last executing test programs: 6.777269695s ago: executing program 1 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003b00), &(0x7f0000003b40)=0xc) (async) r1 = geteuid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xfffffffffa4b24b8, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x804000, &(0x7f0000000180)={[{@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r7}}]}) 6.720923876s ago: executing program 1 (id=103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100000000000100002810090400000203000000092100000001221800090581030000000000ff6b988750682397ff764b848cb12af669ab2b12fdc75da8205188f34c3e9126e8fc74fe870b32dd6f2e2173b9fab4ae7fdd5afc60433a9fe2aaf7446a4fbc07c1873f1779fdaa52cb14895aa32bcf0072e2921725214957a14b55e04e46de24883f914a349e4dc1179d1ad2f826fc5ee62d9dce62ed9f6bd0c65d0517a1ce42e9a3d302943d85c1d56059d7ac344903cebb7c4244f5623261b32cb4fddfdc342b501c3178fadc709e1a414d77aec3939ec371d7057d5397c4dd33edb8"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f000001a000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/167) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="ff", 0x1, r1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000e00)=[{&(0x7f0000000900)="d4881553fba9837e74676578917ec198e388c7ee2c331cf0400152eb95ac025f67f677e220608937c18832d59994c708fa5337a30416a7006c1a1402708e452aa8c24abeca010d4f12ebecbf6f19392b65e6d85f30df7a209b299171f47b8a4beb83d2b977e8f16e8211d24ada0518b0efa2d2cf170cdfa752826655e7481e7aa38e5289ea41e938a6f388a5ef6690672581f2363a871d0797f5f9f5db1b5e1a26d2d828d515a4ab5ae57c39ea7d5270e5778be8d93b3da6005b1fad9a72e43f42c49164218bc15df92abc0bf6349809b73c3fdacb3dd37d3bdb842f5076065cb2dd15e1a25cc5b14d33d41cd258c14157cf97f411969d5f56093e", 0xfb}, {&(0x7f0000000a00)="f3f0cf2cc8e88beeb6af55e729163d0cefa02c20ea722b06ce186107e50ce03220a938ca7ddc475465cdb130c98eca789ad3226d886c6bae3331ba02490a2eac25a70175f9e41cc573eb77a0c5176a457ad1cbfd36e70f6b06469416c36fcc597ee49857b2c841813dd17b4254edb84c21fa82b62a35985dde6518fc073a42e28d8a557a80c62ec0d6ae6675a4aebced68a2331724", 0x95}, {&(0x7f0000000ac0)="3c380a936b7be3bce548a2b64fe511ef52813a04d3d4b1e31d3f19ddb5839482c15524cd134e09969d39c6734ba2654d2c0ce0a14587efe0e921759937d972e9939aa451a273d8cabb568a167149a43b10eb4342fd354d42770b6f7d6998223ade6fc6dbdaa5dafe205316dc0696eee7b09a1d0f768684da58", 0x79}, {&(0x7f0000000b40)="2de074bfef4353300bc1385cd9a8", 0xe}, {&(0x7f0000000b80)="198d3deee11a4747c1b71b7e3cedb4c388746814bdfeef6754e788a7870f7efa6ac918d4064f89c99693b2b5203325039d59f32ef08075c7bd5763404e5ae151329093ea7badfa8f55ed8df1616d5f46dffb5e727ed2cd2dea9abbab88f1f9984b9521949fee4bd2a0ce09eb88de8c1d84dcd6c143c97a77153c011711657dd6eeb757c84f24f652da951de74b2f7a167fc48c10eeaacb75c7503b2e08c3ec962d6b86f14467f618ee5422478cdb994262ae44f57f8e47f62dd00e5a8cb0c722221a5b213a", 0xc5}, {&(0x7f0000000c80)="92d96931e1d77d4cacd0c242a8e13d37d850ac5d9ddd48a53eaec7e539544314c4222c6f06caa1c5e0d12b8eb1f63cbd11f868199a0e4e724f6c361de86e0f3b02f5d16591e48d73915761bb2abc9f769837be78311a039565e53a1a62f1d20c39aca8caff56a7730c0167772b108dbb8f2b86a2844cfc0d8f8c0fa383d8a98c04ca47046c6e44537c385fac4b8293066f870d372a2bea3b8d34602c23ae9c5bf863348ecef5796503fac9524fa23755004cf4b1ecfed8713a494fc138e38f91e25ab6d3e30f9b65e65abe9e5c66e8661e33130180a3e1425701015d8b30ffb82d137135b1beee212e8a49eb09416e315ad0e2ac9c075c", 0xf7}, {&(0x7f0000000d80)="85f25bf433f6b21a39b08ea4d57c6b9b57942ccdf9a7da4ebfb1d39826625d9c23437c", 0x23}, {&(0x7f0000000780)="e9bc6eeb777a921d07004627e53800d0c13a108214ccb127f02dfe376f523bc4ad5b", 0x22}], 0x8) keyctl$setperm(0x5, r2, 0x2200) syz_usb_connect$cdc_ncm(0x6, 0x7d, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x3, 0x40, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "172fd2"}, {0x5, 0x24, 0x0, 0x6e}, {0xd, 0x24, 0xf, 0x1, 0x6f9a, 0x12, 0x0, 0xb6}, {0x6, 0x24, 0x1a, 0x0, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0xfd, 0x2, 0xfe, 0x1}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf0, 0x5, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0xcc, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc9, 0x3, 0x6}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x2, 0x6, 0x15, 0x8, 0xc}, 0x36, &(0x7f00000004c0)={0x5, 0xf, 0x36, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf, 0x7, [0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x4, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0xf7, 0x1, 0x10, 0xf00, 0x7741, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x8, 0x4}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}]}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x800, 0x0, @mcast1}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x210100) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 4.249801136s ago: executing program 0 (id=105): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x42000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x317}) (fail_nth: 2) 4.121887539s ago: executing program 0 (id=107): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x42000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x317}) 3.725816679s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0xff, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4], [0x5]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) setuid(0xee01) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) setns(r5, 0x40000000) write(r2, &(0x7f0000000780)='1', 0x1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x7}}, 0x30) 3.7040571s ago: executing program 0 (id=111): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000002900)={0x2, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504", @ANYRESOCT, @ANYRESDEC, @ANYRES64=r0, @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 3.645162571s ago: executing program 1 (id=114): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "d307f44eb8a504f95996"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "a2af2e3c3c618f9d29f39b121b70d84ea538e155b96d29fa11b0ac048f5426b31595daf4f49dc62ccfae9f332a8e1af02c786d6b26f7c821ee370e1cadc238a9bbd59719e127ee5aaa3de0d6bd9e5ca8ecac0ff8b05531dd204770597944a98c74a5e91a22b7ba69ac53f1d77a6266fec9730c448e70ce5d716932a3e6c5d1f32520a445cb55d7cd556f53a8b837672bbbc25e4d6f1c9c54c8213325194ad0030d8a9a7c9df5143a099f03813e171058225b5abb99d03d2165502c673b762844b94d2246eadf"}}, 0x0, 0x0}, 0x0) 2.393147172s ago: executing program 0 (id=117): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e284) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2801f, r1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x119, 0x2003, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000880)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYBLOB="dea0936c"], 0x0) write$binfmt_misc(r2, &(0x7f0000000880)="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", 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e284) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2801f, r1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) getsockopt(r3, 0x119, 0x2003, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000880)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYBLOB="dea0936c"], 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000880)="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", 0x1000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ftruncate(0xffffffffffffffff, 0x5) (async) 1.61675668s ago: executing program 0 (id=121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xc4, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="d850000044000701fefffffffcdbdf25037c000004004580c0500180bc506480b850cd80b450d680b05018800400f2"], 0x50d8}}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4080) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)={0x0, 0x10, 0x28, {0x28, 0x0, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.568402892s ago: executing program 3 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x4) r1 = openat(r0, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0xdce02, 0x0) write(r1, &(0x7f0000000780)='1', 0x1) stat(&(0x7f0000000040)='./config\x00', &(0x7f0000000140)) io_setup(0x2adf, &(0x7f0000000180)=0x0) utimes(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x2710}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r3, 0x0}]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x7}}, 0x30) 1.518112743s ago: executing program 3 (id=124): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1, 0x1000, 0x10000) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x40010001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) 1.403651516s ago: executing program 2 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002030500000000000040000002000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) syz_usb_connect(0x4, 0x8f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a2000000090462040334e95f5b0c07c4712408220600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c078004ff63200309050900ff030300040905020200cc235754a1ac7e9409050303ff030840040705a6c6415a9f000000000000005cd98abab2d055f1842eefbb9bcf185590b0fcc8eca10f6f6b5e5961888495f658f3b3855f6fae67a69db9b9ab9aa78a10f7c8843b00"/211, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0) 1.296421298s ago: executing program 1 (id=129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x800, 0xa, 0x40000000000009, 0x2c}, 0x48) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000100001234320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a000000000000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000ebff000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000002082052500409c01020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) 849.116429ms ago: executing program 2 (id=130): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000440)={0x0, 0x17, 0x21, "e971e87b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 32) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x2) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000140)={0x20, 0xf, 0x2, "84d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 848.678069ms ago: executing program 2 (id=131): sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf2502200000"], 0x14}}, 0x2400c041) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}}, 0x20000010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x7c7, 0x10, 0x4, 0x6d38, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x68, 0x0, 0x20, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0xfff}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5}]}, @lsrr={0x83, 0x1b, 0x31, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote, @broadcast, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x34, 0x2e, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x25}}, {@loopback, 0x2}, {@loopback, 0x4}, {@private=0xa010101, 0x7}, {@empty, 0xf0aa}, {@private=0xa010101, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', r4, 0x20, 0x80, 0x7, 0x826, {{0x20, 0x4, 0x2, 0x23, 0x80, 0x65, 0x0, 0x1, 0x6, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x18, 0x75, 0x0, 0x0, [0x8, 0x10, 0x4, 0x3, 0x5]}, @timestamp_addr={0x44, 0x34, 0x11, 0x1, 0x0, [{@local, 0x5}, {@rand_addr=0x64010101, 0x54a}, {@remote, 0x1000}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8001}, {@local, 0x1}]}, @generic={0x89, 0x11, "e491cbe165726934b6a4cf8c4bcf10"}, @ssrr={0x89, 0xf, 0x68, [@multicast1, @multicast1, @remote]}]}}}}}) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x40000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r6, 0x541b, 0x0) memfd_create(&(0x7f0000000000)='memory.events\x00', 0x2) ioctl(r0, 0x5451, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000040)={0x0, 'veth0_virt_wifi\x00'}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 847.137349ms ago: executing program 2 (id=132): r0 = socket$inet6(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000880)={0xdc87, 0x2, 0x2fb3, 0x2, 0x5, 0x6, 0x4, 0x2, 0x3ff, 0x400, 0x2, 0xff, 0x1, 0x90a1, 0x6d08, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x9, 0x9, 0x5, 0x4, 0xc3, 0xfffffffffffffffe}) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000880)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @empty, 0x6}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_buf(r1, 0x29, 0xd3, &(0x7f0000000380)=""/189, &(0x7f0000000440)=0xbd) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = inotify_init() syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662"], 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) clock_adjtime(0x4, &(0x7f0000000480)={0x9, 0x1, 0x2, 0x6, 0x1, 0x4, 0x9, 0x0, 0x8001, 0x8, 0xa, 0x9, 0x4, 0x4, 0x0, 0x101, 0x400, 0xf3, 0x9, 0x7ff, 0xc0, 0x3, 0x548, 0xffffffffffffff29, 0x43, 0x14c5}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x408}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$HIDIOCGRDESCSIZE(r6, 0x400c4d01, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000580)="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", 0xc6, 0x24000005, 0x0, 0xffd8) 637.283335ms ago: executing program 3 (id=133): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000680)}}], 0x1, 0x4000000) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000680)}}], 0x1, 0x4000000) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766576eef3d", @ANYRES32, @ANYBLOB=',version=9p2000,\x00']) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766576eef3d", @ANYRES32, @ANYBLOB=',version=9p2000,\x00']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0x3}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0xcd}]}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0], 0x15) r5 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x80000, 0xfffffffe) (async) r6 = socket$inet6(0xa, 0x80000, 0xfffffffe) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000f59ffc)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) connect$bt_sco(r8, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) openat(r8, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x0, 0x64b789440fe94fd) (async) r9 = openat(r8, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x0, 0x64b789440fe94fd) gettid() r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff000000000a00050000000088e39000", @ANYRES8=0x0, @ANYRESHEX=r9], 0x90) write(r9, &(0x7f00000002c0)='0', 0x1) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000180)={0x4d}) (async) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000180)={0x4d}) write$char_usb(r9, &(0x7f0000000300)="c4", 0x1) socket$nl_route(0x10, 0x3, 0x0) 533.674867ms ago: executing program 3 (id=134): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./config\x00', 0x1df) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)='1', 0x1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x7}}, 0x30) 477.070378ms ago: executing program 3 (id=135): r0 = socket$nl_audit(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="22e3251524bc70f5fbc250fb7d316c", 0xf}], 0x1) 476.771128ms ago: executing program 3 (id=136): r0 = syz_usb_connect$uac2(0x0, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x59, {0x59, 0x10, "f6f5b55c76b6bfd361a9818e4e97571c4d3a3e393b3ccfabef29c7f3a4df2dda1a09cc49c486858108aa51068ee83dafb57521a82025b3b7247fc698b8f2f46df315bf55f8eb256db618c1cbca575eb7125bba7dad592d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000180)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x9, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xd, 0xa04}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0x0, 0xa, [0x0, 0xc0, 0x3f0f, 0xff0030]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x0, 0x83, 0xb, "293b157e", "ffd21110"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xff, 0x81, 0x68, 0x3, 0x4}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0x10, 0x8d, "0d0ee2d464600952b3f67eea298996352e9d9747c7aeb484bc8788231c328da47d648f24d5d91f19d99b0b5a47b1778d122447d706f78ac8d2ef227623588eb535361ec3f2fc8ea5193d88d1510ac79f4c33b5b518e69837447b667f2e342acd642e56d342636ff70ea33a56799732675340f29aaa1178226491f0235d400fc8cdfb620ac603c0c1126e424ca8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xf3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000500)={0x40, 0xb, 0x2, "5c0e"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "aaff"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) 273.403943ms ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) unshare(0x60000600) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r4) (async) setuid(0xee01) (async) inotify_init() (async) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x20) (async) r5 = eventfd(0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0x2, 0x0) (async) r7 = pidfd_getfd(r3, r1, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x40046210, 0x0) (async) writev(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)="6d98104845c6fbcae86215463fd9dfd88d58d840fda263b85fa3029c92db2f4fba61dc850fc92a746816921f51ee8a636edc35018f3a866de5b7edc2316771e9e4f1c2bf9dec7f013fb3b74f66719a7a9119e821b566f3fc87656f67899fbf4dd0c617072eeb72793721a0d2d250b2074fdb40a46211c6200638fc7a985f2cdf3bb134f5667ca508ba49662e320f871596bd8f2390e49292b88cd2f6a7326f2bb31eb058798f13d695cda28f200f90ddbdb2a5f6780ee50e202252ac68b352d674a43fda5e", 0xc5}, {&(0x7f0000000440)="bbadf0446057f8248fed6b17f5d62a4efa521241b088fcb95339b4e00d04d8c7881c3baf2a0e59c53b184558a800057986ebac4822dbef0db6f95de21278142664bf9334376552e05e3f8326e76b91c97895d6b5c0dc6f91ab8b8f02d285615785b634c2167c0f443415ee95584814db740098691349b73b4b5c92ebe67efc2030d05faf48fa4712610c0c46d36d00b1e9", 0x91}, {&(0x7f0000000500)="e30fa466f9ef16487456af5a485ee7cd007c89", 0x13}, {&(0x7f00000003c0)="d70f5019e63d022cc3f8dcdfc42e4fad1ce09a0af62892ff322021e1fc32bee82f50d0c11d823d1ba5e3d46a284af9b0d9294a658cb767454fc4def365878e0a2489af71927dd663725e5daa3a1216219c8b6111b888d45282ff6dbdb754d07d46c0cf3a8a42d14fd0e69bc1af0dc226dfed2d826d6e0b6c", 0x78}, {&(0x7f0000000580)="3fd6be2489297c768663ace280f200aefb7b02f2f9c7c92355d680e4714b132d41a4ae592bbb85e14d52daf1de8b4944adfd3f78d8f7d624ff71a47b91bdc512b1f0d752fe1fc78c13b3bedf6f0790a90cdc8e98f7772bc08d02240f7924f6ca338edbad7cc5c2cb122a67ef75dee440a14d9ff7d4e0feed93f1d42d22aadf1c", 0x80}], 0x5) (async) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x35000001) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r9, 0x0, 0x3) (async) write$P9_RREADDIR(r4, &(0x7f00000001c0)={0xd6, 0x29, 0x2, {0x1d62, [{{0x10, 0x3, 0x5}, 0x4, 0xb, 0x7, './file0'}, {{0x4}, 0xffff, 0x0, 0x75, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, {{0x80, 0x1}, 0x9, 0x7f, 0x7, './file0'}]}}, 0xd6) (async) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000000c0)={r5, 0x10001, 0x0, r5}) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000380)) 249.063994ms ago: executing program 2 (id=138): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fgetxattr(r1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x8, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="62bef54bb5356f19be62f5b6877a1b1d246e4f8f39c9d152293ac9df19fc6506d898002205caf9a22a9d2c80319c8c3ad55c5253f96b245defed413558a85f1652f9c3efeab0b07317d0ba7a307febba37"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000240)='./bus\x00', 0x7c107c, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r5, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x3a, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "d307f44eb8a504f95996"}}, 0x0, 0x0, 0x0}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r11 = dup(r10) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f00000000c0)=0xffff) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) 854.08µs ago: executing program 1 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "ca8bbacb0cc175361cb5dd178fba20a1"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x40801}, 0x18000) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000001c0)={0x4, 0x30, [0xd73, 0x3ff, 0x5, 0x280000], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x800, 0x4) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r9, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r8, 0x0, 0x0, 0x4, 0x0, 0x0, r8}]) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000000000005000000000000000600000000000000", @ANYRES32, @ANYBLOB="586b47dec0e9d36f96f88c0000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28, @ANYRES32, @ANYBLOB="00000000e1f3970b00"/28, @ANYRES32=r4, @ANYBLOB="00000000a600"/28, @ANYRES32=r7, @ANYBLOB="000000009c0c00"/28]) clock_nanosleep(0x7, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x2) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}, {@uuid_on}]}) 0s ago: executing program 0 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000600)={[0x3]}, 0x8, 0x80800) openat(r2, &(0x7f0000001680)='./file1\x00', 0x4001, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$802154_raw(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14, &(0x7f0000000280)={0x0}}, 0x20000008) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000240)=[{0xf, 0x27, 0x6, 0x400}]}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r7, 0x0) pwrite64(r6, &(0x7f0000000200)="7819f172bc", 0x5, 0x7fff) r8 = fsmount(r1, 0x1, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x7ffffffe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xf1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r8, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)=@newtaction={0x18, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x20005084) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 21.535270][ T36] audit: type=1400 audit(1787250470.989:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.536349][ T286] cgroup: Unknown subsys name 'net' [ 21.557904][ T36] audit: type=1400 audit(1787250470.989:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.585168][ T36] audit: type=1400 audit(1787250471.019:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.585342][ T286] cgroup: Unknown subsys name 'devices' [ 21.721944][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.727548][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.819264][ T36] audit: type=1400 audit(1787250471.269:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.842423][ T36] audit: type=1400 audit(1787250471.269:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.867121][ T36] audit: type=1400 audit(1787250471.269:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.871904][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.898937][ T36] audit: type=1400 audit(1787250471.349:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.911504][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.924520][ T36] audit: type=1400 audit(1787250471.349:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.958633][ T36] audit: type=1400 audit(1787250471.359:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.984166][ T36] audit: type=1400 audit(1787250471.359:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.238243][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.245334][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.252417][ T296] bridge_slave_0: entered allmulticast mode [ 23.258678][ T296] bridge_slave_0: entered promiscuous mode [ 23.266088][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.273303][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.280379][ T296] bridge_slave_1: entered allmulticast mode [ 23.286494][ T296] bridge_slave_1: entered promiscuous mode [ 23.311757][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.318801][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.325891][ T293] bridge_slave_0: entered allmulticast mode [ 23.332216][ T293] bridge_slave_0: entered promiscuous mode [ 23.340003][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.347151][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.354276][ T293] bridge_slave_1: entered allmulticast mode [ 23.360419][ T293] bridge_slave_1: entered promiscuous mode [ 23.404488][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.411580][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.418615][ T295] bridge_slave_0: entered allmulticast mode [ 23.424945][ T295] bridge_slave_0: entered promiscuous mode [ 23.439005][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.446079][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.453149][ T295] bridge_slave_1: entered allmulticast mode [ 23.459271][ T295] bridge_slave_1: entered promiscuous mode [ 23.477083][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.484150][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.491238][ T294] bridge_slave_0: entered allmulticast mode [ 23.497361][ T294] bridge_slave_0: entered promiscuous mode [ 23.506135][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.513201][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.520302][ T294] bridge_slave_1: entered allmulticast mode [ 23.526400][ T294] bridge_slave_1: entered promiscuous mode [ 23.633577][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.640666][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.647934][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.654981][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.672143][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.679228][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.686497][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.693526][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.706298][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.713351][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.720629][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.727636][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.765202][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.772515][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.779715][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.787194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.795061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.802830][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.829777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.836905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.844474][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.851498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.865591][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.872640][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.880029][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.887061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.894523][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.901559][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.911638][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.918662][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.951337][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.958392][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.966166][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.973227][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.991899][ T294] veth0_vlan: entered promiscuous mode [ 24.017093][ T294] veth1_macvtap: entered promiscuous mode [ 24.036920][ T293] veth0_vlan: entered promiscuous mode [ 24.047590][ T295] veth0_vlan: entered promiscuous mode [ 24.054055][ T296] veth0_vlan: entered promiscuous mode [ 24.074773][ T293] veth1_macvtap: entered promiscuous mode [ 24.087358][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.088263][ T295] veth1_macvtap: entered promiscuous mode [ 24.111502][ T296] veth1_macvtap: entered promiscuous mode [ 24.183015][ T320] tun0: tun_chr_ioctl cmd 1074025675 [ 24.189494][ T320] tun0: persist enabled [ 24.195129][ T318] tun0: tun_chr_ioctl cmd 1074025675 [ 24.201509][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.204788][ T323] ======================================================= [ 24.204788][ T323] WARNING: The mand mount option has been deprecated and [ 24.204788][ T323] and is ignored by this kernel. Remove the mand [ 24.204788][ T323] option from the mount to silence this warning. [ 24.204788][ T323] ======================================================= [ 24.209984][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.250578][ T323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 24.253816][ T318] tun0: persist enabled [ 24.262760][ T323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 24.324918][ T332] 9pnet_fd: Insufficient options for proto=fd [ 24.420127][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.447673][ T45] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 24.550148][ T310] usb 4-1: device descriptor read/64, error -71 [ 24.580137][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.601367][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.609866][ T45] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 24.620348][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.629993][ T45] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 24.640572][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.650779][ T45] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 24.661234][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.731074][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.742398][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.752311][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 24.761401][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.770678][ T31] usb 1-1: config 0 descriptor?? [ 24.807858][ T339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.810115][ T310] usb 4-1: device descriptor read/64, error -71 [ 24.839341][ T63] rust_binder: 338: undelivered TRANSACTION_COMPLETE [ 24.847338][ T63] rust_binder: 338: undelivered TRANSACTION_COMPLETE [ 24.874504][ T10] rust_binder: 338: undelivered transaction 5, process died [ 24.884637][ T10] rust_binder: 338: undelivered transaction 4, process died [ 24.986772][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 25.000182][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.015665][ T31] usb 1-1: USB disconnect, device number 2 [ 25.070095][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.210134][ T310] usb 4-1: device descriptor read/64, error -71 [ 25.330132][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.390448][ T337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.450227][ T310] usb 4-1: device descriptor read/64, error -71 [ 25.482302][ T31] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 25.491415][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.499507][ T31] usb 1-1: Product: Ы [ 25.503625][ T31] usb 1-1: Manufacturer: 艹鞐筏嗆ㄉ읣槀抝㊤復愧䔸헼와⻠蕽ᓬ쿷秖戩꽃荛聸칶鐬䨐뎽弲 [ 25.516315][ T31] usb 1-1: SerialNumber:   [ 25.541139][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.552328][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.562507][ T310] usb usb4-port1: attempt power cycle [ 25.568064][ T337] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 25.577287][ T337] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 25.585326][ T337] usb 3-1: Manufacturer: syz [ 25.590728][ T337] usb 3-1: config 0 descriptor?? [ 25.910114][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.931228][ T310] usb 4-1: device descriptor read/8, error -71 [ 26.061092][ T310] usb 4-1: device descriptor read/8, error -71 [ 26.231919][ T31] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 26.252209][ T31] usb 1-1: USB disconnect, device number 3 [ 26.300177][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 26.321178][ T310] usb 4-1: device descriptor read/8, error -71 [ 26.451188][ T310] usb 4-1: device descriptor read/8, error -71 [ 26.560250][ T310] usb usb4-port1: unable to enumerate USB device [ 26.798649][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 26.798679][ T36] audit: type=1400 audit(1787250476.249:147): avc: denied { create } for pid=351 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.824105][ T36] audit: type=1400 audit(1787250476.249:148): avc: denied { ioctl } for pid=351 comm="syz.2.12" path="socket:[4454]" dev="sockfs" ino=4454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.848660][ T337] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 26.856084][ T337] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 26.863604][ T337] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 26.873840][ T337] usb 3-1: USB disconnect, device number 2 [ 27.189062][ T36] audit: type=1400 audit(1787250476.639:149): avc: denied { create } for pid=367 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.197605][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.208551][ T36] audit: type=1400 audit(1787250476.649:150): avc: denied { bind } for pid=367 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.217746][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.236295][ T36] audit: type=1400 audit(1787250476.649:151): avc: denied { name_bind } for pid=367 comm="syz.3.16" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.245389][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.266061][ T36] audit: type=1400 audit(1787250476.649:152): avc: denied { node_bind } for pid=367 comm="syz.3.16" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.286289][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.294873][ T45] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 2.40 [ 27.304394][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.314420][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.336983][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.346253][ T45] usb 2-1: can't set config #1, error -71 [ 27.353884][ T45] usb 2-1: USB disconnect, device number 2 [ 27.361196][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.371157][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.380579][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.389819][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.399124][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.408663][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.423124][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.434679][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.444233][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.455344][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.456659][ T36] audit: type=1400 audit(1787250476.909:153): avc: denied { search } for pid=369 comm="syz.1.17" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 27.464767][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.486090][ T36] audit: type=1400 audit(1787250476.909:154): avc: denied { write } for pid=369 comm="syz.1.17" name="uprobe_events" dev="tracefs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.494966][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.516788][ T36] audit: type=1400 audit(1787250476.909:155): avc: denied { open } for pid=369 comm="syz.1.17" path="/1/tracing/uprobe_events" dev="tracefs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.526076][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.559551][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.568841][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.577897][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.587048][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.596326][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.605443][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.614472][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.623565][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.632650][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.641680][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.650734][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.659636][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.668750][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.677835][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.680109][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.687258][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.702988][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.713501][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.722784][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.732044][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.737631][ T36] audit: type=1400 audit(1787250477.189:156): avc: denied { mounton } for pid=376 comm="syz.1.20" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.746076][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.773627][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.782860][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.792442][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.801510][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.810744][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.819764][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.829236][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.838725][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.842766][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.848133][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.858762][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.872614][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.873476][ T310] usb 3-1: Product: syz [ 27.884519][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.887361][ T310] usb 3-1: Manufacturer: syz [ 27.895180][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.899924][ T310] usb 3-1: SerialNumber: syz [ 27.908640][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.923204][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.935193][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.949524][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.959323][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.964666][ T385] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 27.968709][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.987717][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 27.997185][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 28.006895][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 28.017121][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 28.026433][ T368] 9pnet_fd: p9_fd_create_tcp (368): problem connecting socket to 127.0.0.1 [ 28.096847][ T396] 9pnet_fd: Insufficient options for proto=fd [ 28.320766][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.370099][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 28.471229][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.482666][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.493133][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 28.502252][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 28.510313][ T9] usb 2-1: Manufacturer: syz [ 28.515812][ T9] usb 2-1: config 0 descriptor?? [ 28.522677][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.531137][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 28.531209][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.542821][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.556360][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 28.565415][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.574425][ T10] usb 4-1: config 0 descriptor?? [ 28.579706][ T399] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 28.754902][ T375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.763504][ T375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.972624][ T310] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 28.979101][ T310] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 28.986607][ T310] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 29.173199][ T310] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 29.180555][ T310] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.194567][ T310] usb 3-1: USB disconnect, device number 3 [ 29.200950][ T310] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 29.527565][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input4 [ 29.553867][ T9] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 29.580864][ T415] kvm: MWAIT instruction emulated as NOP! [ 29.669757][ T420] random: crng reseeded on system resumption [ 29.726151][ T10] usb 2-1: USB disconnect, device number 3 [ 30.090111][ T337] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.251422][ T337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.261185][ T337] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 30.270302][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.278440][ T337] usb 3-1: Product: syz [ 30.286140][ T337] usb 3-1: Manufacturer: syz [ 30.290780][ T337] usb 3-1: SerialNumber: syz [ 30.336195][ T432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=432 comm=syz.1.39 [ 30.496702][ T430] netlink: 'syz.2.38': attribute type 9 has an invalid length. [ 30.507659][ T337] usb 3-1: MIDIStreaming interface descriptor not found [ 30.517197][ T337] usb 3-1: USB disconnect, device number 4 [ 30.528123][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.670100][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.820105][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 30.826241][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.837182][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.846933][ T310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 30.856000][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.864542][ T310] usb 1-1: config 0 descriptor?? [ 31.144685][ T9] usb 4-1: USB disconnect, device number 6 [ 31.191898][ T449] support for cryptoloop has been removed. Use dm-crypt instead. [ 31.246013][ T477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.48'. [ 31.273419][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 31.280243][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 31.289061][ T310] usb 1-1: USB disconnect, device number 4 [ 31.411790][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.572398][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.583459][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.594165][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 31.603390][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 31.611621][ T10] usb 2-1: Manufacturer: syz [ 31.616659][ T10] usb 2-1: config 0 descriptor?? [ 31.671822][ T499] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 31.733740][ T512] process 'syz.3.59' launched './file0' with NULL argv: empty string added [ 31.832561][ T451] kvm: emulating exchange as write [ 31.858860][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 31.858875][ T36] audit: type=1400 audit(1787250481.309:196): avc: denied { read append } for pid=517 comm="syz.0.61" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.887942][ T36] audit: type=1400 audit(1787250481.309:197): avc: denied { open } for pid=517 comm="syz.0.61" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.910732][ T36] audit: type=1400 audit(1787250481.309:198): avc: denied { ioctl } for pid=517 comm="syz.0.61" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.990091][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 32.100098][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.141139][ T9] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 32.149353][ T9] usb 4-1: config 0 has no interface number 0 [ 32.155479][ T9] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 32.167771][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 32.176841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.184835][ T9] usb 4-1: Product: syz [ 32.188980][ T9] usb 4-1: Manufacturer: syz [ 32.193580][ T9] usb 4-1: SerialNumber: syz [ 32.198914][ T9] usb 4-1: config 0 descriptor?? [ 32.204236][ T512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.217325][ T9] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 66:19:0f:42:a9:05 [ 32.230666][ T36] audit: type=1400 audit(1787250481.689:199): avc: denied { map } for pid=521 comm="syz.2.63" path="socket:[3815]" dev="sockfs" ino=3815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.233490][ T522] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 32.254856][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.267171][ T36] audit: type=1400 audit(1787250481.689:200): avc: denied { read } for pid=521 comm="syz.2.63" path="socket:[3815]" dev="sockfs" ino=3815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.290319][ T36] audit: type=1400 audit(1787250481.689:201): avc: denied { getopt } for pid=521 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.309845][ T36] audit: type=1400 audit(1787250481.719:202): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.331235][ T36] audit: type=1400 audit(1787250481.719:203): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.352875][ T36] audit: type=1400 audit(1787250481.719:204): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.375950][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.382302][ T36] audit: type=1400 audit(1787250481.719:205): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.384484][ T310] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 32.422118][ T536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=536 comm=syz.2.64 [ 32.440211][ T337] usb 4-1: USB disconnect, device number 7 [ 32.446490][ T337] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 32.458902][ T536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=536 comm=syz.2.64 [ 32.459381][ T310] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 32.476334][ T10] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 32.487230][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.509868][ T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 32.518970][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.521454][ T543] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 32.540091][ T310] usb 1-1: Product: ы [ 32.546692][ T310] usb 1-1: Manufacturer: 兛ᵨ朷怳궺敼し㤮谏蠀矷蘗ឤꏖ䳩ⓖ啔咶踿ᘞ䘈腾ᕛ麂ꨶ찻ዻ㍊谮㺽痁壘➸ꚤ賯嶙걹줃㙝ⷩᓣﺏ韰ꆎ㶇誟胂벡勝ꐲṸѨ票ᇼ磂Ớ譼嫎澞밁谄湑ݥ桝籛뿋䝪곍붵䫑뫙섆ᢖ㔾ⱆꜭड़㒌ꄭ歳豵⾑룠딃䎖혺䐣㨥㐲䇸适೙㢙䉉吧傛ઝ덙忞 [ 32.550332][ T543] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 32.581821][ T310] usb 1-1: SerialNumber: ࡚륭冮묊딍৛罢ﲬ⇜됚ɥ꣄厍㝕䦜ⵎ枏閡⿇偺趝빖の♗鄨鋁셢෌꽅澈ꛤ䞒ﶅ녝ꜷ켸颬䴟씦꼧摞⎻ﯫ餻鵆㒈㱈㙥鰹룟讐故ጔ倌術茅菰땥覦ꀅĴ끍ꤱ叞ᵀ벳ᕎ೷ㄽ⾗⒂缓虜 [ 32.678040][ T563] netlink: 196 bytes leftover after parsing attributes in process `syz.2.69'. [ 32.708037][ T567] overlayfs: failed to clone upperpath [ 32.819923][ T310] usb 1-1: 0:1 : does not exist [ 32.824832][ T310] usb 1-1: 0:2 : does not exist [ 32.834603][ T310] usb 1-1: USB disconnect, device number 5 [ 33.347882][ T595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 33.351927][ T593] tipc: Started in network mode [ 33.357278][ T595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.82'. [ 33.361649][ T593] tipc: Node identity ac1414aa, cluster identity 4711 [ 33.377658][ T593] tipc: New replicast peer: 0.0.0.0 [ 33.383495][ T593] tipc: Enabled bearer , priority 10 [ 33.398946][ T593] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'. [ 33.405716][ T605] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.409690][ T593] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 33.424381][ T593] tipc: Enabled bearer , priority 10 [ 33.430698][ T605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 33.451670][ T608] tipc: Failed to remove unknown binding: 66,0,0/0:2494141509/2494141510 [ 33.460706][ T608] tipc: Failed to remove unknown binding: 66,0,0/0:2494141509/2494141510 [ 33.576565][ T622] netlink: 80 bytes leftover after parsing attributes in process `syz.3.87'. [ 33.585806][ T622] veth1: entered allmulticast mode [ 33.595682][ T612] veth1: left allmulticast mode [ 33.678527][ T624] netlink: 'syz.3.88': attribute type 28 has an invalid length. [ 34.000301][ T337] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 34.151522][ T337] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 34.159553][ T337] usb 4-1: can't read configurations, error -22 [ 34.271192][ T9] usb 2-1: USB disconnect, device number 4 [ 34.281020][ T646] FAULT_INJECTION: forcing a failure. [ 34.281020][ T646] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.294175][ T337] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 34.294193][ T646] CPU: 0 UID: 0 PID: 646 Comm: syz.1.95 Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 34.294218][ T646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.294237][ T646] Call Trace: [ 34.294246][ T646] [ 34.294253][ T646] __dump_stack+0x21/0x30 [ 34.294287][ T646] dump_stack_lvl+0x140/0x1c0 [ 34.294311][ T646] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.294335][ T646] ? selinux_file_ioctl+0x732/0x1480 [ 34.294354][ T646] dump_stack+0x19/0x20 [ 34.294376][ T646] should_fail_ex+0x3c2/0x510 [ 34.294396][ T646] should_fail+0xf/0x20 [ 34.294414][ T646] should_fail_usercopy+0x1e/0x30 [ 34.294435][ T646] _copy_from_user+0x20/0xa0 [ 34.294458][ T646] mon_bin_ioctl+0x114/0xd00 [ 34.294480][ T646] ? __cfi_mon_bin_ioctl+0x10/0x10 [ 34.294502][ T646] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.294524][ T646] ? security_file_ioctl+0x3e/0x110 [ 34.294540][ T646] ? __cfi_mon_bin_ioctl+0x10/0x10 [ 34.294559][ T646] __se_sys_ioctl+0x135/0x1b0 [ 34.294582][ T646] __x64_sys_ioctl+0x7f/0xa0 [ 34.294602][ T646] x64_sys_call+0x1878/0x2ee0 [ 34.294619][ T646] do_syscall_64+0x57/0xf0 [ 34.294641][ T646] ? clear_bhb_loop+0x50/0xa0 [ 34.294659][ T646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.294685][ T646] RIP: 0033:0x7f8e16f9e0d9 [ 34.294700][ T646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.294715][ T646] RSP: 002b:00007f8e159e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.294743][ T646] RAX: ffffffffffffffda RBX: 00007f8e17225fa0 RCX: 00007f8e16f9e0d9 [ 34.294756][ T646] RDX: 00002000000000c0 RSI: 00000000c0109207 RDI: 0000000000000003 [ 34.294768][ T646] RBP: 00007f8e159e3090 R08: 0000000000000000 R09: 0000000000000000 [ 34.294780][ T646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.294791][ T646] R13: 00007f8e17226038 R14: 00007f8e17225fa0 R15: 00007ffda0c52038 [ 34.294807][ T646] [ 34.409291][ T650] syz_tun: entered allmulticast mode [ 34.506751][ T31] tipc: Node number set to 2886997162 [ 34.513283][ T650] syz_tun (unregistering): left allmulticast mode [ 34.540113][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.567397][ T337] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 34.575353][ T337] usb 4-1: can't read configurations, error -22 [ 34.584664][ T337] usb usb4-port1: attempt power cycle [ 34.670103][ T310] usb 1-1: device descriptor read/64, error -71 [ 34.910290][ T310] usb 1-1: device descriptor read/64, error -71 [ 34.930160][ T337] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 34.951697][ T337] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 34.959742][ T337] usb 4-1: can't read configurations, error -22 [ 34.980110][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.090129][ T337] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 35.110146][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.118006][ T337] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 35.125986][ T337] usb 4-1: can't read configurations, error -22 [ 35.132363][ T337] usb usb4-port1: unable to enumerate USB device [ 35.150117][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.280109][ T310] usb 1-1: device descriptor read/64, error -71 [ 35.350278][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.520120][ T310] usb 1-1: device descriptor read/64, error -71 [ 35.590121][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.630178][ T310] usb usb1-port1: attempt power cycle [ 35.720099][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.960117][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.970233][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.991111][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.070176][ T31] usb usb2-port1: attempt power cycle [ 36.121102][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.360117][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.381068][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.410100][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.431066][ T31] usb 2-1: device descriptor read/8, error -71 [ 36.511337][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.561108][ T31] usb 2-1: device descriptor read/8, error -71 [ 36.620192][ T310] usb usb1-port1: unable to enumerate USB device [ 36.800328][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.821128][ T31] usb 2-1: device descriptor read/8, error -71 [ 36.951183][ T31] usb 2-1: device descriptor read/8, error -71 [ 37.060200][ T31] usb usb2-port1: unable to enumerate USB device [ 37.360212][ T669] FAULT_INJECTION: forcing a failure. [ 37.360212][ T669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.373517][ T669] CPU: 0 UID: 0 PID: 669 Comm: syz.0.105 Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 37.373545][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.373556][ T669] Call Trace: [ 37.373562][ T669] [ 37.373569][ T669] __dump_stack+0x21/0x30 [ 37.373598][ T669] dump_stack_lvl+0x140/0x1c0 [ 37.373621][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.373645][ T669] ? check_stack_object+0x138/0x150 [ 37.373666][ T669] dump_stack+0x19/0x20 [ 37.373689][ T669] should_fail_ex+0x3c2/0x510 [ 37.373709][ T669] should_fail+0xf/0x20 [ 37.373726][ T669] should_fail_usercopy+0x1e/0x30 [ 37.373746][ T669] _copy_to_user+0x24/0xa0 [ 37.373770][ T669] simple_read_from_buffer+0xed/0x160 [ 37.373795][ T669] proc_fail_nth_read+0x1aa/0x220 [ 37.373822][ T669] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 37.373847][ T669] ? bpf_lsm_file_permission+0xd/0x20 [ 37.373871][ T669] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 37.373895][ T669] vfs_read+0x288/0xc70 [ 37.373913][ T669] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 37.373933][ T669] ? __cfi_vfs_read+0x10/0x10 [ 37.373951][ T669] ? __kasan_check_write+0x18/0x20 [ 37.373970][ T669] ? mutex_lock+0x97/0x1d0 [ 37.373988][ T669] ? __cfi_mutex_lock+0x10/0x10 [ 37.374008][ T669] ksys_read+0x145/0x260 [ 37.374026][ T669] ? xfd_validate_state+0x68/0x140 [ 37.374051][ T669] ? __cfi_ksys_read+0x10/0x10 [ 37.374070][ T669] ? __kasan_check_write+0x18/0x20 [ 37.374088][ T669] ? fpregs_restore_userregs+0x11c/0x260 [ 37.374110][ T669] __x64_sys_read+0x7f/0x90 [ 37.374129][ T669] x64_sys_call+0x2638/0x2ee0 [ 37.374146][ T669] do_syscall_64+0x57/0xf0 [ 37.374169][ T669] ? clear_bhb_loop+0x50/0xa0 [ 37.374187][ T669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.374215][ T669] RIP: 0033:0x7f208575e90e [ 37.374231][ T669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 37.374246][ T669] RSP: 002b:00007f2086632fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.374267][ T669] RAX: ffffffffffffffda RBX: 00007f20866336c0 RCX: 00007f208575e90e [ 37.374281][ T669] RDX: 000000000000000f RSI: 00007f20866330a0 RDI: 0000000000000004 [ 37.374294][ T669] RBP: 00007f2086633090 R08: 0000000000000000 R09: 0000000000000000 [ 37.374306][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.374318][ T669] R13: 00007f2085a26038 R14: 00007f2085a25fa0 R15: 00007ffca7593e78 [ 37.374334][ T669] [ 37.735868][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 37.735884][ T36] audit: type=1400 audit(1787250487.189:242): avc: denied { associate } for pid=677 comm="syz.2.109" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 37.736530][ T678] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 37.742024][ T36] audit: type=1400 audit(1787250487.189:243): avc: denied { mounton } for pid=677 comm="syz.2.109" path="/file0" dev="rootfs" ino=4092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.050116][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 38.057793][ T337] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 38.190140][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.210118][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 38.216351][ T337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.226457][ T310] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 38.234734][ T337] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.247596][ T310] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 38.255772][ T310] usb 1-1: config 0 has no interface number 0 [ 38.262082][ T310] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 14129, setting to 64 [ 38.273217][ T310] usb 1-1: config 0 interface 200 has no altsetting 0 [ 38.280941][ T337] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.290071][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.298089][ T337] usb 4-1: Product: syz [ 38.302327][ T310] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 38.311401][ T337] usb 4-1: Manufacturer: syz [ 38.315977][ T337] usb 4-1: SerialNumber: syz [ 38.320638][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.332699][ T310] usb 1-1: Product: syz [ 38.336886][ T310] usb 1-1: Manufacturer: syz [ 38.342008][ T310] usb 1-1: SerialNumber: syz [ 38.347778][ T310] usb 1-1: config 0 descriptor?? [ 38.353845][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.354558][ T693] netlink: 'syz.2.115': attribute type 16 has an invalid length. [ 38.364849][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.372704][ T693] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 38.382921][ T31] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.390092][ T693] netlink: 64110 bytes leftover after parsing attributes in process `syz.2.115'. [ 38.398890][ T31] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 38.415979][ T31] usb 2-1: Manufacturer: syz [ 38.417252][ T693] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 38.428561][ T693] Zero length message leads to an empty skb [ 38.431724][ T31] usb 2-1: config 0 descriptor?? [ 38.435971][ T693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.115'. [ 38.555858][ T310] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input5 [ 38.569123][ T310] usb 1-1: USB disconnect, device number 10 [ 39.073729][ T36] audit: type=1400 audit(2000000000.000:244): avc: denied { getopt } for pid=697 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.310095][ T310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.332961][ T337] cdc_ncm 4-1:1.0: bind() failure [ 39.338737][ T337] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 39.346962][ T337] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 39.358005][ T337] usb 4-1: USB disconnect, device number 12 [ 39.442921][ T31] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input6 [ 39.454217][ T31] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 39.473670][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.484103][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 39.484213][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.493337][ T701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=701 comm=syz.2.118 [ 39.502628][ T310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.523101][ T36] audit: type=1400 audit(2000000000.439:245): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=480 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.548117][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.548214][ T36] audit: type=1400 audit(2000000000.439:246): avc: denied { accept } for pid=700 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.556177][ T310] usb 1-1: SerialNumber: syz [ 39.651295][ T401] usb 2-1: USB disconnect, device number 9 [ 39.832045][ T310] usb 1-1: 0:2 : does not exist [ 39.840704][ T310] usb 1-1: USB disconnect, device number 11 [ 39.855526][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.057309][ T722] netlink: 'syz.2.125': attribute type 63 has an invalid length. [ 40.065090][ T722] netlink: 5 bytes leftover after parsing attributes in process `syz.2.125'. [ 40.180816][ T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.211603][ T36] audit: type=1400 audit(2000000001.129:247): avc: denied { ioctl } for pid=733 comm="syz.1.129" path="socket:[5461]" dev="sockfs" ino=5461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.236720][ T36] audit: type=1400 audit(2000000001.129:248): avc: denied { bind } for pid=733 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.256253][ T36] audit: type=1400 audit(2000000001.129:249): avc: denied { write } for pid=733 comm="syz.1.129" path="socket:[6408]" dev="sockfs" ino=6408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.279593][ T36] audit: type=1400 audit(2000000001.129:250): avc: denied { setopt } for pid=733 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.330102][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 40.336216][ T310] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.349294][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.356115][ T310] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 40.365176][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.373643][ T310] usb 1-1: config 0 descriptor?? [ 40.480094][ T337] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.622930][ T36] audit: type=1400 audit(2000000001.539:251): avc: denied { create } for pid=742 comm="syz.2.131" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.630086][ T337] usb 2-1: Using ep0 maxpacket: 32 [ 40.652869][ T337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.663426][ T337] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.672413][ T337] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 40.683389][ T337] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 40.696594][ T337] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.706254][ T337] usb 2-1: config 1 interface 1 has no altsetting 0 [ 40.714199][ T337] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=9c.40 [ 40.723627][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.731636][ T337] usb 2-1: Product: syz [ 40.735812][ T337] usb 2-1: Manufacturer: syz [ 40.740430][ T337] usb 2-1: SerialNumber: syz [ 40.781443][ T310] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 40.788434][ T310] holtek 0003:1241:5015.0005: collection stack underflow [ 40.795481][ T310] holtek 0003:1241:5015.0005: item 0 2 0 12 parsing failed [ 40.802800][ T310] holtek 0003:1241:5015.0005: parse failed [ 40.808616][ T310] holtek 0003:1241:5015.0005: probe with driver holtek failed with error -22 [ 40.870871][ T749] 9pnet_fd: Insufficient options for proto=fd [ 40.870871][ T748] 9pnet_fd: Insufficient options for proto=fd [ 40.887144][ T748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.948236][ T337] usb 2-1: selecting invalid altsetting 0 [ 40.954339][ T337] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 40.961275][ T337] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 40.976986][ T337] usb 2-1: USB disconnect, device number 10 [ 40.984512][ T401] usb 1-1: USB disconnect, device number 12 [ 41.009010][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.240114][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 41.401417][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.409733][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 41.422017][ T45] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 41.431098][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.439070][ T45] usb 4-1: Product: syz [ 41.443222][ T45] usb 4-1: Manufacturer: syz [ 41.447806][ T45] usb 4-1: SerialNumber: syz [ 41.465335][ T765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=765 comm=syz.1.139 [ 41.503701][ T767] ------------[ cut here ]------------ [ 41.509203][ T767] WARNING: CPU: 1 PID: 767 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 41.518623][ T767] Modules linked in: [ 41.522532][ T767] CPU: 1 UID: 0 PID: 767 Comm: syz.0.140 Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 41.533907][ T767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.543981][ T767] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 41.549966][ T767] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 84 c4 0b 06 00 0f 85 c2 00 00 00 c6 05 77 c4 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 41.569642][ T767] RSP: 0018:ffffc9000eabf8c0 EFLAGS: 00010246 [ 41.575820][ T767] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 41.583828][ T767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000eabf978 [ 41.591818][ T767] RBP: ffffc9000eabf9f0 R08: ffffc9000eabf977 R09: 0000000000000000 [ 41.599781][ T767] R10: ffffc9000eabf960 R11: fffff52001d57f2f R12: ffffc9000eabf900 [ 41.607767][ T767] R13: dffffc0000000000 R14: 1ffff92001d57f1c R15: 0000000000000000 [ 41.615760][ T767] FS: 00007f20866336c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 41.624777][ T767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.631432][ T767] CR2: 00007f2086632ff8 CR3: 000000011e10c000 CR4: 00000000003526b0 [ 41.639412][ T767] Call Trace: [ 41.642702][ T767] [ 41.645661][ T767] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 41.651408][ T767] ? plist_add+0x4d4/0x570 [ 41.655837][ T767] ? __futex_queue+0x19f/0x350 [ 41.660642][ T767] ___kmalloc_large_node+0x81/0x220 [ 41.665848][ T767] __kmalloc_large_node_noprof+0x1e/0xd0 [ 41.671485][ T767] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 41.677906][ T767] ? bitmap_parse_user+0x29/0x80 [ 41.682855][ T767] memdup_user_nul+0x40/0x1a0 [ 41.687534][ T767] ? bitmap_parse_user+0x1f/0x80 [ 41.692476][ T767] bitmap_parse_user+0x29/0x80 [ 41.697246][ T767] irq_affinity_proc_write+0x139/0x230 [ 41.702714][ T767] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 41.708698][ T767] ? futex_wait+0x2b8/0x7c0 [ 41.713219][ T767] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 41.719206][ T767] proc_reg_write+0x1fa/0x2f0 [ 41.720098][ T401] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 41.723913][ T767] ? __cfi_proc_reg_write+0x10/0x10 [ 41.736728][ T767] vfs_write+0x3c4/0xfd0 [ 41.740979][ T767] ? __cfi_vfs_write+0x10/0x10 [ 41.745746][ T767] ? __kasan_check_write+0x18/0x20 [ 41.750880][ T767] ? mutex_lock+0x97/0x1d0 [ 41.755296][ T767] ? __cfi_mutex_lock+0x10/0x10 [ 41.760385][ T767] ksys_write+0x145/0x260 [ 41.764705][ T767] ? __cfi_ksys_write+0x10/0x10 [ 41.769540][ T767] ? __kasan_check_write+0x18/0x20 [ 41.774896][ T767] ? fpregs_restore_userregs+0x11c/0x260 [ 41.780563][ T767] __x64_sys_write+0x7f/0x90 [ 41.785150][ T767] x64_sys_call+0x271c/0x2ee0 [ 41.789985][ T767] do_syscall_64+0x57/0xf0 [ 41.794417][ T767] ? clear_bhb_loop+0x50/0xa0 [ 41.799096][ T767] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.805009][ T767] RIP: 0033:0x7f208579e0d9 [ 41.809418][ T767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.829032][ T767] RSP: 002b:00007f2086633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.837468][ T767] RAX: ffffffffffffffda RBX: 00007f2085a25fa0 RCX: 00007f208579e0d9 [ 41.845484][ T767] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000005 [ 41.853470][ T767] RBP: 00007f2085835024 R08: 0000000000000000 R09: 0000000000000000 [ 41.861463][ T767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.869432][ T767] R13: 00007f2085a26038 R14: 00007f2085a25fa0 R15: 00007ffca7593e78 [ 41.877430][ T767] [ 41.880487][ T767] ---[ end trace 0000000000000000 ]--- [ 41.887333][ T45] usb 4-1: unit 4 not found! [ 41.890119][ T401] usb 2-1: Using ep0 maxpacket: 8 [ 41.907056][ T401] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 41.918263][ T401] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 41.925281][ T45] usb 4-1: USB disconnect, device number 13 [ 41.930928][ T401] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.945016][ T401] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 41.955439][ T401] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 41.968923][ T401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.977505][ T401] usb 2-1: Product: syz [ 41.981780][ T401] usb 2-1: Manufacturer: syz [ 41.986366][ T401] usb 2-1: SerialNumber: syz [ 41.991473][ T401] usb 2-1: config 0 descriptor?? [ 41.997094][ T401] hub 2-1:0.0: bad descriptor, ignoring hub [ 42.003032][ T401] hub 2-1:0.0: probe with driver hub failed with error -5 [ 44.504749][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 44.504765][ T36] audit: type=1400 audit(2000000005.420:261): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.610209][ T337] usb 2-1: USB disconnect, device number 11