8399b9ab4b [ 351.146025][ T37] RSP: 002b:00007f839aa72f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.154680][ T37] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f8399b9ab4b [ 351.162697][ T37] RDX: 00007f839aa73fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 351.170742][ T37] RBP: 00007f839aa73fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 351.178778][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 351.186804][ T37] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f8399c092e9 [ 351.194814][ T37] [ 351.228586][ T37] NMI backtrace for cpu 1 [ 351.228609][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 351.228640][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.228661][ T37] Call Trace: [ 351.228670][ T37] [ 351.228681][ T37] __dump_stack+0x21/0x30 [ 351.228714][ T37] dump_stack_lvl+0x140/0x1c0 [ 351.228742][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 351.228772][ T37] dump_stack+0x19/0x20 [ 351.228800][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 351.228831][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 351.228858][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 351.228888][ T37] ? sched_show_task+0x371/0x530 [ 351.228915][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 351.228942][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.228969][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.229024][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 351.229054][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 351.229079][ T37] watchdog+0xdad/0xf00 [ 351.229110][ T37] ? __kasan_check_write+0x18/0x20 [ 351.229139][ T37] ? __cfi_watchdog+0x10/0x10 [ 351.229172][ T37] ? __kasan_check_read+0x15/0x20 [ 351.229198][ T37] ? __kthread_parkme+0x137/0x180 [ 351.229230][ T37] ? schedule+0xc5/0x240 [ 351.229250][ T37] kthread+0x2c9/0x370 [ 351.229271][ T37] ? __cfi_watchdog+0x10/0x10 [ 351.229303][ T37] ? __cfi_kthread+0x10/0x10 [ 351.229325][ T37] ret_from_fork+0x67/0xa0 [ 351.229353][ T37] ? __cfi_kthread+0x10/0x10 [ 351.229376][ T37] ret_from_fork_asm+0x1a/0x30 [ 351.229409][ T37] [ 351.229423][ T37] Sending NMI from CPU 1 to CPUs 0: [ 351.271557][ C0] net_ratelimit: 123129 callbacks suppressed [ 351.271579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.271984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.272046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.603737][ C0] NMI backtrace for cpu 0 [ 351.603761][ C0] CPU: 0 UID: 0 PID: 5209 Comm: syz-executor Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 351.603785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.603797][ C0] RIP: 0010:kasan_init_object_meta+0x2e/0x40 [ 351.603825][ C0] Code: 48 63 87 e8 00 00 00 48 85 c0 0f 94 c1 48 01 c6 0f 94 c0 08 c8 75 14 55 48 89 e5 ba 10 00 00 00 48 89 f7 31 f6 e8 42 6b bf 03 <5d> e9 fc b5 c1 03 cc 66 2e 0f 1f 84 00 00 00 00 00 90 b8 00 00 00 [ 351.603839][ C0] RSP: 0018:ffffc90000006d48 EFLAGS: 00000246 [ 351.603855][ C0] RAX: ffff8881b60c7060 RBX: ffff8881b60c7040 RCX: 0000000000000000 [ 351.603868][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881b60c7070 [ 351.603879][ C0] RBP: ffffc90000006d48 R08: dffffc0000000000 R09: 0000000000000000 [ 351.603890][ C0] R10: ffff8881b60c7060 R11: ffffed1022de2c90 R12: 0000000000000033 [ 351.603902][ C0] R13: ffff8881b60c7140 R14: ffffea0006d831c0 R15: 0000000000000008 [ 351.603914][ C0] FS: 000055557941c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 351.603929][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.603940][ C0] CR2: 00007fadd1b47e20 CR3: 000000010bb48000 CR4: 00000000003526b0 [ 351.603956][ C0] Call Trace: [ 351.603962][ C0] [ 351.603968][ C0] __kasan_init_slab_obj+0x11/0x20 [ 351.603992][ C0] setup_object+0x14/0xf0 [ 351.604015][ C0] allocate_slab+0x258/0x420 [ 351.604038][ C0] ___slab_alloc+0x5a2/0x8d0 [ 351.604059][ C0] ? NF_HOOK+0x17e/0x1e0 [ 351.604076][ C0] ? ref_tracker_alloc+0x184/0x590 [ 351.604095][ C0] ? br_handle_frame_finish+0x1317/0x1760 [ 351.604120][ C0] ? process_backlog+0x3e5/0xad0 [ 351.604139][ C0] ? __napi_poll+0xd3/0x610 [ 351.604158][ C0] __kmalloc_cache_noprof+0x2cd/0x470 [ 351.604177][ C0] ? ops_init+0x1af/0x5d0 [ 351.604192][ C0] ? ref_tracker_alloc+0x184/0x590 [ 351.604211][ C0] ref_tracker_alloc+0x184/0x590 [ 351.604229][ C0] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 351.604249][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 351.604272][ C0] dst_init+0xcf/0x420 [ 351.604294][ C0] dst_alloc+0x163/0x250 [ 351.604323][ C0] ip_route_input_rcu+0x1a0e/0x2700 [ 351.604347][ C0] ? ip_route_input_noref+0x150/0x150 [ 351.604372][ C0] ? __asan_memcpy+0x5a/0x80 [ 351.604391][ C0] ? arpt_do_table+0x1ba7/0x1d80 [ 351.604408][ C0] ip_route_input_noref+0xd4/0x150 [ 351.604431][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 351.604454][ C0] ? __asan_memcpy+0x5a/0x80 [ 351.604473][ C0] arp_process+0x908/0x1790 [ 351.604491][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604509][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604526][ C0] NF_HOOK+0x17e/0x1e0 [ 351.604541][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604557][ C0] ? arp_xmit+0x210/0x210 [ 351.604575][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604592][ C0] ? br_dev_queue_push_xmit+0x55c/0x700 [ 351.604615][ C0] arp_rcv+0x2f8/0x490 [ 351.604631][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 351.604647][ C0] netif_receive_skb+0x22a/0x7b0 [ 351.604667][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 351.604686][ C0] ? br_flood+0x67e/0x730 [ 351.604707][ C0] br_pass_frame_up+0x126/0x1b0 [ 351.604730][ C0] br_handle_frame_finish+0x1317/0x1760 [ 351.604753][ C0] ? ksys_unshare+0x502/0x880 [ 351.604772][ C0] ? __x64_sys_unshare+0x3c/0x50 [ 351.604792][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 351.604818][ C0] br_handle_frame+0x5a6/0xba0 [ 351.604841][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 351.604864][ C0] __netif_receive_skb_core+0xfae/0x3ab0 [ 351.604882][ C0] ? dst_release+0xe3/0x240 [ 351.604906][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604923][ C0] ? qdisc_run_end+0x120/0x120 [ 351.604940][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604957][ C0] ? NF_HOOK+0x17e/0x1e0 [ 351.604971][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.604988][ C0] ? arp_xmit+0x210/0x210 [ 351.605003][ C0] ? __cfi_arp_process+0x10/0x10 [ 351.605019][ C0] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 351.605041][ C0] ? __cfi_resched_curr+0x10/0x10 [ 351.605062][ C0] ? update_rq_clock+0x325/0x7d0 [ 351.605084][ C0] process_backlog+0x3e5/0xad0 [ 351.605105][ C0] __napi_poll+0xd3/0x610 [ 351.605123][ C0] net_rx_action+0x5ea/0xd80 [ 351.605144][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 351.605164][ C0] ? timer_expire_remote+0xa0/0xa0 [ 351.605180][ C0] ? sched_clock+0x44/0x60 [ 351.605199][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 351.605218][ C0] handle_softirqs+0x1aa/0x630 [ 351.605242][ C0] __do_softirq+0xf/0x16 [ 351.605257][ C0] do_softirq+0xb8/0x110 [ 351.605278][ C0] [ 351.605284][ C0] [ 351.605290][ C0] ? __cfi_do_softirq+0x10/0x10 [ 351.605316][ C0] ? _raw_write_lock_bh+0x96/0xf0 [ 351.605340][ C0] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 351.605363][ C0] ? ksys_unshare+0x502/0x880 [ 351.605381][ C0] ? __asan_memcpy+0x5a/0x80 [ 351.605400][ C0] __local_bh_enable_ip+0x74/0x80 [ 351.605421][ C0] _raw_write_unlock_bh+0x33/0x70 [ 351.605445][ C0] neigh_parms_alloc+0x41b/0x5c0 [ 351.605463][ C0] ipv6_add_dev+0x324/0x1420 [ 351.605483][ C0] ? macsec_notify+0x111/0x4f0 [ 351.605501][ C0] addrconf_notify+0x56e/0xea0 [ 351.605526][ C0] ? __cfi_addrconf_notify+0x10/0x10 [ 351.605549][ C0] notifier_call_chain+0x10e/0x2b0 [ 351.605574][ C0] raw_notifier_call_chain+0x31/0x40 [ 351.605597][ C0] call_netdevice_notifiers+0x11d/0x1a0 [ 351.605620][ C0] ? __cfi_call_netdevice_notifiers+0x10/0x10 [ 351.605642][ C0] ? list_netdevice+0x662/0x790 [ 351.605657][ C0] ? __asan_memcpy+0x5a/0x80 [ 351.605676][ C0] register_netdevice+0x1308/0x19d0 [ 351.605692][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 351.605711][ C0] ? __cfi_register_netdevice+0x10/0x10 [ 351.605728][ C0] ? __asan_memcpy+0x5a/0x80 [ 351.605746][ C0] __ip_tunnel_create+0x3a1/0x4e0 [ 351.605764][ C0] ? ip_tunnel_init_net+0x890/0x890 [ 351.605782][ C0] ip_tunnel_init_net+0x31c/0x890 [ 351.605799][ C0] ? __cfi_ip_tunnel_init_net+0x10/0x10 [ 351.605817][ C0] ? __kmalloc_noprof+0x261/0x500 [ 351.605836][ C0] ? ops_init+0x81/0x5d0 [ 351.605850][ C0] erspan_init_net+0x2d/0x40 [ 351.605865][ C0] ops_init+0x1af/0x5d0 [ 351.605880][ C0] ? rwsem_read_trylock+0x274/0x5b0 [ 351.605901][ C0] ? get_random_bytes+0x40/0x40 [ 351.605921][ C0] ? downgrade_write+0x460/0x460 [ 351.605941][ C0] setup_net+0x227/0x9b0 [ 351.605965][ C0] ? copy_net_ns+0xa30/0xa30 [ 351.605994][ C0] ? down_read_killable+0x7f/0x100 [ 351.606013][ C0] ? __cfi_down_read_killable+0x10/0x10 [ 351.606033][ C0] copy_net_ns+0x512/0xa30 [ 351.606057][ C0] create_new_namespaces+0x3b5/0x720 [ 351.606079][ C0] unshare_nsproxy_namespaces+0x124/0x180 [ 351.606106][ C0] ksys_unshare+0x502/0x880 [ 351.606125][ C0] ? __cfi_ksys_unshare+0x10/0x10 [ 351.606144][ C0] ? __kasan_check_read+0x15/0x20 [ 351.606163][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 351.606182][ C0] __x64_sys_unshare+0x3c/0x50 [ 351.606200][ C0] x64_sys_call+0x2998/0x2ee0 [ 351.606222][ C0] do_syscall_64+0x57/0xf0 [ 351.606244][ C0] ? clear_bhb_loop+0x50/0xa0 [ 351.606267][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.606288][ C0] RIP: 0033:0x7ff14b19c1a7 [ 351.606302][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.606323][ C0] RSP: 002b:00007fff0e7ee8a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 351.606340][ C0] RAX: ffffffffffffffda RBX: 00007ff14b415f40 RCX: 00007ff14b19c1a7 [ 351.606353][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 351.606364][ C0] RBP: 00007ff14b4167b8 R08: 0000000000000000 R09: 0000000000000000 [ 351.606374][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 351.606385][ C0] R13: 0000000000000003 R14: 00007fff0e7eeae8 R15: 0000000000000000 [ 351.606398][ C0] [ 356.610884][ C0] net_ratelimit: 113180 callbacks suppressed [ 356.610909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.610913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.611128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.617218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.629268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.641249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.653256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.665217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.677260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.689214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)