last executing test programs: 4m3.553678714s ago: executing program 1 (id=25): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setresgid(0xee00, 0x0, 0xee00) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x6000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) memfd_secret(0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='7', 0x1) mount$9p_rdma(&(0x7f0000000040), 0x0, &(0x7f0000000180), 0x10010, &(0x7f00000001c0)=ANY=[]) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a41, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000040)) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m3.522105146s ago: executing program 1 (id=26): r0 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r0, 0x6, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}], 0x1, 0x24000040) 4m3.414012558s ago: executing program 1 (id=28): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x800001}}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0x8, 0x4) 4m3.413695318s ago: executing program 1 (id=29): unshare(0x60040000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xe9) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async, rerun: 32) wait4(r6, 0x0, 0x0, 0x0) (async, rerun: 32) wait4(r6, 0x0, 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)=0x0) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000003ec0)={0x6, r0, 'id1\x00'}) syz_clone3(&(0x7f0000003f40)={0x140bc4100, &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), {0x20}, &(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000380)=""/161, &(0x7f0000003e80)=[r1, r2, r3, 0xffffffffffffffff, r5, r6, r7, r9], 0x8, {r10}}, 0x58) (async) unshare(0x4020000) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r11, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@nested={0x14, 0x800, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r6}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x1}, 0x0) (async) unshare(0x10000) (async) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="640000001000ef06000000000000001e0000001000030076657468300000000000000024001240a7c900080074681800020014000100000000000000000001000000000000001000030076657468310000000000", 0x54}], 0x1}, 0x40000) 4m3.256591312s ago: executing program 1 (id=31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='6', 0x1) 4m2.335239995s ago: executing program 1 (id=38): unshare(0x60040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000000b00000000000000000000001000030076657468300000000000000024001200080001007665746818000200140001000000000000000000000000000200000010000300766574683100000000000000", 0x64}], 0x1}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x5, 0x280}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) getpid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x247}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8623, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x3, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) truncate(&(0x7f0000000e40)='./file0\x00', 0x3) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x33, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108) 4m2.318749345s ago: executing program 32 (id=38): unshare(0x60040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000000b00000000000000000000001000030076657468300000000000000024001200080001007665746818000200140001000000000000000000000000000200000010000300766574683100000000000000", 0x64}], 0x1}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x5, 0x280}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) getpid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x247}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8623, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x3, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) truncate(&(0x7f0000000e40)='./file0\x00', 0x3) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x33, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108) 2m53.46182921s ago: executing program 2 (id=603): r0 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x420001) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x80000000, 0x57b, 0x1, 0x7fffffff, 0x245d, 0x3, 0x8, 0x3ff, 0x400, 0xfffffffc, 0x4, 0x8000000000000000, 0xb98e, 0x1}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{r1, 0x9, 0x3d, 0xfffffffffffffffd, 0x6, 0x3, 0x100, 0x2, 0x80000001, 0x101, 0x8, 0x9, 0x100000001, 0x7, 0x8000000000000001}}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x8, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r3, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x7c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001280), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, r5, 0x42a, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x80000000, 0xb, 0x0, 0xfffffff8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0xff68, 0x7, 0x2, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}]}, 0x88}}, 0x40094) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f0000001440)={0x1d8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "f502f53b4e6587643e41aa52bdb1280c05b534f027cde5ee3663851909792f9d8394da4974ffffce3b08d77218ea3cc5c4c2d4eea66e3e64b8e42b8e1c02ca8e802f457cc04e389a9606c313dc22c2974b4ddfae9700ed1941063e12979cde18e1e4ff5ec09f20e48d0e264971ef8afbaaa0c438bd930538e65e745658c942b584f9bf8dd7641d9ee900dcb6e58dcd694ff534e967f604"}, @NL80211_ATTR_VENDOR_DATA={0xfe, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0xc000}, 0x40001) r6 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000016c0)={0x10004, 0x4, 0xeeef5000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r7, 0x4004af77, &(0x7f0000001740)=0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) r12 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) setns(r12, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001980), 0x200000, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r13, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4}, 0x4800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x38, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb07}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1f9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x400d0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20048094) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000001d00)={[{0x8, 0x6, 0x7, 0xa, 0x0, 0x6e, 0xf, 0x2, 0x4, 0xfe, 0x7, 0x7, 0x10}, {0x4, 0x7, 0x8c, 0x6, 0x5, 0x6, 0x7, 0xc, 0x37, 0x0, 0x3c, 0x5e}, {0xeba, 0x7fff, 0x3, 0x7, 0x98, 0x6, 0x9, 0x1, 0x3, 0x60, 0x81}], 0xfffffff7}) 2m53.46145413s ago: executing program 2 (id=604): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m52.587433532s ago: executing program 2 (id=610): socket(0x22, 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x80010, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) (async) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x172) (async, rerun: 32) io_setup(0x1, &(0x7f0000000b80)=0x0) (rerun: 32) io_submit(r6, 0x2, &(0x7f0000000640)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="f7cb5f172e83e6eb7d07c73116884d087280983e56389c2ca36de6b26a9cd573abb4f0eaf9685b44059b93d54b5249f449179daa177e7c8d4122ba6ce52052d8b04c99555df819de5724c2ee7cdc322b7bcbfbd4efbe1a5566737f953474fa587bb49b47bbfc2ba3a840cb87014a25161da1e8a6533c1eb119e5540530831d4a05c74dfa8be5e9a723f1ac5ac662101c973b5ec0846c8e436ae5010be0573251eeedf6e31651c36b716306001dc6a421401958490c28e6b6471742b6f830084ba73907e6762c960d8e225497e88362891ea2c45ac30bde0fa0f0c56dbea406f02e80f0ba14", 0xe5, 0x2, 0x0, 0x1, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0xfff, r5, &(0x7f0000000580)="11a3287d3c6671d5c4ec007a27801def489ac2b97c1fb52af8f04599e3df994da395693b2b2c81da1a76893ccb19a7780c7ce477787b39ae1b7b9b3a449deb72f524bf6ab511652d6a096a11b2b7c438ccb4f06bd413", 0x56, 0x3ff, 0x0, 0x1, r3}]) (async) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r4, 0x0, r7, 0x0, 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x22) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async, rerun: 64) ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, "0241cd032ae9da23"}) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) (async) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000040)=0x80000103, 0x4) (async) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 2m51.665964185s ago: executing program 2 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = inotify_init() ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x400) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x20, 0x6, 0x4, 0xbfff703a}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x7, 0x8) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m51.664510085s ago: executing program 2 (id=612): r0 = socket(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) readv(r2, &(0x7f0000004800)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000180)=""/131, 0x83}], 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m51.549523768s ago: executing program 2 (id=613): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128}, 0x0, 0x4, 0x0, 0x0) 2m51.503062349s ago: executing program 33 (id=613): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128}, 0x0, 0x4, 0x0, 0x0) 7.018149145s ago: executing program 3 (id=2156): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) unshare(0x28000600) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) umount2(0x0, 0x8) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) keyctl$set_timeout(0xf, r2, 0x79) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) write$cgroup_int(r3, &(0x7f0000000240)=0x3ff, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x1, [{0x0, 0x0}]}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) sendmsg$inet(r4, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="1df5a2284250a252f1e806ea9b70569801d59ec12a7fb9a63b8e2f65cb1c9822fbf22e90099c17dae087df94b978e2db7427d2a2a4d7e21b43c656eb8243f3f1278d3923ef036684dee9575b7c234537ffe45dacc9bc2b84c5bb3b1035fa401d494eaabb2ec6b56b659cf7e5d3f166d367efc403272383fa003a26b49c66e036347dbcb2eabbd73c7eddce9f57f775ea57cffcdee1fc51b204183645d89abb87fed4ad609f54ad86024059e9451d7a6301d642f7a0bf9ad247c7928c12f663b858effbbbde9023b3d35e", 0xca}, {&(0x7f0000000280)="2fccf35b16037aec8f4bc287556b493a873107b8d1b825829fff464e1861ff212c2fcff995154f2067e8f5ca5be2723fb9bfd106a8b41a4c654f367dbab6b1244c05d456919958b66d280d6d9098df0c688f30ad6d17e5729a9af6ca986476c0a5f438493c81f84ca379db6feb35114275ee83", 0x73}, {&(0x7f0000000300)="b0de4cedc5a3b432a0b07ff233854213c9f1e0f4c13fc980caceb3986c19953ae4b7b7788dc5b79b513d7e", 0x2b}, {&(0x7f0000000340)="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", 0x1000}], 0x4}, 0x40080) 5.773716877s ago: executing program 0 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x6960, &(0x7f0000000040)={0x0, 0x8de, 0x40, 0x0, 0x284}, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r6, 0x0, 0x14, 0x0, &(0x7f0000000e80)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_route_sched_retired(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000e7e1a435be2882fd0fa100de69c5e3f9f97b835bd2279ef5ad35499ced2ee54aa749bd6d40e478a78e5115e2ab799ac7cb88d043423aa777b6e6c5d20000000000000000000000000000009d1fbffae05b5cf6fb4c15352ac1c57ee09865a0c23ca948168a", @ANYRES16=r9, @ANYBLOB="050027bd7000fedbdf2506000000180001801400020074756e6c3000"/38], 0x2c}}, 0x4000010) 5.760806447s ago: executing program 0 (id=2171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x80) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10093ea, 0x200, 0x4003bfff, 0x40299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="00f53de0b940afdc4c8a57c9de7586a71400ecc674863311f4f885812428c79973b0dfe394c892c85bb8eaa1132098aa6bbebb091e83a1ce9cec4012e4b236cd6464d25953363aeea99b46d34cf661572ea25f0d39b7ca6dc63ef929e0506a786096bdf2c879107ed8f7de2abc830a87acfd489610f7a5104f1ae07810f603465afa1525740c1b1dfa9eb97e8543", @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r9, 0x0, 0x0, 0x4044813) 4.869416149s ago: executing program 0 (id=2175): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.85201872s ago: executing program 0 (id=2176): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4103, 0x1007}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/75, 0x4b}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}], 0x1, 0x10120, 0x0) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10160, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) write$cgroup_devices(r2, 0x0, 0xfffffeff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 4.83384125s ago: executing program 0 (id=2177): r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x7, &(0x7f0000000000)={0x200c, 0x3, 0x4}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r5, &(0x7f0000000740)=""/377, 0x179) (async) read(r5, &(0x7f0000000740)=""/377, 0x179) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="019a18370cfb661b") 4.233846185s ago: executing program 4 (id=2178): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8, 0x0, 0xb00, 0x448c5}, 0x20000050) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x6, 0x2, 0x7, 0xb, 0x44, "8c00000000fffa00000000ffff00000400", 0x40fff, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0xff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x254042, 0x0) r5 = dup(r3) syz_ublk_setup_queues(r5, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x200, 0x10002, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x1000, 0x1, 0x142, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x5880, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8, 0x0, 0xb00, 0x448c5}, 0x20000050) (async) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x6, 0x2, 0x7, 0xb, 0x44, "8c00000000fffa00000000ffff00000400", 0x40fff, 0x4}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0xff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x254042, 0x0) (async) dup(r3) (async) syz_ublk_setup_queues(r5, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x200, 0x10002, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x1000, 0x1, 0x142, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x5880, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async) 4.233443885s ago: executing program 4 (id=2179): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x4000005) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x13c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x128, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000000480)={0x2c, 0x6, 0x5}) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') ptrace(0x4208, r2) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.165116477s ago: executing program 4 (id=2180): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="391106"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.003753501s ago: executing program 3 (id=2181): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="d045b72c4acb9c656d0000000e6297799ee98a0e66601ed4476403ece7440ddf0ec9c35f2e4709f4a1722bee27759a4c22641422c65c2ff1f06beec15e45f2325d971dec29939852f962ad2a5d2155314b1123b3e58553330b1c69bd09ffeec0005b186eca39069e402b87c02a1f9930ac0c4511caa965372b598cb462ebb9a531"], 0xc) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000aff80ffffff00000000000014000180200100005827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000002"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}], {}, {0x20, 0x5}}, 0x2c, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000280)={r6, r7+10000000}, 0x0, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@broadcast, 0x421f, 0x0, 0x0, 0x5, 0x2}, {0x8001, 0x200000004, 0x40000000007, 0x6811221d, 0x9, 0x4, 0x200000003, 0x9}, {0x3, 0xfffffffffffffffd, 0x7}, 0x9, 0x0, 0x1, 0x0, 0x6}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/205, 0xcd}], 0x3, &(0x7f0000000740)=""/24, 0x18}, 0x400}], 0x1, 0x12000, &(0x7f00000007c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4000, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sync() 3.773441686s ago: executing program 3 (id=2182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "a825fed9e308f2"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa1c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x8880) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r2, 0x21, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "7a93"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}}, 0x1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000640)={0x3, 0xfff, 0x4, 0x2e3}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x5, 0x0, {{0xa, 0x4, 0x2, 0x23, 0x28, 0x66, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x7, 0x17, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xe}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xdf02}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000008c0)='ns/pid\x00') ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000940)={0x1, 0x0, '\x00', 0x1, &(0x7f0000000900)}) epoll_create(0x1a4d) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001480)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9f4, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "491881f9d6eec65e3ad83756de4617f9b484857403c30ecb849305ed978f3b0d7115c81e12c5b42658e4388aacb9be23c8aa8d46e81927fedab772e4ffcea7d7745bbe2ea6762ee16260308bcad510b6ab04d213c8231ef5b6ca849bd597a0e6c784382856ed9572ebbdda21f6dfe647a81118d2e3dfcd6215a548ac06af5b6776e077ddbbff7136f8663ae5a310b481"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x529}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{*^\x8e).I\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(/`$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\x1b.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dummy0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '(,(,#*\\\xcd#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'rt\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@)@)\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "58ced50c095b15a3a021f80f32ac6d54a44947389cbcde2d0df0278c8c83fa79b56ae3fbb3f41e0dba1288"}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x168, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c802a07}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*}$\',.{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'Q.931\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$!@%-\xe5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',.:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+^T-[--#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'rt\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'((\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ea}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(],!#$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdee6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/pid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/pid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^,;\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "870265a9b556b65553fe4dd5156973a65a22d531a4847b22a36461c36b75917c5f4e40a1590757bd49ad86aea3fc63bddc4e21d506cae13d9a13cf79b370a150f0"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'rt\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/pid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf38}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x264, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "6cab930a97785dcba04a9f1980526b0b98a3ba6e934b42826c1ffeda1bddef9df6915be6f6b2d60c619560f8f64da5baa41ff0f36086f22dfaa7b65f8e872a27a1eba0d852caf94a96b14970f01ae41d13ebebfa929ad392b2e240b1d5f9695f8df93e2ecb36053b058f25906217963e491378e3aa98d480cc1a3627bce678b5af27591704f2d99f581c7e8b019626aea4f8d4a41be424162313fc607f16d5b0701c6a2db8c605fe13d05583f2cead243edde07c10603d9a03c48c22b9367ba0644a4978bc46123ec9963aa4b9a1d9cd23763fd84abe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(/&\xd1/}-+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf21}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/pid\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "7fbeb14aed809de74e5c9053581bddb4d7133b34b010877f1ce2aeb60265ac111a79755117b977349ad34ea1072c0e6d026ad2430b7b4c2ab2effd24d2eac26d4741ce887215d058a9444e5f456e9cf83b78267a2ba7dc828363c28638fb228a6c99a379dcc80cab3c9efb7f64715180f8a2734df321d0f573f1ae2c7216a22a610d81cdb48f4fa0f08745cfecee0e798c500ed4298cd7c6f340902fd03ff9beab26e10d86615cd5da3ab16e6677807591df855a079afbd05fafa62447e3670906d8b1991717bba4db1ada41a392c9b344ff06a4345ef2bb860e2a46dad1759399542ed2"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x29c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/}@)}---*-%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[&\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "f4868beca2b7160cf96e7ac059ad01ae180d83655f16789f0ebbeb3832dfd1a9f5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "8380e7304049e45135dcdf7e0b13216862296a2bff12078d9e04abfdc4d7cf675d3dc00ee4931c3aa38f1597f955b1305342141272b9f70948b3f72eef16f1dcd4aa37def7548dc7"}, @ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "ccf962bdc9de01da528d2e82faadc028cfcacc0e3a9a010fc7dd92089d1219472bf8f6311a30df26679747dd767f71681fc39cf587bb8448465a1ecd2fd64fe0a35551893b2faa95b2d56e21795a3f1aa600dbb9f7e255658a0061eccc7b9ae4203032c85d7b02171a738ae5e1e786f5da018e964ba688e32879d49f2cef845bf96c9aadc79dcf8ad5564bfebc93372840b295706abffab9fc204ea13add79d850c4a412245d169a40609f5e8518a089d52a2f77d96d2c052a3185919931169e52c77753c0e0efec70c65fbc3e3b53"}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "eba190f18de7a69ea6ce2486768ca4212818eb6bcdd4bba6d13bd46f8c72f7d4ddc6b7b9fdad7d12eae975241c22af7bac7290a9bc9adca4de3e077ee4c013c01ca43d17f4313fe47b7c11d752ee233c8cbb104a0ed6d551b5ee36986c997007aa8deecdc63332a349e75201120539bf93b31d3d6d803f78d2f8a29038e5483e75d6250fb944fe67ff087af07fdea250860858a53ee61ddbf2609817dc488dc204"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x9f4}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000014c0), 0x10000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000001500)={0x20000012}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), r1) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x74, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa87}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000080}, 0x2400c041) syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r7) read$FUSE(r7, &(0x7f0000001700)={0x2020}, 0x2020) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000003740)={[0x80000000, 0x3, 0x80000001, 0x3, 0x3, 0x400, 0x9, 0x7f, 0x2, 0x1, 0xbf30, 0x101, 0x80000001, 0x100000000, 0x2, 0x7], 0xeeee8000, 0x480}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000003800)) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x5c, 0x0, 0x16234e1f4c884234, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8538e98a4792"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x50, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5c}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4880) 3.772456746s ago: executing program 3 (id=2183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_ep_write(r0, 0x6, 0x15, &(0x7f0000000040)="bb7d042ee165cfdd97a86b3c117e7c9368fdb2bc91") syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) 1.895838873s ago: executing program 3 (id=2188): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) inotify_init() r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000106a05340040000902030109022d00010181b0070904000b020301010509210400cb0122c90409058103ff03100505090502030800030401"], &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x80, 0x9, 0x2, 0x40, 0x3}, 0x152, &(0x7f0000000340)={0x5, 0xf, 0x152, 0x3, [@generic={0xf8, 0x10, 0xa, "cf65d6fafa0db6ef86f351a7ff52b2535eb01f81bf7e5a0c255d9fd9cb8498bad782a520759d6c8eb837071a930e13de2bdcdc5b755f15c946671a4ad52e70d6ff95c26c28100675ea183c0b323b931ce785e6bc2a8f489823da9cf25ab3a0c9f3d0275c10c833f9ffaae6ce3bbe6aff2d442fdf65ca7640aa33debd87ee064421c568f83b94673cfb3adf66cb6fab7eebdc1665130af3e270b39df629f3fddb872571464a412ceec3812cbdcfdf1e1e4b10fb8ce7fa416e4c109c5e0cc5739d61a78527aab08afb1d969c9d2187899999365e28064ca3b5c69d456dfcbb75ad43394bd02e566d3eeefa496079f20842493216af36"}, @generic={0x52, 0x10, 0x4, "8140e98e5912c210bd5c93948a8f8bd824734dc4b53cd105808b967337938fdc604b0231b8e16a265a86b53a2135fb68bcdf216dc6335e44f3e2350e577de39e8ed6fafde88913b3e34476a1e6c2b3"}, @ptm_cap={0x3}]}, 0x3, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x439}}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xcab}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r5, 0x1000007, 0x13, r4, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) 1.810965806s ago: executing program 0 (id=2189): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) mlock(&(0x7f000018b000/0x2000)=nil, 0x2000) r2 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef1761610000010203010902300001010080320904000003020200000524001001042402020705810340001007058202000200070503020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="f0000000100001000014020000000000fc000000000000000000000000000008e0000002d6a0000000000000000000000000fffdfbfe00010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000007f000001000000000000000000000000ec0000000000000001000000000000000000000000000000000000000040000009000000000000000000000000000000000008001000000000000000000000000000000000000000000000000000002000000000000000000100000001000000fcffffff000000000000002000000000970300000a0000006900000000000000"], 0xf0}}, 0x20004000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) setgid(0xee00) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000100)="019a18370cfb661b") r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000140)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}}}}}}, 0x2a) munlockall() r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) close_range(r0, r1, 0x2) rmdir(&(0x7f0000000340)='./file0\x00') recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.699887288s ago: executing program 5 (id=2190): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x18a, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@release], 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14140f64010101000000003800000000000000000000000700000094040000008307d47f000001890244183140000000040000ffff000004620000d693000000080000340000000000000000000000070000009405a2db46071f87ac1414aaac1414aa7f000001e00000020a010101ffffffff640101000000000011000000000000000000000001000000fc0000000000000014000000000000000000000001000000030000000000000011000000000000000000000001000000000000000000000011000000000000000000000001"], 0xf0}, 0x400c804) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x200003, 0x2, 0xfffffffd, 0x4}}) 1.599782931s ago: executing program 5 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034400040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r2, &(0x7f0000000000)="ff", 0x8200, 0x400000) r3 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @auto="cbfe10e88f40dd4224754306e520ef10"}}) write(r3, &(0x7f0000000080)="240000001c005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) 1.592668371s ago: executing program 4 (id=2192): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xc8}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="00fb460101b9924e458b1f5a250c336859c931717038d295c4d49cb68b7b7eec29b2da894233b4707fc8db85f90100aabbc30c038f59aaf018a408b6e8b457"], 0x46, 0x2) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) r10 = dup(r6) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f00000001c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0xa8c, 0x6, 0x580, 0x100, 0x46c0314}) syz_ublk_setup_queues(r10, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.449903374s ago: executing program 4 (id=2193): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.448192754s ago: executing program 5 (id=2194): r0 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) (async, rerun: 32) pipe2(0x0, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) (async) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup(r17) (async) r19 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) r20 = socket$igmp(0x2, 0x3, 0x2) (async) r21 = socket$nl_audit(0x10, 0x3, 0x9) r22 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r22, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r22, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r22, &(0x7f0000000400)={0x50, 0x0, r23, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50) (async) syz_fuse_handle_req(r22, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r24, r25, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r12, &(0x7f0000002fc0)='./file0\x00', 0x1000, 0x80, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) fcntl$getownex(r11, 0x10, &(0x7f0000003100)={0x0, 0x0}) (rerun: 64) sendmmsg$unix(r0, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="56afaba58ae9d1ca1e8aec56c5daa88735d54f96ef04fd66d79539e912f57d86ab6c6931603db6fd6d0b83f82c70dbdee70f008c271b42f0f7cc50ea1505c5693fead7be51a0eeaed175181566e9aa4740b7eca49f660cca7d878fcaa95a571e703a1057f38b179848a0291477eb8e2af5d9281369af9dcb52226e8bfec9cf44ba76c1ca6b2fa804a24f0fe339ab823d5cdd5529f46b41fa5bf58825d501ab1c3ec316af7dcda9f05c31b132167557c5f0427b07d5be00f9c3515de57813966eb6b1320de64afe93537d03bf21eaa46b75bcc8e10865f31d369fa1f5d1f91f", 0xdf}, {&(0x7f0000000500)="f451402fee55463daed281c3cb78c31788de069d46aa0f82", 0x18}, {&(0x7f0000000540)="b9460243edc9d4d1dc299a90ba3d40db3168dc92bfea1df53bbbc9a66500f25bd8c043b8fd301d21ad1644b3ea946b298f420772b65dcf6555bf603b411f95adba7ccba0940829585dda4b29cf99d5e500ef258f94ead64836f9bc2d2957489df9b9743e1364e82be43c7bec7dc55b0b08", 0x71}], 0x3, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x60, 0x4040804}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="5050d1b43535a094f7664deb1ff50d58e7bb6fb79aee3a09d446077706ef082b074356f871c22e95df46d53a3a74bf19011746197f1c234580ef4a8eaa53ec284a13102567d751898e013b595556d5c03300d1bd3c78008701e8b70d4e07683c0f92bf081dd79208d2b0218f80285d14d38d623c6d81a85c3267133a37778809e39ef07cce80689c15867d09ffb7a57fbf151f279fa0e5889ef2be0e29e8e41026781cdfe37689273be09fc54216651cfec3e40dacbfe4a19ccc2b3f03165919576ef0e3d6e159e79e208d", 0xcb}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000240000000000000001a3000001000000", @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x10}}, {{&(0x7f0000000940)=@file={0x20a93ae377c2b11f, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)="fefea5919067949101b89928bbab94216f42f152ea337c53a17cbf37a7644387386258dd03d8822d61450b65c85f56d000b6b9850b7a61d0717b7722625bc484d01cb5d8da89be6a04aa73a109ed3845f8586cb64bc3e630abb49e5c22078003ddaade6c26dffa5ef3a2768268", 0x6d}, {&(0x7f0000000a40)="221cffcc5eaa0afeea", 0x9}, {&(0x7f0000000d00)="002f7a824473c7f11cd86f2997c8525ba1718b67974502ade56e2b8d24cd36746a618c0512e18cc8a1e7207c9d9513dc078f79e6ca4f1566c822c6624340fc38cb03133057cab026042e44d4f67221450b60539224507039d72ec1e2d0acaf7fd5", 0x61}], 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="20000000000000200100000001000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32, @ANYRES32=r13, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r17, @ANYRES32=r12, @ANYRES32=r8, @ANYRES32, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x20004004}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000fc0)="4cd866ea21a76df3160b8b4a4926ae8bb5b11602c59d71af65ed9f6151068eb334ec3763060431078fd41d97d4e3601e3885b995758fc63ed3fb3ad2ef840423e1c0472a4719485f3e9b406bb32479cd575b71037a2f688275aefd85fb7ef0d0935512a7af6c46b41d2a31dccde9e477e34fd6feeadde208578bad1e629b66c25fc7e59c14f6fc6cc95d764fe2b44e4ae998df1996b2931fc88b06513e8cfb4ddcad43ef58b589fe148c868578589eaf0dad11983f8dbdb3f885f56400ea69a927cb9e0dc88646ea46a78806", 0xcc}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="8e884e1671b04f4219fc6c5bbbb8cd64f4dcebb0a7b39e09e975f9e473ad7735cb24a7a9b5d2657c23a23d2e34268213af63ebce4c840255e06a518f0be12e7c8422420e51f720e04f95f65f2332841a46d73b556f3085fa3e92a68e1029d80a08f1110a5187188f9394ba09071052593d99", 0x72}, {&(0x7f0000001180)="ef5073422ee0f809472a839b47fd97be56e65470e3e0ae294a2ef5a17f3f71ad7ba321f5d5a0aaad2ebabd583df05c4c7196c1d7e892a81b38d857b68e48227483393b427fbb0c00155348a0408942cc26ba92d7f097e19494d3c61de43d0f71282f49f090516e4ad800e3b55e54aae3b1b01f100d79f66d4433583d372315abfb96a478711bc95f3367931331651e3a0998033de891e53f153f35e236f17b21abf0eedc397e5a276a11982e270f2be6a3fa72648ddc8982616e3b0b53e662cdd498d83290b1831d5c3aaa3487dc4283fdf6bc2ee33f", 0xd6}, {&(0x7f0000001280)="1200675c32f0089d2177f0524cc9be0a0afeb4fe85a7cd28d1c796c17cc5c4ca9e44f572501d2b72359c29029d7204a41aed1921712a4fb716e7473495e1c556", 0x40}, {&(0x7f00000012c0)="bdef6b8ad562729fba0a8e39defb44f7671db1201268428346dc2e5de11af1215f422163db45b459acccf2c753bd91ec2b1d0e60477e740d3204c030e1d69a73e75ad1a10bc2fafd8a1410aeebf044c99713a692e6d62dcfeb0e423fde2e138a64cb9b5f01dbe2fcddf65e6d51", 0x6d}], 0x6, 0x0, 0x0, 0x20008000}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="13e484cd6b558dd37365a6c90e00eb97feab7a62c8475a298f9ee6ba5ded4be0e2d3059c8e217edae319d496931af4044e277efe9b0943d169", 0x39}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r25, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="000004001c00000001002ce6f17a290dff152d468cf7fae65b408dd0a7b521829fe298025ec9ef72fb30c04dc66616449208c03c592b9b5d842dae57d4500628c3d0f2823c222bc86a670180c6dd60939832622839c0d103497ae75db65c7dc12c9ab110f34b44dfb1645756c626eaf873ec64dc5c660a9f158f6e765fcd91dc1d481fcb3a3bd79e5b8facc9446244d11b6d3f308bd749edad0e20b3e60256d1fc638b7bc80988c79377877295f8bd1ac3bc3b8f02fd48d007237b4a755fcfe04cda4b07f9b4be829c83c570b80561b46f3a0f2be62e129816de1bdd0217aae191507548", @ANYRES32=r28, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r14, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x40000) (async) syz_ublk_setup_queues(r18, r16, &(0x7f0000000140)={0x0, 0x106e, 0x4, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40, 0x1, 0x4003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626e, 0x800, 0x1, 0x26d, 0x0, r14}}], 0x1, 0x0, 0x0) 1.431324705s ago: executing program 4 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x36}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x86}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004084) (async, rerun: 64) syz_usb_connect(0x2, 0x9a5, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x57, 0x19, 0x7b, 0x20, 0xccd, 0x99, 0xf171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x993, 0x3, 0x2, 0x7, 0xe0, 0x3, "", [{{0x9, 0x4, 0xc7, 0x7, 0x0, 0x5d, 0x82, 0xf0, 0xb, [@generic={0xe5, 0x8, "dc7b9167422e68372552f0ed1e9872b55e82bc0510ad8b13ec00a44210c599065316ac1ca7a03561c200423be57eadfd78ef1d5d06516d2449e1de81376e49b97694353e85adbb66edd0d717a2074fba39ec5a08d737dce9d8ec413030fe38aa33f1971fde092e55f7afec101eb80d4d49771d72b8a0a54cdcb184b607900aafab974ab08a0448c3e17b978b8f37da9bc0f2086c1ed65afd74917478b580a57b617862a976ce5cedf603b9d303fa53da67e601c9f3c3075ecfac09bbdf2d27be35641d4c6269ee07f219b94bc30634f550d6385795e2529dfad8449b1bbc4d8943e0d9"}]}}, {{0x9, 0x4, 0x95, 0x1, 0x10, 0x95, 0x39, 0x6a, 0x2, [], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0xff, 0x5, 0x40, [@generic={0xff, 0xa, "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"}, @generic={0x31, 0x1, "04a2e7eebf6fff77052e090d1b5d6b3d93b0ba8d6cb4baaf88ef93ae9fe8481b3c7906b600c3d414b5b44aeb2dcfcd"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x7, 0x7f, 0x3}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x9, 0x3, 0x6, [@generic={0xc3, 0x22, "365f349e2ac9b6b49b57010a6c1528ab662d51d23732f0d12e668a85c65332d9df5d041b462c6f8340ca9e0f5fa6b2798362e06ab03bc35ae63a820c8dbbc142d3e81dfa4fe33a35927d0089b7bf2826d95b145feda460eb534971079ad2bd97a58e755d932a9e698d291ea1dd6c85adc1dafb875a0e8c1e44c12d0540a191c1978f21a08ef5131d9253dd36c46f3a72497f18dd6ae6e65ad29a01c148494f20d8f9f3be271605e2c9a328e251b779288a1cf39a6750dbb2b44baedb619d733421"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x6, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x45, 0x23, "9261017b3a1ed5c2dd4ffd7063ebef7e6cbefcf1b0b08bdfa632bfc807787d597f1e8c899612b32f592289abbff014e62806fc089d2b009051c041a78bda34b4c1fea1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x430, 0x0, 0x6, 0xf, [@generic={0x69, 0x21, "6c625f62d47b99f4de8e7f2fb046952357b73d5a3af3176bacc671a9a162d9a9c9672c951ac2922222e244416a86e6575a3de6db11210cb351f16cea5d9c47efa91442d54384b13eb949328cd90d1cb17dd3d8c2991558b0b638aee9b6d27d6a29e028efdc8686"}, @generic={0x29, 0x10, "068ad64f91b4be109eadba1a0bd25e7e36f27dca881a2f0a2b4756b65f3c922236efd7ccd19f03"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0xa8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xa, 0x47, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x6, 0xe7, 0x1, [@generic={0x11, 0x30, "53e9943abae245c7138dff00ca4642"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2fc}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0xff, 0x4, 0x2, [@generic={0xd8, 0xd, "700fb0133d44b55b65371aad41bad14aa017dbdc23d75baa7aea89362b94b2bd2070663cd57c7017bb121ffbea78b7107c147b458767aa22b65b9640fd1fcfa99128f784078cb40c94a7c7861256c37bd8562031292059881ee3dab01762e9c43a6a5083403666ff6f8c777b520012231538ad0ffb89fee6f123920e07f3ea46cf6081ecbe2075a963811c20d8a811c4ffb3c2a6c9f60c5a25b85ef2b9d83797fcc54947bed05fdccbb62ded864184bee6ba4ca956d4446b008596342a98428aaa9e79d37ff4375b017aa703c429ed8943fd7b63c0df"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xe5, 0xbf, 0x5, [@generic={0x40, 0xf, "0a3cbfc587ca4430ccd56e31831d822d9ff83b20c774c64cee08fca37c0ca48e4ce395f5695b5287a23f9e42407486cea5d58c1c2dae7e1ed2f064dc8628"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x4, 0xa}}, {{0x9, 0x5, 0xc, 0x1b, 0x10, 0xff, 0x9, 0x4, [@generic={0x9d, 0x7, "a8a8576e0d3b06c9f3d3279a739aea60c240ce2afa195d28339f7d5ba736be8b773a97a452cb620f6489b6d2d30b065045ac22947edecbc91b20487fde4eadfa4de635105f707aa8ade09d5b6c1bd43e6c596e39953fea152b8329f82683138f90dbc0f781456a03b040fb9412da60b45da230f96aefd2784b983ba4b5bd52113bdc2b90202d358f33f6447f11d1c6e6d6173333f5020d3cd9d9ee"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xd, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xf, 0x6, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x5, 0x6b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x6}, @generic={0x76, 0xe, "f0aedc9b97ef5c2439b6b05183570bbe98a750b2a5e8289301c90ed4152d4d260b19735be5cfa47a68c9af0d44da8ee54297411d46b6fc1e91ef511061ba7c44c4e5026c0c31df5e36f76f503b88eae05b4a268da0093e4015cae07bf62881981ce573435d7ca2c1c317e34b1dd1d9df55959ce6"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0x3, 0x6, [@generic={0x9a, 0xd, "83305a5a9836a523ddc7ce7552787e4560a9781f78dfc18ba75e5df27d486e6651a0c7d40319e0359f33abb91808c1dc202ecd7d7996564c2beb3e3625e615cf54725086c960a013946e7b1310e06da88ab0d5752574320d2822fe1f62d5f5f8e68218f4ba426ccea7786083b91ef87f4a37e407b30c2a0ccccbe96e8af509b3a759bfda341e5521e404949894a56d9cc6715abdee028bad"}, @generic={0x2c, 0x8, "88510bbc725fbd05f243ec7fea3f988b54f203e784c378aad45567a58726d197074a3c876996edace3be"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x2}]}}]}}, {{0x9, 0x4, 0x61, 0x6, 0x8, 0xb5, 0x31, 0x41, 0x81, [], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xd, 0x47, 0x4, [@generic={0x15, 0x30, "b16f2e5a74fe877ed55708fa5e5f4771f9928f"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x2, 0x7, 0x7, [@generic={0xb9, 0x31, "299664ae8b2f20f237b7dc11e33c5109600ef5755565fe81b11c5dde63c94c5b1e5fd701648c550294983d5e6284a1c45512a7db9b7e3ba96f82287146ce30b013f0c4bd78fcfe964f27826a554cba40614131b2391d1f3350613e9dcc1ac12410e77f69bbbebd0b3f67cb5a46158223bdc0f32b84f337bb1944b8a25750bb852aa55a86d66a5e4e69c39bf03fa15cbd77657d56c43739ec7c0659e1621e1bc0c388f3f8a6ce99dfae440d22cc3c17d41910330925773b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x112e0204ffd190ca, 0x2, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9bd}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x8, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0x1}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x9, 0x7, 0xb}}, {{0x9, 0x5, 0xa, 0x3, 0x7cf, 0x48, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xd7, 0x6, 0x81, [@generic={0xcb, 0x4, "2a92128a829974c85362e86b205b6f908f0e280afe13a6d9313fc5c217b225b359b9d4d49a8f43b7359f8bee2d8288faf2cb00812a0cc6fb5ec3de0baf2f416f708fccce49523932d5bae2fcefda0c541276768147062b488bd6efd66a418a81121d5e86693d0cd9ef30b3cb78dabcce39142947be44c7aa32bbf8bff73085145352dc3efec2499a27ab0e030b62c9aed630a70d63d52d84d72c5f755b562fed097588f744acda3659dbd833bd4d2dc9548fa9e980892ebddbc081be2fbd19afa57511a960d63d686e"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0x5, 0x0, 0xfc, 0x10, 0x7f}, 0x37, &(0x7f0000000b80)={0x5, 0xf, 0x37, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xfc, 0x2, 0x9, 0xff0f, 0x2, [0xc0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x40, 0x1, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0xf9, 0x2, 0x4, 0xff00, 0xe70, [0x0, 0x0]}]}, 0x3, [{0xcf, &(0x7f0000000bc0)=@string={0xcf, 0x3, "000eb6479012211ed1c85690be26201b30f69dd1f0f98f9367605946eaabc9c95e80a06872d7657e5d731956aa0ddb9bc91640ada462739a1b31d8360d89ffba8d90429b30336eeb07722d842c62fa686eb93b7c1b96a720dc601274c01e03d1fe1da421280a2275a21a111c1e8600a9f5e7ca08f4a9bc80e32d2373fe345c002854f9c2a1fd7edd59e506bf6ede32ce2d9d98dd14cabb2ff3a580854edcad0ba7b095d64c85c312519875542726b60fdc55edbeda5c82d1e24efefba456e0fbe3f53a8d5416a9f4977d562bd0"}}, {0xa3, &(0x7f0000000cc0)=@string={0xa3, 0x3, "43cb6c9ee2f68801a11bdac0aa503372d93116f34d9f8a8e92b87990de248f952517df127f808279a9946c864886ee45b85bf3b05c6ee4e11ca3716d214ddb5ed194534041628d4157235f07785a4d06b07fcee0d49be879d7d0c832b2f512ea568f3edd19efff6f9077dd134ae775b847f4791c3d30685445017dcccec664c04b3b5a2864f4005bc50ac32a2543029665497f26f970ceb390ba8123f43156d649"}}, {0xde, &(0x7f0000000d80)=@string={0xde, 0x3, "62ab9099146332dbdf4fc2a23cb1f6e94937bdcd5c7ebe8bbd04157b81d1ba988dff5a1869ceb470379b80f0f790273e1fbb16df05a34643451145f673cac5794493faf7632c97462a48f0f8d9c10b128324a9bb0d23f57dd3f65eef47e7c89a9bcae83c8300c268818f2bb267372019ab26377296319d8adb7ee8f9da753e2d0351d9ba253c31481b244d8f82fbb108109321cc2cdb11166b0238cf4d5f35a22e18c063aa4d798f32f27e58fb52e81772969194343b7397d096b08471fedad31f77e9689b46e816db6406505c98ac39e0c0077c301f4b5b0045bdca"}}]}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040800}, 0x0) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001040)=0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000001080)=0x1, 0x4) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000010c0)={r4, 0x1, 0x6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'bridge_slave_1\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000095}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001280)) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000016c0)={0x31, 0x4, 0x0, {0x2, 0x9, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x1, 0x9, 0x4) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x78, r2, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe3c5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) r10 = socket(0x2a, 0x1, 0x100) (rerun: 64) connect$inet6(r10, &(0x7f0000001840)={0xa, 0x4e24, 0x300, @private2, 0x3}, 0x1c) (async, rerun: 32) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r9) (rerun: 32) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r12, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) r13 = dup(r7) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x138, r14, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x4, 0x0, {0x2, 0x4, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xeda, 0xe}}, @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0xfa19b1b5968371e6}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@ibss={0x6, 0x2, 0x8000}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2a, 0x16, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x88}}, @mesh_chsw={0x76, 0x6, {0x9, 0x8, 0x41, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe3, 0xb, 0x9}}]}, @NL80211_ATTR_KEYS={0x80, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f4410eeff7"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0ad0a35736"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x0, 0x2, 0x0, {0x24e, 0x9, 0x0, 0x5, 0x0, 0x1}, 0x800, 0x9, 0x9}}]}, 0x138}, 0x1, 0x0, 0x0, 0x46814}, 0x800) 603.785315ms ago: executing program 5 (id=2196): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x12, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9eb20fc6647"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 455.456809ms ago: executing program 5 (id=2197): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0xfffffff8, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x0, 0x0, 0x29f, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xff7ffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x100, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x40003, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1fc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 454.908519ms ago: executing program 5 (id=2198): r0 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x6, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10003, 0x1, 0x3, 0x2f, 0xe, 0x4, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e8, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x8], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0x7, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x5, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xd, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async, rerun: 64) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x7000d010}, 0x24000040) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) recvfrom(r1, &(0x7f0000000100)=""/193, 0xc1, 0x0, &(0x7f0000000200)=@in={0x2, 0x4e24, @private=0xa010100}, 0x80) (async) io_setup(0x8, &(0x7f0000000100)=0x0) (async) r5 = timerfd_create(0x0, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)=0x0) (async, rerun: 64) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xb, 0x3, 0x1, 0x1}) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r7, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5409, r5, &(0x7f00000002c0)="77a380a583c0d5f0", 0x8, 0x9, 0x0, 0x2}]) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x1b, &(0x7f0000000000)=0x4, 0x1c) sendto$inet(r1, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) 0s ago: executing program 3 (id=2199): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0xe, 0xc0, {0xc0, 0x21, "9c6878132ee2793ab4c600f0dc22581487aba5370fee837898f57e17495c77112d2e91e1e5f570f1ab4e68e0dc2c670c1562e2516b9a938268ac3b77a415672b0a3e6403912d7ab9472fe6cd8358776a37d73021492051c2a188e60d6faebd1232b40e001302d11f1a03ffb9bee07f71388a2b98d4263ebc41f11b9e06abc42d9fdcb0dc42a9040d842177a5e2e016998946613bff9235d4e1256b654599661b9e4a44dfe58832ecca9e9a1630dd46ea9919cbe0b13b06f8283d6b4c44fe"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x7, 0x61, "74b30062c69851d5aa5ee484b2d544190901c6415a1b71f5374afd57f3ef39fe8684e2e350f279e9000c8a15f6ff64e6eebabee27a7641a38360cb90d25154754ce08b848161cddbfea8ccd59faafb5f7e6bde53396e2b699d06d3d17f878eba16"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0xc0, 0x5, 0x4, "a305088d"}, &(0x7f0000000300)={0x40, 0x5, 0x4, "d43c024f"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async) writev(r1, &(0x7f0000000500)=[{&(0x7f00000003c0)="064ec4e1e1d0f6255d8099865a83d79e3a71a4ab6acf2ed0a8707da7028b4aaa42b079c7d11128c3be44054c184926af879c77f46043920e1109a239ec69504831305733a4c3b41acc1203b0ab414937dd8d5ec9f4a8d4c53ecd9563b3feb39b21c29fe893505b819aa9727ec6069838adc02daeff892557b8aff030433fbbc40c38cf6fca0da918527cfa4dd63b57c3b6c4c97145c027f6a1f5ab77b9719c6527a8aebfc2e53442e134ba4588b4b44564650835902d3bf726f2c63aff4f718de6bcb353ea5695b7", 0xc8}, {&(0x7f00000004c0)="8924549587c9c08c7d63b772da671976c561d83c2e1ee566961716018a90cb53b0a4f6", 0x23}], 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000740)={0x17ac, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x30}}}}, [@NL80211_ATTR_NAN_FUNC={0x16d8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x260, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xc}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x45, 0xb, "e0e644dbcaa90f6d7b03954276f194ebcd1b3c926466d3c9fb03d22ea6789efc7ef3ae99e7b55f4b3962892334a869b9b3d92cd25cf3215a616c11779108a57487"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1428, 0xe, 0x0, 0x1, [{0x8b, 0x0, "fe410b126d994e9d5abd1e8e67c87ecef869d1094a1c5a458a0a20d59418f70e811b3fe795f2c94d970f7529ac1bb397426075c920bf1f44588de0475fc9376f093d471b7c3073866ac09caa55fe5f6abfbf6b56d5b1176e5b1aac8b36ba32eca9343956925f4922ec62387d8b5bff1ffa62aa9d09a0c48e5150cfc164a416a86fac445a699fa6"}, {0xcd, 0x0, "0e71ab8d962c30af7d4ecaf7c67ef6e0163a251025f98e6b83445df51fa6fec21ad47c201a2b9e66a7dfae44ca8cd16b49c2ca1149e9bcdb9666e457fe9ea1c9c84b623c4be2fcb0e516bbf61644c82b58f05df5c54b7cd489045b579d2648bfa8c23b05b2833e608abfce5c689b3dd6717dae643cefb5f6190a8a14c58388f8f8b4113b52e748639c6195819e4163a044e61f4ae8048ff44c70e7a0b7da551d23ddba7b73d8e584fe8950902b4de55679a4b4de5c5027bc2df14a7a6b9e699f8a4b21b1dd55c31d07"}, {0x60, 0x0, "fc8b5856c1dd704a9a8033193197bad80817a9579ef582defe7608c10467eb07f8eec0a3184d03a41544685d43a4eb4ce93345a0601d892d04f35bfe03814e7f358bcdfccbe379978722d11d90adab0efbe5c632106949f77b2ffd72"}, {0x1004, 0x0, "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"}, {0xc3, 0x0, "5434839ddb55d9a77997a5bd9abe6b97eaed4addca075b266e036e1df15de4fd046e20e5bc7436b53fa765fb1a1d6e73ae5dd573aa14658d0dd072cefaffc426a8ec148b8814cdcb16c81b6402893290c6aad2d6d72b680d46931e7bcc60c6af2912644181f878ec842a77dcb46d0a64b873e9eee1fb884c285827b0c71cc174e8019ef474572865e8bb93a74517ce45d7a2a2c35c4c8bd2467361ce5051d5b218caa12578187b5748650136aee366b475b5e357ab4f113f48f7a39581d0e4"}, {0xae, 0x0, "83107f511c7f277ac2b30b485b8f918f6cb82fd44a1ea4e99813139d52a74f25ad4135ad0992f0d1bb245ebb9d0144e4185754bef886e442f4876eba08f948d7857ca75cd85bd828a52249025736a6a278cfe2147bacf0e9e0c2128d83aa9fc3152cf8f2ac85b2a2dddea8dc135c56deb9b3f91856083abb250223cf29f1d57377832748306b06864a7f8af0c9dcefee00c8537c4c51c7d7cca4cfab0c62f01c31ff40f1b5e937f0ba35"}, {0xee, 0x0, "97e8cbd3902e3694d112134682cfc723e8468d0317eb5cdc12ba583dcfe86a6cd4a41ccff5f456dee1f0f0f4251ffbf4d27533a255788b7bb05567148e7906359fc2ac5a57cb7f706f1950517adab20488f05d3c2b0eeed45aca4ee2dbbf90b1bed988fd4db6008d6eabeccb535bb7dfa5d9e32c69e0addaa3fcd19f4d3edda3fb9a8354aec649ce1f0cfd3251bbad9ae809716ae79642f9ac28ceb4a53cac08ee20e9f1132d1a964e5765fc130746a84cadd193c3f4ebed2a6c7328f8f8089ef572d75bdaf3ec017fcb680b08717a1b2c206b36f98842d2e31576ed94e8f343434ca87e719eadf9ae3e"}]}]}, @NL80211_ATTR_NAN_FUNC={0xa8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x66, 0xb, "95383cb998573fba238c25aff42406294e9f3202a0a229a70b1e8113389331aeee8087f5e0a43acefdab1b11e85e2bd6117e7fe5bbfcf5f4e972e7e5bd0fbbe16a2281bbd0f2d2ccfede41e9e8960648101c173da0dd48b6973b98de82435b24dc24"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x30, 0xe, 0x0, 0x1, [{0x29, 0x0, "1602eee5094aa7d3857a31a3f6fe7a3cf164b572dc417c2bf4d283b717e0021b1415db9c13"}]}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x17ac}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x80, 0x0) (async) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$rtl8150(r0, &(0x7f00000021c0)={0x14, &(0x7f0000002000)={0x7b30022a1ed734dd, 0x2, 0xcc, {0xcc, 0xa, "c8bff40557cd77d69ed187609715caeff19a26eeea7904dcef25a8c5bf63371b55e71b7fd235a6c6e307f77b455ef780e35a0536d71b724f57b01150b0e6b518b15225f44b7ceee475569c6e48c1abebf5bc3cee343785e787863acd8e1dc00e03cb3ecff6d22087c17d0e4e99818b7431816bccc71516146d3823a684d111ade673879095c15f4859f5b45aab3549332941e5f7e33ce72b97c37aa0519febd0f06f93ba2efd58f1d2930860fcbe4d7fc4c86e6da61c843799cd54ec8d5b0a27f5a37545c0a1b494a2ca"}}, &(0x7f0000002100)={0x0, 0x3, 0x84, @string={0x84, 0x3, "833014fbedf10d20c24144ceb6090e823eaff83146868bbd3dd156ddcd50584343c8cf8a564bad3b03cabbd67bde56a49f68a5ee5cc0717919ad9520296da2961feab1b107327163c62d04cd9b67debe179cc32deae3d6662e48634da1bdc8022d8d2c42f572be3625924c12ffedc07a24a14e91ffbf1aee5664ce9da638a329f964"}}}, &(0x7f00000023c0)={0x2c, &(0x7f0000002200)={0x40, 0x9, 0x8e, "3b762fcf2c09012746e77dbfc2f466e55c7b3290f0eec41bd949d561af10ef3caa32804f027e045a47c402eebf1887290cdfaa928f9878f3ed365ad8749a16a82a3e1c9b29cbb5f3f7c996b94436704371b7ceceb07ca2c404a002eeaa4600da07031600614defe977a814bd825eda52fbf0ab6e4ddac9f641500b2d8d2ac41bc4309a3202e1f63cb5f448bb7672"}, &(0x7f00000022c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002340), &(0x7f0000002380)={0x40, 0x5, 0x3, "58deaa"}}) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002400)=0x1b, 0x4) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000004c80)={0x0, 0x0}) (rerun: 32) recvmmsg(r3, &(0x7f0000004c00)=[{{&(0x7f0000002440)=@qipcrtr, 0x80, &(0x7f00000045c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/105, 0x69}, {&(0x7f0000003540)=""/124, 0x7c}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x4}, 0xf}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004600)=""/86, 0x56}, {&(0x7f0000004680)=""/201, 0xc9}, {&(0x7f0000004780)=""/186, 0xba}, {&(0x7f0000004840)=""/31, 0x1f}, {&(0x7f0000004880)=""/21, 0x15}, {&(0x7f00000048c0)=""/126, 0x7e}, {&(0x7f0000004940)=""/181, 0xb5}, {&(0x7f0000004a00)=""/255, 0xff}], 0x8, &(0x7f0000004b80)=""/110, 0x6e}, 0x3}], 0x2, 0x2023, &(0x7f0000004cc0)={r7, r8+60000000}) (async) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000004d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004e00)={&(0x7f0000004d40), 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)=@newspdinfo={0x2c, 0x24, 0xa, 0x70bd26, 0x25dfdbfe, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000004e80), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000004f40)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004ec0)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000005380)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005340)={&(0x7f0000004fc0)={0x36c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_NAN_FUNC={0x34c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x25c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "f3ca77d6895f9974ba5a9ee18b4b6b899a4bded815a7fe06fdfacc0b834ea747de4071a1a71cbbc8258104b15a35c71f89143b3abb965e8507ba044dd57d50c0da27920e85419a184c1f666cd1be505b38fb6e1a82b093047709f2c3bc7f6f797bf3e3b69e72eb211edf7bf67ae5a19cc716f610825560841c1eb9cb6d971a0bab38ae337beedb06deb1949f2eeda8e39029fb19a1859a8dca61839cbf23909a5a490d1d99d6a1150f22094841a830c4904ca6d8fd4d5a30781fd66dd597b37454df0373933d90f76da5f0e1821beeff792acc24a59d74a56a4f0436d7c54919ac3ee591887e2e7dc3931d8cb9630ed215361ecda4e65eee04c28f133d014c"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_SRF={0xe8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x36c}}, 0x40081) (async) syz_usb_connect$midi(0x4, 0xe5, &(0x7f00000053c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x1, 0x1, 0x40, 0x40, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x8, [@midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x1, 0x6, [{0x30, 0x1}, {0x62, 0x4}, {0x81, 0x6}, {0x6, 0x8}, {0x4, 0x4}, {0x93, 0x9}], 0x6}], [{{0x9, 0x5, 0x2, 0x0, 0x460, 0xc8, 0x6, 0x1, {0xe, 0x25, 0x1, 0xa, "b123bb702aa42c164139"}}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xc6, 0x10, 0x5, {0x9, 0x25, 0x1, 0x5, "f6467df2bb"}}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x38, 0x5, {0x12, 0x25, 0x1, 0xe, "574d1077377cd6150b47cf4d4f3c"}}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x22, 0x6, 0x5, {0x5, 0x25, 0x1, 0x1, '2'}}}, {{0x9, 0x5, 0x3, 0xf, 0x400, 0x7, 0x6, 0x37, {0xc, 0x25, 0x1, 0x8, "60a1ffa2fac2b4b0"}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x2, 0x1, 0x7, {0xd, 0x25, 0x1, 0x9, "bd093993ba5b749bca"}}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0xff, 0x10, 0xbd, {0xd, 0x25, 0x1, 0x9, "ff05189f279e1d1450"}}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x4, 0x81, 0x3, {0x12, 0x25, 0x1, 0xe, "e6debe9fd68a96f0a8ac58bb31f4"}}}]}}}}}]}}, &(0x7f00000056c0)={0xa, &(0x7f00000054c0)={0xa, 0x6, 0x300, 0x3, 0x6, 0xde, 0xff, 0xf8}, 0x152, &(0x7f0000005500)={0x5, 0xf, 0x152, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x0, 0xf, 0x6dd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x21, 0x3ff, 0x3}, @generic={0xcb, 0x10, 0xb, "f079803f9dfecb51f875c9dcd5ec2e5a2d070514f81fbbc9aa5314bc73dca2ffc69a35c3dccdd1c3af32b51194a08c81e8c518b34f3cda7adc25ec45a228d2bf575cc11d3d1ca736d5d3af2fda3a13ff9c805dc4569e1bea9a4ae795776d851ae90d2e4df74749a58d0438d6ce50de4aea65bdd34d95dd80f942a9e1c5e8ff7b929c5239e97680ad24d01b6898201c2a4617213e2a8e99e500018f3fa96c77c2445bd3f0dd865ec0906da79c6789e363e187bd12b5376c8ce1ae1c18df1ebd8c92d7467b0561dc01"}, @generic={0x6b, 0x10, 0x3, "1ec6f4de7e6b3ea92e8cd521670cf38da551d1927d8883437bad5499b5640f0f855c9803f54828ce4968cd081bfe10c54c207b9a9513c52089bfb1ef4ca76afa523849ce8fda541d377fe646c19b55cdcb23feef72261d8e3c01d7b141196ccdf8340f853a0ee038"}]}, 0x1, [{0x4, &(0x7f0000005680)=@lang_id={0x4, 0x3, 0x42d}}]}) (async) close_range(r10, r6, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r11, 0x29, 0xcd, &(0x7f0000005700)={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e24, 0x2, @private2, 0x7f}, 0x0, {[0x7, 0x80000000, 0x3, 0x9d8d, 0x5341, 0xe, 0x3, 0x2]}}, 0x5c) (async) io_setup(0xc6, &(0x7f0000005780)=0x0) io_submit(r12, 0x0, &(0x7f00000057c0)) kernel console output (not intermixed with test programs): altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.155598][ T712] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 200.168612][ T490] usb 1-1: New USB device found, idVendor=f33d, idProduct=b40c, bcdDevice=21.7e [ 200.177618][ T490] usb 1-1: New USB device strings: Mfr=184, Product=49, SerialNumber=3 [ 200.186157][ T490] usb 1-1: Product: syz [ 200.190432][ T490] usb 1-1: Manufacturer: syz [ 200.195095][ T490] usb 1-1: SerialNumber: syz [ 200.199906][ T712] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 200.208988][ T712] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 200.217119][ T712] usb 5-1: Manufacturer: syz [ 200.225992][ T712] usb 5-1: config 0 descriptor?? [ 200.328056][ T10] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 200.348314][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 200.401466][ T5484] ./dev/sda1: Can't lookup blockdev [ 200.424819][ T490] usb 1-1: MIDIStreaming interface descriptor not found [ 200.441035][ T5047] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 200.459946][ T490] usb 1-1: USB disconnect, device number 95 [ 200.480064][ T10] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 200.499626][ T5047] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.559345][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 200.574096][ T10] usb usb4-port1: unable to enumerate USB device [ 200.650755][ T712] usbhid 5-1:0.0: can't add hid device: -71 [ 200.663218][ T712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.682650][ T712] usb 5-1: USB disconnect, device number 87 [ 200.936997][ T36] audit: type=1400 audit(1788244520.500:711): avc: denied { setopt } for pid=5493 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.004475][ T36] audit: type=1400 audit(1788244520.530:712): avc: denied { write } for pid=5493 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.075474][ T36] audit: type=1400 audit(1788244520.530:713): avc: denied { create } for pid=5493 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.120525][ T5503] kvm: pic: single mode not supported [ 201.135840][ T36] audit: type=1400 audit(1788244520.530:714): avc: denied { getopt } for pid=5493 comm="syz.0.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.329819][ T36] audit: type=1400 audit(1788244520.900:715): avc: denied { mounton } for pid=5512 comm="syz.4.1609" path="/343/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 201.935580][ T5531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5531 comm=syz.3.1616 [ 201.987608][ T5531] serio: Serial port ttynull [ 202.171594][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 202.171606][ T36] audit: type=1400 audit(1788244521.740:719): avc: denied { connect } for pid=5548 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.368015][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 202.478058][ T712] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 202.528037][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 202.537041][ T10] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 202.571948][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 202.606489][ T36] audit: type=1400 audit(1788244522.170:720): avc: denied { read } for pid=5558 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.627877][ T10] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 202.646510][ T5560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1626'. [ 202.664263][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.673600][ T712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.682924][ T712] usb 4-1: not running at top speed; connect to a high speed hub [ 202.696245][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 202.711656][ T712] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 202.737513][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.749497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.781754][ T712] usb 4-1: Product: syz [ 202.790660][ T10] usb 5-1: config 0 descriptor?? [ 202.809571][ T712] usb 4-1: Manufacturer: syz [ 202.814289][ T712] usb 4-1: SerialNumber: syz [ 202.865670][ T5571] batadv_slave_1: entered promiscuous mode [ 202.881346][ T5570] batadv_slave_1: left promiscuous mode [ 203.002225][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.011403][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.054463][ T712] usb 4-1: 1:1 : bogus bTerminalLink 3 [ 203.060138][ T712] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 203.068056][ T490] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 203.086496][ T712] usb 4-1: USB disconnect, device number 101 [ 203.218958][ T490] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 203.228494][ T10] usb 5-1: string descriptor 0 read error: -71 [ 203.236408][ T490] usb 1-1: config 0 has no interface number 0 [ 203.243017][ T10] usb 5-1: USB disconnect, device number 88 [ 203.250618][ T490] usb 1-1: config 0 interface 41 has no altsetting 0 [ 203.261230][ T490] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 203.270669][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.278772][ T490] usb 1-1: Product: syz [ 203.282989][ T490] usb 1-1: Manufacturer: syz [ 203.287555][ T490] usb 1-1: SerialNumber: syz [ 203.295028][ T490] usb 1-1: config 0 descriptor?? [ 203.456696][ T5584] ./dev/sda1: Can't lookup blockdev [ 203.485207][ T36] audit: type=1400 audit(1788244523.050:721): avc: denied { listen } for pid=5589 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.515423][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.535683][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.543491][ T36] audit: type=1400 audit(1788244523.080:722): avc: denied { accept } for pid=5589 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.562924][ T490] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 203.586865][ T5592] netlink: 'syz.0.1629': attribute type 5 has an invalid length. [ 203.595822][ T490] usb 1-1: USB disconnect, device number 96 [ 203.619214][ T5594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5594 comm=syz.3.1640 [ 203.690499][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1645'. [ 203.718624][ T5616] netlink: 'syz.5.1646': attribute type 2 has an invalid length. [ 203.866438][ T36] audit: type=1400 audit(1788244523.440:723): avc: denied { block_suspend } for pid=5625 comm="syz.4.1650" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.979622][ T5626] FAULT_INJECTION: forcing a failure. [ 203.979622][ T5626] name failslab, interval 1, probability 0, space 0, times 0 [ 204.002049][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz.4.1650 Not tainted syzkaller #0 cbe66656de592a762458225806996a07df9d379c [ 204.002072][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.002080][ T5626] Call Trace: [ 204.002084][ T5626] [ 204.002090][ T5626] __dump_stack+0x21/0x30 [ 204.002125][ T5626] dump_stack_lvl+0x140/0x1c0 [ 204.002140][ T5626] ? __cfi_dump_stack_lvl+0x10/0x10 [ 204.002156][ T5626] dump_stack+0x19/0x20 [ 204.002171][ T5626] should_fail_ex+0x3c2/0x510 [ 204.002184][ T5626] should_failslab+0xac/0x100 [ 204.002197][ T5626] kmem_cache_alloc_noprof+0x42/0x410 [ 204.002208][ T5626] ? copy_fs_struct+0x5d/0x2d0 [ 204.002220][ T5626] ? __cfi_do_futex+0x10/0x10 [ 204.002234][ T5626] ? mutex_unlock+0x90/0x240 [ 204.002246][ T5626] copy_fs_struct+0x5d/0x2d0 [ 204.002257][ T5626] ? ksys_unshare+0x3b8/0x920 [ 204.002270][ T5626] ksys_unshare+0x3c7/0x920 [ 204.002283][ T5626] ? fput+0x1a4/0x230 [ 204.002297][ T5626] ? xfd_validate_state+0x68/0x140 [ 204.002313][ T5626] ? __cfi_ksys_unshare+0x10/0x10 [ 204.002328][ T5626] ? __kasan_check_write+0x18/0x20 [ 204.002342][ T5626] __x64_sys_unshare+0x3c/0x50 [ 204.002356][ T5626] x64_sys_call+0x2998/0x2ee0 [ 204.002366][ T5626] do_syscall_64+0x57/0xf0 [ 204.002380][ T5626] ? clear_bhb_loop+0x50/0xa0 [ 204.002393][ T5626] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.002404][ T5626] RIP: 0033:0x7f364799e159 [ 204.002418][ T5626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.002428][ T5626] RSP: 002b:00007f36463f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 204.002445][ T5626] RAX: ffffffffffffffda RBX: 00007f3647c25fa0 RCX: 00007f364799e159 [ 204.002454][ T5626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 204.002460][ T5626] RBP: 00007f3647a35024 R08: 0000000000000000 R09: 0000000000000000 [ 204.002467][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.002474][ T5626] R13: 00007f3647c26038 R14: 00007f3647c25fa0 R15: 00007ffe032e22a8 [ 204.002484][ T5626] [ 204.424155][ T36] audit: type=1400 audit(1788244523.990:724): avc: denied { getopt } for pid=5635 comm="syz.5.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.529363][ T36] audit: type=1400 audit(1788244524.100:725): avc: denied { mounton } for pid=5642 comm="syz.3.1656" path="/358/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 204.655000][ T36] audit: type=1400 audit(1788244524.130:726): avc: denied { write } for pid=5642 comm="syz.3.1656" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 204.900418][ T5662] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1661'. [ 204.934474][ T5662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.106657][ T5671] device-mapper: ioctl: only supply one of name or uuid, cmd(10) [ 205.114486][ T490] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 205.154500][ T36] audit: type=1400 audit(1788244524.720:727): avc: denied { read } for pid=5673 comm="syz.0.1665" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.209875][ T36] audit: type=1400 audit(1788244524.750:728): avc: denied { open } for pid=5673 comm="syz.0.1665" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.278003][ T490] usb 4-1: Using ep0 maxpacket: 16 [ 205.286269][ T490] usb 4-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 205.310194][ T5680] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 205.319399][ T490] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.332554][ T490] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 205.358943][ T490] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.380311][ T490] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 205.405502][ T490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.428134][ T490] usb 4-1: config 0 descriptor?? [ 205.438002][ T712] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 205.517885][ T5690] veth1_to_hsr: entered promiscuous mode [ 205.528991][ T5690] veth1_to_hsr: entered allmulticast mode [ 205.599174][ T712] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 205.607545][ T712] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 205.615997][ T712] usb 1-1: config 0 has no interface number 0 [ 205.622602][ T712] usb 1-1: config 0 interface 255 has no altsetting 0 [ 205.629489][ T712] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 205.638711][ T712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.647820][ T712] usb 1-1: config 0 descriptor?? [ 205.656437][ T712] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 205.665190][ T712] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 205.798027][ T5047] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 205.853648][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.863333][ T712] usb 1-1: USB disconnect, device number 97 [ 205.869781][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.876973][ T712] ftdi_sio 1-1:0.255: device disconnected [ 205.883466][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.893151][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.900311][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.907319][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.914462][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.921558][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.928768][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.935770][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.942886][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.950001][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.957052][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.964395][ T5047] usb 5-1: not running at top speed; connect to a high speed hub [ 205.972364][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.979660][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.986709][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 205.993697][ T5047] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.004919][ T490] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 206.012015][ T5047] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 206.023554][ T490] elecom 0003:056E:010C.0014: hidraw0: USB HID v0.81 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 206.036509][ T5047] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.048993][ T5047] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 206.059928][ T712] usb 4-1: USB disconnect, device number 102 [ 206.079507][ T5047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.090617][ T5047] usb 5-1: config 0 descriptor?? [ 206.095830][ T5692] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 206.355318][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.363837][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.643389][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1676'. [ 208.268612][ T5724] ./dev/sda1: Can't lookup blockdev [ 208.467042][ T36] audit: type=1400 audit(1788244528.030:729): avc: denied { ioctl } for pid=5738 comm="syz.0.1687" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.586824][ T5047] usbhid 5-1:0.0: can't add hid device: -71 [ 208.602011][ T5047] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.638024][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 208.649101][ T5047] usb 5-1: USB disconnect, device number 89 [ 208.724058][ T36] audit: type=1400 audit(1788244528.290:730): avc: denied { read } for pid=5750 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.747093][ T712] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 208.838261][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 208.844394][ T10] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.870786][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 208.889213][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.907076][ T10] usb 4-1: Product: syz [ 208.914318][ T10] usb 4-1: Manufacturer: syz [ 208.919901][ T712] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 208.937318][ T10] usb 4-1: SerialNumber: syz [ 208.942068][ T712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.965446][ T712] usb 1-1: config 0 has no interfaces? [ 208.976296][ T712] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 208.995535][ T712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.014743][ T712] usb 1-1: config 0 descriptor?? [ 209.229585][ T712] usb 1-1: USB disconnect, device number 98 [ 209.316754][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1695'. [ 209.415048][ T5773] ./dev/sda1: Can't lookup blockdev [ 209.773960][ T36] audit: type=1400 audit(1788244529.340:731): avc: denied { write } for pid=5792 comm="syz.0.1705" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.798919][ T5793] rust_binder: Failure in copy_transaction_data: EINVAL [ 209.798938][ T5793] rust_binder: 5792:5793 transaction async to 5792:0 failed EINVAL, code 0 size 0-24 [ 210.098028][ T5047] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 210.261259][ T5047] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.282707][ T5047] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 210.318032][ T5047] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 210.348026][ T5047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.384595][ T5047] usb 1-1: Product: syz [ 210.401073][ T5047] usb 1-1: Manufacturer: syz [ 210.420838][ T5047] usb 1-1: SerialNumber: syz [ 210.510172][ T5826] ./dev/sda1: Can't lookup blockdev [ 210.646443][ T490] rust_binder: 5792: undelivered TRANSACTION_COMPLETE [ 210.654586][ T490] rust_binder: 5792: undelivered TRANSACTION_ERROR: 29201 [ 210.668069][ T5047] usb 1-1: unit 3 not found! [ 210.685516][ T5047] usb 1-1: USB disconnect, device number 99 [ 211.028078][ T490] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 211.180030][ T490] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 211.188202][ T490] usb 5-1: config 1 has no interface number 0 [ 211.199102][ T490] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 211.213629][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.230209][ T490] usb 5-1: Product: syz [ 211.238740][ T490] usb 5-1: Manufacturer: syz [ 211.248619][ T490] usb 5-1: SerialNumber: syz [ 211.346178][ T36] audit: type=1400 audit(1788244530.910:732): avc: denied { ioctl } for pid=5849 comm="syz.3.1727" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 211.464740][ T5830] TCP: TCP_TX_DELAY enabled [ 211.479372][ T36] audit: type=1400 audit(1788244531.050:733): avc: denied { name_bind } for pid=5829 comm="syz.4.1718" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 211.533172][ T5859] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 211.562667][ T36] audit: type=1400 audit(1788244531.120:734): avc: denied { relabelto } for pid=5858 comm="syz.3.1731" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 211.600823][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 211.647682][ T5866] ./dev/sda1: Can't lookup blockdev [ 211.657962][ T36] audit: type=1400 audit(1788244531.120:735): avc: denied { associate } for pid=5858 comm="syz.3.1731" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 211.712012][ T5870] ./dev/sda1: Can't lookup blockdev [ 211.754877][ T5873] ./dev/sda1: Can't lookup blockdev [ 211.774322][ T36] audit: type=1400 audit(1788244531.130:736): avc: denied { write } for pid=5858 comm="syz.3.1731" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 211.801276][ T5877] netlink: 'syz.3.1737': attribute type 25 has an invalid length. [ 211.828417][ T5877] X.509: Couldn't decode AuthKeyIdentifier [ 211.872510][ T36] audit: type=1400 audit(1788244531.190:737): avc: denied { ioctl } for pid=5861 comm="syz.3.1732" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 211.966629][ T5889] : renamed from xfrm0 (while UP) [ 212.015548][ T5891] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 212.037688][ T5891] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.072148][ T5893] ./dev/sda1: Can't lookup blockdev [ 212.097684][ T5898] /dev/md0: Can't lookup blockdev [ 212.190628][ T36] audit: type=1400 audit(1788244531.760:738): avc: denied { listen } for pid=5899 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.262059][ T5901] lo: MTU too low for tipc bearer [ 212.267133][ T5901] tipc: Enabling of bearer rejected, failed to enable media [ 213.080116][ T5924] ./dev/sda1: Can't lookup blockdev [ 213.099020][ T5926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1755'. [ 213.108177][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1755'. [ 214.277998][ T65] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 214.427990][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 214.435326][ T65] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 214.444611][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.452708][ T65] usb 1-1: Product: syz [ 214.456954][ T65] usb 1-1: Manufacturer: syz [ 214.461687][ T65] usb 1-1: SerialNumber: syz [ 214.467093][ T65] usb 1-1: config 0 descriptor?? [ 214.473799][ T65] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 214.481869][ T65] usb 1-1: Detected FT-X [ 214.674397][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 214.683186][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 214.690401][ T65] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 214.697494][ T65] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 214.712972][ T65] usb 1-1: USB disconnect, device number 100 [ 214.726757][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.737317][ T65] ftdi_sio 1-1:0.0: device disconnected [ 215.240722][ T5952] ./dev/sda1: Can't lookup blockdev [ 215.291734][ T5958] overlayfs: failed to resolve './file0': -2 [ 215.516081][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5973 comm=syz.5.1771 [ 215.529373][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5973 comm=syz.5.1771 [ 215.542408][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=329 sclass=netlink_route_socket pid=5973 comm=syz.5.1771 [ 216.135254][ T5977] ./dev/sda1: Can't lookup blockdev [ 216.222025][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 216.222037][ T36] audit: type=1400 audit(1788244535.790:742): avc: denied { execute } for pid=5984 comm="syz.0.1775" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.251978][ T5985] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1775'. [ 216.299737][ T490] usb 5-1: 3:1 : does not exist [ 216.304669][ T490] usb 5-1: 3:2 : does not exist [ 216.313035][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.330642][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 216.369929][ T5989] netlink: 'syz.5.1777': attribute type 4 has an invalid length. [ 216.405678][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 216.424244][ T5990] netlink: 'syz.5.1777': attribute type 4 has an invalid length. [ 216.444221][ T36] audit: type=1400 audit(1788244536.010:743): avc: denied { create } for pid=5994 comm="syz.4.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 216.463893][ T65] usb 5-1: USB disconnect, device number 90 [ 216.473803][ T10] usb 4-1: USB disconnect, device number 103 [ 216.508869][ T6000] ./dev/sda1: Can't lookup blockdev [ 216.678032][ T490] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 216.788026][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 216.829269][ T490] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.837636][ T490] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.852721][ T490] usb 1-1: string descriptor 0 read error: -22 [ 216.859238][ T490] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 216.868556][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.918009][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.158011][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.278380][ T6022] ./dev/sda1: Can't lookup blockdev [ 217.397999][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 217.528031][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.758887][ T490] usb 1-1: USB disconnect, device number 101 [ 217.768607][ T10] usb 4-1: device descriptor read/64, error -71 [ 217.825777][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1794'. [ 217.883772][ T10] usb usb4-port1: attempt power cycle [ 218.061081][ T6046] netlink: 'syz.5.1798': attribute type 6 has an invalid length. [ 218.076186][ T6048] ./dev/sda1: Can't lookup blockdev [ 218.148014][ T65] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 218.238004][ T10] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 218.260525][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 218.269663][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.277627][ T10] usb 4-1: Product: syz [ 218.285095][ T10] usb 4-1: Manufacturer: syz [ 218.301779][ T10] usb 4-1: SerialNumber: syz [ 218.306996][ T36] audit: type=1400 audit(1788244537.870:744): avc: denied { connect } for pid=6053 comm="syz.0.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.327073][ T65] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 218.339200][ T65] usb 5-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 218.349770][ T65] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 218.380657][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.398585][ T65] usb 5-1: Product: syz [ 218.409052][ T65] usb 5-1: Manufacturer: syz [ 218.418724][ T65] usb 5-1: SerialNumber: syz [ 218.434673][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.445542][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.539694][ T36] audit: type=1400 audit(1788244538.110:745): avc: denied { ioctl } for pid=6039 comm="syz.3.1795" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.581996][ T10] usb 4-1: USB disconnect, device number 106 [ 218.668014][ T490] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 218.798007][ T490] usb 1-1: device descriptor read/64, error -71 [ 219.038043][ T490] usb 1-1: device descriptor read/64, error -71 [ 219.278007][ T490] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 219.408000][ T490] usb 1-1: device descriptor read/64, error -71 [ 219.648006][ T490] usb 1-1: device descriptor read/64, error -71 [ 219.758163][ T490] usb usb1-port1: attempt power cycle [ 220.098011][ T490] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 220.118944][ T490] usb 1-1: device descriptor read/8, error -71 [ 220.248985][ T490] usb 1-1: device descriptor read/8, error -71 [ 220.487997][ T490] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 220.508962][ T490] usb 1-1: device descriptor read/8, error -71 [ 220.638993][ T490] usb 1-1: device descriptor read/8, error -71 [ 220.748165][ T490] usb usb1-port1: unable to enumerate USB device [ 220.960566][ T65] usb 5-1: USB disconnect, device number 91 [ 221.163307][ T36] audit: type=1400 audit(1788244540.730:746): avc: denied { connect } for pid=6084 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.368012][ T490] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 221.450012][ T6087] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1814'. [ 221.482179][ T6093] rust_binder: Failure in copy_transaction_data: EFAULT [ 221.482199][ T6093] rust_binder: 6092:6093 transaction async to 6092:0 failed EFAULT, code 0 size 21-0 [ 221.498932][ T490] usb 5-1: device descriptor read/64, error -71 [ 221.505503][ T10] rust_binder: 6092: undelivered TRANSACTION_ERROR: 29201 [ 221.548577][ T6099] rust_binder: 6098:6099 error while translating object: EINVAL [ 221.556358][ T6099] rust_binder: Failure in copy_transaction_data: EINVAL [ 221.556372][ T6099] rust_binder: 6098:6099 transaction async to 6098:0 failed EINVAL, code 0 size 112-24 [ 221.617553][ T10] rust_binder: 6098: undelivered TRANSACTION_ERROR: 29201 [ 221.671596][ T6103] netlink: 'syz.0.1821': attribute type 16 has an invalid length. [ 221.738026][ T490] usb 5-1: device descriptor read/64, error -71 [ 221.848970][ T6122] ./dev/sda1: Can't lookup blockdev [ 221.854450][ T36] audit: type=1400 audit(1788244541.420:747): avc: denied { ioctl } for pid=6121 comm="syz.0.1827" path="/385/my_tracefs/trace" dev="tracefs" ino=1063 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 221.888672][ T6124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6124 comm=syz.0.1828 [ 221.905837][ T36] audit: type=1400 audit(1788244541.460:748): avc: denied { nlmsg_read } for pid=6123 comm="syz.0.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 222.028007][ T490] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 222.048035][ T65] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 222.158027][ T490] usb 5-1: device descriptor read/64, error -71 [ 222.188007][ T65] usb 4-1: device descriptor read/64, error -71 [ 222.398002][ T490] usb 5-1: device descriptor read/64, error -71 [ 222.428422][ T65] usb 4-1: device descriptor read/64, error -71 [ 222.443830][ T36] audit: type=1400 audit(1788244542.010:749): avc: denied { read } for pid=6134 comm="syz.0.1831" path="socket:[48867]" dev="sockfs" ino=48867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.508073][ T490] usb usb5-port1: attempt power cycle [ 222.630275][ T36] audit: type=1400 audit(1788244542.200:750): avc: denied { mounton } for pid=6149 comm="syz.5.1837" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 222.687944][ T65] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 222.827998][ T65] usb 4-1: device descriptor read/64, error -71 [ 222.858240][ T490] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 222.879038][ T490] usb 5-1: device descriptor read/8, error -71 [ 222.938027][ T5047] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 223.009146][ T490] usb 5-1: device descriptor read/8, error -71 [ 223.068007][ T65] usb 4-1: device descriptor read/64, error -71 [ 223.088978][ T5047] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.098715][ T5047] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.109730][ T5047] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 223.119023][ T5047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.126991][ T5047] usb 1-1: Product: syz [ 223.131298][ T5047] usb 1-1: Manufacturer: syz [ 223.135869][ T5047] usb 1-1: SerialNumber: syz [ 223.144957][ T5047] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 223.159604][ T5047] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 223.159604][ T5047] Please send a copy of this message to and [ 223.195688][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1840'. [ 223.205204][ T65] usb usb4-port1: attempt power cycle [ 223.226235][ T6164] No source specified [ 223.248000][ T490] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 223.279114][ T490] usb 5-1: device descriptor read/8, error -71 [ 223.400894][ T5047] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 223.412469][ T490] usb 5-1: device descriptor read/8, error -71 [ 223.528080][ T490] usb usb5-port1: unable to enumerate USB device [ 223.548013][ T65] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 223.568952][ T65] usb 4-1: device descriptor read/8, error -71 [ 223.698946][ T65] usb 4-1: device descriptor read/8, error -71 [ 223.938044][ T65] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 223.958977][ T65] usb 4-1: device descriptor read/8, error -71 [ 224.013285][ T6188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.013410][ T6188] rust_binder: 6187:6188 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 224.028431][ T6188] rust_binder: 6187:6188 no such ref 2 [ 224.033902][ T6188] rust_binder: 6187:6188 no such ref 2 [ 224.039545][ T6188] rust_binder: 6187:6188 no such ref 3 [ 224.079800][ T6189] rust_binder: Error in use_page_slow: ESRCH [ 224.079828][ T6189] rust_binder: use_range failure ESRCH [ 224.085804][ T6189] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 224.091462][ T6189] rust_binder: Failure in copy_transaction_data: ESRCH [ 224.099627][ T6189] rust_binder: 6187:6189 transaction call to 2489:0 failed ESRCH, code 0 size 80-24 [ 224.116365][ T65] usb 4-1: device descriptor read/8, error -71 [ 224.228117][ T65] usb usb4-port1: unable to enumerate USB device [ 224.343080][ T6191] No source specified [ 224.381321][ T6201] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1858'. [ 224.847940][ T5047] rust_binder: 6187: undelivered TRANSACTION_ERROR: 29201 [ 224.875295][ T36] audit: type=1400 audit(1788244544.440:751): avc: denied { append } for pid=6204 comm="syz.4.1860" name="usbmon4" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 224.916728][ T6213] No source specified [ 224.925218][ T36] audit: type=1400 audit(1788244544.470:752): avc: denied { ioctl } for pid=6204 comm="syz.4.1860" path="/dev/usbmon4" dev="devtmpfs" ino=102 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.180983][ T36] audit: type=1400 audit(1788244544.750:753): avc: denied { append } for pid=6239 comm="syz.4.1870" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.238272][ T6250] input: syz0 as /devices/virtual/input/input28 [ 225.244700][ T36] audit: type=1400 audit(1788244544.810:754): avc: denied { setattr } for pid=6248 comm="syz.4.1872" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 225.352441][ T36] audit: type=1400 audit(1788244544.920:755): avc: denied { ioctl } for pid=6260 comm="syz.4.1875" path="socket:[49920]" dev="sockfs" ino=49920 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.703170][ T490] usb 1-1: USB disconnect, device number 106 [ 225.724087][ T6275] rust_binder: 6274:6275 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 225.734508][ T6275] rust_binder: 6274:6275 no such ref 2 [ 225.740136][ T6275] rust_binder: 6274:6275 no such ref 2 [ 225.745760][ T6275] rust_binder: 6274:6275 no such ref 3 [ 225.785867][ T6276] rust_binder: 6274:6276 error while translating object: EPERM [ 225.793476][ T36] audit: type=1400 audit(1788244545.350:756): avc: denied { transfer } for pid=6274 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 225.812883][ T6276] rust_binder: Failure in copy_transaction_data: EPERM [ 225.812902][ T6276] rust_binder: 6274:6276 transaction call to 6274:0 failed EPERM, code 0 size 80-24 [ 225.968010][ T65] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 226.098027][ T65] usb 5-1: device descriptor read/64, error -71 [ 226.338003][ T65] usb 5-1: device descriptor read/64, error -71 [ 226.555843][ T490] rust_binder: 6274: undelivered TRANSACTION_ERROR: 29201 [ 226.578261][ T65] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 226.642998][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1886'. [ 226.718008][ T65] usb 5-1: device descriptor read/64, error -71 [ 226.958000][ T65] usb 5-1: device descriptor read/64, error -71 [ 227.028001][ T490] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 227.068234][ T65] usb usb5-port1: attempt power cycle [ 227.179313][ T490] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.187326][ T490] usb 1-1: not running at top speed; connect to a high speed hub [ 227.195936][ T490] usb 1-1: config index 0 descriptor too short (expected 26403, got 35) [ 227.204392][ T490] usb 1-1: config 169 has too many interfaces: 60, using maximum allowed: 32 [ 227.213283][ T490] usb 1-1: config 169 has an invalid interface number: 81 but max is 59 [ 227.221700][ T490] usb 1-1: config 169 has 1 interface, different from the descriptor's value: 60 [ 227.230935][ T490] usb 1-1: config 169 has no interface number 0 [ 227.237197][ T490] usb 1-1: config 169 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.247435][ T490] usb 1-1: config 169 interface 81 has no altsetting 0 [ 227.256166][ T490] usb 1-1: string descriptor 0 read error: -22 [ 227.262603][ T490] usb 1-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 227.271715][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.318005][ T5047] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 227.418005][ T65] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 227.438938][ T65] usb 5-1: device descriptor read/8, error -71 [ 227.468985][ T5047] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 227.477325][ T5047] usb 4-1: config 127 has no interface number 0 [ 227.486594][ T490] usb 1-1: USB disconnect, device number 107 [ 227.493475][ T5047] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 227.508344][ T5047] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 227.517444][ T5047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.525530][ T5047] usb 4-1: Product: syz [ 227.529880][ T5047] usb 4-1: Manufacturer: syz [ 227.534476][ T5047] usb 4-1: SerialNumber: syz [ 227.542243][ T6301] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 227.568936][ T65] usb 5-1: device descriptor read/8, error -71 [ 227.808001][ T65] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 227.828898][ T65] usb 5-1: device descriptor read/8, error -71 [ 227.950015][ T6302] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 227.957895][ T5047] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 227.968358][ T5047] asix 4-1:127.57: probe with driver asix failed with error -32 [ 227.976935][ T65] usb 5-1: device descriptor read/8, error -71 [ 227.997442][ T6304] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1892' resets device [ 228.088076][ T65] usb usb5-port1: unable to enumerate USB device [ 228.157906][ T65] usb 4-1: USB disconnect, device number 111 [ 228.318034][ T490] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 228.467998][ T490] usb 1-1: Using ep0 maxpacket: 32 [ 228.474172][ T490] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 228.482456][ T490] usb 1-1: config 0 has no interface number 0 [ 228.488616][ T490] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 228.499792][ T490] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 228.508962][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.516920][ T490] usb 1-1: Product: syz [ 228.521229][ T490] usb 1-1: Manufacturer: syz [ 228.525798][ T490] usb 1-1: SerialNumber: syz [ 228.531375][ T490] usb 1-1: config 0 descriptor?? [ 228.537339][ T490] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 228.694562][ T6328] rust_binder: 6327:6328 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 228.702573][ T6328] rust_binder: 6327:6328 no such ref 2 [ 228.708208][ T6328] rust_binder: 6327:6328 no such ref 2 [ 228.713752][ T6328] rust_binder: 6327:6328 no such ref 3 [ 228.739576][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 228.739585][ T36] audit: type=1400 audit(1788244548.310:758): avc: denied { accept } for pid=6303 comm="syz.0.1892" path="socket:[50444]" dev="sockfs" ino=50444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.768001][ T65] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 229.908195][ T65] usb 4-1: device descriptor read/64, error -71 [ 230.038007][ T712] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 230.058839][ T490] usb 1-1: USB disconnect, device number 108 [ 230.148050][ T65] usb 4-1: device descriptor read/64, error -71 [ 230.188062][ T712] usb 5-1: Using ep0 maxpacket: 16 [ 230.194214][ T712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.205226][ T712] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 230.214416][ T712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.223130][ T712] usb 5-1: SerialNumber: syz [ 230.228426][ T712] usb 5-1: config 0 descriptor?? [ 230.235341][ T712] hub 5-1:0.0: bad descriptor, ignoring hub [ 230.241392][ T712] hub 5-1:0.0: probe with driver hub failed with error -5 [ 230.248808][ T712] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 230.256622][ T712] usb 5-1: Detected SIO [ 230.261659][ T712] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.388005][ T65] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 230.518002][ T65] usb 4-1: device descriptor read/64, error -71 [ 230.548081][ T712] usb 5-1: USB disconnect, device number 100 [ 230.554572][ T712] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.566002][ T712] ftdi_sio 5-1:0.0: device disconnected [ 230.758004][ T65] usb 4-1: device descriptor read/64, error -71 [ 230.828060][ T712] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 230.868215][ T65] usb usb4-port1: attempt power cycle [ 231.208011][ T65] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 231.228954][ T65] usb 4-1: device descriptor read/8, error -71 [ 231.359097][ T65] usb 4-1: device descriptor read/8, error -71 [ 231.372511][ T6379] rust_binder: 6378:6379 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 231.380697][ T6379] rust_binder: 6378:6379 no such ref 2 [ 231.386184][ T6379] rust_binder: 6378:6379 no such ref 2 [ 231.392019][ T6379] rust_binder: 6378:6379 no such ref 3 [ 231.618009][ T65] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 231.638973][ T65] usb 4-1: device descriptor read/8, error -71 [ 231.769095][ T65] usb 4-1: device descriptor read/8, error -71 [ 231.884021][ T65] usb usb4-port1: unable to enumerate USB device [ 232.256834][ T6390] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 232.276261][ T6391] overlayfs: overlapping lowerdir path [ 232.288169][ T6390] overlayfs: missing 'lowerdir' [ 232.546769][ T36] audit: type=1400 audit(1788244552.110:759): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 232.877244][ T36] audit: type=1326 audit(1788244552.440:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.4.1929" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f364799e159 code=0x0 [ 232.903819][ T65] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 232.968024][ T712] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 233.068006][ T65] usb 1-1: device descriptor read/64, error -71 [ 233.129015][ T712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 233.138954][ T712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 233.148869][ T712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.159929][ T712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 233.169755][ T712] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 233.179253][ T712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.190621][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.197771][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.206589][ T712] pl2303 4-1:1.0: pl2303 converter detected [ 233.215772][ T712] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 233.318002][ T65] usb 1-1: device descriptor read/64, error -71 [ 233.558019][ T65] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 233.688001][ T65] usb 1-1: device descriptor read/64, error -71 [ 233.868167][ T6422] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 233.875538][ T6422] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 233.882816][ T6422] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 233.890715][ T6422] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 233.928008][ T65] usb 1-1: device descriptor read/64, error -71 [ 233.960429][ T712] usb 4-1: USB disconnect, device number 116 [ 233.969754][ T712] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 233.978609][ T712] pl2303 4-1:1.0: device disconnected [ 234.005472][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1935'. [ 234.016351][ T6426] netlink: 'syz.5.1935': attribute type 10 has an invalid length. [ 234.024936][ T6426] overlayfs: failed to clone upperpath [ 234.030973][ T6426] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1935'. [ 234.040163][ T65] usb usb1-port1: attempt power cycle [ 234.046664][ T6426] netlink: 'syz.5.1935': attribute type 4 has an invalid length. [ 234.398029][ T65] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 234.418947][ T65] usb 1-1: device descriptor read/8, error -71 [ 234.488354][ T712] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 234.549655][ T65] usb 1-1: device descriptor read/8, error -71 [ 234.556864][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.566581][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.648920][ T712] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.668336][ T712] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.688328][ T712] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.714489][ T712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.728970][ T712] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 234.751104][ T712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.771789][ T712] usb 5-1: config 0 descriptor?? [ 234.797998][ T490] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 234.805637][ T65] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 234.829127][ T65] usb 1-1: device descriptor read/8, error -71 [ 234.958977][ T65] usb 1-1: device descriptor read/8, error -71 [ 234.965473][ T490] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.974146][ T490] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 234.985317][ T490] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.994467][ T490] usb 4-1: too many endpoints for config 1 interface 1 altsetting 98: 97, using maximum allowed: 30 [ 235.005546][ T490] usb 4-1: config 1 interface 1 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 235.018958][ T490] usb 4-1: config 1 interface 1 has no altsetting 0 [ 235.027398][ T490] usb 4-1: string descriptor 0 read error: -22 [ 235.033880][ T490] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 235.043039][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.057516][ T490] usb 4-1: 0:2 : does not exist [ 235.068074][ T65] usb usb1-port1: unable to enumerate USB device [ 235.186583][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.195612][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.204492][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.212371][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.219224][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.226015][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.232864][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.239706][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.246410][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.253280][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.260275][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.267088][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.273923][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.280785][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.287487][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.294388][ T712] lua 0003:1E7D:2C2E.0015: unknown main item tag 0x0 [ 235.301168][ T712] lua 0003:1E7D:2C2E.0015: unbalanced collection at end of report description [ 235.310255][ T712] lua 0003:1E7D:2C2E.0015: parse failed [ 235.315840][ T712] lua 0003:1E7D:2C2E.0015: probe with driver lua failed with error -22 [ 235.415253][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.435302][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.460239][ T65] usb 5-1: USB disconnect, device number 101 [ 235.617724][ T36] audit: type=1400 audit(1788244555.180:761): avc: denied { listen } for pid=6482 comm="syz.5.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.268003][ T65] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 236.391574][ T6510] netlink: 'syz.5.1960': attribute type 10 has an invalid length. [ 236.417989][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 236.429683][ T65] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 236.439102][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.456419][ T65] usb 1-1: Product: syz [ 236.469402][ T65] usb 1-1: Manufacturer: syz [ 236.483844][ T65] usb 1-1: SerialNumber: syz [ 236.706397][ T65] usb 1-1: USB disconnect, device number 114 [ 237.492703][ T10] usb 4-1: USB disconnect, device number 117 [ 237.546611][ T36] audit: type=1400 audit(1788244557.110:762): avc: denied { create } for pid=6534 comm="syz.5.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.828045][ T10] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 237.998626][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 238.012350][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 238.032365][ T10] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 238.042615][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.059314][ T10] usb 4-1: Product: syz [ 238.067811][ T10] usb 4-1: Manufacturer: syz [ 238.076754][ T10] usb 4-1: SerialNumber: syz [ 238.301707][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 238.310823][ T10] usb 4-1: unit 14 not found! [ 238.326296][ T10] usb 4-1: USB disconnect, device number 118 [ 238.692899][ T36] audit: type=1400 audit(1788244558.260:763): avc: denied { accept } for pid=6560 comm="syz.0.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.713510][ T6563] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 238.799608][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 238.968003][ T10] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 239.058043][ T65] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 239.120615][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.139005][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.160245][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.175688][ T6583] bridge0: port 1(erspan0) entered blocking state [ 239.182417][ T6583] bridge0: port 1(erspan0) entered disabled state [ 239.188859][ T65] usb 4-1: device descriptor read/64, error -71 [ 239.195282][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.204525][ T6583] erspan0: entered allmulticast mode [ 239.210314][ T6583] erspan0: entered promiscuous mode [ 239.215567][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.223986][ T6583] bridge0: port 1(erspan0) entered blocking state [ 239.230447][ T6583] bridge0: port 1(erspan0) entered forwarding state [ 239.237749][ T10] usb 1-1: config 0 descriptor?? [ 239.447987][ T65] usb 4-1: device descriptor read/64, error -71 [ 239.548233][ T6600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=6600 comm=syz.5.1993 [ 239.634509][ T6612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6612 comm=syz.5.1999 [ 239.649261][ T10] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 239.669317][ T10] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 239.691046][ T65] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 239.828000][ T65] usb 4-1: device descriptor read/64, error -71 [ 239.910866][ T490] usb 1-1: USB disconnect, device number 115 [ 240.078040][ T65] usb 4-1: device descriptor read/64, error -71 [ 240.188080][ T65] usb usb4-port1: attempt power cycle [ 240.538003][ T65] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 240.568954][ T65] usb 4-1: device descriptor read/8, error -71 [ 240.657996][ T490] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 240.698918][ T65] usb 4-1: device descriptor read/8, error -71 [ 240.819083][ T490] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 240.828418][ T490] usb 1-1: config 0 has no interface number 0 [ 240.841276][ T490] usb 1-1: config 0 interface 41 has no altsetting 0 [ 240.864436][ T490] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 240.883647][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.891947][ T490] usb 1-1: Product: syz [ 240.896230][ T490] usb 1-1: Manufacturer: syz [ 240.908011][ T490] usb 1-1: SerialNumber: syz [ 240.918467][ T490] usb 1-1: config 0 descriptor?? [ 240.948002][ T65] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 240.978950][ T65] usb 4-1: device descriptor read/8, error -71 [ 241.118972][ T65] usb 4-1: device descriptor read/8, error -71 [ 241.129662][ T490] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 241.145600][ T490] usb 1-1: USB disconnect, device number 116 [ 241.228108][ T65] usb usb4-port1: unable to enumerate USB device [ 241.568003][ T490] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 241.728744][ T490] usb 1-1: Using ep0 maxpacket: 16 [ 241.738063][ T490] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 241.746350][ T490] usb 1-1: config 0 has no interface number 0 [ 241.752610][ T490] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 241.762637][ T490] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 241.772714][ T490] usb 1-1: config 0 interface 41 has no altsetting 0 [ 241.780738][ T490] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 241.789993][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.798668][ T490] usb 1-1: Product: syz [ 241.802906][ T490] usb 1-1: Manufacturer: syz [ 241.807494][ T490] usb 1-1: SerialNumber: syz [ 241.814948][ T490] usb 1-1: config 0 descriptor?? [ 241.820323][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.827653][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.968055][ T65] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 242.035544][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.043056][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.128928][ T65] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 242.138067][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.146505][ T65] usb 5-1: config 0 descriptor?? [ 242.247995][ T10] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 242.398914][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.407275][ T10] usb 4-1: config 179 has no interface number 0 [ 242.413671][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 242.424985][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 242.436103][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 242.447452][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 242.458920][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.472442][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.481565][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.492423][ T6659] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.499723][ T6659] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.659553][ T490] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 242.674120][ T490] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 242.685729][ T490] usb 1-1: USB disconnect, device number 117 [ 242.709219][ T10] usb 4-1: USB disconnect, device number 123 [ 242.715246][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.715268][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.761789][ T65] usb 5-1: Cannot set autoneg [ 242.766570][ T65] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 242.962550][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.971476][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.028594][ T10] usb 5-1: USB disconnect, device number 102 [ 243.208075][ T36] audit: type=1400 audit(1788244562.770:764): avc: denied { getopt } for pid=6664 comm="syz.0.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.261685][ T36] audit: type=1400 audit(1788244562.820:765): avc: denied { setattr } for pid=6671 comm="syz.3.2021" name="NETLINK" dev="sockfs" ino=53217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.538046][ T10] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 243.709281][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.721597][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 243.747760][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 243.784851][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 243.804056][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.828908][ T10] usb 4-1: Product: syz [ 243.841754][ T10] usb 4-1: Manufacturer: syz [ 243.855007][ T10] usb 4-1: SerialNumber: syz [ 244.078044][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 244.110178][ T10] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 244.151585][ T10] usb 4-1: 2:1 : sample bitwidth 255 in over sample bytes 1 [ 244.179576][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 244.214755][ T10] usb 4-1: USB disconnect, device number 124 [ 244.300073][ T6696] SELinux: policydb version 1180827720 does not match my version range 15-33 [ 244.342454][ T6696] SELinux: failed to load policy [ 244.410442][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.429292][ T6702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6702 comm=syz.0.2030 [ 244.454729][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.480272][ T6697] bridge_slave_0: entered allmulticast mode [ 244.507628][ T6697] bridge_slave_0: entered promiscuous mode [ 244.539127][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.557164][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.569708][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.601463][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.618748][ T6697] bridge_slave_1: entered allmulticast mode [ 244.629755][ T36] audit: type=1400 audit(1788244564.180:766): avc: denied { shutdown } for pid=6709 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.665013][ T6697] bridge_slave_1: entered promiscuous mode [ 244.792684][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.799753][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.806984][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.814013][ T6697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.821492][ T10] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 244.856827][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.864381][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.920730][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.927777][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.965294][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.972364][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.980691][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 244.991493][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.003064][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.050652][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.069326][ T6697] veth0_vlan: entered promiscuous mode [ 245.078046][ T712] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 245.095898][ T6697] veth1_macvtap: entered promiscuous mode [ 245.105798][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 245.123543][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.143675][ T36] audit: type=1400 audit(1788244564.710:767): avc: denied { mounton } for pid=6697 comm="syz-executor" path="/root/syzkaller.Z20JQz/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 245.176785][ T10] usb 1-1: Product: syz [ 245.190547][ T10] usb 1-1: Manufacturer: syz [ 245.205297][ T10] usb 1-1: SerialNumber: syz [ 245.225172][ T10] usb 1-1: config 0 descriptor?? [ 245.248957][ T6707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.256123][ T712] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 245.266541][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 245.277728][ T36] audit: type=1400 audit(1788244564.740:768): avc: denied { mounton } for pid=6697 comm="syz-executor" path="/root/syzkaller.Z20JQz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.304387][ T712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.336878][ T712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.368882][ T712] usb 4-1: config 1 has no interface number 0 [ 245.397386][ T712] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.413079][ T36] audit: type=1400 audit(1788244564.740:769): avc: denied { mounton } for pid=6697 comm="syz-executor" path="/root/syzkaller.Z20JQz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 245.473765][ T712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.486210][ T490] usb 1-1: USB disconnect, device number 118 [ 245.504836][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.526795][ T712] usb 4-1: Product: syz [ 245.535802][ T36] audit: type=1400 audit(1788244564.740:770): avc: denied { mounton } for pid=6697 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 245.568056][ T712] usb 4-1: Manufacturer: syz [ 245.574924][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 245.587351][ T712] usb 4-1: SerialNumber: syz [ 245.604179][ T712] cdc_wdm 4-1:1.128: skipping garbage [ 245.621342][ T712] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 245.771210][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 245.797771][ T65] usb 6-1: config index 0 descriptor too short (expected 37268, got 18) [ 245.826103][ T65] usb 6-1: config 177 has an invalid descriptor of length 54, skipping remainder of the config [ 245.864263][ T65] usb 6-1: config 177 has 0 interfaces, different from the descriptor's value: 28 [ 245.888043][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.907413][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.918070][ T65] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 245.948074][ T712] usb 4-1: USB disconnect, device number 125 [ 245.958113][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.966097][ T65] usb 6-1: Product: syz [ 246.018374][ T65] usb 6-1: Manufacturer: syz [ 246.027228][ T65] usb 6-1: SerialNumber: syz [ 246.104820][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.228003][ T5047] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 246.287502][ T36] audit: type=1400 audit(1788244565.850:771): avc: denied { mounton } for pid=6737 comm="syz.5.2042" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 246.310393][ T6738] 9pnet_fd: Insufficient options for proto=fd [ 246.401687][ T65] usb 6-1: USB disconnect, device number 11 [ 246.526225][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.628169][ T5047] usb 1-1: Using ep0 maxpacket: 32 [ 246.634449][ T6752] kvm: kvm [6742]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 246.677863][ T5047] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.708163][ T5047] usb 1-1: config 0 has no interfaces? [ 246.723839][ T5047] usb 1-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 246.748003][ T5047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.768149][ T490] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 246.786704][ T5047] usb 1-1: config 0 descriptor?? [ 246.798904][ T712] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 246.847064][ T36] audit: type=1400 audit(1788244566.410:772): avc: denied { mount } for pid=6742 comm="syz.0.2043" name="/" dev="configfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 246.910535][ T36] audit: type=1400 audit(1788244566.440:773): avc: denied { search } for pid=6742 comm="syz.0.2043" name="/" dev="configfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.932761][ T490] usb 4-1: device descriptor read/64, error -71 [ 246.964727][ T6752] kvm: kvm [6742]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 246.978612][ T712] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 246.998363][ T712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 247.009839][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.028135][ T712] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 247.067997][ T712] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 247.097290][ T712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.132193][ T712] usb 5-1: config 0 descriptor?? [ 247.137417][ T6793] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 247.188015][ T490] usb 4-1: device descriptor read/64, error -71 [ 247.315375][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.354461][ T6793] netlink: 'syz.4.2050': attribute type 27 has an invalid length. [ 247.428130][ T490] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 247.557992][ T5047] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 247.578146][ T490] usb 4-1: device descriptor read/64, error -71 [ 247.585631][ T712] hid-steam 0003:28DE:1205.0017: unknown main item tag 0x0 [ 247.608032][ T712] hid-steam 0003:28DE:1205.0017: unknown main item tag 0xd [ 247.635322][ T712] hid-steam 0003:28DE:1205.0017: unknown main item tag 0x4 [ 247.658614][ T712] hid-steam 0003:28DE:1205.0017: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 247.682704][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.758459][ T5047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 192, changing to 11 [ 247.792627][ T5047] usb 6-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 247.821864][ T5047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.829907][ T490] usb 4-1: device descriptor read/64, error -71 [ 247.856795][ T5047] usb 6-1: config 0 descriptor?? [ 247.938092][ T490] usb usb4-port1: attempt power cycle [ 247.987550][ T712] usb 5-1: USB disconnect, device number 103 [ 248.091693][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.279092][ T490] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 248.318896][ T490] usb 4-1: device descriptor read/8, error -71 [ 248.424559][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.459258][ T490] usb 4-1: device descriptor read/8, error -71 [ 248.698113][ T490] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 248.729837][ T490] usb 4-1: device descriptor read/8, error -71 [ 248.811648][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.859055][ T490] usb 4-1: device descriptor read/8, error -71 [ 248.974383][ T490] usb usb4-port1: unable to enumerate USB device [ 249.569619][ T6888] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 249.587651][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2057'. [ 249.604034][ T6888] veth1: entered promiscuous mode [ 249.670249][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2057'. [ 249.778009][ T490] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 249.938005][ T490] usb 5-1: Invalid ep0 maxpacket: 16 [ 249.943391][ T712] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.087988][ T490] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 250.117979][ T712] usb 4-1: Using ep0 maxpacket: 16 [ 250.124056][ T712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.136519][ T712] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 250.148943][ T712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.183934][ T712] usb 4-1: SerialNumber: syz [ 250.196719][ T712] usb 4-1: config 0 descriptor?? [ 250.206903][ T5047] usb 6-1: string descriptor 0 read error: -71 [ 250.230494][ T712] hub 4-1:0.0: bad descriptor, ignoring hub [ 250.238020][ T5047] usbhid 6-1:0.0: can't add hid device: -71 [ 250.243924][ T5047] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 250.263160][ T712] hub 4-1:0.0: probe with driver hub failed with error -5 [ 250.270336][ T490] usb 5-1: Invalid ep0 maxpacket: 16 [ 250.276410][ T6898] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 250.290847][ T490] usb usb5-port1: attempt power cycle [ 250.309108][ T712] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 250.316724][ T5047] usb 6-1: USB disconnect, device number 12 [ 250.326368][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 250.326378][ T36] audit: type=1400 audit(1788244569.900:777): avc: denied { relabelto } for pid=6896 comm="syz.5.2060" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 250.369263][ T712] usb 4-1: Detected SIO [ 250.379560][ T712] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 250.403734][ T6900] tipc: Enabling of bearer rejected, failed to enable media [ 250.432077][ T10] usb 1-1: USB disconnect, device number 119 [ 250.468000][ T36] audit: type=1400 audit(1788244569.900:778): avc: denied { associate } for pid=6896 comm="syz.5.2060" name="file0" dev="tmpfs" ino=43 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0" [ 250.548124][ T712] usb 4-1: USB disconnect, device number 4 [ 250.564322][ T712] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 250.583630][ T36] audit: type=1400 audit(1788244569.930:779): avc: denied { unlink } for pid=6697 comm="syz-executor" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 250.615663][ T712] ftdi_sio 4-1:0.0: device disconnected [ 250.667999][ T490] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 250.678857][ T36] audit: type=1400 audit(1788244569.940:780): avc: denied { create } for pid=6899 comm="syz.5.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 250.721752][ T490] usb 5-1: Invalid ep0 maxpacket: 16 [ 250.858159][ T490] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 250.889210][ T490] usb 5-1: Invalid ep0 maxpacket: 16 [ 250.898915][ T490] usb usb5-port1: unable to enumerate USB device [ 251.177998][ T490] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 251.349003][ T490] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.379084][ T490] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.415319][ T490] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.432514][ T490] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 251.481383][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.518186][ T490] usb 4-1: Product: syz [ 251.534343][ T490] usb 4-1: Manufacturer: syz [ 251.555352][ T490] usb 4-1: SerialNumber: syz [ 251.788014][ T712] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 251.927997][ T490] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 251.935569][ T712] usb 1-1: device descriptor read/64, error -71 [ 252.087995][ T490] usb 6-1: Using ep0 maxpacket: 32 [ 252.095370][ T490] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 252.104617][ T490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.112675][ T490] usb 6-1: Product: syz [ 252.116867][ T490] usb 6-1: Manufacturer: syz [ 252.121686][ T490] usb 6-1: SerialNumber: syz [ 252.177984][ T712] usb 1-1: device descriptor read/64, error -71 [ 252.332424][ T490] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 252.351182][ T490] usb 6-1: USB disconnect, device number 13 [ 252.418012][ T712] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 252.548238][ T712] usb 1-1: device descriptor read/64, error -71 [ 252.665367][ T36] audit: type=1400 audit(1788244572.230:781): avc: denied { ioctl } for pid=6942 comm="syz.4.2074" path="socket:[55605]" dev="sockfs" ino=55605 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 252.837997][ T712] usb 1-1: device descriptor read/64, error -71 [ 252.958081][ T712] usb usb1-port1: attempt power cycle [ 253.308025][ T712] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 253.339062][ T712] usb 1-1: device descriptor read/8, error -71 [ 253.468972][ T712] usb 1-1: device descriptor read/8, error -71 [ 253.708029][ T712] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 253.738938][ T712] usb 1-1: device descriptor read/8, error -71 [ 253.747772][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2078'. [ 253.879082][ T712] usb 1-1: device descriptor read/8, error -71 [ 253.988067][ T712] usb usb1-port1: unable to enumerate USB device [ 254.008262][ T712] usb 4-1: USB disconnect, device number 5 [ 254.308230][ T6979] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.315536][ T36] audit: type=1400 audit(1788244573.870:782): avc: denied { ioctl } for pid=6978 comm="syz.3.2084" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 254.345661][ T6980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 254.540947][ T36] audit: type=1400 audit(1788244574.110:783): avc: denied { getopt } for pid=7003 comm="syz.0.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.780254][ T36] audit: type=1400 audit(1788244574.350:784): avc: denied { execute } for pid=7017 comm="syz.3.2096" path="pipe:[56630]" dev="pipefs" ino=56630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 254.807712][ T2428] Bluetooth: hci1: sending frame failed (-49) [ 254.814467][ T2427] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 254.834988][ T36] audit: type=1400 audit(1788244574.400:785): avc: denied { accept } for pid=7025 comm="syz.3.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.878004][ T712] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 255.018026][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.024121][ T7024] Bluetooth: hci0: command 0x1003 tx timeout [ 255.042058][ T712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.052981][ T712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.064232][ T712] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 255.073486][ T712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 255.081561][ T712] usb 1-1: Product: syz [ 255.085792][ T712] usb 1-1: Manufacturer: syz [ 255.090403][ T490] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 255.102483][ T712] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 255.249199][ T490] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.257574][ T490] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 255.270030][ T490] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 255.279270][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.287241][ T490] usb 4-1: Product: syz [ 255.291488][ T5047] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 255.299329][ T490] usb 4-1: Manufacturer: syz [ 255.304522][ T490] usb 4-1: SerialNumber: syz [ 255.357005][ T36] audit: type=1400 audit(1788244574.920:786): avc: denied { mount } for pid=7030 comm="syz.5.2099" name="/" dev="pstore" ino=2136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 255.436710][ T36] audit: type=1400 audit(1788244575.000:787): avc: denied { unmount } for pid=6697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 255.478049][ T5047] usb 5-1: Using ep0 maxpacket: 32 [ 255.484288][ T5047] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 255.505097][ T5047] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 255.514514][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.528546][ T712] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 255.538639][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.546589][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.558130][ T5047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.569736][ T5047] usb 5-1: Product: syz [ 255.576398][ T712] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 255.585911][ T5047] usb 5-1: Manufacturer: syz [ 255.591332][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.603464][ T712] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 255.611209][ T5047] usb 5-1: SerialNumber: syz [ 255.630527][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.638983][ T712] usb 1-1: USB disconnect, device number 124 [ 255.654668][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.663276][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.679794][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.693375][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.702983][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.720461][ T490] usb 4-1: USB disconnect, device number 6 [ 255.822056][ T5047] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.829023][ T5047] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.836147][ T5047] usb 5-1: 0:3 : does not exist [ 255.841239][ T5047] usb 5-1: 0:4 : does not exist [ 255.846129][ T5047] usb 5-1: unit 7 not found! [ 255.856055][ T5047] usb 5-1: USB disconnect, device number 108 [ 256.197156][ T36] audit: type=1400 audit(1788244575.760:788): avc: denied { setattr } for pid=7047 comm="syz.0.2103" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.257193][ T36] audit: type=1400 audit(1788244575.790:789): avc: denied { append } for pid=7047 comm="syz.0.2103" name="uprobe_events" dev="tracefs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 256.303147][ T36] audit: type=1400 audit(1788244575.870:790): avc: denied { lock } for pid=7052 comm="syz.0.2105" path="socket:[57143]" dev="sockfs" ino=57143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 257.232031][ T36] audit: type=1326 audit(1788244576.800:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.4.2117" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f364799e159 code=0x0 [ 257.282316][ T36] audit: type=1400 audit(1788244576.850:792): avc: denied { shutdown } for pid=7111 comm="syz.4.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.508014][ T712] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 257.658770][ T712] usb 4-1: not running at top speed; connect to a high speed hub [ 257.667172][ T712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.678407][ T712] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 257.687492][ T712] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 257.695880][ T490] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 257.703710][ T712] usb 4-1: Product: syz [ 257.707910][ T712] usb 4-1: Manufacturer: syz [ 257.714038][ T712] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 257.857984][ T490] usb 1-1: Using ep0 maxpacket: 32 [ 257.864103][ T490] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 257.872442][ T490] usb 1-1: config 0 has no interface number 0 [ 257.878624][ T490] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 257.889745][ T490] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 257.900941][ T490] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 257.910162][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.919160][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.928932][ T490] usb 1-1: Product: syz [ 257.933298][ T490] usb 1-1: Manufacturer: syz [ 257.938280][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.946667][ T490] usb 1-1: SerialNumber: syz [ 257.954777][ T490] usb 1-1: config 0 descriptor?? [ 257.960021][ T7118] batadv_slave_0: entered promiscuous mode [ 258.093020][ T7137] tipc: Enabling of bearer rejected, already enabled [ 258.142296][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2127'. [ 258.163200][ T7141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2127'. [ 258.231646][ T7145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.232152][ T7145] rust_binder: Error in use_page_slow: ESRCH [ 258.245025][ T7145] rust_binder: use_range failure ESRCH [ 258.253520][ T7145] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 258.261763][ T7145] rust_binder: Failure in copy_transaction_data: ESRCH [ 258.270185][ T7145] rust_binder: 7144:7145 transaction call to 2489:0 failed ESRCH, code 0 size 72-24 [ 258.287495][ T7146] ./dev/sda1: Can't lookup blockdev [ 258.293212][ T36] audit: type=1400 audit(1788244577.870:793): avc: denied { execheap } for pid=7144 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 258.315232][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.322612][ T7154] rust_binder: Write failure EINVAL in pid:1428 [ 258.324369][ T10] rust_binder: 7144: undelivered TRANSACTION_ERROR: 29201 [ 258.525774][ T7118] batadv_slave_0: left promiscuous mode [ 258.534115][ T712] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 258.559364][ T712] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 258.577896][ T712] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 258.590808][ T712] usb 4-1: USB disconnect, device number 7 [ 258.769633][ T36] audit: type=1400 audit(1788244578.340:794): avc: denied { remount } for pid=7191 comm="syz.5.2138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 258.845586][ C0] blk_print_req_error: 47 callbacks suppressed [ 258.845599][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.862086][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.871211][ C0] buffer_io_error: 46 callbacks suppressed [ 258.871221][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.884856][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.893958][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 258.901757][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.910852][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 258.918647][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.927730][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 258.935529][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.944626][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 258.952467][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.961650][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 258.969473][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.978573][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 258.987220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.996352][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.004170][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.013267][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 259.021061][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 259.157992][ T712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.308917][ T712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.329109][ T712] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.348846][ T712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 259.365002][ T712] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 259.387504][ T712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.405959][ T712] usb 4-1: config 0 descriptor?? [ 259.446812][ T7206] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2142'. [ 259.470619][ T7206] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2142'. [ 259.815362][ T712] input: HID 0eef:72c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0EEF:72C4.0018/input/input31 [ 259.900256][ T712] hid-multitouch 0003:0EEF:72C4.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 259.957980][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 260.029885][ T712] usb 4-1: USB disconnect, device number 8 [ 260.108949][ T10] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 260.117327][ T10] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 260.135475][ T10] usb 6-1: config 127 has no interface number 0 [ 260.150341][ T10] usb 6-1: config 127 interface 57 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.168029][ T10] usb 6-1: config 127 interface 57 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.202531][ T10] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 260.217167][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.235452][ T10] usb 6-1: Product: syz [ 260.241789][ T10] usb 6-1: Manufacturer: syz [ 260.252230][ T10] usb 6-1: SerialNumber: syz [ 260.264148][ T7255] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 260.458720][ T712] usb 1-1: USB disconnect, device number 125 [ 260.477801][ T10] asix 6-1:127.57: probe with driver asix failed with error -22 [ 260.506129][ T10] usb 6-1: USB disconnect, device number 14 [ 260.554202][ T7285] GUP no longer grows the stack in syz.3.2154 (7285): 200000005000-200000008000 (200000004000) [ 260.564792][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.3.2154 Not tainted syzkaller #0 cbe66656de592a762458225806996a07df9d379c [ 260.564812][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.564820][ T7285] Call Trace: [ 260.564824][ T7285] [ 260.564829][ T7285] __dump_stack+0x21/0x30 [ 260.564910][ T7285] dump_stack_lvl+0x140/0x1c0 [ 260.564925][ T7285] ? __cfi_dump_stack_lvl+0x10/0x10 [ 260.564940][ T7285] ? find_vma+0xd3/0x120 [ 260.565018][ T7285] dump_stack+0x19/0x20 [ 260.565032][ T7285] fixup_user_fault+0x616/0x6a0 [ 260.565093][ T7285] fault_in_user_writeable+0x75/0xe0 [ 260.565158][ T7285] futex_lock_pi+0x2ed/0xa70 [ 260.565179][ T7285] ? plist_check_list+0x2a8/0x2c0 [ 260.565256][ T7285] ? __cfi_futex_lock_pi+0x10/0x10 [ 260.565271][ T7285] ? plist_del+0x3f0/0x410 [ 260.565286][ T7285] ? __kasan_check_write+0x18/0x20 [ 260.565325][ T7285] ? wake_up_q+0x10a/0x1c0 [ 260.565369][ T7285] ? __cfi_futex_wake_mark+0x10/0x10 [ 260.565380][ T7285] do_futex+0x270/0x510 [ 260.565394][ T7285] ? __cfi_do_futex+0x10/0x10 [ 260.565407][ T7285] ? __vm_munmap+0x30d/0x3d0 [ 260.565418][ T7285] __se_sys_futex+0x13c/0x320 [ 260.565432][ T7285] ? __x64_sys_futex+0x110/0x110 [ 260.565446][ T7285] ? __kasan_check_write+0x18/0x20 [ 260.565456][ T7285] __x64_sys_futex+0xe9/0x110 [ 260.565470][ T7285] x64_sys_call+0x227f/0x2ee0 [ 260.565480][ T7285] do_syscall_64+0x57/0xf0 [ 260.565516][ T7285] ? clear_bhb_loop+0x50/0xa0 [ 260.565555][ T7285] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.565567][ T7285] RIP: 0033:0x7fcab639e159 [ 260.565577][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.565587][ T7285] RSP: 002b:00007fcab71dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.565600][ T7285] RAX: ffffffffffffffda RBX: 00007fcab6625fa0 RCX: 00007fcab639e159 [ 260.565608][ T7285] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 260.565616][ T7285] RBP: 00007fcab6435024 R08: 0000000000000000 R09: 0000000000000001 [ 260.565623][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.565629][ T7285] R13: 00007fcab6626038 R14: 00007fcab6625fa0 R15: 00007ffc7867c828 [ 260.565638][ T7285] [ 260.789535][ T490] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 260.949230][ T490] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.957570][ T490] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 260.969952][ T490] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 260.979384][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.987340][ T490] usb 5-1: Product: syz [ 260.991734][ T490] usb 5-1: Manufacturer: syz [ 260.996307][ T490] usb 5-1: SerialNumber: syz [ 261.047976][ T712] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 261.098188][ T5047] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 261.200136][ T712] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 261.213292][ T490] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 261.226726][ T712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.236765][ T5047] usb 4-1: device descriptor read/64, error -71 [ 261.244709][ T712] usb 1-1: Product: syz [ 261.259138][ T712] usb 1-1: Manufacturer: syz [ 261.263839][ T712] usb 1-1: SerialNumber: syz [ 261.277657][ T712] pl2303 1-1:1.0: pl2303 converter detected [ 261.298743][ T712] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 261.305960][ T7300] .N: renamed from veth0_to_bond (while UP) [ 261.413127][ T490] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 261.425882][ T490] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 261.436652][ T36] audit: type=1400 audit(1788244837.009:795): avc: denied { ioctl } for pid=7304 comm="syz.5.2160" path="socket:[59804]" dev="sockfs" ino=59804 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.501289][ T10] usb 1-1: USB disconnect, device number 126 [ 261.517889][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 261.528003][ T5047] usb 4-1: device descriptor read/64, error -71 [ 261.548367][ T10] pl2303 1-1:1.0: device disconnected [ 261.767981][ T5047] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 261.822081][ T490] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 261.833888][ T490] usb 5-1: USB disconnect, device number 109 [ 261.897996][ T5047] usb 4-1: device descriptor read/64, error -71 [ 261.937996][ T712] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 262.069982][ T712] usb 6-1: device descriptor read/64, error -71 [ 262.137986][ T5047] usb 4-1: device descriptor read/64, error -71 [ 262.258055][ T5047] usb usb4-port1: attempt power cycle [ 262.307986][ T712] usb 6-1: device descriptor read/64, error -71 [ 262.358110][ T7338] input: syz1 as /devices/virtual/input/input33 [ 262.547987][ T712] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 262.597992][ T5047] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 262.619157][ T5047] usb 4-1: device descriptor read/8, error -71 [ 262.638051][ T490] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 262.678016][ T712] usb 6-1: device descriptor read/64, error -71 [ 262.748931][ T5047] usb 4-1: device descriptor read/8, error -71 [ 262.788105][ T490] usb 5-1: Using ep0 maxpacket: 8 [ 262.794131][ T490] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 262.802503][ T490] usb 5-1: config 0 has no interface number 0 [ 262.809898][ T490] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 262.819088][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.827093][ T490] usb 5-1: Product: syz [ 262.831433][ T490] usb 5-1: Manufacturer: syz [ 262.836033][ T490] usb 5-1: SerialNumber: syz [ 262.841166][ T490] usb 5-1: config 0 descriptor?? [ 262.927989][ T712] usb 6-1: device descriptor read/64, error -71 [ 262.987994][ T5047] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 263.018514][ T5047] usb 4-1: device descriptor read/8, error -71 [ 263.038063][ T712] usb usb6-port1: attempt power cycle [ 263.049084][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.061251][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.069682][ T7344] program syz.4.2174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.085519][ T490] usb 5-1: USB disconnect, device number 110 [ 263.148941][ T5047] usb 4-1: device descriptor read/8, error -71 [ 263.258077][ T5047] usb usb4-port1: unable to enumerate USB device [ 263.297995][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 263.377995][ T712] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 263.398923][ T712] usb 6-1: device descriptor read/8, error -71 [ 263.450138][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 263.459260][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.467234][ T10] usb 1-1: Product: syz [ 263.471538][ T10] usb 1-1: Manufacturer: syz [ 263.476106][ T10] usb 1-1: SerialNumber: syz [ 263.528931][ T712] usb 6-1: device descriptor read/8, error -71 [ 263.635801][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2179'. [ 263.647161][ T7355] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2179'. [ 263.656264][ T7355] netlink: 'syz.4.2179': attribute type 6 has an invalid length. [ 263.664225][ T7355] netlink: 'syz.4.2179': attribute type 5 has an invalid length. [ 263.672018][ T7355] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2179'. [ 263.687531][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 263.713581][ T10] usb 1-1: USB disconnect, device number 127 [ 263.768006][ T712] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 263.788930][ T712] usb 6-1: device descriptor read/8, error -71 [ 263.886725][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.897209][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.918924][ T712] usb 6-1: device descriptor read/8, error -71 [ 263.968092][ T490] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 264.028118][ T712] usb usb6-port1: unable to enumerate USB device [ 264.106425][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.115387][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.124330][ T490] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 264.132507][ T490] usb 5-1: config 0 has no interface number 0 [ 264.138994][ T490] usb 5-1: config 0 interface 41 has no altsetting 0 [ 264.147074][ T490] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 264.156285][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.164493][ T490] usb 5-1: Product: syz [ 264.168776][ T490] usb 5-1: Manufacturer: syz [ 264.173345][ T490] usb 5-1: SerialNumber: syz [ 264.178460][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 264.186423][ T490] usb 5-1: config 0 descriptor?? [ 264.287983][ T712] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 264.340155][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 264.349315][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.357324][ T10] usb 1-1: Product: syz [ 264.361787][ T10] usb 1-1: Manufacturer: syz [ 264.366524][ T10] usb 1-1: SerialNumber: syz [ 264.438923][ T712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.449883][ T712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.460463][ T712] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 264.470867][ T712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.480528][ T712] usb 4-1: config 0 descriptor?? [ 264.752094][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.752114][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.759995][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.766450][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.773113][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.779651][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.786195][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.792836][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.799522][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.806065][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.812735][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.819401][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.825895][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.832461][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.839030][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.845463][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.852081][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.858585][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.865069][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.871620][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.878198][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.884647][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.892070][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 264.905700][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.905715][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.913279][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.919817][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.926316][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 264.940062][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.940075][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.946538][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.953583][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 264.967072][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.967088][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.973632][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.980293][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 264.998034][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.998063][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.008145][ T490] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 265.027154][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.027172][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.033631][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 265.052777][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.052805][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.060082][ T36] audit: type=1400 audit(1788245096.627:796): avc: denied { read } for pid=7377 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 265.088735][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.088758][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.095354][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 265.110425][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.110442][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.117094][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.124601][ T712] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 265.138027][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.138042][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.144870][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.168518][ T712] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 265.196243][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.196261][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.215063][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.229233][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.236173][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.244098][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.251192][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.273722][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.288085][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.305840][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.320160][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set Stopping sshd: [ 265.342017][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set stopped /usr/sbin/sshd (pid 201) [ 265.362380][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set OK [ 265.378038][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set Stopping crond: [ 265.390983][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set stopped /usr/sbin/crond (pid 194) OK [ 265.404260][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.420897][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.434100][ T7374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.444890][ T712] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 265.467093][ T712] pyra 0003:1E7D:2CF6.0019: couldn't install mouse Stopping dhcpcd... [ 265.482055][ T712] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 stopped /sbin/dhcpcd (pid 148) [ 265.511974][ T712] usb 4-1: USB disconnect, device number 13 [ 265.527529][ T36] audit: type=1400 audit(1788245097.087:797): avc: denied { search } for pid=7390 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 265.688885][ T36] audit: type=1400 audit(1788245097.257:798): avc: denied { read write } for pid=7405 comm="ip" path="/dev/console" dev="rootfs" ino=1126 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 265.795467][ T36] audit: type=1400 audit(1788245097.337:799): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK Stopping iptables: [ 265.863384][ T36] audit: type=1400 audit(1788245097.337:800): avc: denied { remove_name } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK Stopping system message bus: [ 265.924438][ T36] audit: type=1400 audit(1788245097.337:801): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 266.010536][ T36] audit: type=1400 audit(1788245097.347:802): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.069921][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device done [ 266.116650][ T10] usb 1-1: USB disconnect, device number 2 [ 266.129195][ T490] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 266.148837][ T7424] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 266.148853][ T7424] rust_binder: Read failure Err(EFAULT) in pid:132 [ 266.158277][ T36] audit: type=1400 audit(1788245097.457:803): avc: denied { read write } for pid=7412 comm="iptables" path="/dev/console" dev="rootfs" ino=1126 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 266.200057][ T490] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 266.209753][ T712] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 266.240761][ T490] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 266.278650][ T7432] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2191'. [ 266.312454][ T7431] : renamed from dummy0 (while UP) [ 266.318209][ T490] usb 5-1: USB disconnect, device number 111 [ 266.344348][ T36] audit: type=1400 audit(1788245097.457:804): avc: denied { search } for pid=7412 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.387993][ T712] usb 4-1: Using ep0 maxpacket: 32 [ 266.417097][ T712] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 266.443485][ T36] audit: type=1400 audit(1788245097.457:805): avc: denied { write } for pid=7412 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.468616][ T712] usb 4-1: config 0 has no interface number 0 [ 266.504716][ T712] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.533466][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping klogd: [ 266.554254][ T36] audit: type=1400 audit(1788245097.457:806): avc: denied { add_name } for pid=7412 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.578005][ T712] usb 4-1: Product: syz [ 266.584401][ T712] usb 4-1: Manufacturer: syz [ 266.589879][ T712] usb 4-1: SerialNumber: syz [ 266.598187][ T712] usb 4-1: config 0 descriptor?? OK [ 266.613056][ T36] audit: type=1400 audit(1788245097.457:807): avc: denied { create } for pid=7412 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.634716][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 266.643771][ T712] smsc95xx v2.0.0 Stopping acpid: [ 266.659520][ T36] audit: type=1400 audit(1788245097.457:808): avc: denied { read open } for pid=7412 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=8794 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.688743][ T36] audit: type=1400 audit(1788245097.457:809): avc: denied { lock } for pid=7412 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=8794 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.712217][ T36] audit: type=1400 audit(1788245098.007:810): avc: denied { create } for pid=7443 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.732103][ T36] audit: type=1400 audit(1788245098.037:811): avc: denied { ioctl } for pid=7443 comm="syz.4.2195" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.756817][ T36] audit: type=1400 audit(1788245098.217:812): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.777705][ T490] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 266.785510][ T36] audit: type=1400 audit(1788245098.217:813): avc: denied { remove_name } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.807797][ T36] audit: type=1400 audit(1788245098.217:814): avc: denied { unlink } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.831754][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 266.840908][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.849142][ T10] usb 1-1: Product: syz [ 266.853690][ T10] usb 1-1: Manufacturer: syz [ 266.858436][ T10] usb 1-1: SerialNumber: syz [ 266.979203][ T490] usb 5-1: not running at top speed; connect to a high speed hub [ 266.987920][ T490] usb 5-1: config 2 has an invalid interface number: 199 but max is 2 [ 266.996123][ T490] usb 5-1: config 2 has an invalid interface number: 149 but max is 2 [ 267.004362][ T490] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 267.013064][ T490] usb 5-1: config 2 has an invalid interface number: 97 but max is 2 [ 267.021502][ T490] usb 5-1: config 2 has an invalid interface number: 42 but max is 2 [ 267.033265][ T490] usb 5-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 267.042296][ T490] usb 5-1: config 2 has no interface number 0 [ 267.048413][ T490] usb 5-1: config 2 has no interface number 1 [ 267.054644][ T712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 267.066172][ T490] usb 5-1: config 2 has no interface number 2 [ 267.072614][ T712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.081693][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 267.087607][ T490] usb 5-1: config 2 has no interface number 3 [ 267.094579][ T10] usb 1-1: USB disconnect, device number 3 [ 267.100555][ T490] usb 5-1: config 2 interface 149 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 267.113004][ T490] usb 5-1: config 2 interface 149 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 267.123959][ T490] usb 5-1: config 2 interface 149 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 267.135020][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 267.145791][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 267.156626][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 267.167378][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 267.178310][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 267.189142][ T490] usb 5-1: config 2 interface 149 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 267.200091][ T490] usb 5-1: config 2 interface 149 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 267.211112][ T490] usb 5-1: config 2 interface 149 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 267.221959][ T490] usb 5-1: config 2 interface 97 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 267.232933][ T490] usb 5-1: config 2 interface 97 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 267.243640][ T490] usb 5-1: config 2 interface 97 altsetting 6 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 267.263085][ T490] usb 5-1: config 2 interface 97 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 267.276938][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 267.292621][ T490] usb 5-1: config 2 interface 97 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 267.305669][ T490] usb 5-1: config 2 interface 97 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 267.326248][ T712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 267.337809][ T490] usb 5-1: config 2 interface 97 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 267.352110][ T712] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 267.368343][ T490] usb 5-1: config 2 interface 42 altsetting 146 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.384990][ T712] usb 4-1: USB disconnect, device number 14 [ 267.390969][ T7461] netlink: 'syz.5.2198': attribute type 4 has an invalid length. [ 267.402282][ T490] usb 5-1: config 2 interface 199 has no altsetting 0 [ 267.413492][ T7463] SELinux: policydb magic number 0x234e0002 does not match expected magic number 0xf97cff8c [ 267.424469][ T490] usb 5-1: config 2 interface 149 has no altsetting 0 [ 267.431273][ T490] usb 5-1: config 2 interface 97 has no altsetting 0 [ 267.439706][ T7461] netlink: 'syz.5.2198': attribute type 32 has an invalid length. [ 267.447524][ T490] usb 5-1: config 2 interface 42 has no altsetting 0 [ 267.454667][ T7463] SELinux: failed to load policy [ 267.460876][ T490] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f1.71 [ 267.473191][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.489056][ T490] usb 5-1: Product: 戥㈤鎸斾繜陭傠劶瞌躲潐於界箿璁疽界瑫韱侀⒑锞嶀旃╃偞楝凤個閮枫抚氍熽寘鋶嗎厖餀呾┏绉呴崉餆衡保錃椾牚铮办嚈釄嬧拑氘┾實绶碉洆罱烆潎楂堨獩愠冩杈侂埆銤п鈿埛銌栬獫缁涳Ж鐥氣淳鍎冸珯惆ヤ牨鈵涜綅锂傕⒈閷愳啊針懮几褰嶊埖釥弨涠焦飯插【鍕会煥闄查拺悻撮澇闆愯挵锕表彋鐪熸)錃涐洦鎿涘嗛悝儬绨囜及瀛嬩攢飒 [ 267.528011][ T5047] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.550301][ T490] usb 5-1: Manufacturer: 飙冮宫餂⑵堘靸氬偑鐖炽嚈飳栭綅韬婋閬光摓闁忈湧釈熻伩绂傞挬铏檲錀雰虫箿顕り寽娴变础寤涢搼鋪撴墎鋯嶁崡轃濠纲嶇景顑庨瘮绉儣銒堬柌瞑掕綎罴欐靠鐬愥彎顫婋〉飸囜惫銆藉懆艆毂届泿靵ゃ瓔狻氾懁瀣喃呪珒鋵ラ槀浈モ櫩鐑闺弾氇愨巵銍错櫀 [ 267.575170][ T490] usb 5-1: SerialNumber: syz OK Stopping syslogd: [ 267.701279][ T5047] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 stopped /sbin/syslogd (pid 92) OK [ 267.719741][ T5047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.737897][ T5047] usb 1-1: Product: syz [ 267.749285][ T5047] usb 1-1: Manufacturer: syz [ 267.759438][ T5047] usb 1-1: SerialNumber: syz [ 267.787901][ T490] usb 5-1: USB disconnect, device number 112 [ 267.965837][ T5047] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 267.976858][ T5047] usb 1-1: USB disconnect, device number 4 umount: can't remount debugfs read-only [ 268.117983][ T712] usb 4-1: new high-speed USB device number 15 using dummy_hcd Connection to 10.128.0.8 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read[ 268.696569][ T771] bridge_slave_1: left allmulticast mode [ 268.702999][ T771] bridge_slave_1: left promiscuous mode [ 268.711702][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.728249][ T771] bridge_slave_0: left allmulticast mode [ 268.733900][ T771] bridge_slave_0: left promiscuous mode [ 268.748038][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.859206][ T771] veth1_macvtap: left promiscuous mode [ 268.864694][ T771] veth0_vlan: left promiscuous mode [ 268.938776][ T771] ------------[ cut here ]------------ [ 268.944264][ T771] WARNING: CPU: 0 PID: 771 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 268.954309][ T771] Modules linked in: [ 268.958205][ T771] CPU: 0 UID: 0 PID: 771 Comm: kworker/u8:23 Not tainted syzkaller #0 cbe66656de592a762458225806996a07df9d379c [ 268.969937][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.980004][ T771] Workqueue: netns cleanup_net [ 268.984836][ T771] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 268.990828][ T771] Code: e8 d1 dd d5 fc 4b 83 3c 3e 00 75 19 e8 55 03 7d fc 49 81 ff f8 07 00 00 74 1b e8 47 03 7d fc 49 83 c7 08 eb c9 e8 3c 03 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 269.010475][ T771] RSP: 0018:ffffc90010017b90 EFLAGS: 00010293 [ 269.016526][ T771] RAX: ffffffff850a7404 RBX: ffff88810478c700 RCX: ffff88810bf6cc00 [ 269.024587][ T771] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888105ed07f0 [ 269.032562][ T771] RBP: ffffc90010017bb0 R08: ffffffff87d434c7 R09: 1ffffffff0fa8698 [ 269.040532][ T771] R10: dffffc0000000000 R11: fffffbfff0fa8699 R12: dffffc0000000000 [ 269.048492][ T771] R13: dffffc0000000000 R14: ffff888105ed0000 R15: 00000000000007f0 [ 269.056469][ T771] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 269.065392][ T771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.071964][ T771] CR2: 00007ffc5e130ff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 269.079933][ T771] Call Trace: [ 269.083193][ T771] [ 269.086125][ T771] cleanup_net+0x6ba/0xc90 [ 269.090556][ T771] ? __cfi_cleanup_net+0x10/0x10 [ 269.095472][ T771] ? kick_pool+0xb9/0x540 [ 269.100011][ T771] process_scheduled_works+0x7f4/0x1060 [ 269.105542][ T771] worker_thread+0xc99/0x13f0 [ 269.110245][ T771] kthread+0x2c4/0x360 [ 269.114357][ T771] ? __cfi_worker_thread+0x10/0x10 [ 269.119470][ T771] ? __cfi_kthread+0x10/0x10 [ 269.124038][ T771] ret_from_fork+0x64/0xa0 [ 269.128493][ T771] ? __cfi_kthread+0x10/0x10 [ 269.133061][ T771] ret_from_fork_asm+0x1a/0x30 [ 269.137805][ T771] [ 269.140818][ T771] ---[ end trace 0000000000000000 ]--- [ 269.146791][ T771] ------------[ cut here ]------------ [ 269.152255][ T771] WARNING: CPU: 0 PID: 771 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 269.162345][ T771] Modules linked in: [ 269.166219][ T771] CPU: 0 UID: 0 PID: 771 Comm: kworker/u8:23 Tainted: G W syzkaller #0 cbe66656de592a762458225806996a07df9d379c [ 269.179423][ T771] Tainted: [W]=WARN [ 269.183551][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.193602][ T771] Workqueue: netns cleanup_net [ 269.198381][ T771] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 269.204436][ T771] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 03 7d fc 49 81 ff f8 07 00 00 74 1b e8 f2 02 7d fc 49 83 c7 08 eb c5 e8 e7 02 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 02 7d fc 5b 41 5c 41 5e 41 [ 269.224045][ T771] RSP: 0018:ffffc90010017b90 EFLAGS: 00010293 [ 269.230133][ T771] RAX: ffffffff850a7459 RBX: ffff888105ed0800 RCX: ffff88810bf6cc00 [ 269.238293][ T771] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888105ed0808 [ 269.246258][ T771] RBP: ffffc90010017bb0 R08: ffffffff87d434c7 R09: 1ffffffff0fa8698 [ 269.254246][ T771] R10: dffffc0000000000 R11: fffffbfff0fa8699 R12: dffffc0000000000 [ 269.262240][ T771] R13: dffffc0000000000 R14: ffff888105ed0000 R15: 0000000000000008 [ 269.270213][ T771] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 269.279138][ T771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.285709][ T771] CR2: 00007ffc5e130ff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 269.293687][ T771] Call Trace: [ 269.296947][ T771] [ 269.299893][ T771] cleanup_net+0x6ba/0xc90 [ 269.304297][ T771] ? __cfi_cleanup_net+0x10/0x10 [ 269.309231][ T771] ? kick_pool+0xb9/0x540 [ 269.313550][ T771] process_scheduled_works+0x7f4/0x1060 [ 269.319115][ T771] worker_thread+0xc99/0x13f0 [ 269.323779][ T771] kthread+0x2c4/0x360 [ 269.327828][ T771] ? __cfi_worker_thread+0x10/0x10 [ 269.332935][ T771] ? __cfi_kthread+0x10/0x10 [ 269.337505][ T771] ret_from_fork+0x64/0xa0 [ 269.341927][ T771] ? __cfi_kthread+0x10/0x10 [ 269.346498][ T771] ret_from_fork_asm+0x1a/0x30 [ 269.351250][ T771] [ 269.354249][ T771] ---[ end trace 0000000000000000 ]--- Sent SIGKILL to all processes Requesting syst[ 269.366379][ T771] ------------[ cut here ]------------ em poweroff [ 269.372858][ T771] WARNING: CPU: 0 PID: 771 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 269.383366][ T771] Modules linked in: [ 269.387247][ T771] CPU: 0 UID: 0 PID: 771 Comm: kworker/u8:23 Tainted: G W syzkaller #0 cbe66656de592a762458225806996a07df9d379c [ 269.400449][ T771] Tainted: [W]=WARN [ 269.404228][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.414293][ T771] Workqueue: netns cleanup_net [ 269.419092][ T771] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 269.424620][ T771] Code: 3c 20 00 74 08 48 89 df e8 ef 9b f0 fc 48 8b 3b e8 07 8d db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 9b b7 00 cc e8 62 c1 97 fc <0f> 0b e9 b0 fd ff ff e8 56 c1 97 fc 0f 0b e9 18 fe ff ff e8 4a c1 [ 269.444235][ T771] RSP: 0018:ffffc90010017b70 EFLAGS: 00010293 [ 269.450306][ T771] RAX: ffffffff84efb5de RBX: ffff88810478c700 RCX: ffff88810bf6cc00 [ 269.458266][ T771] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810bf6cc00 [ 269.466225][ T771] RBP: ffffc90010017b98 R08: ffffffff87d434c7 R09: 1ffffffff0fa8698 [ 269.474211][ T771] R10: dffffc0000000000 R11: fffffbfff0fa8699 R12: 1ffffffff0fa83ec [ 269.482175][ T771] R13: dffffc0000000000 R14: ffff88810478d300 R15: dffffc0000000000 [ 269.490150][ T771] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 269.499111][ T771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.505675][ T771] CR2: 00007ffc5e130ff8 CR3: 000000010afe6000 CR4: 00000000003526b0 [ 269.513643][ T771] Call Trace: [ 269.516903][ T771] [ 269.519862][ T771] xfrm_net_exit+0x31/0x80 [ 269.524336][ T771] cleanup_net+0x6ba/0xc90 [ 269.528762][ T771] ? __cfi_cleanup_net+0x10/0x10 [ 269.533676][ T771] ? kick_pool+0xb9/0x540 [ 269.538000][ T771] process_scheduled_works+0x7f4/0x1060 [ 269.543523][ T771] worker_thread+0xc99/0x13f0 [ 269.548191][ T771] kthread+0x2c4/0x360 [ 269.552237][ T771] ? __cfi_worker_thread+0x10/0x10 [ 269.557324][ T771] ? __cfi_kthread+0x10/0x10 [ 269.561927][ T771] ret_from_fork+0x64/0xa0 [ 269.566327][ T771] ? __cfi_kthread+0x10/0x10 [ 269.570927][ T771] ret_from_fork_asm+0x1a/0x30 [ 269.575671][ T771] [ 269.578708][ T771] ---[ end trace 0000000000000000 ]--- [ 269.588582][ T771] bridge_slave_1: left allmulticast mode [ 269.594210][ T771] bridge_slave_1: left promiscuous mode [ 269.599790][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.607122][ T771] bridge_slave_0: left allmulticast mode [ 269.612796][ T771] bridge_slave_0: left promiscuous mode [ 269.618481][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.668841][ T771] tipc: Left network mode [ 269.673531][ T771] veth1_macvtap: left promiscuous mode [ 270.367301][ T7475] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 270.374044][ T7475] ACPI: PM: Preparing to enter system sleep state S5 [ 270.381221][ T7475] kvm: exiting hardware virtualization [ 270.386675][ T7475] reboot: Power down serialport: VM disconnected.