last executing test programs: 3.802681192s ago: executing program 0 (id=29): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5f5, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7b, '\x00', 0x5c}, {0x0, 0x8, 0x6, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0x5}, {0x0, 0x86, 0xd, '\x00', 0xfb}, {0x9, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x0, 0xa, '\x00', 0x5}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0xb}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xe000, 0x40, 0x7, 0x857, 0x0, [{0xf, 0x7, 0x18, '\x00', 0x9}, {0xd, 0x7, 0x2, '\x00', 0x2}, {0x6, 0x0, 0x5, '\x00', 0x9}, {0x6, 0x5, 0x5, '\x00', 0x18}, {0x8, 0x3, 0xa, '\x00', 0x9}, {0x2e, 0x6, 0x10, '\x00', 0x4}, {0x7, 0x1, 0x6, '\x00', 0xb6}, {0x8, 0x0, 0x9, '\x00', 0xff}, {0x0, 0x1e, 0x10, '\x00', 0x3}, {0x8, 0x3e, 0xff, '\x00', 0x8d}, {0xfd, 0x81, 0x4, '\x00', 0x3}, {0x62, 0x3, 0x5, '\x00', 0xf4}, {0x1, 0xc, 0x6, '\x00', 0x3}, {0x3, 0xbf, 0x2, '\x00', 0x97}, {0x4, 0x6, 0xc9, '\x00', 0x5}, {0xfb, 0x0, 0xd, '\x00', 0x8}, {0x1, 0x8, 0xee, '\x00', 0x2b}, {0x0, 0x9, 0x1, '\x00', 0x9}, {0x6, 0x8, 0x7, '\x00', 0x9}, {0xa, 0xb1, 0x27, '\x00', 0x5}, {0x6, 0x0, 0xa0, '\x00', 0x3}, {0xc4, 0xe, 0x2, '\x00', 0x7}, {0x1, 0x4, 0x2, '\x00', 0x1}, {0x8a, 0x5, 0x3, '\x00', 0xc}]}}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xff, 0x3, 0x1c, 0x2, 0x8, 0x3ce}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000180)={0x4, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0/file1'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) symlink(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000240)='./file0/file1\x00') lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000200)=@nullb, r5, &(0x7f0000000280)={0x401, 0x3, 0x1, 0x2, 0x5, 0x3, 0x3, 0xffffffff, 0xca}) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="73697a653d6d2c80"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1d3995436f10"}]}, 0x74}, 0x1, 0x0, 0x0, 0x40090}, 0x804) 3.709299747s ago: executing program 0 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d0000000000000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20058050}, 0x22000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r3, r4, 0x0, 0x38) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @loopback, 0x78a}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="33031600ffff140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x62}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}, {0x3, 0x4, 0x9, 0x4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}], 0x1, 0x2090) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) r9 = socket$unix(0x1, 0x2, 0x0) listen(r9, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x30008094, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="5f589e8254bd4b5cb45e222074378612083af700d93ae49ffbf40ea500e9b592898b2bf6c8fe0b1d70c2aab107a14ba83d2ff2f9c1c4da0a982fffa09ef787ae9d285c0368f2fb3f43953dd2a0c5fb4337518a49f4ceadae90410984212d68f2004e5fa14a1a514d65cf0946d89fd22d0b5dacd80e28ad315baa5344229c27ece3372915becc8fcfb975c9a30e619bd75bb4c25fe44a77126552b4700f0fd5927e5f64e257a8ba4ea8e8754ccfd516e8197d0b6028e9078e965b5977034115", @ANYRESOCT=0x0, @ANYRES32=r8], 0x20) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0xd0, &(0x7f00000002c0)="ccf12897c84dff89a5a1b33c0a80ba9f867a7af66137bec66eb88a1d4cd06b6e0bd9fda7c9ef90c523df18129eb7631e1c488c1bb8b471ae1fe005f28683a7a9fe226430ae61bf64d8afb5bf3673401ace9618cddb891185894d81f3efa88fcac2d05f6d5cf7a1a606152537f9677f6681b4122dd4b530b2430166d2fa20ad0c4093188206be3ba7129c47d9769754bafef591ffcc8a4026e924dd02da5527b82776b01a6718707910a946d9c7b1c8f553a0cb0912509f09b1fcb3136d716cd3a1fdb999eb6e0ab1680a9b3f9e37067f"}) 3.639278691s ago: executing program 0 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.548426545s ago: executing program 1 (id=33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000500)={0x2c}, 0x8) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x1, 0xd, 0x6, 0x5d80}]}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.458609238s ago: executing program 0 (id=34): mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xa, {0x9, 0x21, 0x8ed, 0x1, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x56}, {0x0}], 0x2, 0x0, 0x0, 0x4008851}, 0x4048880) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.985795992s ago: executing program 3 (id=37): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000040)={0x207f, {{0xa, 0x4e21, 0x0, @remote, 0x3}}, 0x1}, 0x90) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.949025284s ago: executing program 3 (id=38): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.835215029s ago: executing program 3 (id=39): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7b0022ebffffffffffffaaaaaaaaaabb080611010800060400"], 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4a180, 0x1) fsync(r4) lstat(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 1.647701439s ago: executing program 1 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d0000000000000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20058050}, 0x22000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r3, r4, 0x0, 0x38) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @loopback, 0x78a}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="33031600ffff140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x62}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}, {0x3, 0x4, 0x9, 0x4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}], 0x1, 0x2090) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) r9 = socket$unix(0x1, 0x2, 0x0) listen(r9, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x30008094, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="5f589e8254bd4b5cb45e222074378612083af700d93ae49ffbf40ea500e9b592898b2bf6c8fe0b1d70c2aab107a14ba83d2ff2f9c1c4da0a982fffa09ef787ae9d285c0368f2fb3f43953dd2a0c5fb4337518a49f4ceadae90410984212d68f2004e5fa14a1a514d65cf0946d89fd22d0b5dacd80e28ad315baa5344229c27ece3372915becc8fcfb975c9a30e619bd75bb4c25fe44a77126552b4700f0fd5927e5f64e257a8ba4ea8e8754ccfd516e8197d0b6028e9078e965b5977034115", @ANYRESOCT=0x0, @ANYRES32=r8], 0x20) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0xd0, &(0x7f00000002c0)="ccf12897c84dff89a5a1b33c0a80ba9f867a7af66137bec66eb88a1d4cd06b6e0bd9fda7c9ef90c523df18129eb7631e1c488c1bb8b471ae1fe005f28683a7a9fe226430ae61bf64d8afb5bf3673401ace9618cddb891185894d81f3efa88fcac2d05f6d5cf7a1a606152537f9677f6681b4122dd4b530b2430166d2fa20ad0c4093188206be3ba7129c47d9769754bafef591ffcc8a4026e924dd02da5527b82776b01a6718707910a946d9c7b1c8f553a0cb0912509f09b1fcb3136d716cd3a1fdb999eb6e0ab1680a9b3f9e37067f"}) 1.599555561s ago: executing program 1 (id=41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.531645784s ago: executing program 1 (id=42): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000140)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000340)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e000100000000000800410000000000", @ANYRESHEX], 0x1c}], 0x1}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x22a00ab, &(0x7f0000000000)=ANY=[@ANYBLOB='noswap,#']) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x18da82, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno5', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ftruncate(r0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgid(r9) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, &(0x7f0000000000)={0x0, 0x1550a8aa}) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @local}, {0x306, @local}, 0xa8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 'pimreg1\x00'}) 1.467384458s ago: executing program 1 (id=43): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000080)={0x0, 0x4, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, 'F]8'}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x40, 0xb, 0xb3, {0xb3, 0xf, "e6aa08b800d07bdfe64e765d52be5ec83dad796b3227f8d7e38f02bfd8908b6e04fcd73bc5441645504a938491d0fa1a58c699c60e4744c6e59c8603735f2f48f49d2e9d2f5d3529a904574162b66ec9723cc4ea4cd6f9e894fb7210b4b6d660ea9afadba804e0b6b9f1ac4311fedd260faa50493a4adf9daf9210c1b28c27ca530073020ac3be1ce6459c849cfe28360cb3756183b9458f91c7dbf001f83acf1eb4fbbc376efe0bf465fde514ff31f9b2"}}, &(0x7f0000000000)={0x0, 0x3, 0x23, @string={0x23, 0x3, "e9e0c7a37acdbb43a3e18a136c7622bbfbe4c93bc35059caf6763f9a897bb343c4"}}, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x6f9}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x15, 0x75, "401779d3f5919697ec6a893e2a6bca9e2cfdfb3236383e4fd0be8b665e178927a3e58d95c8e9c0cf940804762c80c863075a869c36e40b6924afa156830bd1ba30efe078566e069f50b98c777c97ad0a4dd6fdd82c20fe927ad5c093b53358d9de138f8be32ed908cae5991cfcbd60258e4535da29"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x1, 0xf, "bde1cae4ca8660aac2bb2fd6fa18ff"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa}}) 1.314288335s ago: executing program 0 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x22, 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000004dc0)={0x5, 0x45, 0x8f0f, 0x2, 0x8, 0x7cca, 0x5, 0x100000000c632, 0x2, 0x4, 0x20007c, 0x40000000000000a, 0x3, 0x0, 0xd00, 0x8003, 0x8, 0x101, 0xfffffffffffffff8, 0xf6a3, 0x10001, 0x5, 0x13c0000000000000, 0x19011, 0x10, 0xa07}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.02296551s ago: executing program 0 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x4b, 0x0, &(0x7f0000000440)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = getpid() syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) r5 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4c000) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x1c, 0x0, 0x14) sendmmsg$unix(r6, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x8004}}], 0x1, 0x0) syz_clone3(&(0x7f00000006c0)={0x62100000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r2], 0x1, {r1}}, 0x58) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) 920.428965ms ago: executing program 2 (id=46): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 856.095208ms ago: executing program 2 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40b00}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4ecd}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xfffffffffffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4757650f}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x187d}, {0xc, 0x90, 0x3}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}]}) 786.578211ms ago: executing program 2 (id=48): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000040000102030109026900030103d004080b01010107200809040000000101200009240109000b09000809040100000107200009040101010102200009050109ff03f6109c082501803f0506000904020000010220000904020101010220000905820920000202000825010103020400000000000000"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$AUDIT_USER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbfb, "e80fac0eb17c0ad5697212e735e323e8dff456fae63259f080b945ea8f32ab30eccc69a37a02c911fb02a3273f9b21809779171ab9c5c534739a8b048a41a67afaa329e77e9de91350c4dc36b118c944811e84b5d51473307b30b8e2e8abaeb535a3969ab3643ee2586e09e5e0064fd12db43c969e7bfdd3ac48d8171c599b5dcb0c", ["", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x40091) (rerun: 64) 681.824646ms ago: executing program 2 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d0000000000000004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20058050}, 0x22000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r3, r4, 0x0, 0x38) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @loopback, 0x78a}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="33031600ffff140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x62}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}, {0x3, 0x4, 0x9, 0x4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}], 0x1, 0x2090) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) r9 = socket$unix(0x1, 0x2, 0x0) listen(r9, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x30008094, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="5f589e8254bd4b5cb45e222074378612083af700d93ae49ffbf40ea500e9b592898b2bf6c8fe0b1d70c2aab107a14ba83d2ff2f9c1c4da0a982fffa09ef787ae9d285c0368f2fb3f43953dd2a0c5fb4337518a49f4ceadae90410984212d68f2004e5fa14a1a514d65cf0946d89fd22d0b5dacd80e28ad315baa5344229c27ece3372915becc8fcfb975c9a30e619bd75bb4c25fe44a77126552b4700f0fd5927e5f64e257a8ba4ea8e8754ccfd516e8197d0b6028e9078e965b5977034115", @ANYRESOCT=0x0, @ANYRES32=r8], 0x20) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0xd0, &(0x7f00000002c0)="ccf12897c84dff89a5a1b33c0a80ba9f867a7af66137bec66eb88a1d4cd06b6e0bd9fda7c9ef90c523df18129eb7631e1c488c1bb8b471ae1fe005f28683a7a9fe226430ae61bf64d8afb5bf3673401ace9618cddb891185894d81f3efa88fcac2d05f6d5cf7a1a606152537f9677f6681b4122dd4b530b2430166d2fa20ad0c4093188206be3ba7129c47d9769754bafef591ffcc8a4026e924dd02da5527b82776b01a6718707910a946d9c7b1c8f553a0cb0912509f09b1fcb3136d716cd3a1fdb999eb6e0ab1680a9b3f9e37067f"}) 666.245407ms ago: executing program 2 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0x0, [0xb, 0x3, 0x8, 0x200, 0x1, 0x872, 0x497, 0xfff, 0x100, 0xbdc9, 0x7, 0x69da00, 0x10, 0x1, 0x800, 0x1000, 0x4, 0x6ef, 0x0, 0x1, 0x4, 0x8001, 0x6, 0x3ff, 0x99e4, 0x9, 0x0, 0x3ff, 0x8, 0x7, 0xfffff000, 0x3, 0x4, 0x3, 0x9, 0x8000000, 0x8, 0x6, 0x1, 0x400, 0xfff, 0x4, 0x7, 0x3ff, 0xfffffffc, 0x2, 0x6, 0xb, 0x5, 0x3, 0x614b, 0x8, 0x200, 0x6, 0x3, 0x1, 0xc, 0x9, 0x2, 0xca2a, 0x0, 0x2, 0xcf, 0x5, 0x1, 0x7, 0x80000000, 0xa, 0x8, 0x10, 0x2, 0x7, 0x101, 0xfffffffc, 0x6, 0xfffff000, 0x2, 0xb6, 0x9, 0x0, 0x2, 0x2, 0xe18, 0x0, 0x53b6, 0x6, 0x5, 0x40, 0x0, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0xfffffff8, 0x4, 0x2, 0x25552a11, 0x0, 0x7, 0x5, 0xffff, 0x3, 0x2, 0x3, 0x3, 0x0, 0xd, 0x7fffffff, 0xa, 0x8, 0x6c90, 0x97e, 0x1, 0x2, 0x9, 0x8, 0x6, 0xd, 0x3, 0x35, 0x2, 0x7f, 0x7, 0x8000, 0x4, 0x8, 0x2]}}) unshare(0x40000080) 587.921201ms ago: executing program 2 (id=51): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_usb_connect$uac3(0x5, 0x85, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000020532b3100400001020301090273000301054007080b0200012630020904000000010130000a2401010f000e06000005240c08000904010000010230000904010101010230000905010908000c00020a2525ff000000fc0200090402000001023000090402010101"], 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28) 266.707887ms ago: executing program 1 (id=52): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x5, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x40, 0x6, 0x4, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$midi(0x6, 0x99, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x5058, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x4, 0x40, 0xef, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x8, 0x2, [{}, {0x9, 0x9}], 0x1}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x5, 0x7, 0x3, {0x14, 0x25, 0x1, 0x10, "71a0fb13f078f1519b64bef99602ba47"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0x3f, 0x3, {0x5, 0x25, 0x1, 0x1, "d0"}}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x4, "c2d9528b"}}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x3, 0x0, 0x3, {0x10, 0x25, 0x1, 0xc, "d66921c3f8ca89dae6c1557c"}}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x8, 0x3f, 0x9, {0x6, 0x25, 0x1, 0x2, "90de"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0xce, 0x0, 0x20, 0x6}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "de1e0fc0885f18ca832c714cc7755e48"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0x0, 0x3, [0x30, 0xff00c0, 0xff00ff, 0xfe40c0, 0xff0030, 0xff0030]}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c}}, {0x91, &(0x7f0000000280)=@string={0x91, 0x3, "9243f65c2de47339a41adda12c66c73114ae224d07352f82dcb97aaa757ee385554c21a7bb92e7cdb6a67d5c09cd618e14f2e3a46c8dcbe192104dbe31aa4401f1af7cd2d1109a8f8969eda07e2bf12b54758787fd7b5f903a4b104a3a592bd539d9b64b38664c49844a6f7811fcb38f55c57b2d5800c72f73fcf4ee02fa8eead38893cd8d5f417a03d671dab28ece"}}, {0x20, &(0x7f0000000340)=@string={0x20, 0x3, "6e991eda1c8df577d6095f370d4ea6fe34e0469ab7985d0a7288db6fa4f6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x447}}, {0xef, &(0x7f00000003c0)=@string={0xef, 0x3, "c50cf6a737c781d18f5e67907d15fc878f42ed8fd584f25633d120cabbe7903093ce151ce69004870940ae9213600b3ae0925846cdbf31bf262805feb38baa3588c99f3013a15abca13b3b7de476a748ba8cf89b6004625f57cd6c99e505d5c2b818059c4cc90e820e92c9ab142a1b12ff07c04ee13b51f8e8af0559348bdfa1274ca113d7dba3a3c91b0a2428536e3dcb7b896394278d51d16e60d06371f9e4c05d9d47ddf90581624fcb39164798cf05fab4a65d98f62b2702c14a91874dbd6fe9b7a0b03c232b8002e9b1b99f8194259fc2bf32824411febddd8d6899b2aaf693ac79d433773ce9dc16548f"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}, {0xae, &(0x7f0000000500)=@string={0xae, 0x3, "4312c8ac198fde1f8522da1fdf1863a78a6cfbf2657edccff8a5afc56eb4793d80330cf7991d49a9e6123a0b754e9bba9d109de309d18eb315468901a7128b2908b9419033c4196bf8558494a19f7e29451bad6e2133c297d3ffc24569c3e07654339ceb274b9a00298a413fb8d3c694840e98dc38c4fe3e1adb6893e68cf67824a2414af84544382245b11a08cb82be0f4e69b388d08e7603470c5e0fc3b4ef3da022af58e9030080c2d7b7"}}, {0x68, &(0x7f00000005c0)=@string={0x68, 0x3, "af0f8c372ba30e93e3aba57c0c7ce23addf941b7facced1b27a270384466add1a45ecb18f21662b0538e242d7b1eb53bcec11a5cfea17343a27194d0cc11cd7bec5d5bb959c406207d1aaaf434c3b287fa2750adbb76c5665fa54f82a9c65b3cb38ad9a9cd1e"}}, {0xd4, &(0x7f0000000640)=@string={0xd4, 0x3, "20a747d7a47f5afeecf369b0588c733c25b02e7c13f20ebf8567ef0a484550a8a59328b848928874ed68089b02bb45bde2edad42c165c3b3180f33bd6272a24ba1b280aa2b5b0c36526c3187a3caa6f90dea9570d5bbc4190023d32942171917c4ab2afa65a5d953c4c8f4910d2ff74f23eb1400b9d33555ab038024cb7a8b7fd93a8ba8e6144d1d3e33061740a3771fff6980562b781d0726ff32be8d785d38bcaa67b8fed848f4920dee5b26987ff76e8b8e8a7504880e6bd20dccf5db7583ab8a3c4e5cd7fe9256f7943dae52676500d1"}}]}) 70.354037ms ago: executing program 3 (id=53): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40404, 0x50) lseek(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) 1.43441ms ago: executing program 3 (id=54): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000240)={&(0x7f0000000180)=[{0x4e0, 0x1, 0x10001, 0x9, 0x8}, {0x81, 0xffffffff, 0x2, 0x9f89, 0x400}, {0xea6, 0x8, 0x6, 0xffff}, {0x600000000000000, 0x3, 0xc, 0x2, 0x7}], 0x4, 0x28, 0x16c, 0x2}) preadv2(r0, &(0x7f0000000040), 0x0, 0x1, 0x4000007, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000280)) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x806}, @void, @ipv4=@dccp={{0x32, 0x4, 0x0, 0x2c, 0x13b, 0x67, 0x0, 0xa, 0x21, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x80, 0x0, 0x0, [0x7, 0xffffffff, 0x9, 0xfff, 0xffff, 0xf]}, @timestamp={0x44, 0x28, 0x25, 0x0, 0x2, [0x7, 0x3, 0x6, 0x1, 0xf9, 0xe, 0x7, 0x100, 0x566b]}, @timestamp={0x44, 0x8, 0x2c, 0x0, 0x1, [0x9a000000]}, @timestamp={0x44, 0x10, 0xc8, 0x0, 0x8, [0x1, 0x4, 0x8]}, @lsrr={0x83, 0xf, 0xf8, [@rand_addr=0x64010101, @multicast2, @broadcast]}, @rr={0x7, 0x1f, 0xc5, [@empty, @multicast1, @broadcast, @local, @multicast2, @loopback, @multicast1]}, @noop, @cipso={0x86, 0x27, 0x2, [{0x7, 0x8, "267a6a5bc254"}, {0x6, 0xc, "c49340ca02753ebb98bc"}, {0x1, 0xd, "582f26cb34f3bdb0e7fa31"}]}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xc, 0x0, 0x0, 0x6, 0x0, "f901ba", 0x7, "5ec272"}, "e45420d1cca6e02bfc3c8a9553879d4437a8720d4775fdbd2e3d4c0f6977e11369d2a5c7fad97fb38534d8b4adcbed54674e07b9d8ef859abb56e0e2beba80a6d414361b23e4b7e0824bcee54a0ef3027f16d729753e96d09a5d629659706be00051cb"}}}, 0x13f) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=55): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26, 0x80000000}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413", @ANYRESOCT], 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x7}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x22, 0x1, 0x0, 0x6d25, 0x7aa92009, 0x1, 0x1000, 0x9, 0x6}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 23.772041][ T36] audit: type=1400 audit(1773816751.330:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.775836][ T282] cgroup: Unknown subsys name 'net' [ 23.795575][ T36] audit: type=1400 audit(1773816751.340:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.823560][ T36] audit: type=1400 audit(1773816751.370:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.824110][ T282] cgroup: Unknown subsys name 'devices' [ 24.005562][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.011413][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.106997][ T36] audit: type=1400 audit(1773816751.670:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.131220][ T36] audit: type=1400 audit(1773816751.670:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.156935][ T36] audit: type=1400 audit(1773816751.670:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.167371][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.190295][ T36] audit: type=1400 audit(1773816751.760:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.217042][ T36] audit: type=1400 audit(1773816751.760:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.246598][ T36] audit: type=1400 audit(1773816751.810:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.248021][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.272716][ T36] audit: type=1400 audit(1773816751.810:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.552723][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.561238][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.568972][ T290] bridge_slave_0: entered allmulticast mode [ 25.575823][ T290] bridge_slave_0: entered promiscuous mode [ 25.583168][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.590394][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.597643][ T290] bridge_slave_1: entered allmulticast mode [ 25.604198][ T290] bridge_slave_1: entered promiscuous mode [ 25.640065][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.647183][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.654533][ T289] bridge_slave_0: entered allmulticast mode [ 25.660998][ T289] bridge_slave_0: entered promiscuous mode [ 25.669305][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.676468][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.683768][ T289] bridge_slave_1: entered allmulticast mode [ 25.690280][ T289] bridge_slave_1: entered promiscuous mode [ 25.755633][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.762842][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.769947][ T291] bridge_slave_0: entered allmulticast mode [ 25.776498][ T291] bridge_slave_0: entered promiscuous mode [ 25.786244][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.793532][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.800885][ T291] bridge_slave_1: entered allmulticast mode [ 25.807381][ T291] bridge_slave_1: entered promiscuous mode [ 25.837253][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.844821][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.852134][ T292] bridge_slave_0: entered allmulticast mode [ 25.858621][ T292] bridge_slave_0: entered promiscuous mode [ 25.865324][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.872894][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.880335][ T292] bridge_slave_1: entered allmulticast mode [ 25.886964][ T292] bridge_slave_1: entered promiscuous mode [ 26.007383][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.014970][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.029673][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.036893][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.044408][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.051766][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.094068][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.101290][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.109167][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.116463][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.130498][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.137613][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.145150][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.152451][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.192070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.200134][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.208077][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.215967][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.223721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.231257][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.239111][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.263096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.270360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.278465][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.285606][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.300241][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.307352][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.315317][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.322372][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.333793][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.341001][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.354584][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.361938][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.371299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.378594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.395071][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.402181][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.462381][ T291] veth0_vlan: entered promiscuous mode [ 26.474967][ T289] veth0_vlan: entered promiscuous mode [ 26.487164][ T292] veth0_vlan: entered promiscuous mode [ 26.499499][ T290] veth0_vlan: entered promiscuous mode [ 26.516675][ T289] veth1_macvtap: entered promiscuous mode [ 26.527252][ T291] veth1_macvtap: entered promiscuous mode [ 26.547139][ T292] veth1_macvtap: entered promiscuous mode [ 26.568319][ T290] veth1_macvtap: entered promiscuous mode [ 26.613527][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.687599][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.868982][ T355] mmap: syz.3.7 (355) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.993228][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.142757][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 27.142757][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.157355][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 27.166075][ T65] usb 3-1: config 179 has no interface number 0 [ 27.172401][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 27.184338][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 27.196434][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 27.207832][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 27.219437][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 27.232824][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 27.242046][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.252111][ T345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.293137][ T31] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 27.307788][ T31] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 27.316985][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.326257][ T31] usb 4-1: config 0 descriptor?? [ 27.465622][ T345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.475148][ T345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.483901][ T10] usb 3-1: USB disconnect, device number 2 [ 27.483938][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 27.498319][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 27.534416][ T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.548799][ T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.572167][ T46] usb 4-1: USB disconnect, device number 2 [ 27.652816][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.682910][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.802809][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 27.809349][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 27.822341][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 27.832130][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.840591][ T31] usb 2-1: Product: syz [ 27.845299][ T31] usb 2-1: Manufacturer: syz [ 27.850189][ T31] usb 2-1: SerialNumber: syz [ 27.855539][ T65] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 27.864990][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.876038][ T65] usb 1-1: config 0 descriptor?? [ 28.068090][ T31] usb 2-1: USB disconnect, device number 2 [ 28.115576][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.282685][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.432693][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 28.439344][ T10] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 28.448004][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 28.456739][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 28.468035][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 28.477365][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.485868][ T10] usb 3-1: Product: syz [ 28.490059][ T10] usb 3-1: Manufacturer: syz [ 28.495010][ T10] usb 3-1: SerialNumber: syz [ 28.502162][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 28.509000][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 28.921666][ T46] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 28.984891][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 28.984911][ T36] audit: type=1400 audit(1773816756.550:133): avc: denied { bpf } for pid=386 comm="syz.3.18" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.065748][ T36] audit: type=1400 audit(1773816756.630:134): avc: denied { read write } for pid=391 comm="syz.3.19" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.089814][ T36] audit: type=1400 audit(1773816756.630:135): avc: denied { open } for pid=391 comm="syz.3.19" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 29.114364][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.124996][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.139909][ T65] usb 1-1: Cannot set autoneg [ 29.149142][ T65] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 29.171050][ T65] usb 1-1: USB disconnect, device number 2 [ 29.214975][ T36] audit: type=1400 audit(1773816756.780:136): avc: denied { create } for pid=396 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.215026][ T397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.250821][ T36] audit: type=1400 audit(1773816756.820:137): avc: denied { setopt } for pid=396 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.273364][ T36] audit: type=1400 audit(1773816756.820:138): avc: denied { write } for pid=396 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.296070][ T36] audit: type=1400 audit(1773816756.820:139): avc: denied { ioctl } for pid=396 comm="syz.3.21" path="socket:[3871]" dev="sockfs" ino=3871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.321376][ T36] audit: type=1400 audit(1773816756.820:140): avc: denied { create } for pid=396 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.353876][ T36] audit: type=1400 audit(1773816756.820:141): avc: denied { setopt } for pid=396 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.415851][ T36] audit: type=1400 audit(1773816756.980:142): avc: denied { write } for pid=401 comm="syz.3.23" name="xfrm_stat" dev="proc" ino=4026532523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.446715][ T402] tipc: Started in network mode [ 29.454398][ T402] tipc: Node identity ac1414aa, cluster identity 4711 [ 29.461618][ T402] tipc: Enabled bearer , priority 10 [ 29.740322][ T419] Zero length message leads to an empty skb [ 29.882750][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.042859][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.052722][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 30.059370][ T10] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.070285][ T10] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.080588][ T10] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.094702][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 30.102739][ T46] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 30.104558][ T10] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 30.120912][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.129276][ T10] usb 3-1: Product: syz [ 30.133818][ T10] usb 3-1: Manufacturer: syz [ 30.138927][ T10] usb 3-1: SerialNumber: syz [ 30.194177][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.205478][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.215728][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.229577][ T331] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.233258][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.239779][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.256526][ T46] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 30.265292][ T331] usb 4-1: config 0 descriptor?? [ 30.270471][ T46] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 30.279099][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.290638][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 30.302505][ T46] usb 1-1: string descriptor 0 read error: -22 [ 30.309111][ T46] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 30.318649][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.327885][ T46] usb 1-1: config 0 descriptor?? [ 30.333941][ T46] hub 1-1:0.0: bad descriptor, ignoring hub [ 30.340120][ T46] hub 1-1:0.0: probe with driver hub failed with error -5 [ 30.347939][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 30.394146][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.405705][ T65] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.415332][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.424353][ T65] usb 2-1: config 0 descriptor?? [ 30.572729][ T10] tipc: Node number set to 2886997162 [ 30.642822][ T365] usb 1-1: USB disconnect, device number 3 [ 30.833187][ T65] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 30.845466][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input4 [ 30.894455][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 30.900499][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.909797][ T331] usb 4-1: USB disconnect, device number 3 [ 30.927699][ T65] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 31.312906][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd Stopping sshd: [ 31.472698][ T65] usb 1-1: Using ep0 maxpacket: 16 stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... [ 31.720035][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short stopped /sbin/dh[ 31.738075][ T65] usb 1-1: unable to read config index 0 descriptor/start: -71 cpcd (pid 148) [ 31.756283][ T65] usb 1-1: can't read configurations, error -71 Stopping network: [ 31.859885][ T365] usb 2-1: USB disconnect, device number 3 [ 31.903882][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.952537][ T481] tmpfs: Unknown parameter '#' [ 31.959553][ T481] netlink: 'syz.1.42': attribute type 63 has an invalid length. [ 31.967834][ T481] netlink: 5 bytes leftover after parsing attributes in process `syz.1.42'. [ 31.978339][ T481] 9pnet_fd: Insufficient options for proto=fd OK Stopping iptables: OK Stopping system message bus: [ 32.058353][ T488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.067589][ T488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.075099][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 32.086874][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.098406][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.110074][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.124317][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.134402][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.147357][ T10] usb 4-1: config 0 descriptor?? done [ 32.292686][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd killall: can't kill pid 334: No such process Stopping klogd: OK Stopping acpid: [ 32.464392][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.476020][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.486336][ T46] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 32.495536][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.504557][ T46] usb 2-1: config 0 descriptor?? [ 32.573083][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 32.580539][ T10] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 32.588965][ T331] usb 3-1: USB disconnect, device number 4 [ 32.597807][ T331] usblp0: removed [ 32.610609][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5 [ 32.633946][ T10] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 32.670900][ T510] incfs: Can't find or create .index dir in ./cgroup [ 32.678163][ T510] incfs: mount failed -22 [ 32.697452][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.697495][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.704454][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.711540][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.715547][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 32.722736][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.725046][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.736659][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.745417][ T46] usb 2-1: USB disconnect, device number 4 [ 32.745659][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.758432][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.765046][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.771529][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.778346][ T514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.793267][ T459] ======================================================= [ 32.793267][ T459] WARNING: The mand mount option has been deprecated and [ 32.793267][ T459] and is ignored by this kernel. Remove the mand [ 32.793267][ T459] option from the mount to silence this warning. [ 32.793267][ T459] ======================================================= [ 32.836070][ T65] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 32.923558][ T9] usb 4-1: USB disconnect, device number 4 [ 33.003968][ T65] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 33.012204][ T65] usb 1-1: config 0 has no interface number 0 [ 33.018560][ T65] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 33.029610][ T65] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.044588][ T65] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 33.054098][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.062103][ T65] usb 1-1: Product: syz [ 33.066332][ T65] usb 1-1: Manufacturer: syz [ 33.071118][ T65] usb 1-1: SerialNumber: syz [ 33.076684][ T65] usb 1-1: config 0 descriptor?? [ 33.082353][ T506] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 33.090595][ T65] usb-storage 1-1:0.20: USB Mass Storage device detected [ 33.099178][ T65] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 33.122751][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.252708][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.295920][ T65] scsi host1: usb-storage 1-1:0.20 [ 33.303239][ T65] usb 1-1: USB disconnect, device number 5 [ 33.454113][ T529] 9pnet_fd: Insufficient options for proto=fd OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 33.465584][ T529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.495471][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.503414][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd umount: can't remount debugfs read-only Connection to 10.128.1.19 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 33.704784][ T9] usb 2-1: device descriptor read/all, error -71 [ 33.762714][ T365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.947945][ T329] bridge_slave_1: left allmulticast mode [ 33.953743][ T329] bridge_slave_1: left promiscuous mode [ 33.959472][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.967961][ T329] bridge_slave_0: left allmulticast mode [ 33.973889][ T329] bridge_slave_0: left promiscuous mode [ 33.980237][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.988420][ T329] bridge_slave_1: left allmulticast mode [ 33.994154][ T329] bridge_slave_1: left promiscuous mode [ 34.000027][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.008076][ T329] bridge_slave_0: left allmulticast mode [ 34.014012][ T329] bridge_slave_0: left promiscuous mode [ 34.019660][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.247403][ T329] veth1_macvtap: left promiscuous mode [ 34.253221][ T329] veth0_vlan: left promiscuous mode [ 34.258874][ T329] veth1_macvtap: left promiscuous mode [ 34.264504][ T329] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 34.774920][ T329] bridge_slave_1: left allmulticast mode [ 34.780594][ T329] bridge_slave_1: left promiscuous mode [ 34.786490][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.794188][ T329] bridge_slave_0: left allmulticast mode [ 34.800110][ T329] bridge_slave_0: left promiscuous mode [ 34.805886][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.813824][ T329] bridge_slave_1: left allmulticast mode [ 34.819477][ T329] bridge_slave_1: left promiscuous mode [ 34.825345][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.833299][ T329] bridge_slave_0: left allmulticast mode [ 34.839079][ T329] bridge_slave_0: left promiscuous mode [ 34.844857][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.035116][ T329] tipc: Disabling bearer [ 35.040495][ T329] tipc: Left network mode [ 35.046470][ T329] veth1_macvtap: left promiscuous mode [ 35.051996][ T329] veth0_vlan: left promiscuous mode [ 35.057642][ T329] veth1_macvtap: left promiscuous mode [ 35.063439][ T329] veth0_vlan: left promiscuous mode [ 35.751239][ T540] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 35.758145][ T540] ACPI: PM: Preparing to enter system sleep state S5 [ 35.765205][ T540] kvm: exiting hardware virtualization [ 35.770739][ T540] reboot: Power down serialport: VM disconnected.