last executing test programs: 5.644131227s ago: executing program 3 (id=29): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x3, 0xe9, 0x1, 0x9, 0x4, 0x6}, {0x6, 0x6, 0xa, 0xc1, 0x7, 0x1, 0x47, 0xf1, 0x7, 0x8b, 0x44, 0x7d, 0x3fffffffffe}, {0x7fffffff, 0x4, 0x1, 0x2, 0x5a, 0x9, 0x8, 0xf8, 0x5, 0x6, 0x3, 0x3, 0x4}], 0x800000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000080), 0x0, 0xfe, 0x2) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.360543323s ago: executing program 2 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x1c, 0x81, 0x0, 0x7, 0x0}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0xff1c) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x873f, 0x8001, 0xfefe, 0x80000003, 0xffffffff}, 0x14) shutdown(r2, 0x1) syz_usb_connect(0x3, 0x7d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cfadcb403d1bda0168790102030109026b0001000000100904630002fc3eaa000b24060001d615817b6fb6052c0000000d240f01800000008200ff010806241a0200060724148000390007241402000600122407060000090004000700bd40010004000424020009058602ff0300000009058202"], 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000280)={0x5, 0x10001, 0x400, 0x2f, 0xac, "0323494c1027336e33b7d3bcffebdba55a164c", 0x101, 0x50}) sendto$inet(r2, &(0x7f0000000180)="83560d3298a8f74c20d73c2c0576d69f9a8d541d958f88e20676ba0e5b09282aabea89f500e4591f82523126d62bcaaa2a82dafaae6ff94ee39702bd642ff0884ab01252b7752b669f5400942f0eb98ed5cc10f2af92ca3e493e18b20a08caa0", 0x60, 0x20000010, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 4.185921003s ago: executing program 3 (id=33): userfaultfd(0x80001) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001940)=""/4099, 0x1003}, {&(0x7f0000000100)=""/194, 0xc8}, {&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000004580)=""/4094, 0xffe}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2e00}], 0x4, 0x20, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/224, 0xe0, 0x0, 0x3a}, @fda={0x66646185, 0xa, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xe}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000005c0)="e5a5cc75004ba5ab52e0c97bd12ecfc28eaf8ea9cf0f57f7f3fd2b45283b073fd94b00af4595db5816a22f24a32e5b8f9d9210a9384b09489a92fe50d52d7dbb13faf880c4916d955b1ed15b3209cdf2"}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="0fc72a66baf80cb8f87eb884ef66bafc0cec0f070f01cfb9830300000f3264f30fc776b1650f2142c4c22dbac8660f6c8925e9231765660f3835ea", 0x3b}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 3.152741224s ago: executing program 3 (id=37): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x40, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x40, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 2.736314399s ago: executing program 2 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) r3 = open(&(0x7f0000000180)='.\x00', 0x40080, 0x1a8) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00', 0x4) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0xfffffffa, 0x99, 0x3, 0x2, 0x4, 0x1, 0x7, 0x9, 0x6, 0x40, 0x3, 0x1, 0x80000001}, {0x7, 0x80, 0x7f, 0x3, 0x0, 0x1, 0x5, 0x0, 0xc2, 0x10, 0x0, 0xe, 0x7f}, {0x61, 0x6, 0x3, 0x5, 0xa, 0x8, 0x6, 0x6, 0x4, 0xd, 0x5, 0x7, 0x9}], 0x7f76}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x1}, 0x0) 2.622881006s ago: executing program 2 (id=41): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, 0x31, 0x100, 0x70bd28, 0x25dfdbfe, {0x5}, [@nested={0x151, 0x6e, 0x0, 0x1, [@nested={0x4, 0x137}, @nested={0x4, 0xf8}, @generic="a9fb049e312a5eb8b3110a5f576779541784d8a16769f1099c5d21c6869af052c1661135a1f4393c3ce316890eba2d563615d7728ab7b62be9a6e197eabaeb7c5f2c130229fbee3d1a18ff9ca5831ecb9685a372cb7dcb889df99a343dec2d59c6d11dbb8b39594886369862967f5e025dcd1343da94368db9ec3e549654eefdda551c759e247fe3a394920a33f0a0ba4a4194fa4c2c7803f8d05390fc2499f3b8a779df63964cdcfad9c254cf", @typed={0x8, 0xf8, 0x0, 0x0, @fd=r1}, @generic="efebf19572782de17127c6dd8e097aafdf4c6ee360cd392b5b8dc6d260c5c71feab7c0633f15c18dcc64adcc8730e068f39acc775e6295053be6714468df047f687c7a2ae82ed318197cf3b031ec1d1cb825a888a9688e278ef10a3259e0048fa3a832b30ff0a6e7a1465974a4e19540466228fce2942c932aa1d71ede7c2a4a1f88596b674d9a3b11651ae625bbaee8"]}, @generic="2b7751bbfc30ecb1effb056db03bfb531ea89821e3e61790f2b7913a1aefa37a47881f2bec002d05d627fc557d1738ca7853504cad7a895f021a94cd64f3aa6d700174223e48eeb31d5465afb3ce785f632aba007e4ff79f210c5df57d6303679d98ac6a881e3aca1ebb67d47e42d08c3243d905a19148e3658dffd7640eee"]}, 0x1e8}}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20060010) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000540)={0x4, 0x2}) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000580)=r4) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f00000005c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4d6, 0x5, 0x80, 0x95}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x0, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x648, 0x4, 0x100000000, 0x6}}, @nested_load_code={0x12e, 0x85, {0x1, "66baf80cb898956985ef66bafc0c66ed430f01d1c4a16e58898feb000048b8f8000000000000000f23c00f21f83500000b000f23f866baf80cb8bdcf368fef66bafc0cec66ba4200edc4027d45ec660f3881b5e0e2000066baf80cb894da3787ef66bafc0c66b8bc0066ef0f07"}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x86cb}}, @nested_load_syzos={0x136, 0x68, {0x1, 0x57, [@wrmsr={0x65, 0x20, {0x771, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}]}}, @wr_crn={0x67, 0x20, {0x4, 0x7dcb}}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x8000, 0xbdcb}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x2dd}}, @set_irq_handler={0xc8, 0x20, {0x72, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0x100, 0x6, 0x8}}, @in_dx={0x69, 0x20, {0x4795, 0x1}}, @rdmsr={0x66, 0x18, {0x38a}}, @out_dx={0x6a, 0x28, {0x229f, 0x7, 0xd}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x493, 0x80000, 0x4, 0x5}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xa5, 0x4000, 0x3, 0x107}}, @out_dx={0x6a, 0x28, {0xd028, 0x6, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x0, 0x3}}, @rdmsr={0x66, 0x18, {0xb0a}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x6, 0xc}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xac, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x6, 0xe6, 0x7fff}}, @nested_amd_vmsave={0x183, 0x18}], 0x4e5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) fcntl$getownex(r2, 0x10, &(0x7f0000000cc0)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xd0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x40a}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd8a}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x32a32a63}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x44085) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, r3, 0x22d, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xc854) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000001140)=0x4000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000001180)) r10 = pidfd_getfd(r2, r0, 0x0) timerfd_settime(r10, 0x3, 0xfffffffffffffffe, &(0x7f00000011c0)) 2.604878937s ago: executing program 1 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x101, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x22}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000a40)=0x2, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x82801, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x206c) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) ftruncate(r5, 0x3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) 2.499017193s ago: executing program 2 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x7d3746, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="edf60066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x3f}], 0x1, 0x43, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0x2000775) r7 = dup(r6) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req={0x9, 0x9, 0x3, 0x6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000140)=ANY=[], 0xfdef) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000086b2a01014000010203010902930003010000000904000000010100000a24010000800201021324060000060000000000000700eaffffff1a0924030000000104000924050000f8431cfd09240300020300040006240504000009040100000102000009040101010102000009050109000000ae000725018300000009040200000102000009040201010102000009057c09000000000007250100000000"], 0x0) 1.708146969s ago: executing program 3 (id=45): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088f74803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.673563701s ago: executing program 1 (id=46): setuid(0xee01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000000, 0x0, 0xfffffffffffffffe}, {0x40000001, 0x0, 0x20000a}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0903ffffffff0000f6ff29"], 0x14}, 0x1, 0x0, 0x0, 0xc855}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0903ffffffff0000f6ff29"], 0x14}, 0x1, 0x0, 0x0, 0xc855}, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) 1.609246025s ago: executing program 3 (id=47): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x8004000, 0x0, 0x2, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0xff, 0x2, 0x0, 0x5}, 0x20) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.562773088s ago: executing program 1 (id=48): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}, 0xa) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010100}, 0xc) 1.561022128s ago: executing program 3 (id=49): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x210, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x4030) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x1000, 0x80000) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x10012, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00001c3000/0x3000)=nil, 0x3000, 0x2) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0xe, 0x0, &(0x7f000001b8c0)) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.519281241s ago: executing program 1 (id=50): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0002, 0x0) close(r0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x3141850, &(0x7f0000000200)={[{@metacopy_on}, {@nfs_export_on}, {@metacopy_on}, {@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}, {@xino_auto}, {@redirect_dir_off}, {@userxattr}], [{@dont_appraise}]}) r1 = socket(0x8000000010, 0x2, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x12, 0x11, 0x9, 0x16, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x4, 0x0, {0x6, 0x2b, 0x2, 0x7f, 0x0, 0x5, 0x0, @in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd25}, @sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0xb6, 0xcc, 0x3, 0x20000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x8d}, @sadb_key={0x3, 0x8, 0x50, 0x0, "86d61942067dbd71df7f"}]}, 0xb0}}, 0xc845) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'bridge_slave_1\x00', 0x1800}) 1.372378379s ago: executing program 1 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004300)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x48000) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x7, 0x5, 0x2, 0x4, 0x9, 0xffffffff, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x204701, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x80000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x5523) fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r7, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff16}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) 1.213402918s ago: executing program 1 (id=52): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic={0xa000, 0x8000, 0x7, 0xa2b, 0x0, [{0x5, 0x2, 0x5, '\x00', 0x8}, {0xc, 0x1a, 0xe, '\x00', 0x8}, {0x5, 0x1, 0x0, '\x00', 0x5f}, {0xd, 0x9, 0x7, '\x00', 0x7}, {0xfa, 0x1, 0x7f, '\x00', 0xc}, {0xf5, 0x5, 0x7, '\x00', 0x10}, {0x1, 0xba, 0x81, '\x00', 0x1}, {0x7a, 0x2, 0xff, '\x00', 0xf}, {0x2, 0x4, 0x7, '\x00', 0x6}, {0xaa, 0xe, 0x3, '\x00', 0x35}, {0x8e, 0x0, 0x6, '\x00', 0x3}, {0x3, 0x2, 0x4, '\x00', 0x1}, {0xf9, 0x1, 0x9d, '\x00', 0xb5}, {0x5, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x7f, 0xe, '\x00', 0xac}, {0x7, 0xfe, 0x0, '\x00', 0x8}, {0x4, 0x9, 0x9, '\x00', 0x7}, {0x8, 0xd, 0x1, '\x00', 0x7f}, {0x2a, 0x96, 0x3}, {0x7, 0x3, 0xa}, {0x7, 0x40, 0xff, '\x00', 0x2}, {0x4, 0x7f, 0x40, '\x00', 0xff}, {0x0, 0x8, 0x9, '\x00', 0x29}, {0xd3, 0x6, 0x4, '\x00', 0x5}]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r0, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x1000000, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000780)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027f0003011010060904000000010100000a24010180010201020a240701000000d885700904010000010200000904010101010200000905010940001404cc07250101800400090402000001020000090402010101020000062401010500100f240202966802000221d53c71e3fa0905820908"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 1.00496528s ago: executing program 2 (id=53): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xeb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x5, 0x7, 0x4, 0x40, 0x3}, 0xe1, &(0x7f00000004c0)=ANY=[@ANYBLOB="050fe10006071002004707004e10035d3a3f568880c611d90b45fe5f2337bbfc697d72ad4322bcef8611f748e1ac11b3c1c69e903e9c23a9260352ded9565c341534f736c9f0c5d12f5680365f164ce4e0b77e5c16c1149c592f6f1002a845b6d5c898e489619f7f32266e9d14316d711941dc7c81aaf3e05e8aa66c6086a2f77c932fa0ca308d20096042f923bcdce3be992948e7f4649ba24baec20de6d2494d5e0db7bf791c62608ce91428beb279b66f3da440e5c70d5caa5faf3e02e704ff0a100302010000da790407100202980100"], 0x2, [{0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="7303fb651ca8640b58a9a57123c4c8f2b7f31b42230880230afbd6183c4f3cf66ae49a11f85aa67174de71c6fea26a9275e5f09c82b4840fbeae6b9860fad882557e3d4dcdf3bd8bb39ca0fff10aca4a0a7054b58c3ea4bc65c7d1e95dbf762f43b049f2c0db121ac7e7f06d3a817a19ecffd0e1b19af7c0c28c7e15dd4ce1"]}, {0x7e, &(0x7f00000005c0)=@string={0x7e, 0x3, "897fd7afac2aedb31aaa1747ab32bb39adbfac4ecbd4d9a5d0aa101cf2cdabdc8789db7706bebf1815b55f1d1be6c8c16da117c648cbea5d3b5f21e1177159c181ea6731bed9ed407b9ea2ec0d649c6a474ee342911d7ef7ebafa1b1d22df257985be1983402e1510565857a0d2f0e2c3cfcfee938ac417d3514bcde"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x100) io_submit(0x0, 0x0, &(0x7f0000002900)) close_range(r2, 0xffffffffffffffff, 0x2) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_io_uring_setup(0x25ad, &(0x7f0000000340)={0x0, 0x893b, 0x800, 0x2, 0x4001b5}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_setup(0x49ce, &(0x7f00000002c0)={0x0, 0x5e99, 0x339de6e74deb4bbc, 0x20004, 0x8023a, 0x0, r5}, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00005a5000/0x3000)=nil, 0x3000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x7000000) eventfd(0x5) 235.171116ms ago: executing program 0 (id=56): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xc, 0x100) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd70000000200011000000"], 0x28}}, 0x0) fadvise64(r1, 0x1000, 0x2, 0x1) getpgrp(0xffffffffffffffff) r5 = epoll_create(0xfffffff7) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000040)={0x20000001}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000890, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @loopback, 0x9}, 0x1c) 192.595839ms ago: executing program 2 (id=57): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000300000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x4814}, 0x4054) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='@!\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 128.919922ms ago: executing program 0 (id=58): setuid(0xee00) (async, rerun: 32) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) (async, rerun: 64) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000008}) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$TCFLSH(r3, 0x540b, 0x0) (async, rerun: 32) unshare(0x20000400) (rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x10, 0x0, &(0x7f0000000040)) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000040)={0xfffffffffffffff7, 0x4, 0x6, 0x4, 0xfffffffffffffffe}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000240)={0x0, &(0x7f00000001c0)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x2, 0x0, 0xc, 0x6109, 0xc3}, 0x20) (async) recvmmsg(r7, &(0x7f0000000140), 0x0, 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r8) (async) socket$inet(0x2, 0x6000000000000001, 0x0) (async) getsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080), &(0x7f0000000100)=0x4) 86.613235ms ago: executing program 0 (id=59): r0 = socket(0xa, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x27, 0x2, 0xdff}, {0x7, 0x6, 0x7, 0x88}, {0x1f2b, 0x1, 0xa, 0x6}, {0xf, 0xc, 0x1, 0xf}]}, 0x10) 64.867256ms ago: executing program 0 (id=60): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fedbdf25420000000c0099000c000000260000000a00060008021100000000000a00060050505050505000000a0061b700000a000600ac432bb71e680000a8ce06004547d6d5a99500000a0006005e3ef3bb14b7000005afdd"], 0x68}, 0x1, 0x0, 0x0, 0x24002800}, 0x4004000) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) (async) mkdir(0x0, 0x174) (async) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 642.479µs ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000003c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1f40454a}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xb5e76a9bc1790587}, 0x20048000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0000, 0x8c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x78}}, 0x0) r5 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000003c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1f40454a}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xb5e76a9bc1790587}, 0x20048000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0000, 0x8c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x78}}, 0x0) (async) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) (async) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) (async) 0s ago: executing program 0 (id=62): r0 = socket(0x2, 0x3, 0x63) (async) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='gid', &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x05\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\xf5O\xb1\x9f\xc5I\xect<\x8a\x00V\xcc\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\x11&\x1bM_\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k*5\xac\x9a\b}\xfb\xe1\x89)\x1eU\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r2, 0x11, 0x7, 0x0, &(0x7f0000000200)) (async, rerun: 64) sendto$unix(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 27.372011][ T36] audit: type=1400 audit(1770665028.050:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.378446][ T283] cgroup: Unknown subsys name 'net' [ 27.400334][ T36] audit: type=1400 audit(1770665028.060:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.437432][ T36] audit: type=1400 audit(1770665028.100:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.438219][ T283] cgroup: Unknown subsys name 'devices' [ 27.616463][ T283] cgroup: Unknown subsys name 'hugetlb' [ 27.624647][ T283] cgroup: Unknown subsys name 'rlimit' [ 27.728865][ T36] audit: type=1400 audit(1770665028.410:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.760273][ T36] audit: type=1400 audit(1770665028.410:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.801600][ T36] audit: type=1400 audit(1770665028.410:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.840044][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.852946][ T36] audit: type=1400 audit(1770665028.530:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.889765][ T36] audit: type=1400 audit(1770665028.530:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.935291][ T36] audit: type=1400 audit(1770665028.620:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.939526][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.973311][ T36] audit: type=1400 audit(1770665028.620:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.775299][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.786045][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.798914][ T291] bridge_slave_0: entered allmulticast mode [ 29.810160][ T291] bridge_slave_0: entered promiscuous mode [ 29.823059][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.835193][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.845453][ T291] bridge_slave_1: entered allmulticast mode [ 29.855395][ T291] bridge_slave_1: entered promiscuous mode [ 29.880804][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.893993][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.904374][ T290] bridge_slave_0: entered allmulticast mode [ 29.914389][ T290] bridge_slave_0: entered promiscuous mode [ 29.924538][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.936563][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.948603][ T290] bridge_slave_1: entered allmulticast mode [ 29.956429][ T290] bridge_slave_1: entered promiscuous mode [ 30.081382][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.092582][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.101619][ T293] bridge_slave_0: entered allmulticast mode [ 30.109801][ T293] bridge_slave_0: entered promiscuous mode [ 30.121813][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.131392][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.140531][ T293] bridge_slave_1: entered allmulticast mode [ 30.150796][ T293] bridge_slave_1: entered promiscuous mode [ 30.158933][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.169963][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.178348][ T292] bridge_slave_0: entered allmulticast mode [ 30.185716][ T292] bridge_slave_0: entered promiscuous mode [ 30.211453][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220258][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.229935][ T292] bridge_slave_1: entered allmulticast mode [ 30.241133][ T292] bridge_slave_1: entered promiscuous mode [ 30.473607][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.483160][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.494395][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.503761][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.521987][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.533857][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.544540][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.555731][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.583054][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593126][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.608176][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.618893][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.635029][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.645996][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.655614][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668135][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.759065][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.777531][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.790433][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.807892][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.822072][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.832853][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.844016][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.866475][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.876840][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.907506][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921991][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.940819][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.949893][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.977048][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.987980][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.001055][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.009707][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.027958][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.038638][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.062327][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071575][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.182235][ T291] veth0_vlan: entered promiscuous mode [ 31.191451][ T290] veth0_vlan: entered promiscuous mode [ 31.206270][ T292] veth0_vlan: entered promiscuous mode [ 31.229989][ T293] veth0_vlan: entered promiscuous mode [ 31.259631][ T291] veth1_macvtap: entered promiscuous mode [ 31.270531][ T290] veth1_macvtap: entered promiscuous mode [ 31.289500][ T292] veth1_macvtap: entered promiscuous mode [ 31.332564][ T293] veth1_macvtap: entered promiscuous mode [ 31.407113][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.510693][ T339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.585856][ T341] fuse: Unknown parameter '' [ 31.608643][ T338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.153282][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.232691][ T361] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9'. [ 32.303205][ T67] usb 2-1: device descriptor read/64, error -71 [ 32.390753][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 32.390772][ T36] audit: type=1400 audit(1770665033.070:152): avc: denied { watch } for pid=364 comm="syz.2.10" path="/1/file0" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.513353][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.553362][ T67] usb 2-1: device descriptor read/64, error -71 [ 32.673346][ T331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.676772][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 32.689670][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.708599][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.723051][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.735310][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.750463][ T368] netlink: 'syz.0.11': attribute type 30 has an invalid length. [ 32.767961][ T31] usb 4-1: Product: syz [ 32.777013][ T31] usb 4-1: Manufacturer: syz [ 32.782876][ T31] usb 4-1: SerialNumber: syz [ 32.793962][ T67] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.820677][ T36] audit: type=1400 audit(1770665033.500:153): avc: denied { ioctl } for pid=369 comm="syz.0.12" path="socket:[3666]" dev="sockfs" ino=3666 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.839549][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.893284][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.918080][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.935027][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.943307][ T67] usb 2-1: device descriptor read/64, error -71 [ 32.947440][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.981473][ T331] usb 3-1: config 0 descriptor?? [ 33.010628][ T31] usb 4-1: 0:2 : does not exist [ 33.042956][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 33.084246][ T31] usb 4-1: USB disconnect, device number 2 [ 33.104077][ T36] audit: type=1400 audit(1770665033.790:154): avc: denied { create } for pid=381 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.150434][ T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.172369][ T36] audit: type=1400 audit(1770665033.820:155): avc: denied { setopt } for pid=381 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.197163][ T36] audit: type=1400 audit(1770665033.820:156): avc: denied { relabelfrom } for pid=381 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.226655][ T36] audit: type=1400 audit(1770665033.820:157): avc: denied { relabelto } for pid=381 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.257231][ T67] usb 2-1: device descriptor read/64, error -71 [ 33.373302][ T67] usb usb2-port1: attempt power cycle [ 33.401748][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.414083][ T36] audit: type=1400 audit(1770665034.100:158): avc: denied { name_bind } for pid=383 comm="syz.0.16" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.415416][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.455592][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.467773][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.479640][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.491117][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.500845][ T36] audit: type=1400 audit(1770665034.100:159): avc: denied { node_bind } for pid=383 comm="syz.0.16" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.502129][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.545632][ T36] audit: type=1400 audit(1770665034.150:160): avc: denied { write } for pid=383 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.572543][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.583142][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.593614][ T388] capability: warning: `syz.0.17' uses deprecated v2 capabilities in a way that may be insecure [ 33.596429][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.621233][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.624666][ T365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.650699][ T36] audit: type=1400 audit(1770665034.320:161): avc: denied { create } for pid=386 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.686958][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.703184][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.714088][ T365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.746083][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.763171][ T331] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.773497][ T67] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.785174][ T331] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 33.802336][ T395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 33.802411][ T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:32 [ 33.818071][ T331] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 33.823537][ T67] usb 2-1: device descriptor read/8, error -71 [ 33.845774][ T331] usb 3-1: USB disconnect, device number 2 [ 33.952670][ T396] fido_id[396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 33.993204][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.009565][ T67] usb 2-1: device descriptor read/8, error -71 [ 34.155560][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.165437][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 34.177502][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 34.195230][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 34.210724][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 34.226962][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 34.240196][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 34.253336][ T67] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.273195][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 34.299579][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 34.313977][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.330146][ T67] usb 2-1: device descriptor read/8, error -71 [ 34.339786][ T31] usb 4-1: Product: syz [ 34.345157][ T31] usb 4-1: Manufacturer: syz [ 34.351067][ T31] usb 4-1: SerialNumber: syz [ 34.368415][ T31] usb 4-1: config 0 descriptor?? [ 34.386455][ T393] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 34.403379][ T393] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 34.442260][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 34.474192][ T67] usb 2-1: device descriptor read/8, error -71 [ 34.485781][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.614371][ T67] usb usb2-port1: unable to enumerate USB device [ 34.639851][ T67] usb 4-1: USB disconnect, device number 3 [ 34.666378][ T331] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 34.844393][ T405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=405 comm=syz.0.23 [ 34.847159][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.875858][ T331] usb 3-1: not running at top speed; connect to a high speed hub [ 34.889204][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.903226][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.926514][ T331] usb 3-1: string descriptor 0 read error: -22 [ 34.942826][ T331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.954021][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.973066][ T331] usb 3-1: 0:2 : does not exist [ 35.174157][ T400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.190611][ T400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.343284][ T67] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.503754][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 35.519756][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.536887][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.552562][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.570050][ T67] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.582019][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.597674][ T67] usb 2-1: config 0 descriptor?? [ 35.673195][ T363] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.724050][ T331] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 35.753501][ T331] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 35.773014][ T331] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 35.803795][ T331] usb 3-1: USB disconnect, device number 3 [ 35.854961][ T363] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.904484][ T363] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.924073][ T363] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.936428][ T363] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 35.958406][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.980386][ T363] usb 1-1: config 0 descriptor?? [ 36.015749][ T410] tc_dump_action: action bad kind [ 36.029487][ T67] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 36.047733][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.059048][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.068577][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.079177][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.090611][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.106979][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.118232][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.130070][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.144912][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.154845][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.165066][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.177271][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.192507][ T67] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.194117][ T331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.230508][ T67] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 36.244252][ T67] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 36.263846][ T67] microsoft 0003:045E:07DA.0002: no inputs found [ 36.274956][ T67] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 36.294385][ T67] usb 2-1: USB disconnect, device number 6 [ 36.334725][ T430] fido_id[430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 36.388076][ T331] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 36.403703][ T331] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 36.413700][ T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.419968][ T331] usb 3-1: config 220 has no interface number 2 [ 36.436355][ T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.450542][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.460729][ T331] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 36.482605][ T331] usb 3-1: config 220 interface 0 has no altsetting 0 [ 36.494747][ T331] usb 3-1: config 220 interface 76 has no altsetting 0 [ 36.504518][ T331] usb 3-1: config 220 interface 1 has no altsetting 0 [ 36.526917][ T331] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 36.541599][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.556103][ T331] usb 3-1: Product: syz [ 36.561797][ T331] usb 3-1: Manufacturer: syz [ 36.570311][ T331] usb 3-1: SerialNumber: syz [ 36.636923][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 36.649404][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 36.663343][ T10] usb 4-1: config 220 has no interface number 2 [ 36.671301][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 36.694645][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 36.707229][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 36.717232][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 36.734411][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 36.748919][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.761972][ T10] usb 4-1: Product: syz [ 36.768354][ T10] usb 4-1: Manufacturer: syz [ 36.775778][ T10] usb 4-1: SerialNumber: syz [ 36.803290][ T331] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 36.813650][ T331] usb 3-1: No valid video chain found. [ 36.832421][ T331] usb 3-1: selecting invalid altsetting 0 [ 36.873483][ T331] usb 3-1: USB disconnect, device number 4 [ 36.953537][ T363] usbhid 1-1:0.0: can't add hid device: -71 [ 36.973417][ T363] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.992762][ T363] usb 1-1: USB disconnect, device number 2 [ 36.993801][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 37.028741][ T10] usb 4-1: No valid video chain found. [ 37.037905][ T10] usb 4-1: selecting invalid altsetting 0 [ 37.055038][ T10] usb 4-1: USB disconnect, device number 4 [ 37.073926][ T67] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.236196][ T67] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 37.250287][ T67] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 37.270395][ T67] usb 2-1: config 0 has no interface number 0 [ 37.285128][ T67] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 37.303182][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.318684][ T67] usb 2-1: Product: syz [ 37.328438][ T67] usb 2-1: Manufacturer: syz [ 37.339880][ T67] usb 2-1: SerialNumber: syz [ 37.353153][ T67] usb 2-1: config 0 descriptor?? [ 37.576192][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 37.576210][ T36] audit: type=1400 audit(1770665038.260:179): avc: denied { append } for pid=432 comm="syz.1.30" name="netlink" dev="proc" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.627160][ T36] audit: type=1400 audit(1770665038.310:180): avc: denied { read append } for pid=449 comm="syz.3.33" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.671690][ T452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.671792][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 37.692076][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.718705][ T36] audit: type=1400 audit(1770665038.350:181): avc: denied { open } for pid=449 comm="syz.3.33" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.750555][ T36] audit: type=1400 audit(1770665038.350:182): avc: denied { map } for pid=449 comm="syz.3.33" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.785848][ T36] audit: type=1400 audit(1770665038.350:183): avc: denied { ioctl } for pid=449 comm="syz.3.33" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.835607][ T36] audit: type=1400 audit(1770665038.470:184): avc: denied { write } for pid=449 comm="syz.3.33" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.952765][ T455] loop6: detected capacity change from 0 to 7 [ 37.974662][ T10] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 37.987343][ T10] usb 3-1: config 0 has no interface number 0 [ 38.001833][ T10] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 38.030654][ T10] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.049790][ T10] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.070119][ T10] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 38.094856][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.110348][ T10] usb 3-1: Product: syz [ 38.115819][ T10] usb 3-1: Manufacturer: syz [ 38.123858][ T10] usb 3-1: SerialNumber: syz [ 38.145103][ T10] usb 3-1: config 0 descriptor?? [ 38.161332][ T448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 38.176485][ T10] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 38.192859][ T10] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 38.295382][ T36] audit: type=1400 audit(1770665038.980:185): avc: denied { create } for pid=458 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.380486][ T10] usb 3-1: USB disconnect, device number 5 [ 38.388756][ T10] ftdi_sio 3-1:0.99: device disconnected [ 38.457610][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.483470][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.501355][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.513626][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.549453][ T36] audit: type=1400 audit(1770665039.230:186): avc: denied { append } for pid=460 comm="syz.1.36" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.580713][ T36] audit: type=1400 audit(1770665039.230:187): avc: denied { open } for pid=460 comm="syz.1.36" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.617598][ T36] audit: type=1400 audit(1770665039.230:188): avc: denied { read } for pid=460 comm="syz.1.36" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.777868][ T466] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 38.793457][ T466] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 38.808534][ T363] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.976397][ T470] netlink: 'syz.2.40': attribute type 27 has an invalid length. [ 38.993156][ T363] usb 4-1: Using ep0 maxpacket: 32 [ 39.014838][ T363] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.030770][ T363] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.044502][ T363] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.063122][ T363] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 39.093317][ T363] usb 4-1: Product: syz [ 39.104156][ T363] usb 4-1: Manufacturer: syz [ 39.134508][ T363] hub 4-1:4.0: USB hub found [ 39.176974][ T477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.177496][ T477] rust_binder: Error while translating object. [ 39.194696][ T477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.204365][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 39.227350][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.255161][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.337257][ T363] hub 4-1:4.0: 2 ports detected [ 39.365590][ T67] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 39.375484][ T67] usb 2-1: No valid video chain found. [ 39.390941][ T67] usb 2-1: USB disconnect, device number 7 [ 39.463924][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.513939][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.625635][ T331] usb 1-1: config 24 has 1 interface, different from the descriptor's value: 2 [ 39.639735][ T331] usb 1-1: config 24 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 39.655732][ T331] usb 1-1: config 24 interface 0 has no altsetting 0 [ 39.665285][ T331] usb 1-1: config 24 interface 0 has no altsetting 1 [ 39.681116][ T331] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 39.695274][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 39.705499][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.716285][ T331] usb 1-1: Product: syz [ 39.721986][ T331] usb 1-1: Manufacturer: syz [ 39.728495][ T331] usb 1-1: SerialNumber: syz [ 39.736643][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 39.755474][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.768418][ T10] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x7C, changing to 0xC [ 39.785508][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 39.803238][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 39.826940][ T10] usb 3-1: New USB device found, idVendor=2a6b, idProduct=0101, bcdDevice= 0.40 [ 39.840133][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.852422][ T10] usb 3-1: Product: syz [ 39.857683][ T10] usb 3-1: Manufacturer: syz [ 39.865454][ T10] usb 3-1: SerialNumber: syz [ 39.957187][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.970232][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.000977][ T363] usb 4-1: USB disconnect, device number 5 [ 40.101973][ T10] usb 3-1: USB disconnect, device number 6 [ 40.113382][ T495] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 40.175197][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.203902][ T479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.233764][ T479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.259073][ T479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.272382][ T479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.433653][ T363] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.583705][ T363] usb 4-1: device descriptor read/64, error -71 [ 40.773239][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.833193][ T363] usb 4-1: device descriptor read/64, error -71 [ 40.924577][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.932235][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.941152][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.951095][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.961049][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.972205][ T331] usb 1-1: selecting invalid altsetting 0 [ 40.982428][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.997133][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.014183][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.028922][ T10] usb 2-1: config 1 has no interface number 1 [ 41.041483][ T331] usb 1-1: USB disconnect, device number 3 [ 41.051118][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.067646][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.103296][ T363] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.119223][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.132748][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.144696][ T10] usb 2-1: Product: syz [ 41.152206][ T10] usb 2-1: Manufacturer: syz [ 41.158588][ T10] usb 2-1: SerialNumber: syz [ 41.253423][ T363] usb 4-1: device descriptor read/64, error -71 [ 41.373287][ T10] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 41.389314][ T10] usb 2-1: USB disconnect, device number 8 [ 41.503459][ T363] usb 4-1: device descriptor read/64, error -71 [ 41.624195][ T363] usb usb4-port1: attempt power cycle [ 41.721201][ T291] ------------[ cut here ]------------ [ 41.729186][ T291] WARNING: CPU: 0 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 41.740330][ T291] Modules linked in: [ 41.746443][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 41.766903][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.781088][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 41.789484][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 41.822993][ T291] RSP: 0018:ffffc9000117fb48 EFLAGS: 00010293 [ 41.833199][ T291] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888131bc2600 [ 41.843879][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.845775][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.866703][ T291] RBP: ffffc9000117fb70 R08: ffff8881288da4ff R09: 1ffff1102511b49f [ 41.877708][ T291] R10: dffffc0000000000 R11: ffffed102511b4a0 R12: 0000000000000000 [ 41.889691][ T291] R13: dffffc0000000000 R14: ffff8881288da460 R15: ffff888115adaaa0 [ 41.902063][ T291] FS: 0000555573a43500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.914163][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.922624][ T291] CR2: 0000555573a5e908 CR3: 0000000107ab6000 CR4: 00000000003526b0 [ 41.936011][ T291] DR0: 0000000000000000 DR1: 0000000000010000 DR2: 0000000000000000 [ 41.946642][ T291] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 41.958996][ T291] Call Trace: [ 41.963959][ T291] [ 41.967130][ T291] ovl_do_remove+0x81b/0xda0 [ 41.976234][ T291] ? ovl_set_redirect+0x780/0x780 [ 41.983847][ T291] ? down_write+0xee/0x2b0 [ 41.989634][ T363] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.989865][ T291] ? __cfi_down_write+0x10/0x10 [ 42.009269][ T291] ovl_rmdir+0x1e/0x30 [ 42.015389][ T291] vfs_rmdir+0x3e3/0x560 [ 42.023343][ T291] incfs_kill_sb+0x109/0x230 [ 42.030071][ T291] deactivate_locked_super+0xd5/0x2a0 [ 42.036251][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.039967][ T291] deactivate_super+0xb8/0xe0 [ 42.063285][ T291] cleanup_mnt+0x406/0x4a0 [ 42.071495][ T291] __cleanup_mnt+0x1d/0x40 [ 42.077185][ T291] task_work_run+0x1e5/0x260 [ 42.078271][ T363] usb 4-1: device descriptor read/8, error -71 [ 42.082567][ T291] ? __cfi_task_work_run+0x10/0x10 [ 42.082619][ T291] ? __x64_sys_umount+0x12e/0x180 [ 42.082643][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.094057][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.101109][ T291] ? __kasan_check_read+0x15/0x20 [ 42.108750][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 42.115054][ T291] resume_user_mode_work+0x35/0x50 [ 42.134373][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 42.141369][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 42.162702][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.166160][ T291] do_syscall_64+0x63/0xf0 [ 42.201862][ T31] usb 3-1: config 0 descriptor?? [ 42.202576][ T291] ? clear_bhb_loop+0x50/0xa0 [ 42.202622][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.225320][ T291] RIP: 0033:0x7f477f79c1d7 [ 42.231990][ T291] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.260131][ T291] RSP: 002b:00007fffe2858bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.265916][ T363] usb 4-1: device descriptor read/8, error -71 [ 42.271499][ T291] RAX: 0000000000000000 RBX: 00007f477f830b3b RCX: 00007f477f79c1d7 [ 42.289281][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe2858c90 [ 42.299761][ T291] RBP: 00007fffe2858c90 R08: 00007fffe2859c90 R09: 00000000ffffffff [ 42.310705][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe2859d20 [ 42.322470][ T291] R13: 00007f477f830b3b R14: 000000000000a2d5 R15: 00007fffe2859d60 [ 42.336136][ T291] [ 42.341132][ T291] ---[ end trace 0000000000000000 ]--- [ 42.349878][ T291] ------------[ cut here ]------------ [ 42.358186][ T291] WARNING: CPU: 1 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 42.371772][ T291] Modules linked in: [ 42.377129][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 42.397186][ T291] Tainted: [W]=WARN [ 42.403188][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.418715][ T291] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 42.427050][ T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 42.457258][ T291] RSP: 0018:ffffc9000117fb48 EFLAGS: 00010293 [ 42.466081][ T291] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888131bc2600 [ 42.476898][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.486093][ T291] RBP: ffffc9000117fb70 R08: ffff8881288da4ff R09: 1ffff1102511b49f [ 42.497886][ T291] R10: dffffc0000000000 R11: ffffed102511b4a0 R12: 0000000000000000 [ 42.510259][ T291] R13: dffffc0000000000 R14: ffff8881288da460 R15: ffff888115adaaa0 [ 42.521704][ T291] FS: 0000555573a43500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.535610][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.544394][ T291] CR2: 00007fb4b89e86c0 CR3: 0000000107ab6000 CR4: 00000000003526b0 [ 42.555033][ T291] Call Trace: [ 42.559316][ T291] [ 42.563919][ T291] ovl_do_remove+0x81b/0xda0 [ 42.569869][ T291] ? ovl_set_redirect+0x780/0x780 [ 42.577052][ T291] ? down_write+0xee/0x2b0 [ 42.581776][ T291] ? __cfi_down_write+0x10/0x10 [ 42.589239][ T291] ovl_rmdir+0x1e/0x30 [ 42.596721][ T291] vfs_rmdir+0x3e3/0x560 [ 42.603798][ T291] incfs_kill_sb+0x1a0/0x230 [ 42.611943][ T291] deactivate_locked_super+0xd5/0x2a0 [ 42.621859][ T291] deactivate_super+0xb8/0xe0 [ 42.627932][ T291] cleanup_mnt+0x406/0x4a0 [ 42.633204][ T291] __cleanup_mnt+0x1d/0x40 [ 42.638712][ T291] task_work_run+0x1e5/0x260 [ 42.644773][ T291] ? __cfi_task_work_run+0x10/0x10 [ 42.651246][ T291] ? __x64_sys_umount+0x12e/0x180 [ 42.657461][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 42.664671][ T291] ? __kasan_check_read+0x15/0x20 [ 42.672040][ T291] resume_user_mode_work+0x35/0x50 [ 42.680749][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 42.688608][ T291] do_syscall_64+0x63/0xf0 [ 42.695685][ T291] ? clear_bhb_loop+0x50/0xa0 [ 42.701254][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.712234][ T291] RIP: 0033:0x7f477f79c1d7 [ 42.718884][ T291] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.748724][ T291] RSP: 002b:00007fffe2858bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.761587][ T291] RAX: 0000000000000000 RBX: 00007f477f830b3b RCX: 00007f477f79c1d7 [ 42.771798][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe2858c90 [ 42.783668][ T291] RBP: 00007fffe2858c90 R08: 00007fffe2859c90 R09: 00000000ffffffff [ 42.794343][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe2859d20 [ 42.806208][ T291] R13: 00007f477f830b3b R14: 000000000000a2d5 R15: 00007fffe2859d60 [ 42.817503][ T291] [ 42.821667][ T291] ---[ end trace 0000000000000000 ]--- [ 42.846094][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.855983][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.873150][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.885302][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.900580][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.911465][ T31] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 42.921614][ T31] steelseries 0003:1038:1410.0003: missing HID_OUTPUT_REPORT 0 [ 42.953269][ T363] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.985575][ T363] usb 4-1: device descriptor read/8, error -71 [ 43.069552][ T31] usb 3-1: USB disconnect, device number 7 [ 43.125246][ T363] usb 4-1: device descriptor read/8, error -71 [ 43.243366][ T363] usb usb4-port1: unable to enumerate USB device