last executing test programs: 4.499164606s ago: executing program 3 (id=33): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x5, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x44, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0x1, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x9, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x8, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0x80a, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) memfd_secret(0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.497694776s ago: executing program 1 (id=34): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$inet(0x2, 0x3, 0x6) (async) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000000c0)=0x104, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @broadcast}, 0x378, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x35d, 0x9c}) (async) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @broadcast}, 0x378, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x35d, 0x9c}) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/244, 0xf4}], 0x3) 4.497549056s ago: executing program 1 (id=35): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x8000001, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0xa, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0x2, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 4.492324617s ago: executing program 3 (id=36): r0 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x401, @mcast2, 0x6}}, 0x0, 0x0, 0x2e, 0x0, "332606195462e5b05c5930c9ae626a9d314b9f8b6bc4752c8c11e7ae2d330a47366d2fc3411224e7b1ba812a3f521d6207dc6d00bc695a116272f9aca10bd31ea56dc34ac6c629b76d3da9f036d8209b"}, 0xd8) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x1, 0x5, 0x1, 0x4, 0x3, 0x0, [{0x1c00000000, 0x9, 0x2, '\x00', 0x208}, {0xec8, 0x2, 0x7fffffff}, {0x2, 0x5, 0x6, '\x00', 0x2103}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000240)={0x0, 0x7fffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000280), 0x4) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000002c0)={0x3, 0x200, 0x6, 0x6, 0x2, 0x4}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000300)=""/182, &(0x7f00000003c0)=0xb6) ioctl(r0, 0xa, &(0x7f0000000400)="cfce31bd31fbec06bb28ec6d52be47397f7e98fce420963d55c015a137de54fc782202e8269fbe40431ef04b6d380936cbf48c5a6ec6b59b81c20db94a52e6737e84da1a7f93be1a0c7de84be6fcdb6d97bd374932523d4d9cd5417190e36061c7adcccaadc292f2bde474bde071aa88f9fd250f512c4c39c4bd027b9de12c136bcdecf1ee89c09a9e5bac15ea4eca340b3177f2b8ea5fd3b2b41a02456256a0313533ba93e1b369a15aa04aa96b268c1e1dcdf9bf88299a8845bbbcd4a942dff36f04f9f3f0971f2c67ea0e146a4e558525b03c5c94d59c07aa29f63b15d3c7e225968a67") syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f0000000500)={0x40, 0x5, 0xad, {0xad, 0x8, "ae9439237016bc6ede18ae70aaae724f07e03cade210c7dbae3ca3364833f216b8984421638b32ecffc9848021eb94c507d29724ae3fdaee964cec9924eb83f40ce82e27b260871a1780321e67e9130148dd1bb625ba0afe8390380af93294290f78def3a578f69450728487fbf2bb22b27f2ab4a937ae7efb4dce47e6b68c13b65b18a292d39bf312637b2a3f248d18053306627a2e1312375bb76830332b426ee5d660935a3acd41cf28"}}, &(0x7f00000005c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "574ce78cfc1b60310894bbeb9ec82c7de2f7f66c6012fe662f36ae07c6195cecaffe712c339740fe4b99d45871651990c2a15c05af2c9445d7ac8043622b79422a0db25b5b640b76401b8ce5bf5904003cd6a0aa6585e0fcb8"}}, &(0x7f0000000640)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0xb, "3e14ccd1"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "30809819"}, @local=@item_4={0x3, 0x2, 0x3, "462dd36d"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_4={0x3, 0x1, 0x3, "cea4e8ab"}, @local=@item_012={0x2, 0x2, 0x7, "3ac4"}, @local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xc95}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x15, 0xdd, "d58212db49f5efc21a3e19b51ebfc2deaae8731158883775d4703575920b01968a0e21e10ded2d1eb443024e2c0f99da2c1c2093e598886917109a3be882b0ec0419b23abeae52efed0878cb1072b477df1d06bd8c5e372bed3829a4a84670577cea621abd57db9ca746e942c02f4e9cf4184fbe998c67f78bc68289c58219735f416cef3c1775179abcd68f2a7f901f5aa3996aeeae7b85fe5ec1c10456dba1e68e2af92fabebfe341d883972b0319e8dc8870848019518a2f627bcaeedf608e6758fc099a159fa55b7bd86633d1d08ffc18a5208297bbbfacea79951"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x1, 0x24, "733a9f71d90dc4f1e9aefc564e5ce2c4d94fce3365edae74660ab20efd6e90a810529f4e"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x40, 0x23, 0x5d, {0x5d, 0x8, "53dfb14033dcec0c70be57bf3c35e3561e11b81fc2988979e8faee9e0c8cf70b352f16b9c3e9e83daaa0bd35ef2f582328108f82afd95980719aa717784e32c04ca45ede65912ed08e365410761c6e039e337354aba9f867cd3720"}}, &(0x7f00000009c0)={0x0, 0x3, 0x79, @string={0x79, 0x3, "da665bec3d884f6e2009d2865b9ebba7628816c604ac6855deb1330525db1ef105d91312c2c1392df785d28d8fee520373d2fb9378b49d8ed84199e5595335f01804ba41d0f4cc0fe174863a76178a647af3a9a9270f3305e21dc0e729bb940097dcaeebac9e4d01170d045cc7464f53088924ba771de2"}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a80)={0x40, 0x3, 0xb3, "c0cf5251dfe26a1c944d3485b5d96631525599e08d17c1a75731a921bf17c3784677d00afceff26bbc288881646bee8b285483fdc61c3afd1cf4afb1ffab2194f787a8bd63f982145de7d4afa70ab129940cded8ffc4ded6ea0eef1b01d3f80294086291f5460bdc8c0a593356d6b280c0737f5cef4379575ea22b07ddca5093e8914180d1e548bb72b42787d5de800d26fc36a25d0d124b526b11701e42a51c84910ba080cbe95daacd228e4982c4752d8019"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000bc0)={0xc0, 0x5, 0x6, "081b6e1ed54f"}, &(0x7f0000000c00)={0x40, 0x5, 0x2, '1\f'}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000880) fstat(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000ec0)=0x0, &(0x7f0000000f00), &(0x7f0000000f40)) read$FUSE(r1, &(0x7f0000000f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002fc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000030c0)=0xe8) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000003100)=0x0) read$FUSE(r1, &(0x7f0000003140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getuid() getresgid(&(0x7f0000005240), &(0x7f0000005280), &(0x7f00000052c0)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000e00)='system.posix_acl_default\x00', &(0x7f0000005300)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee00}, {0x2, 0x2, r4}, {0x2, 0x3, r5}, {0x2, 0x5, r6}, {0x2, 0x0, r7}, {0x2, 0x0, r8}, {0x2, 0x1, r9}, {0x2, 0x7, r10}, {0x2, 0x4, r11}], {0x4, 0x3}, [{0x8, 0x2, r12}], {}, {0x20, 0x3}}, 0x74, 0x2) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005380)='/sys/kernel/kheaders.tar.xz', 0x14400, 0x44) r14 = syz_usb_connect$uac2(0x1, 0xf9, &(0x7f00000053c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x80, 0x50, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x1, 0x32, 0x5}, [@multiply_unit={0x7, 0x24, 0xc, 0x3, 0xd0, 0x7, 0x7}, @selector_unit={0x6, 0x24, 0xb, 0x8, 0x1, "e0"}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x402, 0x2, 0x4, 0x5, 0x4, 0x4, 0x8, 0x4}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x400, 0x5, 0x1, 0xfd, 0x4, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x6, 0x6, 0x5, 0xa4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x8, 0x8, 0xb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x2, 0xfe, "b423", "84ce"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xa8, 0x76, 0x9, {0x8, 0x25, 0x1, 0x82, 0x3, 0xfb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x330, 0x7, "987ed53dc0cd0e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x3, 0x5, 0x4}, @as_header={0x10, 0x24, 0x1, 0x7, 0xa, 0x2, 0x1002, 0x9, 0x1000, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x3f7, 0x40, 0x7, 0xf, {0x8, 0x25, 0x1, 0x1, 0xc, 0x5}}}}}}}}]}}, &(0x7f0000005740)={0xa, &(0x7f00000054c0)={0xa, 0x6, 0x250, 0x6, 0x4, 0x1, 0x40, 0x7f}, 0xde, &(0x7f0000005500)={0x5, 0xf, 0xde, 0x6, [@generic={0x75, 0x10, 0xa, "3feed3539614fb1526a1172fbe514df3adf237841d0ecd25829d046479648326cb0d273f43d54297f455d2a747a18342dd5815c691afabeee053ca9a81f46d87e4a9702cc31655efc75bfc056c453aa01aba17d07de2356c3a1ed7b8d03d4843689cb0672b92dd849632fb6092a2a225dd05"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x47, 0x10, 0xb, "8db663bdd023d539b5610d373095a7650d30c10dc8b8bfbc34c8eb9f2bb71e74c7e957c9d5a8ab3a9acc513e610e7e2db6896e4d7343173a8c3aea2df4693569226ef46c"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "75c33451a9ff5b0afee2b49cb36d159f"}, @ptm_cap={0x3}]}, 0x3, [{0xab, &(0x7f0000005600)=@string={0xab, 0x3, "ceef8c68c946c5730cd69f9457fa3122accb34072adcdbc88c8e0a51dd0b6dd73c555cc1e3a2fe8bf2d387dc733bd065c12811d76796d57a9b54eca603e4818bffef0796df0b01118415078bb58f1e70cf907be697965f4eba91681a3aa73231e3306ad6ead905e5f1163a71ca5fda7ddd8be9b1faa4534eb509fc4fe2d56024ea37cb1a402285a0d09237beecf52fa2c337bf6bec8eb4885b4fbc69492ec0d8ac1afe867e677c8441"}}, {0x4, &(0x7f00000056c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000005700)=@lang_id={0x4, 0x3, 0x44c}}]}) syz_usb_control_io$uac2(r14, &(0x7f0000005940)={0x14, &(0x7f0000005780)={0x20, 0xb, 0xd3, {0xd3, 0x10, "d146dbe695398e0c90f9bcde128cd5d6dd570565e3c375b0b96277abfa02d3149281f8c34accb7ed33f5cf574be0b378ab6daa835a3ac112ec436e0e10161faf708698cd8e2e78b8c5c69d9d772ce50c0cbb0704529f74e66abf5d0d60775eba328748fb98e88157aaf186432e1a2186542c868b9f7644894331aab1e0b06edd8c8cf13f0638ac16b001842705e5ec6560d4323a16ade2025972dbd1fa9e8d7295554113fc0928b1d940da3ed8be186ac79c4f1c79bc0590b84e64dcaa137fa127ae18982a029f5e3052c652303b23665a"}}, &(0x7f0000005880)={0x0, 0x3, 0x80, @string={0x80, 0x3, "aa3064f72050a48f1090cf431a8a73134c1016287321884f6965fc297b8d898ebde571d61b3e6ad2e1fe2b180760c7cf63a29ee2291405b016a258198a438346a1b99e6d7d53110eed6778807ce26b02fb7427c66d82f547f761cbf53ec9e620056d4e402dffecf245c0a96d7a733c19f7f6dbd7e399c62e8be699c84f6d"}}}, &(0x7f0000005b80)={0x44, &(0x7f0000005980)={0x40, 0x12, 0x5, 'z\t{Hi'}, &(0x7f00000059c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000005a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000005a40)={0x20, 0x81, 0x2, "4b89"}, &(0x7f0000005a80)={0x20, 0x82, 0x1, "06"}, &(0x7f0000005ac0)={0x20, 0x83, 0x1, "b0"}, &(0x7f0000005b00)={0x20, 0x84, 0x4, "12f7f658"}, &(0x7f0000005b40)={0x20, 0x85, 0x3, "a9b52d"}}) connect$tipc(r1, &(0x7f0000005c00)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x2}}, 0x10) fsconfig$FSCONFIG_SET_FD(r13, 0x5, &(0x7f0000005c40)='\x00', 0x0, 0xffffffffffffffff) 4.104349119s ago: executing program 1 (id=37): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)={0x4f18, 0x11, [{0xd}, {0xd, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0xc}, {0x1, 0x1}, {0x8}, {0xa, 0x1}, {0x6, 0x1}, {0xf}, {0xd}, {0x9, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}]}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r2, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x24068094}, 0x4000811) 4.07751219s ago: executing program 1 (id=39): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904080001020d0000052406000105240000000d241f0100000000030000000006241c"], 0x0) 2.387528473s ago: executing program 0 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x300, &(0x7f00000004c0)={&(0x7f0000000a00)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r3, 0x0, 0x4000, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x3}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x6}, {0x16, 0x0, 0x9b}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 2.332452336s ago: executing program 0 (id=43): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wake_lock', 0x82002, 0x105) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="00040000", @ANYRES16=r1, @ANYBLOB="010000000000000000001a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) futex(&(0x7f000000cffc), 0x100, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x4000010, r2, 0x8cf2000) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000100)) r3 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) setuid(0xee00) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) socket$inet6(0xa, 0x6, 0x6) 1.444350734s ago: executing program 3 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000500)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r0}, r1, 0xc, @unused=[0xffff, 0x3, 0x5, 0x7], @subvolid=0x6}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xccaf, 0xffffffffda22998c, 0x1, 0xfffc, 0x40, 0xd, 0x0, 0x0, 0x51, 0x5}}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0xeff, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "88bc9122e989532da5"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x64) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540), 0x60001, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x6, &(0x7f0000000400)={[{@xattr}]}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000025bd7000ffdbdf253100000005003300050000000500350001000000050035000900000005003400090000000500350003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 1.443278754s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) chdir(&(0x7f0000000c80)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000000c0)={0x400, 0x7f, 0x3ff, 0x80000000, 0xd3b, 0x1}) 1.426877494s ago: executing program 0 (id=48): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2000002) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x35, 0x6, 0x8000, 0x7f}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f80)={0x4, 0x0, [{0xfec00000, 0x0, 0x0}, {0xa000, 0x0, 0x0}, {0x3000, 0x0, 0x0}, {0x70000, 0x0, 0x0}]}) 1.387286326s ago: executing program 3 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x28, 0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40800d0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000086a05b400000000000001090224000100004020090400290203"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000"], 0x28}], 0x1}, 0x14008010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x8) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 1.304338108s ago: executing program 0 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x20000004, 0x170, 0x2, 0x85}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0x28, 0x12, 0xa01, 0x70bd29, 0x2, {0x80}, [@typed={0x8, 0xd9, 0x0, 0x0, @pid}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40088e1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0xf, 0xe4, &(0x7f0000000000)="41eff588adbf688bff33ce46e11070ac4a13c9834904cd0a45eaa58e88929e27ac9ef425a64cfa10205432b211ce8c16f59521a582812990bc6a7b5afe8d07f6640aa56c01cc682427826b24a6e6fe3a2f4aa3c88066fe24ee633f78986d9364c9c98a878dda8cdbc25a1fa913253455aaa7dfb49cc6583a4adb181ab9f96bdcec9026414a301cf9c3a7d0266a48bdbfe069e0cff6cb46fb7b880d890ed33c8b35a0735b853fb3fe1604b9a3649313f6b6c7a53d73fbafe19af9aea23e084a9f7cc5caac3e5f921a9b6188e7acc0beb1b993a9f64745287eabd84b6b2623750b71fc7fea", 0x6, 0x6, 0x8, 0x0, 0x4, 0x2, 0x101, 'syz1\x00'}) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000780)=0x3c111, 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 1.040860037s ago: executing program 1 (id=51): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x18c) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='@-,#].\xa1*\x00', &(0x7f0000000080)='./file0\x00', r1) sendmsg$802154_raw(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000200)={&(0x7f0000000140)="8fc61fd79bdfa185ab3351bdfa6baca22e5a00d9d9f4d88bec71b044a715b9c7d56d1298e5308e6354e71ec5746462cd28fd596ba0fc678314d778ed0688b4fb87a1465f9d678b6d4103e6a569fd73aadb9e433db897a9e70d0eff1b663891b35a9b20e9ebf7e02f0ff891b09f50676bf8344287a601b112bcd944c5931b9c4ca32be6f9a7e90838c9f0362005f1f552dd89f6b7475e142990689373e1d793f8ba8e1202149fd66a0c92752ce6c6c8fbcaca2b8c8c16315db85d1c2deb1752fb", 0xc0}, 0x1, 0x0, 0x0, 0x8044}, 0x84) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x1}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000340)={{@_ha_fsid={[0x81, 0x80000001]}, {0x0, 0x3, 0x6, 0x80000000}}, {{[0x81, 0xfffffffa, 0xd80, 0x3]}, 0x0, 0x1, 0x80, 0x0, &(0x7f00000002c0)=[{{@align=0x10, {0x7, 0x8, 0x3, 0xc82e}}, 0x5, 0x0, '!]\x00'}, {{@align=0x4, {0x66f, 0x80, 0x9, 0xde7}}, 0x8, 0x0, '@-,#].\xa1*\x00'}]}}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000380)={0x0, 0x7}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001380)={'security\x00', 0xa, "3315261e640cdafa37fd"}, &(0x7f00000013c0)=0x2e) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001400)={0x2, "a1169d"}, 0x6) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000001440)={r0, 0x1, 0xfffffffff0000000, 0x4000}) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$KVM_NMI(r5, 0xae9a) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) close(r1) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendfile(r7, r1, &(0x7f00000014c0)=0x8, 0x2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000001500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$setregs(0xf, r8, 0x5, &(0x7f0000001580)="ed44d7e25530251ab8992e95bf0005d4ee1da3fc737f0016532facfb15b6d822a054381d7258047a75b424a1cd4d3cd6e0587a0426f77b90e5f8d7") getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x14) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r1, 0xb7fef000) inotify_add_watch(r5, &(0x7f0000001640)='./file0/file0\x00', 0x14) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000001680)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f00000016c0)=0xbe927267371635cf) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000001700)) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x100010, r5, 0xffffffff80000000) write$FUSE_INTERRUPT(r5, &(0x7f0000003780)={0x10}, 0x10) 1.026765537s ago: executing program 1 (id=52): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x2, @none={0x0, 0x2}}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0xff, 0x90, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "be"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8001, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x68}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x6, 0x2f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x85, 0x8, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x9, 0x81}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xf, 0xd9, 0x49, 0x8, 0x1}, 0x49, &(0x7f0000000280)={0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x10, 0xf, 0x8, [0x0, 0xff3f00, 0xff0030, 0x208f]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0f2305ac42ef42c62c5557a482edc104"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "5cbca948362e3095ed9d49a5d40717a1"}]}, 0x2, [{0x63, &(0x7f0000000300)=@string={0x63, 0x3, "4ad496cdff822f9af91035dd241dc07c507878d068b1143d0411890d01a9af1ed4af7a32dd7587b3c4dd5e90dcdee42ea8594ffe9454ba42babef62c13b9b2107bc1caef3f052a3963db1e1b729364e5c54afcb81433337de1c617636ff482c190"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x812}}]}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80100032530cef73fac3d7ac9209e14aed080b569b723071ce5a6d927dc91c1a3ba25949da1425c5f1e418ae1a2dc4ae4523341b16e7fe8fe873b67eccaa8c98db0fd45aa2319d48dd85021cc7c27de8687dfa70199d077fbbb0b3f356946d3e7c138f101ac5b26c918e66126830e", @ANYBLOB="b81f27d431c178ef83180d10ea92a1cd0093068ee8ce63d05ee7216e50e398fe6da852f6e922dca8388f9482932ea479fe104d77b9a63b5f15e3a053a9fb281050", @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e982b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4000814) timer_create(0x3, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x7, 0x2, 0xf, 0xfffffbff}, {0x5747, 0xeb, 0xc3, 0x3}, {0x5, 0x1, 0x2, 0x8}, {0xf, 0xb, 0x6d, 0x332}, {0x5, 0x9, 0x4d, 0x9}]}) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0x48b, 0x0, 0x0}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x0, 0x8, 0x8, 0x2, 0x101, 0xc032}}}, 0x0) 459.942685ms ago: executing program 0 (id=53): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x27, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x9, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x27, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x9, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8000, 0x700, 0x4, 0x4, {{0x9, 0x4, 0x2, 0x1a, 0x24, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1, {[@generic={0x7, 0xe, "a13387e58d92ce1ff4d895e3"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x87c0, 0x8000, 0x1000, 0x7, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0xb, 0x48, [@multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xc, 0x3, 0x2, [{@empty, 0x3}]}, @lsrr={0x83, 0x13, 0x2b, [@broadcast, @rand_addr=0x64010100, @local, @private=0xa010102]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x87c0, 0x8000, 0x1000, 0x7, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0xb, 0x48, [@multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xc, 0x3, 0x2, [{@empty, 0x3}]}, @lsrr={0x83, 0x13, 0x2b, [@broadcast, @rand_addr=0x64010100, @local, @private=0xa010102]}, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0x2, 0x4c, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x1000, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0x2, 0x4c, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x1000, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14c, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x15}, 0x20048814) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x1000, 0xbc, 0x90c, 0x7, 0xffff, 0xfad2]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20020000}, 0x40801) (async) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x1000, 0xbc, 0x90c, 0x7, 0xffff, 0xfad2]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20020000}, 0x40801) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f00000007c0)={0xffffffff, r7, 'id1\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000840)=0x6, 0x4) r11 = dup2(r7, r7) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x260022}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc8, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xc8}}, 0x40001) preadv(r11, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/243, 0xf3}, {&(0x7f0000000bc0)=""/79, 0x4f}, {&(0x7f0000000c40)=""/237, 0xed}, {&(0x7f0000000d40)=""/120, 0x78}, {&(0x7f0000000dc0)=""/151, 0x97}, {&(0x7f0000000e80)=""/193, 0xc1}, {&(0x7f0000000f80)=""/143, 0x8f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x8, 0x54a4, 0x906) (async) preadv(r11, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/243, 0xf3}, {&(0x7f0000000bc0)=""/79, 0x4f}, {&(0x7f0000000c40)=""/237, 0xed}, {&(0x7f0000000d40)=""/120, 0x78}, {&(0x7f0000000dc0)=""/151, 0x97}, {&(0x7f0000000e80)=""/193, 0xc1}, {&(0x7f0000000f80)=""/143, 0x8f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x8, 0x54a4, 0x906) socket$packet(0x11, 0x2, 0x300) (async) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, &(0x7f00000020c0)="4835c9daa61c64777d914e375990de21181567717319300261a65228ff8fc43012c9a75b93bf1c568173ff7434efa23e0e342bc1eee58144ade7396c64096597af89eda0", 0x44, 0x10, &(0x7f0000002140)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @remote}, 0x14) mount$binderfs(&(0x7f0000002180), &(0x7f00000021c0)='./binderfs2\x00', &(0x7f0000002200), 0x200800, &(0x7f0000002240)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x1ff}}, {@max={'max', 0x3d, 0xfffffffffffffffd}}, {@stats}, {@max={'max', 0x3d, 0x6}}], [{@obj_type={'obj_type', 0x3d, '(}\x13$\\&%'}}, {@obj_user={'obj_user', 0x3d, 'syzkaller1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\''}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'gre0\x00'}}]}) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000002380)=0x100, 0x4) fstat(r13, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), 0x1000, &(0x7f00000024c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}], [{@subj_user={'subj_user', 0x3d, 'smackfsroot'}}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@euid_lt={'euid<', r14}}, {@hash}, {@measure}]}) (async) mount$binder(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), 0x1000, &(0x7f00000024c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}], [{@subj_user={'subj_user', 0x3d, 'smackfsroot'}}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@euid_lt={'euid<', r14}}, {@hash}, {@measure}]}) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000002640)=[@text64={0x40, &(0x7f00000025c0)="48b8fdffffffff7f00000f23c00f21f83500000e000f23f86745df68000f5815b4cde86566b8aa000f00d8660fd5cf66baf80cb80cfbfd81ef66bafc0ced0f015aa02e366badf8ffffff00430f01cbc46131dddf", 0x54}], 0x1, 0x48, &(0x7f0000002680)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0xf2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002700), r10) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000002a80)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002a40)={&(0x7f0000002740)={0x2cc, r16, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x280, 0x8, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a05132c86e948d0257225a67dbdec0f99670c1a2818b0a5109914808a84703c"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7ea5597ac16caf8020d0c830d5445ccae237c34ec18e2432bccd75cac357cb"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000002a80)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002a40)={&(0x7f0000002740)={0x2cc, r16, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x280, 0x8, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a05132c86e948d0257225a67dbdec0f99670c1a2818b0a5109914808a84703c"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7ea5597ac16caf8020d0c830d5445ccae237c34ec18e2432bccd75cac357cb"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000003300)={0x2c, &(0x7f0000003000)={0x20, 0xe, 0xe2, {0xe2, 0x25, "7dc3c3273527bd651d85cbea03173b7a62780f7b7b178c85c0ed46ad06ee2709116a163f42a0986928bdb38ed376736c71fd5df61439dae24e612e845521f28182cdf11e2ca3eee5f437007400046b98b3cd488d402518a2e66713ebaf94ff2eac34d81c614b1fb75e1705ad203972858a05904c74522ffc9ca4687118a7860b0d4733d3e4a05a5c4fa628934ae8bfb0da6fe66ed552fb32fa7742f37edc458e723ab9332937053163bc804e48b4afc7f94f5ba8186c7d6cf1accfd174b94e5db82a7d7874e2071ace1fe7a5a7aa32cce9a78c41b1682b36bc7881fa96419c34"}}, &(0x7f0000003100)={0x0, 0x3, 0xe2, @string={0xe2, 0x3, "3da391eaaa79773e5df3aba438a6a480fd46ba71b048abcdedd929bfd00c5a09fa5ed41ea8bfb6ff089ea505e42344de51bfcb45b1245f2cd71225c66635fe5fc5fcf62fd3dffaf3a6b73043b706490daf397c8a071473b2dfb9b5270321e67217051e9f0649be4b8785175217183d9b27f89674676ed806c538df8b77055ae61eb6d4de99e1153c8625173186534eee5f9ebd9a6e73ac14cea0aedd48df0a1ad9b66e11a9ac449f77bb8585068b749eae9f06ff2613c07058f64ead9046bba37434762bf555dadff58867b9201f29434bfa224ecfb18bd52a79a197b6204233"}}, &(0x7f0000003200)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "78a65efd11c943310983fd2eb174e47a"}, @generic={0x2c, 0x10, 0x3, "48909c57286a6d086e30a3ebc0698069141a27f20def4f709b0c2e25af61c5447203e3cdf477daf742"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x1, 0xc000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xc7, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9a, 0xf, 0x3, 0x5c16, 0x4f}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3b3ff344f5bc04cf402d026692f93e52"}]}}, &(0x7f0000003280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x2, 0x6, "1add3fe0", "23349b91"}}, &(0x7f00000032c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x70, 0xa, 0x6, 0x4, 0x5c5d, 0x7}}}, &(0x7f0000003780)={0x84, &(0x7f0000003340)={0x20, 0x6, 0x62, "3c0f789db7dca8c1a259daf1f1cc3ce96262dca1d4e99fcc44249ba21c53721443779c1b522f0474bbe99d28482d7ffa1aee8e20a13f6671c999da8316555781f34a03d6bda9ecd7e5ce64569ff11cd96b2f25fcd535d2487fce2e6f3799d9a4f37e"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000003400)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000003440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000003480)={0x20, 0x0, 0x8, {0x68, 0x80, [0xf00]}}, &(0x7f00000034c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000003500)={0x40, 0x9, 0x1}, &(0x7f0000003540)={0x40, 0xb, 0x2, "bb7c"}, &(0x7f0000003580)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000035c0)={0x40, 0x13, 0x6}, &(0x7f0000003600)={0x40, 0x17, 0x6, @random="94f655bbeedf"}, &(0x7f0000003640)={0x40, 0x19, 0x2, "9dc7"}, &(0x7f0000003680)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f00000036c0)={0x40, 0x1c, 0x1, 0x3e}, &(0x7f0000003700)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000003740)={0x40, 0x21, 0x1, 0x39}}) 366.850468ms ago: executing program 2 (id=55): mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@wrmsr={0x65, 0x20, {0x4b564d01, 0x9}}], 0x20}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x21) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x12, 0x0, 0x1ff}]}) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 258.765882ms ago: executing program 2 (id=56): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000140)='./cgroup\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (async) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x4, 0x3, 0xb259, 0x7fffffff, 0x1, 0xffffffff, 0x5}, 0x0, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) (async) fdatasync(r3) (async) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) close(0x3) 205.815023ms ago: executing program 2 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) recvmsg$unix(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000001c0)=""/94, 0x5e}], 0x1, &(0x7f00000028c0)}, 0x10000) (async) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) fcntl$dupfd(r7, 0x406, r9) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0xcf, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f0000000280)) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet(0x2, 0x2, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000000c0)="02030e00", 0x4, 0x0, 0x0, 0x0) (async) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 205.114043ms ago: executing program 3 (id=58): r0 = getpgrp(0xffffffffffffffff) (async) getpid() r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x20) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000040)={r0}) (async) r2 = syz_open_dev$loop(&(0x7f0000000ec0), 0x207, 0xa841) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffffffff, 0x8000000800e, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc0d9fd20000000000030000000000000005000000000000d600000000000000000000000001000100000000f100", "2809e8dbe1083e1d875397bdb22d00000020a18f090000f45f819e5007008000", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0xfffffffffffffffe, 0x8]}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 204.915323ms ago: executing program 2 (id=59): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0x39264000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x12143, &(0x7f0000003d40)={0x0, 0x989680}) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 204.692383ms ago: executing program 3 (id=60): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2182, 0x0) readv(r0, &(0x7f00000031c0)=[{&(0x7f0000003200)=""/4096, 0x1f000}], 0x1000000000000031) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) copy_file_range(r0, &(0x7f0000000040)=0xbb, r1, &(0x7f00000000c0)=0x8, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x3f, 0xa7, 0x40, 0x50ff, 0x2657, 0x5604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1d, 0x7, 0x80, 0x81, "", [{{0x9, 0x4, 0x5b, 0x2, 0x0, 0x2, 0xc, 0x7, 0xb}}]}}]}}, 0x0) 381.71µs ago: executing program 2 (id=61): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x500, 0x4, 0x3, 0x58}, &(0x7f0000001bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x112c, 0x2000, 0x1, 0x194}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c7b, 0x40, 0x0, 0x1ee}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf14d, 0x10000, 0x1, 0x165}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5b9, 0x4000, 0x1, 0xa7}}], 0x4, &(0x7f0000001880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x2, 0x32, 0x0, &(0x7f0000000880)=@buf_max_buf="125a2f27820b76287a634f9f2f24ff40f7373f2f84acbaeb78faf8a3cb7a1aae2355d23143762d8061e4472f4d0bfb82e85ee16dce418f66a13142cc4336d542ade6e33827f69f95e67e6a0935b4f7e25a2f884b4669f551e1d8311ccfbf535461f67f75a5d3c06a01f68c2f53eaac3702db6f7f68be975a1879a6bbea38f4e574057ccae17d450d7a40eb338e7983b0d7d87609a5df1d5bf589db677d97d711448ce88e5d498453177fdca216a8f885cf2e0b374f5954f45c32688f1e241c2a94a24094700aa37a4b30467d45105287a4d89b483e84619975ac37de773162b08f62d452dd922404f75a4984860b706ed236172cea6abe163f7f212a7ca573c45cf36cc1fff74431c07ec1d994db3e982036672e74e43a9360ad3021409c1820d26f716a25f46e7ae9d49051d0c0976bf7c48a2097c38489d10242a4b03860b151ecd637744aa8363cee7bb6af096267fe42c8e67f2fd6d487fd8ad2d441b9d74c8f56daca2330ec1b85c31fe55bbf503b452c571aff0a4c1db9c0072fd04bfa5758ea957d1f51f27135aa4e16e3d1bfebc1ec1b1fd00454060df0353f4286a09172346dc527e1242cb716997e13f122b97d8324f3a737ef869169600310077c2a82f142e43937b7a04e6663f37fc3fbd6ddb25ad58f7d7798e412b9c6caa5232efd7cd02cf652c3086ebf5b22679d66ee62db310d29b4f9c13f8f6c3e647c2d8f4fb615b25867e5be61fc725feaf2a886dbdecfccd485f06a09037de7bcc707b2ea189483565d6293f0c1337cbcfba527fccf53f429585e03f139aa404bf2530a4f890ea86c543fe8d1614c9da0830716f9fbf204a68b48b784adda2950b174c22e6a4bf2f5585137d79cb9f7d481b00f8cbfdb87840ea8e714288f9aff09e2a50d766fcd487f6b3064e80e132b52335838c6b8d60d85f224b401ee84ec267ea6cefa1311bf65ead3701626e93725e1cf19be7ad6bb79c2fd5dd3e658d267521938f329f7b41239e513c0bc4baf470a579a025a007b934f30470a519be764380053a793d81a9df7b78318a032497b7cfca50622af4a51474de3d63df3fa78e1f2d7f1397a917ccb799de2a61536ea4b5c9b87056f074cc31726f01b967c15874bc66f4fd96f4fd120b087498d39446ce04d325619e4f0d30fcace3864de6c8a08fc4eace5182d50b84c75c0b6b1bac489227c7379668294bf09fbddf11064e0fa82bafbea49d74cc6795d41b667e9d1ab295cdf302d89b9fe68f9dd560ff4532080f7e4cff6fff87c7765f84f326b01a7302e0e3352d1516e7309994673dca4202f703b037f43c1e09f6ab1f7e75425c06fb57943e893ede85d43ea67a30f727025f4889e06a79547c17db9411722a39745900e2802002ff2a61af08d96aa9f63422f8079516e0585db9520356ca650faec6fc664dd6fa304a8b858e3b9e90cef3112cc49916f7dff647c5450e41c315f76fbe5e1b181025de2fee5b61db315ce4edd6c3fa7bfed127e89e39a5977ec64fe2144de56e7e7b5336a4d14325d72695d1e5f4c6ba8f942ce26f1a002455aede42d5cd59a12ef8f48b9b42532df491440382fcbe04c40f6bc7c5bc8e4b9eabbd95286cf6f3a4255caf644fe7d6f9cbbc3bedf358d901ca9c09b759951b51c50efd3eb0e275502eab622a64441857551303ed77a8892ba23cfbfa639ca7bf39d1b2175e18fc7fb458e7a9402a85c16532abba76e9c39cbc485173abee8531efe30007b0dadae8fa9705018b84bfac7b10eb55e57a86d3193dab42d1bdfca03d82afb068dff4392b987c91a0d5cea4d1ff4008085cac743141bcea290089ab826adace887c3536cdbd24ad526b837366a53a0f399f3eb67151d9e4995fe270aafd0a8dee7d3f7f0341cd025caff9278400b91f95f7b4e9e6aced39d968fae5a17707fcea99eb3f5dc180b19eb18e43832df1da7ee51668c8c71eeceea0f7d3be59b46a73718a46467e6d712d8dd6c04b12b282bf61f405af2dd14847e42e94fe9ed19d7c426619fe678f8005405dcbe189f9bb9043c770e4e6077d858fe060f98cda3b83dfc1d52c31eadb1b79dab757658160bbeb9db8e75a3d030fbeb790740b009ebd4f7553833bd626d4ab33c749ef615d0720ca62b070f68a04a234ca1f7df1de8b128f9dca49d73fba1f784ea324865ff85d1c024322438c0016181abbcd56e446919b7b0a1570536469f7a0bde1a364aef2f589b2e598b8bed485bcf7bfa61c8f59922dd0d300d2bdf3f9d8a4cdf51222f56d87cccc93d069271508c65afd2f6d6ce1f53472327b756809c9e8b293dc95f191cb259596d5cfe084a43ae2dc4fe596f54c36e8a57a5eb9d254b89c207854ef605b7e3f1c9726c50cad002d36f0782dd06f68e5d2b28b6dcb453ac084d66436d1fa46e0c6998029960caa246fb7154162b075607149c0a37481a4fd0fd6f988a3d130e3f7a75967188664ec8dfe67bf9fc31596ce8cead6a8834cafe903f796514fff8cf33fcbf00d08c6372e123f7c70e90e229b6ace2d0999dd136b6977143e21cac6444acc61ceb220654bd478e4dcc06b3acb83a695d78d5d6777cdde1a3e47c35b892c41f99bd793cdf9644f89ebf010b7e7144d7e7100cdd3058b87163cab6b8c25d290baa4275b448e6de2173e9920495e44b627dbe6f81663057c09e11336e16c6b7bff038c24c3712c58cb386f885a42f9315353eb4974f205df245d66ae10dd3eca413a8d41c32a1ef5845e739d4b3169472fec80adc94cccf82d07c71c561fac1b86536ccc42cd6f705f762fcbd7a2655b1e6d192a9bfedeac2baa2b77845d6ffac88732db5957834883deea5fae652525302763a9177f3d505bb53ee0e6ef0661197ba7222e4d65466da04fa77f1cf88019cbee82cff2ce6606fd55df159010eabe8e0326b75eef4948e95a63b5915fc4a7191617a1c607c0169db42a983dcb426e265b885e06251d537db183a9826dd785b0d5c6f51af09519ec9c611741fbb68238808ecfb190ae16b3f6f542cbeff218f9475bd1a476bafe1981bb73c56e5ace4287b44efab9971784eb38b744c0c563afc17dd828201f5e54fb45111301cdc7004baaff81715f71523e49aef39b32c419df5b46d54d04630c2b30312b9a905c28a2eb9ae8aa39ea224c495ec1950425403c1f501f5351022aabc552ad7245efb2a80c06ebe4759177e1142d0ebc29dd1d4fdf0bd1bc72b8df5d196c458bea21dd2780d017e75b30cb2e24b3997a743c6eb667a6f4b1ac1857f7307e18ad1226267602e287080fd8b772c6506f50c46f3032f0268e5877ed2a2a4e6b6cfab6dd3d8e0295903db75fd9a35ae91518a1eae1730b6151fdbb6e936d4e76e94e6dd48e871cf5175a7d05f2fabefc721018b02c05a3ea3938a4dc488ecd398d9851b0cb29ac97b61d5b87ce84bc86f77bf4324b9fff2c1cc8c3c56f5846b1e396ba614b438f673c77a9fb4e75b33c2560703ec7de2eb08b18978c2ccdba7f818455d6fb7523d9a4c76432fc3c648e75d1b26c4310b94e9064b42b0d692da5ba3d8417b164ff908c782e9961a2f6085bdec5a9db0c2cfe0ccb18c30815f1e15bc8fd545a5f13091ac730d12c7c985ad58cbbc6b28ae0ddad00146307d774345fb4f0c7a92af935066501124813ced2d373bb8f3f5101f1c12333ba043ef723b05a195b920b8c57b9c6dc56d779c8a390923ade30d69581d2f0997c9eca9a39ff86321d82039148d6a86b6bbe3aec5b7f696829b311470fb38d517a6bd2104f1d5cdea6b342bd02d972719e36bc446e99423f6ad6e2cb729f7623f94bf92cea4239da2a9dd3fdf5513a1c3176e301c92fbb1c7b4702389a67c1819697af8d0527dbe2a8cf569dd051293f4b831200865f739d4f2e4756c8406fc58dc4b7a039fcd09004f4076fb3f8277c4916361072768fa133d92f3d27b09bc67384a6b4190a19a5c5e575fbbe7f6c4c6b0141c4e58c9e9d1733a5a5f8561f2a4cfc5cadb3e575e8d4799e15d987e6fa36af412635d963da4103b88b189867772bbe0d766c4529537e374b57fde646b4abab185c05dfea37269b71175e142c8faba3f0e60e3f7ac41805c1a6ad693e21549ab38e23a463c290d3f9aa960a72b0b352eeb8f4f8918f8e9fc603de17c35608ed22227fafe1bc0ed9b3794b5b516fabb87517a159402f6ce8e9886bb056c60daca6d24202e424cb9d99355ff31ca8bf9ec569eb078d9faaf254075ff4d4d7748146ac0f15409c1ebe6340c70905f577ca405b9e1ea1345878caef0ce59be78402713ea7a5e112eb94e3337c7ccbfcdb915ce8040920f0ec776896799f5a9714f937e2d9797a586d94143676c706e86928cbb15669d275988c577f4abfba52268960eb2385a7d23bf532ecb63e3c01f7afdcf6e0736d7b8ba603590780c6f0d8ceb415c23b0ac33e7a644954b8ff19bcc19d09b7cedd3e8185ae7a222554fdac284c4bcb9aeb417692f69f43bd7da1392c1ef7ede8a52b6bbbcd2eb10b0b84f8d711c19c78b410ceefa1b7c4f14b8d5a47e445e2d9c93d5e1a661b230237a847158128b833942e50438e6b5b5c49c364c836e0c1d83501a6cf3ee21bf85e8856fa8b10d9547fa742cc4963baed465f33569195c95be3f74f516b661a498a943c240eaee4d05e1c0b3b344d8e831985338d2f5b80d1801ba0bf92d884b698fd73ce931617bf259c37feb002fe4b20e12ec4763d0ab56c2317c431f4879ff6427b8b394210ca072193dfe32fbfaa753816ee29aad7f425bcc63354e6d4edba85182db04f6d60149154bae32b09a3573a858f82dd2febd0d0b8a47612b8b0f55a1b0e868286566be462373b96c0414fa1e9f8c600313173bfcb14b8c0272aa7b4407a4254c141b2e63f2446e5c718723743065d7e06b5cc22581a379fae1bb5e7287293ea25cd00efc8cf21b42f4f91e35c380b8f582307bc3421ea3bc4998d9e6e18466a85359ac5e5a079d4ec8eb901db45a370196ad3fe3708c0178b8e335f3c65791145ab17f2c102caa6c16bb9265cb14bb00834ffcb04e4b39ffdd5591721ea5f716e75064bb939f4e2cba15f489c39388e2d954ed09e9bf61ff7d322a572756075525b417ad18b05090d8d957e1cbbd6c760c1fe5f9a6ecee0055b92093a982cc150c9171151a966d15390da96166515b4488e510118bd416cca643a7c33cd625c56aa344e74dceaece9cfa96e82d6cfdcec68cbf470c9a676567aa3662b5ad3e995e903afb4fdf17efe633caf542d7132c82ecd4e9c327d4e768e195b06072c2fb91188faacbc539c589d2572b8c57c5bb8f30b9275774953e9743d3e0b9883d71a43747e5f2ab13df9423ab6ba7d0024433a50f681a2cf2adff813b1e8fd073fe8cd8ba2dde8c08518c71b9d9710ab5bfb0ee8760d271dedb8f913f04bedd9f3e3ac63500e83401efc37a8bddf68cb21499376ad1ae82c00db1a29a643174a01d29d3c919ce80fb0fd3e2255fc141b39d1464280dc4cf11f428821c1921b6acba7cede099aceac4d731ed0d58669e3ada2d0d4b7c0e481eb97fc9e4e54b98b2d737e2a98ffc8b03fa7fb455930aa0a7d01c2cd5c02a6c1628cd01214e9cc28d0a6e38a5fd453e96620cba2ca5444f5bbedbb95d9d309d4d65cb8e844cd146cde92ecb011f98f6d76f1ddc89eea88e44c0b99e241af12df1c5d5df740713f4802a214e76dc9a11e099529162736c198b5089df34f8307eae858a0f68b310cc1d165f620902ad8989643523f66b8367b1de5b4efe3bd15787e90cebe44003afad128fbfeb1452eeb4"}}, &(0x7f0000001900)) syz_io_uring_setup(0x3f3, &(0x7f00000002c0)={0x0, 0xa66c, 0x20, 0x0, 0x2a2, 0x0, r2}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) syz_ublk_setup_io_uring(0x6e1d, &(0x7f0000000700)={0x0, 0x4f3, 0x20, 0x3, 0x188, 0x0, r0}, &(0x7f0000000780)=0x0, &(0x7f0000001940), &(0x7f0000001980)) syz_ublk_add_dev(0xffffffffffffffff, r3, 0x0, r1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000805, 0x0, 0xfffffcd2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='./file0\x00', 0x81fe, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)=0x200000) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) mount$incfs(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x200001, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000003f80)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000004040)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001b00)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x4000800) creat(&(0x7f0000000080)='./file0\x00', 0x60) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) 0s ago: executing program 2 (id=62): prctl$PR_MCE_KILL_GET(0x22) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4086, 0xff6}, {&(0x7f0000000840)=""/193, 0xffffffffffffff49}, {&(0x7f0000000980)=""/279, 0x117}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000080)=""/205, 0xe0}, {&(0x7f00000004c0)=""/88, 0xfffffe6c}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f0000000540)=""/123, 0x71}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000040)=""/33, 0x21}], 0xa}, 0x120c}], 0x3, 0x0, 0x0) (rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x500d4) kernel console output (not intermixed with test programs): [ 6.925355][ T36] audit: type=1400 audit(1779180343.550:58): avc: denied { read } for pid=202 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 16.078122][ T36] audit: type=1400 audit(1779180352.720:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.081991][ T36] audit: type=1400 audit(1779180352.720:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.085123][ T36] audit: type=1400 audit(1779180352.720:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[1742]" dev="pipefs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.088219][ T36] audit: type=1400 audit(1779180352.720:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.091696][ T36] audit: type=1400 audit(1779180352.720:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 23.884171][ T36] audit: type=1400 audit(1779180360.520:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.885736][ T286] cgroup: Unknown subsys name 'net' [ 23.906835][ T36] audit: type=1400 audit(1779180360.530:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.934148][ T36] audit: type=1400 audit(1779180360.550:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.934401][ T286] cgroup: Unknown subsys name 'devices' [ 24.116432][ T286] cgroup: Unknown subsys name 'hugetlb' [ 24.122078][ T286] cgroup: Unknown subsys name 'rlimit' [ 24.254595][ T36] audit: type=1400 audit(1779180360.900:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.277808][ T36] audit: type=1400 audit(1779180360.900:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.302614][ T36] audit: type=1400 audit(1779180360.900:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.311829][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.334595][ T36] audit: type=1400 audit(1779180360.980:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.360083][ T36] audit: type=1400 audit(1779180360.980:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.395786][ T36] audit: type=1400 audit(1779180361.040:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.396259][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.421311][ T36] audit: type=1400 audit(1779180361.040:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.230798][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.237978][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.245114][ T294] bridge_slave_0: entered allmulticast mode [ 25.251318][ T294] bridge_slave_0: entered promiscuous mode [ 25.257957][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.265050][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.272109][ T294] bridge_slave_1: entered allmulticast mode [ 25.278430][ T294] bridge_slave_1: entered promiscuous mode [ 25.290243][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.297458][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.304587][ T293] bridge_slave_0: entered allmulticast mode [ 25.310805][ T293] bridge_slave_0: entered promiscuous mode [ 25.322761][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.329865][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.337022][ T293] bridge_slave_1: entered allmulticast mode [ 25.343212][ T293] bridge_slave_1: entered promiscuous mode [ 25.431541][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.438812][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.445891][ T296] bridge_slave_0: entered allmulticast mode [ 25.452144][ T296] bridge_slave_0: entered promiscuous mode [ 25.458805][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.465874][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.472920][ T296] bridge_slave_1: entered allmulticast mode [ 25.479215][ T296] bridge_slave_1: entered promiscuous mode [ 25.536694][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.543841][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.550963][ T295] bridge_slave_0: entered allmulticast mode [ 25.557174][ T295] bridge_slave_0: entered promiscuous mode [ 25.563610][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.570682][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.577804][ T295] bridge_slave_1: entered allmulticast mode [ 25.583978][ T295] bridge_slave_1: entered promiscuous mode [ 25.658626][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.666230][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.673508][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.680556][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.698076][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.705259][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.712706][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.719874][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.749042][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.756139][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.763423][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.770660][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.805958][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.813028][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.820346][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.827396][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.848401][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.855676][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.863671][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.870982][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.878244][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.885535][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.909402][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.916568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.936122][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.943168][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.951247][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.958312][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.974396][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.981458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.999831][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.006900][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.023258][ T293] veth0_vlan: entered promiscuous mode [ 26.031185][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.038237][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.058762][ T293] veth1_macvtap: entered promiscuous mode [ 26.091653][ T296] veth0_vlan: entered promiscuous mode [ 26.102706][ T294] veth0_vlan: entered promiscuous mode [ 26.132421][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.134325][ T294] veth1_macvtap: entered promiscuous mode [ 26.156106][ T295] veth0_vlan: entered promiscuous mode [ 26.164786][ T296] veth1_macvtap: entered promiscuous mode [ 26.199864][ T295] veth1_macvtap: entered promiscuous mode [ 26.299821][ T316] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 26.307818][ T316] netlink: 'syz.0.5': attribute type 27 has an invalid length. [ 26.341071][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.360738][ T327] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 26.541915][ T344] SELinux: failed to load policy [ 26.555122][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.705464][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.716766][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 26.729886][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 26.734301][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.739344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.755863][ T9] usb 4-1: config 0 descriptor?? [ 26.804321][ T311] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.894370][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 26.900967][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 26.909125][ T45] usb 1-1: config 0 has no interface number 0 [ 26.915531][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 26.925706][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 26.937482][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 26.946712][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.954893][ T45] usb 1-1: Product: syz [ 26.959179][ T45] usb 1-1: Manufacturer: syz [ 26.963917][ T45] usb 1-1: SerialNumber: syz [ 26.969514][ T311] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 26.981107][ T45] usb 1-1: config 0 descriptor?? [ 26.986140][ T311] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.999154][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.005944][ T341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 27.005952][ T311] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 27.013229][ T341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 27.022257][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.038726][ T311] usb 3-1: config 0 descriptor?? [ 27.044112][ T344] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 27.178774][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 27.184876][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 27.194049][ T9] usb 4-1: USB disconnect, device number 2 [ 27.240898][ T45] asix 1-1:0.34: probe with driver asix failed with error -71 [ 27.250650][ T45] usb 1-1: USB disconnect, device number 2 [ 27.388875][ T353] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 27.428712][ T364] Zero length message leads to an empty skb [ 27.459832][ T311] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x2 [ 27.465056][ T368] netlink: 'syz.1.15': attribute type 93 has an invalid length. [ 27.469149][ T311] holtek_kbd 0003:04D9:A055.0001: unknown global tag 0xc [ 27.482216][ T311] holtek_kbd 0003:04D9:A055.0001: item 0 2 1 12 parsing failed [ 27.496252][ T311] holtek_kbd 0003:04D9:A055.0001: probe with driver holtek_kbd failed with error -22 [ 27.672515][ T311] usb 3-1: USB disconnect, device number 2 [ 27.820989][ T396] syz.0.23: attempt to access beyond end of device [ 27.820989][ T396] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 28.054327][ T345] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.054327][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 28.214607][ T345] usb 4-1: Using ep0 maxpacket: 8 [ 28.215419][ T45] usb 2-1: config 29 has an invalid interface number: 91 but max is 0 [ 28.220844][ T345] usb 4-1: config 2 has an invalid interface number: 76 but max is 0 [ 28.228158][ T45] usb 2-1: config 29 has no interface number 0 [ 28.228192][ T45] usb 2-1: config 29 interface 91 has no altsetting 0 [ 28.236926][ T345] usb 4-1: config 2 has no interface number 0 [ 28.243968][ T45] usb 2-1: New USB device found, idVendor=50ff, idProduct=2657, bcdDevice=56.04 [ 28.249778][ T345] usb 4-1: config 2 interface 76 has no altsetting 0 [ 28.260584][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.271003][ T345] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=49.db [ 28.273811][ T45] usb 2-1: Product: syz [ 28.279646][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.296411][ T45] usb 2-1: Manufacturer: syz [ 28.303636][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.308517][ T45] usb 2-1: SerialNumber: syz [ 28.318424][ T345] usb 4-1: Product: syz [ 28.322703][ T345] usb 4-1: Manufacturer: syz [ 28.327773][ T414] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46293 sclass=netlink_xfrm_socket pid=414 comm=syz.2.29 [ 28.328288][ T345] usb 4-1: SerialNumber: syz [ 28.357764][ T416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.371302][ T416] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 28.494371][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 28.501042][ T9] usb 1-1: config 1 interface 0 altsetting 244 bulk endpoint 0x82 has invalid maxpacket 8 [ 28.511027][ T9] usb 1-1: config 1 interface 0 altsetting 244 bulk endpoint 0x3 has invalid maxpacket 1023 [ 28.521209][ T9] usb 1-1: config 1 interface 0 altsetting 244 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.534451][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 28.542574][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.554574][ T45] cdc_eem 2-1:29.91: probe with driver cdc_eem failed with error -22 [ 28.556044][ T345] usb_ehset_test 4-1:2.76: probe with driver usb_ehset_test failed with error -32 [ 28.567700][ T45] usb 2-1: USB disconnect, device number 2 [ 28.574325][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.594295][ T9] usb 1-1: Product: syz [ 28.598483][ T9] usb 1-1: Manufacturer: syz [ 28.603074][ T9] usb 1-1: SerialNumber: syz [ 28.611542][ T345] usb 4-1: USB disconnect, device number 3 [ 28.619797][ T407] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.627369][ T407] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.734604][ T66] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 28.884719][ T407] capability: warning: `syz.0.27' uses 32-bit capabilities (legacy support in use) [ 28.885471][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 28.905412][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 28.918552][ T66] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 28.927884][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.936696][ T66] usb 3-1: config 0 descriptor?? [ 28.941960][ T421] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 29.007971][ T9] usb 1-1: bad CDC descriptors [ 29.014781][ T9] usb 1-1: USB disconnect, device number 3 [ 29.066043][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 29.066063][ T36] audit: type=1400 audit(1779180365.710:138): avc: denied { write } for pid=426 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.106341][ T36] audit: type=1400 audit(1779180365.750:139): avc: denied { write } for pid=428 comm="syz.3.33" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.136536][ T36] audit: type=1400 audit(1779180365.750:140): avc: denied { open } for pid=428 comm="syz.3.33" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.160839][ T36] audit: type=1400 audit(1779180365.760:141): avc: denied { append } for pid=430 comm="syz.1.34" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.183989][ T36] audit: type=1400 audit(1779180365.760:142): avc: denied { setopt } for pid=430 comm="syz.1.34" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.204453][ T36] audit: type=1400 audit(1779180365.760:143): avc: denied { read } for pid=430 comm="syz.1.34" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.230249][ T36] audit: type=1400 audit(1779180365.760:144): avc: denied { open } for pid=430 comm="syz.1.34" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.254031][ T36] audit: type=1400 audit(1779180365.760:145): avc: denied { write } for pid=430 comm="syz.1.34" name="/" dev="incremental-fs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.277402][ T36] audit: type=1400 audit(1779180365.760:146): avc: denied { add_name } for pid=430 comm="syz.1.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.297909][ T36] audit: type=1400 audit(1779180365.760:147): avc: denied { create } for pid=430 comm="syz.1.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.357207][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.375335][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.382584][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.392654][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.405515][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.412463][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.419632][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.426572][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.433581][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.440673][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.447961][ T66] wacom 0003:056A:00ED.0002: unknown main item tag 0x0 [ 29.462163][ T66] wacom 0003:056A:00ED.0002: hidraw0: USB HID v0.05 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 29.504280][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 29.654532][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 29.784351][ T66] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 29.792222][ T9] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 29.884313][ T345] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.924117][ T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.932880][ T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.944334][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 29.949760][ T9] usb usb4-port1: attempt power cycle [ 29.957090][ T66] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.968830][ T66] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 29.977912][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.985940][ T66] usb 1-1: Product: syz [ 29.990089][ T66] usb 1-1: Manufacturer: syz [ 29.994693][ T66] usb 1-1: SerialNumber: syz [ 29.999818][ T66] usb 1-1: config 0 descriptor?? [ 30.035661][ T345] usb 2-1: config 1 has an invalid interface number: 8 but max is 1 [ 30.043699][ T345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.053839][ T345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 30.062761][ T345] usb 2-1: config 1 has no interface number 0 [ 30.068861][ T345] usb 2-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.083227][ T345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.092334][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.100805][ T345] usb 2-1: Product: syz [ 30.105000][ T345] usb 2-1: Manufacturer: syz [ 30.109601][ T345] usb 2-1: SerialNumber: syz [ 30.116248][ T345] cdc_ncm 2-1:1.8: CDC Union missing and no IAD found [ 30.123048][ T345] cdc_ncm 2-1:1.8: bind() failure [ 30.206609][ T345] usb 1-1: USB disconnect, device number 4 [ 30.304303][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 30.324651][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 30.454328][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 30.474699][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 30.480200][ T9] usb usb4-port1: unable to enumerate USB device [ 31.366706][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 31.470624][ T9] usb 3-1: USB disconnect, device number 3 [ 31.483386][ T525] tmpfs: Unknown parameter 'nò_inodes' [ 31.804340][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.955432][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.967020][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 31.978246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.989497][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.002472][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.011551][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.020283][ T9] usb 3-1: config 0 descriptor?? [ 32.025669][ T527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.435290][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 32.444607][ T9] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 32.484306][ T31] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 32.581194][ T311] usb 2-1: USB disconnect, device number 3 [ 32.637178][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.647465][ T31] usb 4-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.660449][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.667157][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 32.676340][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.684986][ T31] usb 4-1: config 0 descriptor?? [ 32.691031][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 32.705277][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.713850][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.731712][ T31] usb 3-1: USB disconnect, device number 4 [ 32.892482][ T9] usb 4-1: USB disconnect, device number 8 [ 32.934327][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.064329][ T311] usb 2-1: device descriptor read/64, error -71 [ 33.281087][ T560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.304332][ T311] usb 2-1: device descriptor read/64, error -71 [ 33.376998][ T564] overlay: Unknown parameter 'memory.events' [ 33.418419][ T574] ======================================================= [ 33.418419][ T574] WARNING: The mand mount option has been deprecated and [ 33.418419][ T574] and is ignored by this kernel. Remove the mand [ 33.418419][ T574] option from the mount to silence this warning. [ 33.418419][ T574] ======================================================= [ 33.544306][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.610242][ T294] ------------[ cut here ]------------ [ 33.615792][ T294] WARNING: CPU: 0 PID: 294 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.623717][ T294] Modules linked in: [ 33.627632][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 33.639301][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.649400][ T294] RIP: 0010:drop_nlink+0xce/0x110 [ 33.654499][ T294] Code: 04 00 00 be 08 00 00 00 e8 cf 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 83 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.668126][ T587] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 33.674369][ T294] RSP: 0018:ffffc9000b66fc40 EFLAGS: 00010293 [ 33.682028][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 33.688113][ T294] RAX: ffffffff81f23fae RBX: ffff888133c6ea40 RCX: ffff888101fe1300 [ 33.695630][ T311] usb 2-1: device descriptor read/64, error -71 [ 33.703595][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.717868][ T294] RBP: ffffc9000b66fc68 R08: 0000000000000003 R09: 0000000000000004 [ 33.725897][ T294] R10: dffffc0000000000 R11: fffff520016cdf80 R12: dffffc0000000000 [ 33.733885][ T294] R13: 1ffff1102678dd51 R14: ffff888133c6ea88 R15: 0000000000000000 [ 33.741910][ T294] FS: 000055558f442500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.750892][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.757518][ T294] CR2: 000055558f4759d8 CR3: 000000012c174000 CR4: 00000000003526b0 [ 33.765564][ T294] Call Trace: [ 33.768848][ T294] [ 33.771776][ T294] simple_rmdir+0x153/0x260 [ 33.776343][ T294] vfs_rmdir+0x3e0/0x560 [ 33.780621][ T294] incfs_kill_sb+0x109/0x230 [ 33.785386][ T294] deactivate_locked_super+0xd8/0x2a0 [ 33.790787][ T294] deactivate_super+0xb8/0xe0 [ 33.795500][ T294] cleanup_mnt+0x406/0x4a0 [ 33.799947][ T294] __cleanup_mnt+0x1d/0x40 [ 33.804502][ T294] task_work_run+0x1e5/0x260 [ 33.809157][ T294] ? __cfi_task_work_run+0x10/0x10 [ 33.814312][ T294] ? __x64_sys_umount+0x12e/0x180 [ 33.819376][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.824798][ T294] ? __kasan_check_read+0x15/0x20 [ 33.829888][ T294] resume_user_mode_work+0x35/0x50 [ 33.835221][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 33.840797][ T294] do_syscall_64+0x63/0xf0 [ 33.845240][ T294] ? clear_bhb_loop+0x50/0xa0 [ 33.849957][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.855907][ T294] RIP: 0033:0x7fb757f9e097 [ 33.860338][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.865470][ T31] usb 4-1: config 29 has an invalid interface number: 91 but max is 0 [ 33.880944][ T294] RSP: 002b:00007ffe93740918 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 33.889550][ T31] usb 4-1: config 29 has no interface number 0 [ 33.897572][ T294] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fb757f9e097 [ 33.897594][ T294] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe93741ac0 [ 33.904359][ T31] usb 4-1: config 29 interface 91 has no altsetting 0 [ 33.911791][ T294] RBP: 00007fb7580321ca R08: 0000000000008670 R09: 0000000000000001 [ 33.921710][ T31] usb 4-1: New USB device found, idVendor=50ff, idProduct=2657, bcdDevice=56.04 [ 33.926584][ T294] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe93741ac0 [ 33.926604][ T294] R13: 00007fb7580321ca R14: 000055558f4424e8 R15: 00007ffe93743c80 [ 33.934934][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.943623][ T294] [ 33.943639][ T294] ---[ end trace 0000000000000000 ]--- [ 33.946721][ T294] ================================================================== [ 33.952444][ T31] usb 4-1: Product: syz [ 33.960008][ T294] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 33.960043][ T294] Write of size 4 at addr 0000000000000168 by task syz-executor/294 [ 33.968345][ T31] usb 4-1: Manufacturer: syz [ 33.971038][ T294] [ 33.971051][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 33.971090][ T294] Tainted: [W]=WARN [ 33.971097][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.971109][ T294] Call Trace: [ 33.971115][ T294] [ 33.971123][ T294] __dump_stack+0x21/0x30 [ 33.971152][ T294] dump_stack_lvl+0x140/0x1c0 [ 33.971178][ T294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.971206][ T294] print_report+0x3d/0x70 [ 33.971231][ T294] kasan_report+0x162/0x1a0 [ 33.971255][ T294] ? ihold+0x24/0x70 [ 33.971277][ T294] ? _raw_spin_unlock+0x45/0x60 [ 33.971295][ T294] ? ihold+0x24/0x70 [ 33.971316][ T294] kasan_check_range+0x25a/0x2b0 [ 33.971340][ T294] __kasan_check_write+0x18/0x20 [ 33.971358][ T294] ihold+0x24/0x70 [ 33.971378][ T294] vfs_rmdir+0x26a/0x560 [ 33.971404][ T294] incfs_kill_sb+0x109/0x230 [ 33.971424][ T294] deactivate_locked_super+0xd8/0x2a0 [ 33.971450][ T294] deactivate_super+0xb8/0xe0 [ 33.971474][ T294] cleanup_mnt+0x406/0x4a0 [ 33.971497][ T294] __cleanup_mnt+0x1d/0x40 [ 33.971517][ T294] task_work_run+0x1e5/0x260 [ 33.971542][ T294] ? __cfi_task_work_run+0x10/0x10 [ 33.971566][ T294] ? __x64_sys_umount+0x12e/0x180 [ 33.971593][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.971620][ T294] ? __kasan_check_read+0x15/0x20 [ 33.971639][ T294] resume_user_mode_work+0x35/0x50 [ 33.971657][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 33.971682][ T294] do_syscall_64+0x63/0xf0 [ 33.971700][ T294] ? clear_bhb_loop+0x50/0xa0 [ 33.971722][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.971743][ T294] RIP: 0033:0x7fb757f9e097 [ 33.971760][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.971776][ T294] RSP: 002b:00007ffe93740918 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 33.971796][ T294] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fb757f9e097 [ 33.971810][ T294] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe93741ac0 [ 33.971823][ T294] RBP: 00007fb7580321ca R08: 0000000000008670 R09: 0000000000000001 [ 33.971836][ T294] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe93741ac0 [ 33.971849][ T294] R13: 00007fb7580321ca R14: 000055558f4424e8 R15: 00007ffe93743c80 [ 33.971865][ T294] [ 33.971872][ T294] ================================================================== [ 33.979164][ T31] usb 4-1: SerialNumber: syz [ 33.984707][ T294] Disabling lock debugging due to kernel taint [ 33.994340][ T311] usb 2-1: device descriptor read/64, error -71 [ 33.995107][ T294] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 34.124495][ T311] usb usb2-port1: attempt power cycle [ 34.125491][ T294] #PF: supervisor write access in kernel mode [ 34.125506][ T294] #PF: error_code(0x0002) - not-present page [ 34.227459][ T31] cdc_eem 4-1:29.91: probe with driver cdc_eem failed with error -22 [ 34.228161][ T294] PGD 80000001112e3067 P4D 80000001112e3067 PUD 0 [ 34.313793][ T294] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 34.319867][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G B W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 34.333073][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 34.338100][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.348249][ T294] RIP: 0010:ihold+0x2a/0x70 [ 34.352769][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.372547][ T294] RSP: 0018:ffffc9000b66fca0 EFLAGS: 00010246 [ 34.378613][ T294] RAX: ffff888101fe1300 RBX: 0000000000000000 RCX: ffff888101fe1300 [ 34.386589][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.394559][ T294] RBP: ffffc9000b66fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 34.402534][ T294] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888133c6ea4c [ 34.410507][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.418475][ T294] FS: 000055558f442500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.427404][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.433985][ T294] CR2: 0000000000000168 CR3: 000000012c174000 CR4: 00000000003526b0 [ 34.441961][ T294] Call Trace: [ 34.445242][ T294] [ 34.448175][ T294] vfs_rmdir+0x26a/0x560 [ 34.452431][ T294] incfs_kill_sb+0x109/0x230 [ 34.457117][ T294] deactivate_locked_super+0xd8/0x2a0 [ 34.462499][ T294] deactivate_super+0xb8/0xe0 [ 34.467180][ T294] cleanup_mnt+0x406/0x4a0 [ 34.471601][ T294] __cleanup_mnt+0x1d/0x40 [ 34.476021][ T294] task_work_run+0x1e5/0x260 [ 34.480712][ T294] ? __cfi_task_work_run+0x10/0x10 [ 34.486027][ T294] ? __x64_sys_umount+0x12e/0x180 [ 34.491068][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.496464][ T294] ? __kasan_check_read+0x15/0x20 [ 34.501607][ T294] resume_user_mode_work+0x35/0x50 [ 34.506819][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 34.512303][ T294] do_syscall_64+0x63/0xf0 [ 34.516731][ T294] ? clear_bhb_loop+0x50/0xa0 [ 34.521416][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.527320][ T294] RIP: 0033:0x7fb757f9e097 [ 34.531742][ T294] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.551347][ T294] RSP: 002b:00007ffe93740918 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 34.559767][ T294] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007fb757f9e097 [ 34.568088][ T294] RDX: 0000000000000200 RSI: 0000000000000009 RDI: 00007ffe93741ac0 [ 34.576065][ T294] RBP: 00007fb7580321ca R08: 0000000000008670 R09: 0000000000000001 [ 34.584040][ T294] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe93741ac0 [ 34.592141][ T294] R13: 00007fb7580321ca R14: 000055558f4424e8 R15: 00007ffe93743c80 [ 34.600205][ T294] [ 34.603256][ T294] Modules linked in: [ 34.607151][ T294] CR2: 0000000000000168 [ 34.611313][ T294] ---[ end trace 0000000000000000 ]--- [ 34.616765][ T294] RIP: 0010:ihold+0x2a/0x70 [ 34.621281][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 34.640900][ T294] RSP: 0018:ffffc9000b66fca0 EFLAGS: 00010246 [ 34.647081][ T294] RAX: ffff888101fe1300 RBX: 0000000000000000 RCX: ffff888101fe1300 [ 34.655065][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.663037][ T294] RBP: ffffc9000b66fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 34.671019][ T294] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888133c6ea4c [ 34.678999][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.687063][ T294] FS: 000055558f442500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.695995][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.702578][ T294] CR2: 0000000000000168 CR3: 000000012c174000 CR4: 00000000003526b0 [ 34.710555][ T294] Kernel panic - not syncing: Fatal exception [ 34.716953][ T294] Kernel Offset: disabled [ 34.721271][ T294] Rebooting in 86400 seconds..