last executing test programs: 5.653591618s ago: executing program 3 (id=234): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xa000, 0xf0, 0x15}, 0x18) io_setup(0x66, &(0x7f00000001c0)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000002c0)='-', 0x1, 0x0, 0x0, 0x4}]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x406000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x504100, 0x1a5, 0x1c}, 0x18) r4 = fcntl$dupfd(r0, 0x0, r3) sendto$inet6(r4, 0x0, 0x0, 0x20004811, 0x0, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x20004811, 0x0, 0x0) splice(r0, &(0x7f0000000000)=0x3, r0, &(0x7f0000000040)=0x35, 0x6, 0xdee646eef9989531) (async) splice(r0, &(0x7f0000000000)=0x3, r0, &(0x7f0000000040)=0x35, 0x6, 0xdee646eef9989531) 5.556360369s ago: executing program 3 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r1 = socket(0x1e, 0x4, 0x0) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x200000, 0x200000, 0x7}) socket$unix(0x1, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000240)=0x1000007, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) setitimer(0x2, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) chdir(&(0x7f00000012c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002440)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000002480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000024c0)={0x0, 0xc5, 0x80, 0x1, 0x35e}, &(0x7f0000002540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x404, 0x42, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x10000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendfile(r0, r6, &(0x7f00000027c0)=0xe54, 0x7) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340), &(0x7f0000002380)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x1) r7 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@nested_amd_vmsave={0x183, 0x18, 0x100000000002}], 0x18}) syz_usb_connect$uac1(0x2, 0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000020732b23004000010203010902700003010480810904000000010100000a240100000a000201020904010000010200000904010101010200000924020105035403000324010405011009050109d0"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.117947506s ago: executing program 3 (id=252): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='i', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="7f240f9f", 0x4}], 0x1}}], 0x3, 0x40) sendto$inet(r0, &(0x7f0000000280)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a66b5142374cc8a67a16845b745bff74683c9d915c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0001005375abddf56331be396eaa2398ea66b92a74fd4147e826abed1ccc1cdd936d2571c3510b00000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e7480000001ebdec6811981ce6be92aea7ffb20c6fdcc97291c9af9634c31b03f18cf2d2f5be7a6a", 0xffffffffffffffc6, 0x88c1, 0x0, 0xfffffce8) 4.114465337s ago: executing program 3 (id=253): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], 0x12c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet(0x2, 0x3, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x2) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000340)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000003c0)={0x180a, 0x0, 0x1f, 0x1, 0x0, r4, 0x0, 0x1802}]) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='veth0_to_hsr\x00', 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='xfrm0\x00', 0x10) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'gretap0\x00', {0x4004}, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000001e00210000000000fcdbdf25070200000500baf04fce3a54615b23eb"], 0x20}}, 0x0) 3.841075825s ago: executing program 3 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2000000000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0x0, 0xffff71b0}, 0x1c) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.320362168s ago: executing program 2 (id=266): timerfd_create(0x4, 0x80000) syz_usb_connect(0x1, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0200000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f080000000000090507"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="347f2803074ef934770bd8a03c485dab73395c230e7723b9c9959cc6b694ff9f21eb3fca8e000000000000000000000000000000ec15a9d0805b6c3eb503cfad3383f5dc7531be83102edcf2c02567c8b12eefb3a677a0400c1e96d2e9ebed99e372715a8c299bb0cc737d39b61c0d9ab57c869c49fa2bc5c52b76191157a51e4a76e9d887893118bdab8798eaa7bca34c0a13937ff441f870e6976f728a74c8b2616a262de496037c255fd38ae9185b1acd8f58a700f7eaa7c8f1428b21b7103b336edd12b65c1aa26bdc42d28c8eb9690fbc4ddb2639c163a9a33b324d2b87d052f4a87596c56da8b87bc57119ce7477105d"]}]}) 2.392322144s ago: executing program 3 (id=278): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0), 0x11000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c00000000000000000009000000000094040100860600000001000000000000"], 0x20}}], 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)='^', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000a40)={0x7, 0xffffffffffffffff, 0xa57}) write(r4, &(0x7f0000000980)='3', 0x1) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1e, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20, 0xc010}}], 0x2, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x0, 0x0) read$hidraw(r6, &(0x7f0000000c00)=""/196, 0xc4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000200000040030410600005010203010902200001010080320904000002ffffff000705", @ANYRES16], 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000200)={0x0, 0xfffffffffffffe21, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000000c0)=[{{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000086080000000005027e0d867204ee49c09d9e3395793e4030d77be8f8563e6f1cbecfb10f93aba692a005245d3dccec8e2063bf22c1703b7d195ae6202e3c7a8b5c294cd9333f7c407502abd15628bb2d7b5e6ef7802786e4f572719606a93fa1dbe3ab7b6c5769dee357f676b577f62d6ec0f4e8714aed3afdaa0ad164b10ae7ced48e756b9e0c75b0c28556e2e5479750b123ea122e6faf058bac40877b66b8a73b438a783118a14cb7d68543f7d41dc902b64eb94d6cce5b4c8db2c11e40cd02fb92f22f94a9ab70e5"], 0x18}}], 0x1, 0x40) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf2505000000380001800d0001007564703a73797a320000000024000280080003008a000000080004007808000008000300000000000800040003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000800)={&(0x7f00000007c0)=[{&(0x7f0000000ac0)="f06f99d6ff2b8872860c67f75607097845ae5e85b462228f7b686aefe87cef88e6682f5c4ecea7b008e6442d6dfe832db06cd7062062b2024f2b84a2d8cd35a2f0715b6275fbe90d61b861a46f695cd41fa78c42db76d00bf932f52189706245045419b4424f7a9efa5a738352cd23a7ca1338cc5d053da3b7767051a93b0b0ae7531cc7a3713357412ebadef3af7a8b2bc5c4a38d9dfc0059451e4e8978f4673436e43d0b62ce4678b29f5fb9a76d68cb6a4b4c01291d40cb7aeef3db4bf703d9eb4380b0053080689f478d1db05fc3a1a69687e6441bc0c43581b0e806df62098f260cb46eac07dacaa9f816d6073dbb4d241f958b3e725530e1b9448642f65f32f4b3e557c58bc625a922d9921d77ba22e35cd54026ba6a163755bd4c346d7b32871cf57d8742412f1aefbb30020b8db7f55735be5877ce3ae515d6fdbc", 0x13f}], 0x1, 0xb, 0x0, 0x2b, 0x1, 0xc0000000000, 0x7, 0x4}) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000440), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x1, 0x0, 0x39, @remote, @mcast2={0xff, 0x3}, 0x700, 0xba08, 0xa3c, 0x4}}) 1.956454369s ago: executing program 2 (id=279): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) setns(0xc9, 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf250700"], 0x34}], 0x1, 0x0, 0x0, 0x24044090}, 0x880) 1.593202586s ago: executing program 1 (id=280): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/142, 0x8e}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) readv(r2, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f00000006c0)=""/173, 0xad}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000840)=""/103, 0x67}, {&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x7) statx(r1, &(0x7f0000000300)='./cgroup.cpu/memory.force_empty\x00', 0x7100, 0x40, &(0x7f0000000340)) tkill(0x0, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCEXCL(r4, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r3, &(0x7f0000000140)='0', 0x1) 1.4581536s ago: executing program 2 (id=281): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000004440)='./file0/../file0\x00', &(0x7f0000000100), 0x2000413, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f0000004480)="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", 0x2000, &(0x7f00000021c0)={&(0x7f0000002280)={0x50, 0xffffffffffffffda, 0x8000000000203, {0x7, 0x29, 0xa61, 0x742010a0, 0xe, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x78, 0x0, 0xa, {0x5, 0x7, 0x0, {0x4, 0x5, 0x4000020000000000, 0x7, 0x40000000000003, 0x2, 0x0, 0x35741061, 0x4000, 0xa000, 0xfffffff9, 0x0, 0x0, 0x3d, 0x12}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18) 1.391811487s ago: executing program 2 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.390664617s ago: executing program 0 (id=283): openat$dm_control(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002740)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x8040) 1.374390288s ago: executing program 0 (id=284): socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_setup_io_uring(0x156c, &(0x7f0000000000)={0x0, 0x7, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffff5d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x5f5, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x1aa}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x6, 0x30, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1a}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xb60}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x6, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xfc, 0x66, {0x7, 0x25, 0x1, 0x8, 0x9, 0x373}}}}}}}}]}}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0}) 1.321657564s ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000080)={0xaf0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x164, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x7}, {0x1}, {0x1, 0x7}, {0x3, 0x2}, {0x5}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x1}, {0x6}, {0x1}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0xb}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x3, 0x36, 0x1b, 0x30, 0x18, 0x5, 0x18, 0x9, 0x6, 0x18, 0x1f, 0x4, 0x6c, 0x5, 0x4, 0x18, 0x113e0018a8414fd4, 0x18, 0x48, 0x60, 0xb, 0xb, 0x30, 0x9, 0xb, 0x2, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x3, 0x3, 0x6, 0x30, 0xb, 0x12, 0x9, 0x6, 0x36, 0x5, 0x7b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0xebbb, 0x7, 0xf0df, 0x9, 0xbc4, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x800, 0x800, 0x101, 0x2, 0xd272, 0xff]}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa6aa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x600000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x0, 0x4, 0x100, 0x5b8f, 0xfff6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x1}, {0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x3, 0x9}, {0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x4, 0x40, 0x9, 0x7, 0x6, 0xaaa3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x2b, 0x1, 0x60, 0x30, 0xc, 0x36, 0x48, 0x2, 0x1, 0x3, 0x1, 0x36, 0x10, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6ed2, 0x5, 0x81, 0x7, 0x0, 0xb78, 0x6]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0xa}, {0x4, 0x4}, {0x2}, {0x6, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x1}, {0x6, 0x5}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0x5}, {0x1}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x17}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x48, 0x4, 0x2, 0xe, 0x18, 0x6, 0x4, 0x12, 0x1b, 0x6c, 0x4, 0x36, 0x16, 0xb, 0x60, 0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb7, 0x4, 0x5, 0x8, 0x2, 0x4, 0x97, 0x7]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0xa}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x9076b85d5b0ef92a, 0x5, 0x36, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x10, 0x0, 0xb, 0x12, 0x30, 0x56, 0x22, 0x5, 0x12, 0x5, 0x36, 0x3, 0x60, 0x24, 0x12, 0x1b, 0x60, 0x48, 0x6c, 0x18, 0x0, 0x12, 0x9, 0x44, 0x36, 0x6, 0x2, 0x1b, 0x36, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe000, 0x9a, 0x2, 0x1, 0x8d3d, 0x7ff, 0x400]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x9}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb, 0x7, 0x1c, 0x4, 0x6, 0x4, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf98, 0x8, 0x1, 0x0, 0x75a, 0xff, 0x8b56]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x9}, {0x6, 0xa}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x1}, {0x4}, {0x7, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x4, 0x3}, {0x4}, {0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0xa}, {0x4, 0x1e}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x8}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{}, {0x7, 0xa}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x7, 0x9, 0xc, 0x5, 0xfff, 0xa, 0x8]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xf9a5d2df29ab8256}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x60, 0xb90429b3b4a16394, 0x60]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x9, 0x30, 0xb, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xea43}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}]}]}, @NL80211_ATTR_TID_CONFIG={0x518, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x6, 0x5, 0x0, 0x3, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xb351, 0x5, 0x0, 0x100, 0x8, 0x57c1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb691, 0x9, 0x1, 0x8, 0x9ea, 0x0, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x3, 0xba, 0xf3f2, 0x6fc, 0xffff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0xb, 0x2, 0x3, 0x1, 0x2, 0x30, 0x1c, 0xb, 0x48, 0x48, 0x12, 0x2, 0x6, 0x18, 0x36, 0x1b, 0x48, 0x36, 0x2b, 0xb]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x6, 0x2, 0x101, 0xd, 0x800, 0xd, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b8, 0x3da, 0x6, 0x10, 0xa7d, 0x3, 0x799b, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x72, 0x0, 0xcfe, 0x0, 0x6, 0x6, 0x4]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x4}, {0x5}, {0x6, 0x3}, {0x5, 0x5}, {0x5, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x8}, {}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x7}, {0x7}, {}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0x8}, {0x4}, {0x5, 0x9}, {0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x800, 0x4, 0x8, 0x8000, 0x3, 0xfff3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x3}, {0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x7, 0x1}, {0x5}, {}, {0x3, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x2}, {}, {0x5, 0x5}, {0x5, 0x1}, {0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x4}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x2}, {0x1, 0x5}, {0x6}, {0x4, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x2}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3d8}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x12, 0xb, 0xb, 0xb, 0x18, 0x18, 0x48, 0x3, 0xb, 0x4, 0x48, 0x1b, 0x3, 0xb, 0x4, 0x9, 0x0, 0x24, 0x2, 0x6c, 0x36, 0x4, 0x0, 0x60, 0x36, 0xb, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xd50, 0x3, 0x1, 0x1, 0xb6e6, 0x9]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa26, 0xff00, 0x3d, 0x7fff, 0x2e, 0x7, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x2, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x78d, 0x6a, 0x200, 0x5, 0xfffd, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x6}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0x1}, {0x5, 0x7}, {0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x44, 0xb, 0x1b, 0x6c, 0x1b, 0x60, 0x6, 0x12, 0x2, 0x24, 0x9, 0xc, 0x4, 0x48, 0x24, 0x6, 0x48, 0x4, 0x3, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x30, 0x6c, 0x6, 0x36, 0x0, 0x6, 0x1b, 0x24, 0x9, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x2, 0x5, 0x72, 0x2, 0xb, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x8, 0x4, 0x9, 0xf56, 0x3ff, 0x8, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0x6a4e, 0xb312, 0x6, 0x4, 0x8, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x75a6, 0x5, 0x220a, 0x2, 0x2, 0x39]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x6d8, 0x7, 0xd, 0x3, 0x1ff, 0x1, 0x7]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf8, 0x9, 0x4, 0x7, 0x4, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe27c, 0x3, 0x0, 0x1, 0x9, 0x9, 0x1ff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffe, 0x6, 0x7, 0x0, 0x401, 0x10, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4a, 0xd, 0x7fff, 0x3, 0x9, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xc}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x30, 0x60, 0x48, 0x1b, 0x0, 0x3, 0x2a, 0x1, 0x6, 0x4, 0x1, 0x55, 0xb, 0xb, 0x74b7af721507ec8f, 0x48, 0x48, 0x60, 0x24, 0x1, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}]}]}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000001) r2 = signalfd4(r0, &(0x7f0000000c00)={[0xffffffffffffffff]}, 0x8, 0x80000) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) connect$tipc(r2, &(0x7f0000000c40)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x1}}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1d0, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe088}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcf29}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e00}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2119}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f194f6169178ac5eee48cc709f30fa0ffc2ee9888b46d7c001621bd6758cabcfdd"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4c040}, 0x20004000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000fc0)={'pimreg\x00', &(0x7f0000000f80)=@ethtool_rxfh={0x47, 0x6, 0x3, 0xc, 0x40, "135668", 0x7, [0xe4f4, 0x4, 0x1, 0x5, 0x2]}}) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x198b471473a11236}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001140)={'gretap0\x00', 0x9d88a40d40a47bc3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x46}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x48411) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001280)={{r4}, 0x0, 0x10, @unused=[0x8, 0x6, 0x4, 0x7], @name="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"}) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000002280)=0x2) write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x10008, 0x5, 0x10, 0x95a1, 0x10001, 0x0, 0x0, 0x8, 0x400}}, 0x50) ioctl$RTC_UIE_ON(r2, 0x7003) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8894) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000024c0)={0x2, &(0x7f0000002480)=[{0x4, 0x0, 0x1, 0x9}, {0x100, 0x10, 0x8, 0xffffffff}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000025c0)={'syztnl2\x00', &(0x7f0000002540)={'syztnl0\x00', 0x0, 0xf1cf1560f424e03f, 0x6, 0x7, 0xe569132, 0x4, @private0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7, 0x10, 0x0, 0x400000}}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002740)={&(0x7f0000002500), 0xc, &(0x7f0000002700)={&(0x7f0000002600)=@deltclass={0xf0, 0x29, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xb}, {0x7, 0xf}, {0x10, 0xd}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x34}}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_HDR={0xa, 0x3, "d06388b55285"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x5}}, @TCA_ATM_HDR={0x1a, 0x3, "2cb9c22a7dbfa2c8ee8e3ffda3dd793e3be4acd57b4d"}, @TCA_ATM_HDR={0x38, 0x3, "11e1cc24fdd7272679de5daa229a7ab4f06739cfa09606354d9aa0f9ccf5ac1fd22390fd9b26a85a96eaeda243eda83e2bb71cee"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x1c}}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xa}}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40005}, 0x20000048) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000002780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read$ublk_bdev(r2, &(0x7f00000029c0)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000003a80)={&(0x7f00000039c0), 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x14, r6, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8010) 1.2603448s ago: executing program 2 (id=286): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a03209040000010300000009211101000122150007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x4, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, "be"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x2, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9f, 0x5, 0x6, 0x20, 0x2}, 0xe1, &(0x7f0000000200)={0x5, 0xf, 0xe1, 0x4, [@generic={0xb6, 0x10, 0xa, "1cbe792bd7c3026a22a67e9acb661ce974490ba43c7378aafc62701ae0cb4feceb0a7dd3cc647948604f4ae7ddad57a101b4d9705221bef0989374e56b08b33e2d3261f2044b6ce85674095299a480504fe8b97662b573c7b295bcb513d04432cf92cf7c4234d03ee80bfeabc0d0346b72c06bb7fd70df6d6b4655fac5e0dcbbad7be2a7314eb2e22420331da124817b2f1ded2183cd9f338df8e84bf99d7b37f3ea11e062ed0a1fcdd821a6d9be6108947129"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x3, 0x1e, 0x955b, 0x29}, @ss_container_id={0x14, 0x10, 0x4, 0xbd, "6f480682eb202c98666269e4b3f5e655"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xb, 0xc733}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x459}}]}) r1 = syz_io_uring_setup(0x9, &(0x7f0000000140)={0x0, 0xd351, 0x3201, 0x3, 0x19a}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022150000000600ff0901a1018520150026ff007508950e8102c0"], 0x0}, 0x0) 715.913046ms ago: executing program 1 (id=287): r0 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x158) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x404, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004540)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002300)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x90, 0x0, 0x10001, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x8, 0xfffffffffffffff6, 0x7f, 0x1ff, 0x75, 0xfffffffe, 0x7, 0x1, 0x4000, 0xfffffff4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000004480)='./file0/file1\x00', 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002280)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004700)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000004740)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000004780)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r6}, &(0x7f0000004800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) openat$incfs(r9, &(0x7f0000004a80)='.pending_reads\x00', 0x4201, 0x4) umount2(&(0x7f00000044c0)='./file0\x00', 0x9) r10 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x4000, 0x0) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f0000004500)) ioctl$KVM_CREATE_VM(r11, 0x5385, 0x36) 698.607038ms ago: executing program 1 (id=288): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000580)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x56, 0x30, 0x29, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000980)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000001500)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001580)={0x1, 0x0, [{0x400000b0, 0x0, 0x80000002}]}) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @desc3}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000d80)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r5 = add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r6 = add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x30, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$keyring(&(0x7f00000015c0), &(0x7f0000001600)={'syz', 0x3}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @desc2}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) add_key$user(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x2}, &(0x7f0000001480)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r6, r0, r1, 0x0) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000240001002bbd7000fedbdf250100000006000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) connect$inet6(0xffffffffffffffff, &(0x7f0000001840)={0xa, 0x4e23, 0x80, @local}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 548.388894ms ago: executing program 1 (id=289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000100)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000280)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setns(0xc9, 0x0) epoll_create(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd8}], 0x1, 0x0, 0x0, 0x24044090}, 0x880) 122.296097ms ago: executing program 0 (id=290): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='hsr0\x00') getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/92, 0x5c}], 0x5, 0xffff, 0x80000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) statx(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x800, 0x80, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000001640)='./file0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001680)={0x6, 0x9a7, 0x5, 0x0, 0x4, 0x0, [{0xd9c, 0xe7, 0x751, '\x00', 0xc03}, {0x5, 0xffffffff, 0x27c70870, '\x00', 0x200}, {0x9, 0x9, 0xc0b, '\x00', 0x2806}, {0x2, 0x5, 0x4, '\x00', 0xa04}]}) stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, 0x0, 0x9c3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002880)={0x0, @broadcast, @initdev}, &(0x7f00000028c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002900)={{{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e20, 0x1ff, 0xa, 0xa0, 0x80, 0x87, r4, r3}, {0x8001, 0x8, 0xfffffffffffffff9, 0x2, 0x394, 0x4, 0xb, 0x3ff}, {0x384ecd92, 0x2, 0x46b1, 0xffff}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x3, 0x2, 0x4, 0x42c5, 0xffffffff, 0x1}}, 0xe8) lstat(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002ac0)={{{@in6=@empty, @in6=@private0, 0x4e21, 0x0, 0x4e24, 0x40, 0x2, 0x60, 0x20, 0xff, r4, r5}, {0x100000000, 0x4, 0xffffffffffffff81, 0xfffffffffffffffd, 0x2, 0xf6, 0xffffffffffffffff, 0x8}, {0x6166af51, 0x4, 0x8000000000000000, 0xfffffffffffffff1}, 0xff, 0x0, 0x1, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x4d6, 0x6c}, 0x2, @in=@empty, 0x0, 0x0, 0x1, 0x40, 0x0, 0x1, 0x7}}, 0xe8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000002bc0)={0x0, 0x2a9}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0xb}, {0xfff1, 0xe}, {0x5, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000015) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002d00), 0x22900, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000002d40)=0x7, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002d80)={@mcast1, 0x80000000, 0x1, 0xff, 0x9, 0x7, 0xbc21}, 0x20) getsockopt$SO_NETNS_COOKIE(r6, 0x1, 0x47, &(0x7f0000002dc0), &(0x7f0000002e00)=0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x88, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048015}, 0x40080) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000003000)={{0xa, 0x4e24, 0x7, @remote, 0x10000}, {0xa, 0x4e21, 0x4, @private0, 0x4}, 0x1, {[0xffffffff, 0x57, 0x0, 0x101, 0x8, 0x85, 0x562e]}}, 0x5c) r10 = syz_open_dev$mouse(&(0x7f0000003080), 0x7d, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000030c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x15f3, 0x2, 0x3, 0x11, 0x9, 0x400}, 0x20) chroot(&(0x7f0000003100)='./file0\x00') ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000003140)) 104.815979ms ago: executing program 0 (id=291): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000440)={0x0, 0x2}) chdir(&(0x7f0000000480)='./file0\x00') ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000001c0)={&(0x7f0000000180)="6a5dbf2089e5426bc81b00429b76633565c50350fa2f3361adcced0323723300835a3bc7fcc47058e7e7db1d6841e4", 0x2f}) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r0, r3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getpriority(0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000380)={0x2000000}) r6 = socket(0x10, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) setsockopt$inet_int(r4, 0x0, 0x5, 0x0, 0x0) write(r1, &(0x7f0000000280)="0dc338e90d9c72459f", 0x9) 78.364232ms ago: executing program 0 (id=292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000002740)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x8040) 52.777744ms ago: executing program 0 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 172.29µs ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x6, 0x0, &(0x7f0000000280)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0xa0541, 0x163) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 0s ago: executing program 1 (id=295): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write$binfmt_script(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80210, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x2000, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'PO', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 24.222941][ T36] audit: type=1400 audit(1792852415.250:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.226054][ T287] cgroup: Unknown subsys name 'net' [ 24.245663][ T36] audit: type=1400 audit(1792852415.250:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.272990][ T36] audit: type=1400 audit(1792852415.280:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.274465][ T287] cgroup: Unknown subsys name 'devices' [ 24.396824][ T287] cgroup: Unknown subsys name 'hugetlb' [ 24.402454][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.518213][ T36] audit: type=1400 audit(1792852415.550:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.541467][ T36] audit: type=1400 audit(1792852415.550:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.566320][ T36] audit: type=1400 audit(1792852415.550:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.581426][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.598399][ T36] audit: type=1400 audit(1792852415.640:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.617745][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.625061][ T36] audit: type=1400 audit(1792852415.640:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.658129][ T36] audit: type=1400 audit(1792852415.650:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.683691][ T36] audit: type=1400 audit(1792852415.650:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.575452][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.582531][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.589669][ T295] bridge_slave_0: entered allmulticast mode [ 25.596041][ T295] bridge_slave_0: entered promiscuous mode [ 25.603504][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.610580][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.617682][ T295] bridge_slave_1: entered allmulticast mode [ 25.623881][ T295] bridge_slave_1: entered promiscuous mode [ 25.631003][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.638087][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.645209][ T294] bridge_slave_0: entered allmulticast mode [ 25.651459][ T294] bridge_slave_0: entered promiscuous mode [ 25.658085][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.665178][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.672262][ T294] bridge_slave_1: entered allmulticast mode [ 25.678563][ T294] bridge_slave_1: entered promiscuous mode [ 25.725918][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.733074][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.740177][ T296] bridge_slave_0: entered allmulticast mode [ 25.746422][ T296] bridge_slave_0: entered promiscuous mode [ 25.752832][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.759913][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.767005][ T296] bridge_slave_1: entered allmulticast mode [ 25.773284][ T296] bridge_slave_1: entered promiscuous mode [ 25.815603][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.822666][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.829805][ T297] bridge_slave_0: entered allmulticast mode [ 25.836173][ T297] bridge_slave_0: entered promiscuous mode [ 25.845197][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.852265][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.859483][ T297] bridge_slave_1: entered allmulticast mode [ 25.865871][ T297] bridge_slave_1: entered promiscuous mode [ 25.985168][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.992241][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.999555][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.006612][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.029520][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.036598][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.043894][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.050972][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.075537][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.082630][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.089930][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.096991][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.109372][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.116437][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.123709][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.130785][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.162299][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.170171][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.177576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.184833][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.192627][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.199978][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.207348][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.214560][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.238908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.245972][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.253458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.260529][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.275958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.282993][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.293174][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.300246][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.317500][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.324559][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.332101][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.339191][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.353968][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.361018][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.376194][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.383252][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.402490][ T294] veth0_vlan: entered promiscuous mode [ 26.423020][ T297] veth0_vlan: entered promiscuous mode [ 26.428998][ T294] veth1_macvtap: entered promiscuous mode [ 26.457301][ T297] veth1_macvtap: entered promiscuous mode [ 26.489394][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.504613][ T295] veth0_vlan: entered promiscuous mode [ 26.535793][ T295] veth1_macvtap: entered promiscuous mode [ 26.553999][ T296] veth0_vlan: entered promiscuous mode [ 26.571865][ T296] veth1_macvtap: entered promiscuous mode [ 26.661833][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.694262][ T324] FAULT_INJECTION: forcing a failure. [ 26.694262][ T324] name failslab, interval 1, probability 0, space 0, times 1 [ 26.707304][ T324] CPU: 0 UID: 0 PID: 324 Comm: syz.3.5 Not tainted syzkaller #0 790d506eeb1243e613a7e15525cb861d28cb7486 [ 26.707338][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.707361][ T324] Call Trace: [ 26.707369][ T324] [ 26.707377][ T324] __dump_stack+0x21/0x30 [ 26.707418][ T324] dump_stack_lvl+0x140/0x1c0 [ 26.707453][ T324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.707489][ T324] dump_stack+0x19/0x20 [ 26.707522][ T324] should_fail_ex+0x3c2/0x510 [ 26.707543][ T324] should_failslab+0xac/0x100 [ 26.707563][ T324] kmem_cache_alloc_noprof+0x42/0x410 [ 26.707591][ T324] ? __proc_create+0x535/0xb40 [ 26.707621][ T324] __proc_create+0x535/0xb40 [ 26.707649][ T324] ? proc_symlink+0x2d0/0x2d0 [ 26.707676][ T324] ? proc_register+0x595/0x780 [ 26.707704][ T324] proc_create_reg+0x9a/0x120 [ 26.707732][ T324] proc_create_net_single+0x94/0x170 [ 26.707768][ T324] ? __cfi_can_rcvlist_proc_show+0x10/0x10 [ 26.707800][ T324] ? __cfi_proc_create_net_single+0x10/0x10 [ 26.707829][ T324] ? _proc_mkdir+0x122/0x150 [ 26.707857][ T324] can_init_proc+0x15d/0x370 [ 26.707886][ T324] can_pernet_init+0x2c5/0x4c0 [ 26.707916][ T324] ops_init+0x302/0x5d0 [ 26.707935][ T324] ? __kasan_check_write+0x18/0x20 [ 26.707962][ T324] ? rwsem_read_trylock+0x275/0x5a0 [ 26.707986][ T324] setup_net+0x227/0x9b0 [ 26.708015][ T324] ? copy_net_ns+0xa20/0xa20 [ 26.708043][ T324] ? down_read_killable+0x7f/0x100 [ 26.708071][ T324] ? __cfi_down_read_killable+0x10/0x10 [ 26.708100][ T324] copy_net_ns+0x4fc/0xa20 [ 26.708128][ T324] create_new_namespaces+0x390/0x6f0 [ 26.708149][ T324] unshare_nsproxy_namespaces+0x124/0x180 [ 26.708169][ T324] ksys_unshare+0x4f9/0x920 [ 26.708197][ T324] ? mntput+0x63/0xd0 [ 26.708222][ T324] ? __cfi_ksys_unshare+0x10/0x10 [ 26.708251][ T324] ? __kasan_check_write+0x18/0x20 [ 26.708283][ T324] __x64_sys_unshare+0x3c/0x50 [ 26.708312][ T324] x64_sys_call+0x2998/0x2ee0 [ 26.708333][ T324] do_syscall_64+0x57/0xf0 [ 26.708353][ T324] ? clear_bhb_loop+0x50/0xa0 [ 26.708380][ T324] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.708406][ T324] RIP: 0033:0x7efd2bf9f559 [ 26.708434][ T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.708453][ T324] RSP: 002b:00007efd2cdff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 26.708484][ T324] RAX: ffffffffffffffda RBX: 00007efd2c225fa0 RCX: 00007efd2bf9f559 [ 26.708499][ T324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 26.708513][ T324] RBP: 00007efd2c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 26.708527][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.708540][ T324] R13: 00007efd2c226038 R14: 00007efd2c225fa0 R15: 00007ffc4e770f88 [ 26.708558][ T324] [ 27.004905][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.123021][ T330] 9pnet_fd: Insufficient options for proto=fd [ 27.145701][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.164959][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 27.171320][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.188180][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.198668][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.207870][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.218110][ T310] usb 1-1: config 0 descriptor?? [ 27.227462][ T310] hub 1-1:0.0: USB hub found [ 27.314840][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 27.322270][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.335649][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.354903][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.363963][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.374311][ T9] usb 3-1: config 0 descriptor?? [ 27.386095][ T9] hub 3-1:0.0: USB hub found [ 27.427054][ T310] hub 1-1:0.0: 1 port detected [ 27.588764][ T9] hub 3-1:0.0: 1 port detected [ 27.632979][ T310] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 27.645765][ T310] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 27.655057][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 27.661063][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 27.676012][ T340] netlink: 'syz.1.9': attribute type 11 has an invalid length. [ 27.683647][ T340] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.9'. [ 27.696555][ T310] usb 1-1: USB disconnect, device number 2 [ 27.802302][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.810915][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.846400][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 27.853493][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 27.862327][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 27.868461][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.895210][ T9] usb 3-1: USB disconnect, device number 2 [ 28.162681][ T350] TCP: TCP_TX_DELAY enabled [ 28.234491][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.255225][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 28.352803][ T352] tipc: MTU too low for tipc bearer [ 28.461667][ T370] 9pnet_fd: Insufficient options for proto=fd [ 28.594869][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.756130][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.766392][ T9] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 28.781371][ T9] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 28.785202][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.790969][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.806330][ T9] usb 1-1: Product: syz [ 28.810519][ T9] usb 1-1: Manufacturer: syz [ 28.815323][ T9] usb 1-1: SerialNumber: syz [ 28.821802][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 28.831055][ T9] scsi host1: usb-storage 1-1:1.0 [ 28.944922][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.964855][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 28.971165][ T310] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.979584][ T310] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.988259][ T310] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.997252][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.006961][ T310] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.016734][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.028760][ T9] usb 1-1: USB disconnect, device number 3 [ 29.030099][ T310] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 29.044602][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.053328][ T310] usb 4-1: config 0 descriptor?? [ 29.106265][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.114348][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 29.122931][ T311] usb 3-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 29.133161][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.143341][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 29.152433][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.160517][ T311] usb 3-1: Product: syz [ 29.164714][ T311] usb 3-1: Manufacturer: syz [ 29.169363][ T311] usb 3-1: SerialNumber: syz [ 29.177120][ T311] usb 3-1: selecting invalid altsetting 1 [ 29.183056][ T311] usb 3-1: unit 6 not found! [ 29.259932][ T310] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 29.461447][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 29.461473][ T36] audit: type=1400 audit(1792852420.490:150): avc: denied { read write } for pid=377 comm="syz.3.20" name="lp0" dev="devtmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 29.490858][ T36] audit: type=1400 audit(1792852420.490:151): avc: denied { open } for pid=377 comm="syz.3.20" path="/dev/usb/lp0" dev="devtmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 29.516021][ T36] audit: type=1400 audit(1792852420.490:152): avc: denied { create } for pid=377 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 29.525763][ T66] usb 4-1: USB disconnect, device number 2 [ 29.540264][ T36] audit: type=1400 audit(1792852420.490:153): avc: denied { write } for pid=377 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 29.564855][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.573031][ T66] usblp0: removed [ 29.589104][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.601400][ T311] usb 3-1: USB disconnect, device number 3 [ 29.629376][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.726216][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.735502][ T9] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 29.743951][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.754192][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.763215][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 29.774035][ T9] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 29.785537][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 29.796369][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 29.806067][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 29.820873][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 29.829963][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.838044][ T9] usb 2-1: Product: syz [ 29.842274][ T9] usb 2-1: Manufacturer: syz [ 29.846939][ T9] usb 2-1: SerialNumber: syz [ 29.856058][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.004855][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 30.011213][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.022194][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.032078][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 30.041165][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.053918][ T310] usb 1-1: config 0 descriptor?? [ 30.060873][ T310] hub 1-1:0.0: USB hub found [ 30.065780][ T9] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 30.079193][ T36] audit: type=1400 audit(1792852421.110:154): avc: denied { bpf } for pid=399 comm="syz.3.24" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.109524][ T9] usb 2-1: USB disconnect, device number 2 [ 30.140141][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.162315][ T407] 9pnet_fd: Insufficient options for proto=fd [ 30.186984][ T36] audit: type=1400 audit(1792852421.220:155): avc: denied { mmap_zero } for pid=408 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 30.208531][ T36] audit: type=1400 audit(1792852421.220:156): avc: denied { read } for pid=408 comm="syz.3.27" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.237159][ T36] audit: type=1400 audit(1792852421.220:157): avc: denied { open } for pid=408 comm="syz.3.27" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.263262][ T310] hub 1-1:0.0: 1 port detected [ 30.264208][ T36] audit: type=1400 audit(1792852421.220:158): avc: denied { ioctl } for pid=408 comm="syz.3.27" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.298126][ T36] audit: type=1400 audit(1792852421.330:159): avc: denied { ioctl } for pid=410 comm="syz.3.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4119 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.469349][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.478053][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.505776][ T310] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 30.512198][ T310] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 30.520988][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 30.527008][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.555204][ T310] usb 1-1: USB disconnect, device number 4 [ 30.591679][ T427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=427 comm=syz.1.32 [ 30.604311][ T427] netlink: 80 bytes leftover after parsing attributes in process `syz.1.32'. [ 31.116664][ T437] 9pnet_fd: Insufficient options for proto=fd [ 31.136886][ T439] netlink: 'syz.0.36': attribute type 27 has an invalid length. [ 31.289432][ T318] udevd[318]: symlink '../../loop0' '/dev/disk/by-diskseq/53.tmp-b7:0' failed: Read-only file system [ 31.304512][ T318] udevd[318]: symlink '../../loop0' '/dev/disk/by-diskseq/53.tmp-b7:0' failed: Read-only file system [ 31.424896][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.574845][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 31.581431][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.593113][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.603419][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.614345][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.624090][ T310] usb 4-1: config 0 descriptor?? [ 31.631239][ T310] hub 4-1:0.0: USB hub found [ 31.831418][ T310] hub 4-1:0.0: 1 port detected [ 31.964870][ T387] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.034356][ T310] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 32.045710][ T310] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 32.054886][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 32.060869][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.077129][ T318] udevd[318]: symlink '../../loop0' '/dev/disk/by-diskseq/53.tmp-b7:0' failed: Read-only file system [ 32.094845][ T387] usb 2-1: device descriptor read/64, error -71 [ 32.105800][ T310] usb 4-1: USB disconnect, device number 3 [ 32.112265][ T318] udevd[318]: symlink '../../loop0' '/dev/disk/by-diskseq/53.tmp-b7:0' failed: Read-only file system [ 32.157429][ T463] 9pnet_fd: Insufficient options for proto=fd [ 32.334849][ T387] usb 2-1: device descriptor read/64, error -71 [ 32.334849][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.494974][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 32.501281][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.514507][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.524326][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.533461][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.542630][ T9] usb 3-1: config 0 descriptor?? [ 32.549865][ T9] hub 3-1:0.0: USB hub found [ 32.584855][ T387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.714861][ T387] usb 2-1: device descriptor read/64, error -71 [ 32.749387][ T9] hub 3-1:0.0: 1 port detected [ 32.914867][ T310] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.953697][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.955900][ T387] usb 2-1: device descriptor read/64, error -71 [ 32.962874][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.026518][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 33.033489][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 33.042426][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 33.048464][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.065617][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 33.074151][ T310] usb 4-1: config index 0 descriptor too short (expected 165, got 161) [ 33.082488][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.085934][ T9] usb 3-1: USB disconnect, device number 4 [ 33.092919][ T387] usb usb2-port1: attempt power cycle [ 33.104564][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.113507][ T310] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 33.122585][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.332824][ T310] usb 4-1: string descriptor 0 read error: -71 [ 33.339713][ T310] uvcvideo 4-1:1.0: Found Unit with invalid ID 0 [ 33.346240][ T310] usb 4-1: Found UVC 1.00 device (0000:0000) [ 33.353180][ T310] usb 4-1: No valid video chain found. [ 33.359468][ T310] usb 4-1: USB disconnect, device number 4 [ 33.397106][ T490] 9pnet_fd: Insufficient options for proto=fd [ 33.434898][ T387] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.465852][ T387] usb 2-1: device descriptor read/8, error -71 [ 33.603151][ T387] usb 2-1: device descriptor read/8, error -71 [ 33.627285][ T494] usb usb1: usbfs: process 494 (syz.2.54) did not claim interface 16 before use [ 33.751245][ T501] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.853876][ T387] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.896964][ T387] usb 2-1: device descriptor read/8, error -71 [ 34.025909][ T387] usb 2-1: device descriptor read/8, error -71 [ 34.114862][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.135146][ T387] usb usb2-port1: unable to enumerate USB device [ 34.264860][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 34.271202][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.282163][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.291933][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.301006][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.309742][ T310] usb 4-1: config 0 descriptor?? [ 34.316072][ T310] hub 4-1:0.0: USB hub found [ 34.516757][ T310] hub 4-1:0.0: 1 port detected [ 34.724753][ T310] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 34.731205][ T310] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 34.739999][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 34.745989][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.765174][ T310] usb 4-1: USB disconnect, device number 5 [ 34.837553][ T522] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 34.852950][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 34.852965][ T36] audit: type=1400 audit(1792852425.880:185): avc: denied { unlink } for pid=517 comm="syz.1.61" name="#1" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.884505][ T36] audit: type=1400 audit(1792852425.910:186): avc: denied { mount } for pid=517 comm="syz.1.61" name="/" dev="overlay" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.247445][ T36] audit: type=1400 audit(1792852426.280:187): avc: denied { read } for pid=524 comm="syz.3.62" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.271696][ T525] overlayfs: upper fs does not support tmpfile. [ 35.279281][ T525] overlayfs: upper fs does not support tmpfile. [ 35.292555][ T36] audit: type=1400 audit(1792852426.280:188): avc: denied { open } for pid=524 comm="syz.3.62" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.316212][ T36] audit: type=1400 audit(1792852426.300:189): avc: denied { ioctl } for pid=524 comm="syz.3.62" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.342813][ T36] audit: type=1400 audit(1792852426.300:190): avc: denied { write } for pid=524 comm="syz.3.62" name="/" dev="incremental-fs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.365579][ T36] audit: type=1400 audit(1792852426.300:191): avc: denied { add_name } for pid=524 comm="syz.3.62" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.386101][ T36] audit: type=1400 audit(1792852426.300:192): avc: denied { create } for pid=524 comm="syz.3.62" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.406051][ T36] audit: type=1400 audit(1792852426.300:193): avc: denied { associate } for pid=524 comm="syz.3.62" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.433337][ T36] audit: type=1400 audit(1792852426.300:194): avc: denied { mounton } for pid=524 comm="syz.3.62" path="/18/file0/bus" dev="incremental-fs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.584932][ T348] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.665066][ T533] 9pnet_fd: Insufficient options for proto=fd [ 35.724861][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.744840][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 35.765216][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.776139][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.795076][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.804150][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.812927][ T348] usb 4-1: config 0 descriptor?? [ 35.825410][ T348] hub 4-1:0.0: USB hub found [ 35.874866][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 35.881140][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.904841][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.914754][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.923859][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.936251][ T9] usb 3-1: config 0 descriptor?? [ 35.946233][ T9] hub 3-1:0.0: USB hub found [ 36.023344][ T348] hub 4-1:0.0: 1 port detected [ 36.143052][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 36.228715][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.239793][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.306182][ T348] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 36.319056][ T348] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 36.327798][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 36.333749][ T348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.365142][ T348] usb 4-1: USB disconnect, device number 6 [ 36.544870][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 36.551765][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.575144][ T9] usb 3-1: USB disconnect, device number 5 [ 36.849467][ T560] 9pnet_fd: Insufficient options for proto=fd [ 37.154141][ T574] 8021q: VLANs not supported on lo [ 37.354864][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.454864][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.505872][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 37.514876][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 37.523908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.534851][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.604856][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 37.611038][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.622023][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.631786][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.640883][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.649485][ T10] usb 4-1: config 0 descriptor?? [ 37.657754][ T10] hub 4-1:0.0: USB hub found [ 37.684837][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 37.691284][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.702251][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.712033][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.721134][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.729884][ T310] usb 1-1: config 0 descriptor?? [ 37.736212][ T310] hub 1-1:0.0: USB hub found [ 37.739217][ T9] usb 2-1: USB disconnect, device number 7 [ 37.856611][ T10] hub 4-1:0.0: 1 port detected [ 37.936840][ T310] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 38.065552][ T583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.074272][ T583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.117223][ T596] 9pnet_fd: Insufficient options for proto=fd [ 38.136068][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 38.142934][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 38.152954][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 38.159678][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 38.195190][ T10] usb 4-1: USB disconnect, device number 7 [ 38.352054][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 38.358248][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.394925][ T310] usb 1-1: USB disconnect, device number 5 [ 38.734860][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.904876][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 38.911143][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 38.924838][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.937058][ T10] usb 3-1: config 0 has no interface number 0 [ 38.945916][ T10] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 38.963634][ T635] 9pnet_fd: Insufficient options for proto=fd [ 38.965545][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.984830][ T10] usb 3-1: Product: syz [ 38.989026][ T10] usb 3-1: Manufacturer: syz [ 38.993638][ T10] usb 3-1: SerialNumber: syz [ 39.015615][ T10] usb 3-1: config 0 descriptor?? [ 39.025611][ T10] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 39.031998][ T10] usb 3-1: No valid video chain found. [ 39.222882][ T310] usb 3-1: USB disconnect, device number 6 [ 39.684845][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.864878][ T310] usb 2-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 39.873799][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.884348][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 34 [ 39.902183][ T310] usb 2-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 39.911591][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.014886][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 40.089209][ T675] 9pnet_fd: Insufficient options for proto=fd [ 40.135629][ T66] usb 2-1: USB disconnect, device number 8 [ 40.165598][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 40.178593][ T10] usb 3-1: config 6 has an invalid interface number: 6 but max is 0 [ 40.194838][ T10] usb 3-1: config 6 has no interface number 0 [ 40.203185][ T10] usb 3-1: config 6 interface 6 has no altsetting 0 [ 40.215906][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 40.226277][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.251419][ T10] usb 3-1: Product: syz [ 40.255723][ T10] usb 3-1: Manufacturer: syz [ 40.260368][ T10] usb 3-1: SerialNumber: syz [ 40.401404][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 40.401422][ T36] audit: type=1400 audit(1792852431.430:221): avc: denied { validate_trans } for pid=679 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.479702][ T10] uvcvideo 3-1:6.6: Found Unit with invalid ID 0 [ 40.486644][ T10] usb 3-1: Found UVC 0.00 device syz (174f:8a12) [ 40.493081][ T10] usb 3-1: No valid video chain found. [ 40.502056][ T10] usb 3-1: USB disconnect, device number 7 [ 40.625746][ T36] audit: type=1400 audit(1792852431.660:222): avc: denied { read } for pid=683 comm="syz.0.113" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.654368][ T36] audit: type=1400 audit(1792852431.660:223): avc: denied { open } for pid=683 comm="syz.0.113" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.678360][ T66] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.688506][ T36] audit: type=1400 audit(1792852431.660:224): avc: denied { ioctl } for pid=683 comm="syz.0.113" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.713749][ T36] audit: type=1400 audit(1792852431.720:225): avc: denied { relabelfrom } for pid=686 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.733407][ T36] audit: type=1400 audit(1792852431.720:226): avc: denied { relabelto } for pid=686 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.824977][ T699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.116'. [ 40.834847][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 40.845775][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 199, changing to 11 [ 40.857059][ T66] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 40.867426][ T66] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 40.878502][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.887610][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.895835][ T66] usb 4-1: Product: syz [ 40.900016][ T66] usb 4-1: Manufacturer: П [ 40.904543][ T66] usb 4-1: SerialNumber: syz [ 40.986579][ T36] audit: type=1400 audit(1792852432.020:227): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.007459][ T710] 9pnet_fd: Insufficient options for proto=fd [ 41.314755][ T66] cdc_ncm 4-1:1.0: bind() failure [ 41.324879][ T66] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 41.336452][ T66] cdc_ncm 4-1:1.1: bind() failure [ 41.348512][ T66] usb 4-1: USB disconnect, device number 8 [ 41.423271][ T36] audit: type=1400 audit(1792852432.450:228): avc: denied { ioctl } for pid=716 comm="syz.2.122" path="socket:[7319]" dev="sockfs" ino=7319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.424375][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 41.447669][ T36] audit: type=1400 audit(1792852432.450:229): avc: denied { connect } for pid=716 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.475791][ T36] audit: type=1400 audit(1792852432.450:230): avc: denied { write } for pid=716 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.572928][ T726] syzkaller0: entered promiscuous mode [ 41.578489][ T726] syzkaller0: entered allmulticast mode [ 41.584733][ T726] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 41.866333][ T740] devpts: called with bogus options [ 41.868960][ T742] 9pnet_fd: Insufficient options for proto=fd [ 42.037369][ T762] devtmpfs: Unknown parameter 'rootcontextó nª¥mµÆŸŸ¬–2vòaÌ' [ 42.324869][ T387] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.476002][ T387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.487051][ T387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.497040][ T387] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 42.506264][ T387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.516636][ T387] usb 2-1: config 0 descriptor?? [ 42.554875][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.716158][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.724685][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 42.730955][ T387] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x2 [ 42.737092][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 42.742036][ T387] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 6/7 [ 42.753246][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.758934][ T387] pyra 0003:1E7D:2CF6.0002: parse failed [ 42.766275][ T10] usb 4-1: Product: syz [ 42.772153][ T387] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22 [ 42.776017][ T10] usb 4-1: Manufacturer: syz [ 42.789739][ T10] usb 4-1: SerialNumber: syz [ 42.795477][ T780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 42.804845][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.925193][ T387] usb 2-1: USB disconnect, device number 9 [ 42.965848][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.976040][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 42.990246][ T9] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 42.999350][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.007395][ T9] usb 3-1: Product: syz [ 43.012098][ T9] usb 3-1: Manufacturer: syz [ 43.016984][ T9] usb 3-1: SerialNumber: syz [ 43.022397][ T10] usb 4-1: invalid MIDI out EP 0 [ 43.030086][ T9] usb 3-1: unsupported MDLM descriptors [ 43.038264][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.048868][ T10] usb 4-1: USB disconnect, device number 9 [ 43.060646][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.154886][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.229972][ T10] usb 3-1: USB disconnect, device number 8 [ 43.305893][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 43.315653][ T66] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 43.326811][ T66] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 43.335899][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.343930][ T66] usb 1-1: Product: syz [ 43.348131][ T66] usb 1-1: Manufacturer: syz [ 43.352820][ T66] usb 1-1: SerialNumber: syz [ 43.524421][ T807] 9pnet_fd: Insufficient options for proto=fd [ 43.555254][ T811] ======================================================= [ 43.555254][ T811] WARNING: The mand mount option has been deprecated and [ 43.555254][ T811] and is ignored by this kernel. Remove the mand [ 43.555254][ T811] option from the mount to silence this warning. [ 43.555254][ T811] ======================================================= [ 43.576698][ T812] overlayfs: overlapping lowerdir path [ 43.592793][ T811] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 43.626798][ T66] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 43.656402][ T809] ip6gretap0: entered promiscuous mode [ 43.662160][ T809] ip6gretap0: entered allmulticast mode [ 43.794338][ T832] netlink: 'syz.3.158': attribute type 29 has an invalid length. [ 43.817633][ T834] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=834 comm=syz.3.159 [ 43.831422][ T836] netlink: 'syz.3.159': attribute type 2 has an invalid length. [ 43.839557][ T801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.849960][ T801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.878276][ T66] usb 1-1: USB disconnect, device number 6 [ 43.884352][ T840] 9pnet_fd: Insufficient options for proto=fd [ 43.893455][ T66] usblp0: removed [ 43.956654][ T844] 9pnet_fd: Insufficient options for proto=fd [ 44.224854][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.374847][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 44.381213][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.392203][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.402019][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.411147][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.425051][ T10] usb 3-1: config 0 descriptor?? [ 44.432888][ T852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 44.437010][ T10] hub 3-1:0.0: USB hub found [ 44.545307][ T856] random: crng reseeded on system resumption [ 44.589136][ T858] fuse: Bad value for 'fd' [ 44.634010][ T10] hub 3-1:0.0: 1 port detected [ 44.664861][ T387] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 44.699515][ T863] 9pnet_fd: Insufficient options for proto=fd [ 44.804891][ T387] usb 1-1: device descriptor read/64, error -71 [ 44.840092][ T846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.848679][ T846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.857529][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 44.863997][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 44.872891][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 44.878935][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.905257][ T10] usb 3-1: USB disconnect, device number 9 [ 45.044883][ T311] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 45.052558][ T387] usb 1-1: device descriptor read/64, error -71 [ 45.206064][ T311] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 45.214363][ T311] usb 2-1: config 0 has no interface number 0 [ 45.222003][ T311] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 45.231140][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.239237][ T311] usb 2-1: Product: syz [ 45.243447][ T311] usb 2-1: Manufacturer: syz [ 45.248199][ T311] usb 2-1: SerialNumber: syz [ 45.253359][ T311] usb 2-1: config 0 descriptor?? [ 45.304846][ T387] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 45.418861][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 45.418879][ T36] audit: type=1400 audit(1792852436.450:265): avc: denied { setopt } for pid=877 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.444754][ T36] audit: type=1400 audit(1792852436.450:266): avc: denied { bind } for pid=877 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.464464][ T387] usb 1-1: device descriptor read/64, error -71 [ 45.471934][ T878] futex_wake_op: syz.2.177 tries to shift op by 144; fix this program [ 45.480312][ T36] audit: type=1326 audit(1792852436.510:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.2.177" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b6b9f559 code=0x0 [ 45.665212][ T36] audit: type=1400 audit(1792852436.700:268): avc: denied { setopt } for pid=868 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.688453][ T36] audit: type=1400 audit(1792852436.720:269): avc: denied { ioctl } for pid=883 comm="syz.3.178" path="socket:[8676]" dev="sockfs" ino=8676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.714388][ T36] audit: type=1400 audit(1792852436.720:270): avc: denied { ioctl } for pid=883 comm="syz.3.178" path="socket:[7984]" dev="sockfs" ino=7984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.724930][ T387] usb 1-1: device descriptor read/64, error -71 [ 45.819056][ T890] 9pnet_fd: Insufficient options for proto=fd [ 45.855072][ T387] usb usb1-port1: attempt power cycle [ 46.086885][ T311] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.097119][ T311] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 46.107559][ T311] asix 2-1:0.251: probe with driver asix failed with error -71 [ 46.116114][ T311] usb 2-1: USB disconnect, device number 10 [ 46.144847][ T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.194921][ T387] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 46.216035][ T387] usb 1-1: device descriptor read/8, error -71 [ 46.296252][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.306456][ T310] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.321029][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 46.330142][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 46.338178][ T310] usb 4-1: Product: syz [ 46.342357][ T310] usb 4-1: Manufacturer: syz [ 46.348756][ T387] usb 1-1: device descriptor read/8, error -71 [ 46.355593][ T310] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 46.364514][ T310] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 46.371179][ T310] usb 4-1: No streaming interface found for terminal 2. [ 46.494869][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.606572][ T387] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 46.625278][ T36] audit: type=1400 audit(1792852437.660:271): avc: denied { set_context_mgr } for pid=898 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 46.664260][ T36] audit: type=1400 audit(1792852437.690:272): avc: denied { map } for pid=898 comm="syz.1.184" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.671189][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 46.671358][ T387] usb 1-1: device descriptor read/8, error -71 [ 46.699796][ T899] rust_binder: 898:899 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 46.702403][ T36] audit: type=1400 audit(1792852437.740:273): avc: denied { write } for pid=898 comm="syz.1.184" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.708550][ T899] rust_binder: Write failure EINVAL in pid:166 [ 46.739916][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.750855][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.767004][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.784868][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.800706][ T45] usb 3-1: config 0 descriptor?? [ 46.806809][ T45] hub 3-1:0.0: USB hub found [ 46.825848][ T387] usb 1-1: device descriptor read/8, error -71 [ 46.935003][ T387] usb usb1-port1: unable to enumerate USB device [ 46.999990][ T310] usb 4-1: USB disconnect, device number 10 [ 47.010065][ T45] hub 3-1:0.0: 1 port detected [ 47.215301][ T896] syz.2.183 uses obsolete (PF_INET,SOCK_PACKET) [ 47.222683][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 47.230009][ T45] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 47.236408][ T45] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 47.245169][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 47.251137][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.275191][ T45] usb 3-1: USB disconnect, device number 10 [ 47.727452][ T912] 9pnet_fd: Insufficient options for proto=fd [ 47.758309][ T916] FAULT_INJECTION: forcing a failure. [ 47.758309][ T916] name failslab, interval 1, probability 0, space 0, times 0 [ 47.764909][ T310] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 47.771077][ T916] CPU: 0 UID: 0 PID: 916 Comm: syz.1.191 Not tainted syzkaller #0 790d506eeb1243e613a7e15525cb861d28cb7486 [ 47.771186][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.771235][ T916] Call Trace: [ 47.771249][ T916] [ 47.771270][ T916] __dump_stack+0x21/0x30 [ 47.771370][ T916] dump_stack_lvl+0x140/0x1c0 [ 47.771454][ T916] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.771545][ T916] dump_stack+0x19/0x20 [ 47.771638][ T916] should_fail_ex+0x3c2/0x510 [ 47.771704][ T916] ? sk_prot_alloc+0x104/0x3a0 [ 47.771768][ T916] should_failslab+0xac/0x100 [ 47.771824][ T916] __kmalloc_noprof+0x69/0x510 [ 47.771895][ T916] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 47.771953][ T916] ? sk_prot_alloc+0x104/0x3a0 [ 47.772021][ T916] sk_prot_alloc+0x104/0x3a0 [ 47.772076][ T916] sk_alloc+0x40/0x590 [ 47.772143][ T916] netlink_create+0x3d0/0x630 [ 47.772222][ T916] __sock_create+0x3a5/0x810 [ 47.772281][ T916] __sys_socket+0xe1/0x1c0 [ 47.772343][ T916] __x64_sys_socket+0x7e/0x90 [ 47.772401][ T916] x64_sys_call+0x2608/0x2ee0 [ 47.772440][ T916] do_syscall_64+0x57/0xf0 [ 47.772530][ T916] ? clear_bhb_loop+0x50/0xa0 [ 47.772618][ T916] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.772696][ T916] RIP: 0033:0x7f4b8599f559 [ 47.772742][ T916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.772785][ T916] RSP: 002b:00007f4b868c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 47.772847][ T916] RAX: ffffffffffffffda RBX: 00007f4b85c25fa0 RCX: 00007f4b8599f559 [ 47.772888][ T916] RDX: 000000000000000f RSI: 0000000000000003 RDI: 0000000000000010 [ 47.772920][ T916] RBP: 00007f4b85a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 47.772981][ T916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.773019][ T916] R13: 00007f4b85c26038 R14: 00007f4b85c25fa0 R15: 00007ffc6782a468 [ 47.773063][ T916] [ 47.774174][ T36] audit: type=1400 audit(1792852438.800:274): avc: denied { mount } for pid=915 comm="syz.1.191" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.844972][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.085742][ T310] usb 4-1: Invalid ep0 maxpacket: 32 [ 48.158870][ T45] usb 1-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 48.169333][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.183071][ T45] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 48.192145][ T45] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 48.200239][ T45] usb 1-1: Manufacturer: syz [ 48.205472][ T45] usb 1-1: config 0 descriptor?? [ 48.211403][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 48.218865][ T310] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 48.295240][ T387] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.374978][ T310] usb 4-1: Invalid ep0 maxpacket: 32 [ 48.380411][ T310] usb usb4-port1: attempt power cycle [ 48.404884][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.444851][ T387] usb 2-1: Using ep0 maxpacket: 32 [ 48.451273][ T387] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 48.464153][ T387] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 48.473256][ T387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.481303][ T387] usb 2-1: Product: syz [ 48.485518][ T387] usb 2-1: Manufacturer: syz [ 48.490137][ T387] usb 2-1: SerialNumber: syz [ 48.495438][ T387] usb 2-1: config 0 descriptor?? [ 48.501413][ T387] usb 2-1: bad CDC descriptors [ 48.506436][ T387] usb 2-1: unsupported MDLM descriptors [ 48.555900][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.566183][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 48.580261][ T10] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 48.589368][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.597388][ T10] usb 3-1: Product: syz [ 48.601636][ T10] usb 3-1: Manufacturer: syz [ 48.606294][ T10] usb 3-1: SerialNumber: syz [ 48.613278][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 48.622266][ T10] scsi host1: usb-storage 3-1:1.0 [ 48.702420][ T387] usb 2-1: USB disconnect, device number 11 [ 48.724992][ T310] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 48.745259][ T310] usb 4-1: Invalid ep0 maxpacket: 32 [ 48.874864][ T310] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 48.895229][ T310] usb 4-1: Invalid ep0 maxpacket: 32 [ 48.900681][ T310] usb usb4-port1: unable to enumerate USB device [ 49.217919][ T945] rust_binder: 944:945 got transaction to invalid handle 1 [ 49.225241][ T945] rust_binder: 944:945 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 49.236470][ T945] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.244473][ T945] rust_binder: Read failure Err(EFAULT) in pid:182 [ 49.255983][ T10] rust_binder: 944: undelivered TRANSACTION_ERROR: 29201 [ 49.665251][ T10] usb-storage 3-1:1.0: Max LUN 34 is not valid, using 0 instead [ 49.865859][ T310] usb 3-1: USB disconnect, device number 11 [ 50.407687][ T956] 9pnet_fd: Insufficient options for proto=fd [ 50.426720][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 50.426756][ T36] audit: type=1400 audit(1792852441.460:278): avc: denied { bind } for pid=957 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.459540][ T66] usb 1-1: USB disconnect, device number 11 [ 50.465511][ T36] audit: type=1400 audit(1792852441.480:279): avc: denied { getopt } for pid=957 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.489854][ T962] erofs: Unknown parameter 'overlay' [ 50.502153][ T962] overlayfs: failed to verify upper (53/file1, ino=302, err=-116) [ 50.510190][ T962] overlayfs: failed to verify index dir 'upper' xattr [ 50.517202][ T962] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 50.524947][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.569864][ T967] Zero length message leads to an empty skb [ 50.593600][ T975] netlink: 104 bytes leftover after parsing attributes in process `syz.2.207'. [ 50.603617][ T36] audit: type=1400 audit(1792852441.640:280): avc: denied { connect } for pid=972 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.624556][ T36] audit: type=1400 audit(1792852441.640:281): avc: denied { create } for pid=972 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.673018][ T982] 9pnet_fd: Insufficient options for proto=fd [ 50.692654][ T36] audit: type=1400 audit(1792852441.720:282): avc: denied { getopt } for pid=983 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.713316][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 50.723946][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 50.744904][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42009, setting to 1024 [ 50.756346][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.772336][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.781205][ T10] usb 2-1: config 0 descriptor?? [ 50.788267][ T954] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.797206][ T10] hub 2-1:0.0: USB hub found [ 50.807876][ T36] audit: type=1400 audit(1792852441.840:283): avc: denied { write } for pid=986 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.894851][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.000999][ T10] hub 2-1:0.0: 1 port detected [ 51.054852][ T66] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.056527][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.072558][ T45] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 51.086903][ T45] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 51.096017][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.104012][ T45] usb 3-1: Product: syz [ 51.108221][ T45] usb 3-1: Manufacturer: syz [ 51.112829][ T45] usb 3-1: SerialNumber: syz [ 51.119346][ T45] usb-storage 3-1:1.0: USB Mass Storage device detected [ 51.127296][ T45] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 51.135553][ T45] scsi host1: usb-storage 3-1:1.0 [ 51.194867][ T66] usb 4-1: device descriptor read/64, error -71 [ 51.206002][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 51.213331][ T10] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 51.220058][ T10] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 51.228840][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 51.234772][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.255404][ T10] usb 2-1: USB disconnect, device number 12 [ 51.319152][ T348] usb 3-1: USB disconnect, device number 12 [ 51.434890][ T66] usb 4-1: device descriptor read/64, error -71 [ 51.525742][ T36] audit: type=1400 audit(1792852442.560:284): avc: denied { ioctl } for pid=996 comm="syz.0.213" path="socket:[10323]" dev="sockfs" ino=10323 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.674855][ T66] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 51.766823][ T1011] 9pnet_fd: Insufficient options for proto=fd [ 51.784908][ T1013] netlink: 64 bytes leftover after parsing attributes in process `syz.1.219'. [ 51.814884][ T66] usb 4-1: device descriptor read/64, error -71 [ 51.824935][ T348] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.975035][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 51.981457][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.992618][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.002763][ T348] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.011925][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.023844][ T348] usb 1-1: config 0 descriptor?? [ 52.033756][ T348] hub 1-1:0.0: USB hub found [ 52.038526][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.065098][ T66] usb 4-1: device descriptor read/64, error -71 [ 52.185060][ T66] usb usb4-port1: attempt power cycle [ 52.204850][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 52.211277][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.221060][ T10] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 52.230214][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.238297][ T348] hub 1-1:0.0: 1 port detected [ 52.243168][ T10] usb 2-1: Product: syz [ 52.247418][ T10] usb 2-1: Manufacturer: syz [ 52.252106][ T10] usb 2-1: SerialNumber: syz [ 52.440320][ T348] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 52.447744][ T348] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 52.456665][ T348] usbhid 1-1:0.0: can't add hid device: -71 [ 52.462788][ T348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 52.472371][ T10] usb_ehset_test 2-1:8.0: probe with driver usb_ehset_test failed with error -32 [ 52.484404][ T10] usb 2-1: USB disconnect, device number 13 [ 52.495112][ T348] usb 1-1: USB disconnect, device number 12 [ 52.524861][ T66] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 52.545897][ T66] usb 4-1: device descriptor read/8, error -71 [ 52.675887][ T66] usb 4-1: device descriptor read/8, error -71 [ 52.712194][ T1022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 52.914876][ T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 52.936009][ T66] usb 4-1: device descriptor read/8, error -71 [ 52.958936][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 53.076007][ T66] usb 4-1: device descriptor read/8, error -71 [ 53.117423][ T10] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 53.126806][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.135105][ T10] usb 3-1: Product: syz [ 53.139360][ T10] usb 3-1: Manufacturer: syz [ 53.143966][ T36] audit: type=1400 audit(1792852444.170:285): avc: denied { accept } for pid=1034 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.143976][ T10] usb 3-1: SerialNumber: syz [ 53.180733][ T1038] 9pnet_fd: Insufficient options for proto=fd [ 53.198731][ T66] usb usb4-port1: unable to enumerate USB device [ 53.234906][ T348] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.251753][ T1040] kvm: kvm [1039]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 53.260988][ T1040] kvm: kvm [1039]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 53.272555][ T1040] kvm: kvm [1039]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 53.284418][ T1040] kvm: kvm [1039]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 53.293571][ T1040] kvm: kvm [1039]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 53.304377][ T1042] overlay: filesystem on ./bus not supported as upperdir [ 53.374576][ T10] usb 3-1: Can't get UAC3 power state for id 10 [ 53.381724][ T10] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 53.390318][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 53.399322][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 53.405622][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.417733][ T10] usb 3-1: USB disconnect, device number 13 [ 53.424339][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.435174][ T348] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.446989][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.447254][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.471027][ T348] usb 1-1: config 0 descriptor?? [ 53.477670][ T348] hub 1-1:0.0: USB hub found [ 53.677331][ T348] hub 1-1:0.0: 1 port detected [ 53.877886][ T348] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 53.884773][ T348] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 53.897552][ T348] usbhid 1-1:0.0: can't add hid device: -71 [ 53.903655][ T348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 53.925470][ T348] usb 1-1: USB disconnect, device number 13 [ 53.997539][ T36] audit: type=1400 audit(1792852445.030:286): avc: denied { setattr } for pid=1053 comm="syz.3.233" name="RAW" dev="sockfs" ino=9433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.085405][ T36] audit: type=1400 audit(1792852445.120:287): avc: denied { setopt } for pid=1058 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.107189][ T1059] syz.3.235 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.144861][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.217520][ T1061] 9pnet_fd: Insufficient options for proto=fd [ 54.294848][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 54.301181][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.312625][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.322722][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.332456][ T1073] FAULT_INJECTION: forcing a failure. [ 54.332456][ T1073] name failslab, interval 1, probability 0, space 0, times 0 [ 54.334482][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.345320][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: syz.1.240 Not tainted syzkaller #0 790d506eeb1243e613a7e15525cb861d28cb7486 [ 54.345382][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.345419][ T1073] Call Trace: [ 54.345438][ T1073] [ 54.345458][ T1073] __dump_stack+0x21/0x30 [ 54.345551][ T1073] dump_stack_lvl+0x140/0x1c0 [ 54.345634][ T1073] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.345717][ T1073] ? __kasan_kmalloc+0x96/0xb0 [ 54.345774][ T1073] dump_stack+0x19/0x20 [ 54.345846][ T1073] should_fail_ex+0x3c2/0x510 [ 54.345920][ T1073] should_failslab+0xac/0x100 [ 54.345974][ T1073] __kmalloc_cache_noprof+0x41/0x470 [ 54.346060][ T1073] ? __cfi_selinux_file_open+0x10/0x10 [ 54.346145][ T1073] ? full_proxy_open+0x26c/0x8e0 [ 54.346198][ T1073] full_proxy_open+0x26c/0x8e0 [ 54.346243][ T1073] ? bpf_lsm_file_open+0xd/0x20 [ 54.346311][ T1073] ? __cfi_full_proxy_open+0x10/0x10 [ 54.346363][ T1073] do_dentry_open+0x97c/0x1510 [ 54.346433][ T1073] vfs_open+0x86/0x240 [ 54.346498][ T1073] ? __cfi_vfs_open+0x10/0x10 [ 54.346559][ T1073] ? may_open+0x352/0x430 [ 54.346644][ T1073] path_openat+0x2c49/0x35a0 [ 54.346743][ T1073] ? kasan_save_alloc_info+0x3a/0x50 [ 54.346813][ T1073] ? getname+0x1b/0x30 [ 54.346892][ T1073] ? x64_sys_call+0xe69/0x2ee0 [ 54.346958][ T1073] ? do_syscall_64+0x57/0xf0 [ 54.347024][ T1073] ? do_filp_open+0x440/0x440 [ 54.347092][ T1073] do_filp_open+0x1f2/0x440 [ 54.347172][ T1073] ? __cfi_do_filp_open+0x10/0x10 [ 54.347234][ T1073] ? alloc_fd+0x4c1/0x570 [ 54.347311][ T1073] do_sys_openat2+0x134/0x1d0 [ 54.347375][ T1073] ? fput+0x1a4/0x230 [ 54.347432][ T1073] ? do_sys_open+0x100/0x100 [ 54.347497][ T1073] __x64_sys_openat+0x13a/0x170 [ 54.347561][ T1073] x64_sys_call+0xe69/0x2ee0 [ 54.347614][ T1073] do_syscall_64+0x57/0xf0 [ 54.347669][ T1073] ? clear_bhb_loop+0x50/0xa0 [ 54.347767][ T1073] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.347854][ T1073] RIP: 0033:0x7f4b8599f559 [ 54.347896][ T1073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.347934][ T1073] RSP: 002b:00007f4b868c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.348010][ T1073] RAX: ffffffffffffffda RBX: 00007f4b85c25fa0 RCX: 00007f4b8599f559 [ 54.348099][ T1073] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: ffffffffffffff9c [ 54.348166][ T1073] RBP: 00007f4b85a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 54.348214][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.348254][ T1073] R13: 00007f4b85c26038 R14: 00007f4b85c25fa0 R15: 00007ffc6782a468 [ 54.348305][ T1073] [ 54.374921][ T348] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 54.380023][ T45] usb 3-1: config 0 descriptor?? [ 54.556496][ T348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.572621][ T45] hub 3-1:0.0: USB hub found [ 54.604169][ T348] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.655623][ T348] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 54.674821][ T348] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 54.685784][ T348] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.700307][ T348] usb 4-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 54.738567][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.746668][ T348] usb 4-1: Product: syz [ 54.750983][ T348] usb 4-1: Manufacturer: syz [ 54.761070][ T348] usb 4-1: SerialNumber: syz [ 54.772503][ T45] hub 3-1:0.0: 1 port detected [ 54.981625][ T348] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 54.988680][ T348] usb 4-1: 0:2 : does not exist [ 54.993879][ T45] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 55.000794][ T45] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 55.010183][ T348] usb 4-1: USB disconnect, device number 19 [ 55.010985][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 55.023262][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 55.055449][ T45] usb 3-1: USB disconnect, device number 14 [ 55.234053][ T1101] 9pnet_fd: Insufficient options for proto=fd [ 55.419828][ T1107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.247'. [ 55.428873][ T1108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.247'. [ 55.505119][ T1113] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 55.569576][ T1123] netlink: 'syz.3.253': attribute type 11 has an invalid length. [ 55.577427][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 55.577444][ T36] audit: type=1400 audit(1792852446.600:303): avc: denied { create } for pid=1114 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.603301][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 55.612169][ T36] audit: type=1400 audit(1792852446.620:304): avc: denied { sys_admin } for pid=1114 comm="syz.1.250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 55.633310][ T36] audit: type=1400 audit(1792852446.620:305): avc: denied { execute } for pid=1114 comm="syz.1.250" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.674119][ T1129] 9pnet_fd: Insufficient options for proto=fd [ 55.690631][ T1132] netlink: 100 bytes leftover after parsing attributes in process `syz.0.255'. [ 55.737962][ T36] audit: type=1400 audit(1792852446.770:306): avc: denied { connect } for pid=1133 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.780339][ T36] audit: type=1400 audit(1792852446.800:307): avc: denied { write } for pid=1133 comm="syz.2.256" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.802105][ T36] audit: type=1400 audit(1792852446.800:308): avc: denied { ioctl } for pid=1133 comm="syz.2.256" path="socket:[9807]" dev="sockfs" ino=9807 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.828154][ T1138] 9pnet: Could not find request transport: vir [ 55.893973][ T36] audit: type=1400 audit(1792852446.920:309): avc: denied { write } for pid=1142 comm="syz.2.259" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.976636][ T36] audit: type=1400 audit(1792852447.010:310): avc: denied { sqpoll } for pid=1149 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.104841][ T348] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 56.138592][ T1158] 9pnet_fd: Insufficient options for proto=fd [ 56.228455][ T36] audit: type=1400 audit(1792852447.260:311): avc: denied { view } for pid=1159 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.274816][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 56.286036][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.303449][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.313932][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.323159][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.337746][ T348] usb 4-1: config 0 descriptor?? [ 56.344686][ T348] hub 4-1:0.0: USB hub found [ 56.545776][ T348] hub 4-1:0.0: 1 port detected [ 56.567934][ T36] audit: type=1400 audit(1792852447.600:312): avc: denied { mounton } for pid=1176 comm="syz.1.269" path="/83/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 56.594845][ T45] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 56.751958][ T348] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 56.758382][ T348] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 56.766462][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.776748][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 56.777037][ T45] usb 3-1: config index 0 descriptor too short (expected 575, got 63) [ 56.782825][ T348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 56.797144][ T45] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 56.822701][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 56.831741][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 56.834929][ T66] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.843229][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.852057][ T348] usb 4-1: USB disconnect, device number 20 [ 56.868154][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 56.881102][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 56.890929][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 56.912818][ T45] usb 3-1: string descriptor 0 read error: -22 [ 56.919095][ T45] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 56.937067][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.949261][ T45] usb 3-1: config 0 descriptor?? [ 56.954570][ T1167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 57.014893][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 57.021743][ T66] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.040500][ T66] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.054847][ T66] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.072372][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.082936][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 57.099366][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.109916][ T66] usb 1-1: config 0 descriptor?? [ 57.166953][ T45] usb 3-1: USB disconnect, device number 15 [ 57.299488][ T1203] process 'syz.1.277' launched './file0' with NULL argv: empty string added [ 57.529341][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 57.536686][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x3 [ 57.543908][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 57.551260][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 57.558662][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 57.565954][ T66] logitech 0003:046D:C623.0003: unknown main item tag 0x3 [ 57.573167][ T66] logitech 0003:046D:C623.0003: item 0 1 0 8 parsing failed [ 57.580884][ T66] logitech 0003:046D:C623.0003: parse failed [ 57.587036][ T66] logitech 0003:046D:C623.0003: probe with driver logitech failed with error -22 [ 57.694904][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 57.732505][ T387] usb 1-1: USB disconnect, device number 14 [ 57.856013][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.866208][ T45] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.877754][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.888666][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.898859][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.913257][ T45] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 57.922386][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.930454][ T45] usb 4-1: Product: syz [ 57.934632][ T45] usb 4-1: Manufacturer: syz [ 57.939280][ T45] usb 4-1: SerialNumber: syz [ 57.946437][ T45] ftdi_sio 4-1:1.0: FTDI USB Serial Device converter detected [ 57.954281][ T45] usb 4-1: Detected FT2232C/D [ 57.959048][ T45] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 58.554837][ T66] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.634855][ T387] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.714840][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 58.725930][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.737619][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 58.761109][ T66] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 58.781055][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.794828][ T66] usb 1-1: Product: syz [ 58.796785][ T387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.799036][ T66] usb 1-1: Manufacturer: syz [ 58.799056][ T66] usb 1-1: SerialNumber: syz [ 58.811211][ T387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.830266][ T387] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 58.839727][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 58.847834][ T387] usb 3-1: Product: syz [ 58.852167][ T387] usb 3-1: Manufacturer: syz [ 59.051785][ T66] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 59.059228][ T66] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 59.076689][ T66] usb 1-1: USB disconnect, device number 15 [ 59.100250][ T1233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1233 comm=syz.1.289 [ 59.113530][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.264012][ T1226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.272660][ T1226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.385199][ T387] logitech-djreceiver 0003:046D:C52B.0004: hiddev96,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 59.397864][ T387] logitech-djreceiver 0003:046D:C52B.0004: logi_dj_recv_send_report: unable to find dj report [ 59.408154][ T387] logitech-djreceiver 0003:046D:C52B.0004: logi_dj_recv_switch_to_dj_mode error:-19 [ 59.581007][ T1239] capability: warning: `syz.0.291' uses deprecated v2 capabilities in a way that may be insecure [ 59.678880][ T1248] ================================================================== [ 59.686998][ T1248] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 59.694566][ T1248] Read of size 8 at addr ffff888117f32598 by task syz.1.295/1248 [ 59.702315][ T1248] [ 59.704669][ T1248] CPU: 0 UID: 0 PID: 1248 Comm: syz.1.295 Not tainted syzkaller #0 790d506eeb1243e613a7e15525cb861d28cb7486 [ 59.704699][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.704714][ T1248] Call Trace: [ 59.704721][ T1248] [ 59.704732][ T1248] __dump_stack+0x21/0x30 [ 59.704761][ T1248] dump_stack_lvl+0x140/0x1c0 [ 59.704797][ T1248] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.704833][ T1248] ? __cfi__printk+0x10/0x10 [ 59.704865][ T1248] print_address_description+0x71/0x210 [ 59.704902][ T1248] print_report+0x4a/0x70 [ 59.704925][ T1248] kasan_report+0x162/0x1a0 [ 59.704942][ T1248] ? snapshot_ctr+0x586/0x1350 [ 59.704980][ T1248] ? snapshot_ctr+0x586/0x1350 [ 59.705006][ T1248] __asan_report_load8_noabort+0x18/0x20 [ 59.705040][ T1248] snapshot_ctr+0x586/0x1350 [ 59.705060][ T1248] ? dm_split_args+0xa1/0x740 [ 59.705075][ T1248] ? __cfi_snapshot_ctr+0x10/0x10 [ 59.705104][ T1248] ? dm_split_args+0x5d0/0x740 [ 59.705136][ T1248] dm_table_add_target+0x59f/0xcb0 [ 59.705161][ T1248] table_load+0x2eb/0x7d0 [ 59.705192][ T1248] ? __check_object_size+0x99/0x870 [ 59.705216][ T1248] ? __cfi_table_load+0x10/0x10 [ 59.705241][ T1248] ? __kasan_check_write+0x18/0x20 [ 59.705281][ T1248] ? __cfi_table_load+0x10/0x10 [ 59.705313][ T1248] dm_ctl_ioctl+0x8f3/0xde0 [ 59.705345][ T1248] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 59.705372][ T1248] ? __fget_files+0x2bc/0x330 [ 59.705388][ T1248] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.705422][ T1248] ? security_file_ioctl+0x3e/0x110 [ 59.705452][ T1248] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 59.705484][ T1248] __se_sys_ioctl+0x126/0x1b0 [ 59.705501][ T1248] __x64_sys_ioctl+0x7f/0xa0 [ 59.705515][ T1248] x64_sys_call+0x1878/0x2ee0 [ 59.705533][ T1248] do_syscall_64+0x57/0xf0 [ 59.705566][ T1248] ? clear_bhb_loop+0x50/0xa0 [ 59.705609][ T1248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.705644][ T1248] RIP: 0033:0x7f4b8599f559 [ 59.705656][ T1248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.705669][ T1248] RSP: 002b:00007f4b868c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.705697][ T1248] RAX: ffffffffffffffda RBX: 00007f4b85c25fa0 RCX: 00007f4b8599f559 [ 59.705715][ T1248] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 59.705729][ T1248] RBP: 00007f4b85a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 59.705744][ T1248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.705757][ T1248] R13: 00007f4b85c26038 R14: 00007f4b85c25fa0 R15: 00007ffc6782a468 [ 59.705776][ T1248] [ 59.705781][ T1248] [ 59.966381][ T1248] Allocated by task 1248: [ 59.970745][ T1248] kasan_save_track+0x3e/0x80 [ 59.975476][ T1248] kasan_save_alloc_info+0x3a/0x50 [ 59.980622][ T1248] __kasan_kmalloc+0x96/0xb0 [ 59.985242][ T1248] __kmalloc_cache_node_noprof+0x225/0x430 [ 59.991083][ T1248] dm_get_table_device+0x1e3/0x6c0 [ 59.996217][ T1248] dm_get_device+0x32b/0x7f0 [ 60.000812][ T1248] snapshot_ctr+0x292/0x1350 [ 60.005468][ T1248] dm_table_add_target+0x59f/0xcb0 [ 60.010604][ T1248] table_load+0x2eb/0x7d0 [ 60.014990][ T1248] dm_ctl_ioctl+0x8f3/0xde0 [ 60.019527][ T1248] __se_sys_ioctl+0x126/0x1b0 [ 60.024236][ T1248] __x64_sys_ioctl+0x7f/0xa0 [ 60.028831][ T1248] x64_sys_call+0x1878/0x2ee0 [ 60.033531][ T1248] do_syscall_64+0x57/0xf0 [ 60.037963][ T1248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.043901][ T1248] [ 60.046238][ T1248] Freed by task 1248: [ 60.050228][ T1248] kasan_save_track+0x3e/0x80 [ 60.054943][ T1248] kasan_save_free_info+0x44/0x50 [ 60.060013][ T1248] __kasan_slab_free+0x5f/0x80 [ 60.064799][ T1248] kfree+0x158/0x440 [ 60.068733][ T1248] dm_put_table_device+0x298/0x2e0 [ 60.073872][ T1248] dm_get_device+0x571/0x7f0 [ 60.078471][ T1248] snapshot_ctr+0x435/0x1350 [ 60.083068][ T1248] dm_table_add_target+0x59f/0xcb0 [ 60.088208][ T1248] table_load+0x2eb/0x7d0 [ 60.092647][ T1248] dm_ctl_ioctl+0x8f3/0xde0 [ 60.097174][ T1248] __se_sys_ioctl+0x126/0x1b0 [ 60.101874][ T1248] __x64_sys_ioctl+0x7f/0xa0 [ 60.106480][ T1248] x64_sys_call+0x1878/0x2ee0 [ 60.111181][ T1248] do_syscall_64+0x57/0xf0 [ 60.115623][ T1248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.121549][ T1248] [ 60.123882][ T1248] The buggy address belongs to the object at ffff888117f32580 [ 60.123882][ T1248] which belongs to the cache kmalloc-96 of size 96 [ 60.137815][ T1248] The buggy address is located 24 bytes inside of [ 60.137815][ T1248] freed 96-byte region [ffff888117f32580, ffff888117f325e0) [ 60.151467][ T1248] [ 60.153798][ T1248] The buggy address belongs to the physical page: [ 60.160238][ T1248] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117f32 [ 60.169128][ T1248] anon flags: 0x4000000000000000(zone=1) [ 60.174767][ T1248] page_type: f5(slab) [ 60.178795][ T1248] raw: 4000000000000000 ffff888100041280 ffffea00045bdc80 dead000000000005 [ 60.187405][ T1248] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 60.195993][ T1248] page dumped because: kasan: bad access detected [ 60.202437][ T1248] page_owner tracks the page as allocated [ 60.208179][ T1248] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 538, tgid 537 (syz.1.67), ts 36075456356, free_ts 35659314425 [ 60.226869][ T1248] post_alloc_hook+0x37d/0x3b0 [ 60.231669][ T1248] prep_new_page+0x2d/0x180 [ 60.236188][ T1248] get_page_from_freelist+0x4aea/0x4ba0 [ 60.241744][ T1248] __alloc_pages_noprof+0x35a/0x7e0 [ 60.246965][ T1248] alloc_slab_page+0x6b/0x1e0 [ 60.251686][ T1248] allocate_slab+0x69/0x430 [ 60.256209][ T1248] ___slab_alloc+0x591/0x8c0 [ 60.260847][ T1248] __kmalloc_cache_node_noprof+0x2ae/0x430 [ 60.266687][ T1248] __get_vm_area_node+0x150/0x390 [ 60.271744][ T1248] __vmalloc_node_range_noprof+0x340/0x1300 [ 60.277685][ T1248] __vmalloc_noprof+0x104/0x1d0 [ 60.282569][ T1248] __vcalloc_noprof+0x3a/0x50 [ 60.287260][ T1248] kvm_arch_prepare_memory_region+0x2be/0xf80 [ 60.293328][ T1248] kvm_set_memslot+0x59a/0x13a0 [ 60.298187][ T1248] __kvm_set_memory_region+0x7f7/0xb40 [ 60.303673][ T1248] kvm_set_memory_region+0x2f/0x50 [ 60.308821][ T1248] page last free pid 294 tgid 294 stack trace: [ 60.314988][ T1248] free_unref_page+0xb99/0xf50 [ 60.319784][ T1248] __free_pages+0x6b/0x3b0 [ 60.324218][ T1248] __free_slab+0xb2/0x110 [ 60.328557][ T1248] free_slab+0x18/0xe0 [ 60.332639][ T1248] __put_partials+0x115/0x150 [ 60.337330][ T1248] put_cpu_partial+0x91/0xc0 [ 60.341950][ T1248] __slab_free+0x1cf/0x2a0 [ 60.346392][ T1248] ___cache_free+0xc9/0xe0 [ 60.350836][ T1248] qlist_free_all+0xb5/0x130 [ 60.355462][ T1248] kasan_quarantine_reduce+0x14f/0x180 [ 60.360956][ T1248] __kasan_slab_alloc+0x28/0x90 [ 60.365838][ T1248] kmem_cache_alloc_noprof+0x1bf/0x410 [ 60.371323][ T1248] getname_flags+0xcc/0x6b0 [ 60.375871][ T1248] user_path_at+0x2b/0x60 [ 60.380217][ T1248] __x64_sys_umount+0xfa/0x180 [ 60.385009][ T1248] x64_sys_call+0x2ab8/0x2ee0 [ 60.389733][ T1248] [ 60.392074][ T1248] Memory state around the buggy address: [ 60.397724][ T1248] ffff888117f32480: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 60.405787][ T1248] ffff888117f32500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.413868][ T1248] >ffff888117f32580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.421927][ T1248] ^ [ 60.426783][ T1248] ffff888117f32600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.434864][ T1248] ffff888117f32680: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 60.442938][ T1248] ================================================================== [ 60.453179][ T1248] Disabling lock debugging due to kernel taint [ 60.459593][ T1248] device-mapper: table: 252:1: device 1:2 not in table devices list [ 60.467762][ T1248] device-mapper: table: 252:1: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 60.487381][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 60.494345][ T1248] device-mapper: ioctl: error adding target to table [ 60.501129][ T1248] device-mapper: table: 252:1: dm_table_destroy: dm_put_device call missing for 1:2 [ 60.510839][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 60.519670][ T45] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 60.529319][ T45] usb 4-1: USB disconnect, device number 21 [ 60.536230][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.546276][ T45] ftdi_sio 4-1:1.0: device disconnected [ 61.395873][ T553] usb 3-1: USB disconnect, device number 16