last executing test programs: 5.674165018s ago: executing program 1 (id=70): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5", 0x11, 0x0, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) r5 = dup(r3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0a008884ffffffffffffaaaaaaaaaaaa0800474d00c40068000080219078"], 0xd6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xff7ff036}, {0x6, 0x0, 0xfe, 0xfffffffe}]}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000300"], 0xa0}}, 0x44000) syz_usb_connect$uac2(0x5, 0xab, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x3, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0xa, 0x29, 0x3}, [@source_unit={0x8, 0x24, 0xa, 0x6, 0x4, 0x6, 0x8, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x95, 0x1, 0x1, 0x2, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x303, 0x24, 0x6, 0x8, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xa, 0x0, 0x0, 0x7, 0x6, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x6, 0x7f, {0x8, 0x25, 0x1, 0x3, 0x33, 0x9, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x0, 0x8c, {0x8, 0x25, 0x1, 0x2, 0x0, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14) 4.646800471s ago: executing program 3 (id=74): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x2878a81d0e412069, 0x1, 0x5, 0xc}, {0x9, 0x5, 0x4, 0x2, 0x8, 0xfd, 0xb, 0x62}, {0x9, 0x5, 0xd, 0x3, 0x400, 0x10, 0x1, 0x7f}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)=0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_usb_disconnect(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r4, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f00000024c0)={0x2020}, 0x2020) lseek(r10, 0xfffffffffffffff5, 0x1) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x40000) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001500)={0x0, &(0x7f0000001680)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0xfffffffffffffffc, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0x3b7b, 0x7}}, @nested_load_syzos={0x136, 0xa8, {0x88a, 0x7fffffffffffffff, [@wrmsr={0x65, 0x20, {0xf2e1e8ca03f9fc95, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x6000, 0x3, 0x7, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x2}]}}, @code={0xa, 0x77, {"66baf80cb8c465358fef66bafc0ced0fc7be61330000400f0666baf80cb888b7c584ef66bafc0c66ed66b89c008ee066b881008ed0f2f2460f0d84ef8b19000066baf80cb8cedf7d89ef66bafc0cb0e3eeb94d020000b852c70000ba000000000f30460f01c5"}}, @rdmsr={0x66, 0x18, {0x834}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0xfffffffe, 0x6}}, @cpuid={0x64, 0x18, {0x5, 0x2d70}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x656, 0x7fff, 0x0, 0x5}}, @code={0xa, 0x57, {"40f40f019e7d3a000066baa000b0e4ee650f52c9260fb6730066bad00466b8000066ef0f32c74424001f000000c744240203000000ff2c24440f01cfc4835d18974337db0a35"}}, @code={0xa, 0x60, {"66ba2100b89e290000ef420f5d9a1a1e0000c4e3610e7e0000b9030800000f3266b828010f00d0c74424006c000000c744240200600000ff2c2466b8c9008ec0450fc71dd9cce4fb400f06f3450f08"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xcd14, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x5b, {0x1, "66ba4000ed653ef3420f1ed3430f08660fe272a7c74424001d010000c744240200000000ff2c2466ba4300ed470f22c7c442c9a80d2bc10000640f300fc79b4424c624"}}, @wr_drn={0x68, 0x20, {0x2, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x58, {0x1, 0x4, [@uexit={0x0, 0x18, 0x8001}, @wrmsr={0x65, 0x20, {0x659, 0x1}}]}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x423, 0x10001, 0xfb, 0x10001}}, @code={0xa, 0x66, {"66baf80cb8a2a3d087ef66bafc0cec66ba2100b007ee460f2203440f06c4e229930c2b48b8433d0000000000000f23d80f21f835400000300f23f8420f3226f2400f59a69a8a0000b8010000000f01c1c4027947d0"}}, @wrmsr={0x65, 0x20, {0x9d5, 0x40}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x41e, 0x4, 0x38, 0x35}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x537}) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000001540)={{0x8080000, 0x25000, 0xe, 0x40, 0x1, 0xf2, 0xcb, 0x0, 0x1, 0x9, 0x72, 0x51}, {0x5f002, 0x58000, 0xd, 0x1, 0x2, 0xa, 0x6, 0x10, 0x5, 0x6, 0x7, 0x82}, {0x1, 0x8000004, 0x0, 0xfb, 0xd8, 0x8, 0x2, 0x6, 0x8, 0x80, 0x2, 0x7}, {0x33329000, 0x54000, 0x10, 0x9, 0x0, 0x5, 0x9, 0x9, 0x9, 0x5, 0x21, 0x2}, {0x8000000, 0xfec00000, 0xe, 0x2, 0x6, 0x28, 0x8, 0x8, 0xf8, 0x9, 0x9, 0xe}, {0x25000, 0x26000, 0xa, 0x2d, 0x1, 0x4, 0x0, 0x4, 0x25, 0x8, 0x8, 0x8}, {0x9000, 0x7000, 0x10, 0x1, 0x40, 0x2, 0x8, 0x0, 0x26, 0x2a, 0xd, 0x2}, {0x50000, 0xdddd0000, 0x10, 0x9, 0x9, 0x1, 0x2, 0x1, 0x1, 0x8, 0x15, 0x5}, {0x54000, 0x4}, {0xeeee8000, 0x7}, 0x40000, 0x0, 0x70000, 0x102200, 0x6, 0x400, 0x7000, [0x0, 0x800, 0x0, 0xd393]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r7, 0xacd55000) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x4, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r12 = syz_usb_connect$uac3(0x2, 0xf3, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x2e, 0x0, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x22, 0xffffffff}, [@feature_unit={0xd, 0x24, 0x7, 0x6, 0x5, [0xe, 0x10]}, @multiply_unit={0xb, 0x24, 0xd, 0x7, 0x3, 0x80, 0x8000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x60, 0x4, 0x0, 0x0, "bb46a37f"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x81, 0x2, 0x8, 0x1, "04925a3671"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x6, 0x0, {0xa, 0x25, 0x25, 0x2, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x13, 0x7, 0x6, 0x7f, 0x85}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xeb, 0x2, 0x0, 0x9}, @as_header={0x17, 0x24, 0x1, 0x9, 0xe3, 0xf03d, 0x0, 0x7, 0xe7, 0x4, 0x98}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe4, 0x6, 0x3, 0x5, 0x8d}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x4, "239a6b"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2, {0xa, 0x25, 0x25, 0x1, 0x1, 0xf}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x3, 0x8, 0x10, 0x20}, 0x1d, &(0x7f0000000440)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x7, 0xff00, 0x5, [0xc000, 0xc000, 0x0]}]}, 0x7, [{0xb9, &(0x7f0000000500)=@string={0xb9, 0x3, "0f33eed2555ca260ba6ee386348bc8480abcdc891209ca8f8903e4501d710797ffc37cfc1251c1652d1c4bd110c0b503b961199017ad95b5a02ee8b218adcf0a028fb4d49a910ebf7fbedec54cb1d34ce83b782271128a829385357617ae193210ccc80343ecd9cca9f1cdcf845ebd4ea19ed22a9d49b7e996d4061b2aedd4197e7dde6eeb8f1076533b9a7a2d07f1fae169f2bd9a5f1d4c0ea262b7617e3c319953db5b7e7243806b216eb14da47737e6c1061d9b9123"}}, {0xb7, &(0x7f00000005c0)=@string={0xb7, 0x3, "442fb8c89c5d475bef155684f5d0da083febbee0bb57ea01f68f68a83df5413bd212b23fb1d304ee97ec848c036772445de4cc0aaf40fb61136d6ada78bf1a9108ea5ea2c2fc6c839abd9bb560990dec5ccc3004f91913c64909c6455bb2559a57d0938123028eaec59b8baabb2327e990bb98598907a99be8c3fc78967eff84e4bd90345e29cd1073eb8b3550e2cc80fb4cccbc58141911fc9cad0ff1e8e14ae2a2811e923caf422857f5a36684694a31940a81a4"}}, {0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "1a4d7a5157e10daed8346a9b90f1d55c4fa29ac81ed343664eb93377de967b0e6ed9f8d1233368e2dbd6d7118fe1fca1ae55fc18cc1768996c584ad6582217a0d4aa65e243eb0c3de21958d5ae6ce62dafa42fc5ea562c87da151326a66ef43b916dc0c2f22f779c10fd540355c3ae1772fcf0653e71da8077e55dc49a6e0164d6e706836121029ef3b1d397417271e50860e4855aa6395d04"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3001}}, {0xd4, &(0x7f0000000780)=@string={0xd4, 0x3, "449666275a6b7cc39befd7fa3db2ac63118ed4d0784f92951b85485e49d6abb5ef1ccf190ff514eab2e32ed57387b4e0871c047ca91dce2d8edd716d4ff22892cf912a08ef9499d022cb8c02ec66583f0ec960cc687e6e6aca294f1838553222842d6a68b968a29ba28067285e9f7adbb2a76da3b21e6e8e3723fca981ec09e5573af706865c131ec33506936b169f7c98779002f9b593ae22bf4c08046eb438d78f9e028e8048858a5aa221255a8cad770ed311bb919b9f67f97380968477668ec699f1725674af2f91a384dcdfcaa1e413"}}, {0x1d, &(0x7f0000000880)=@string={0x1d, 0x3, "a301f8356d488148779049fe07a0283bfeb317f61875ca7fd61a67"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io$uac3(r12, &(0x7f0000000b80)={0x14, &(0x7f0000000980)={0x0, 0x2e, 0xfb, {0xfb, 0x21, "d8f0cd1b54a107cf0fa28b01d147ee8a36f6365a38b8568e1477f3c21f99f3de90e9e0f18f5847379684937b71ef8b4af5070d8dddf2689e1764bcc49eca3cdf524bf52d9d9bc01ffa233912ef8eccb7fdded3e1dddda75554f97501fc24a9290310229cf27231a7f28870aea2ec60f10d1d6c783f363a077801d228cf77d84f178f08c4af6e8159dbe59c37b2405e6e8f315b63589f5cf9e933228bc92935bd2f4940a707ffcff0e1bf93c5063bf8ea49dce626122fac9adc58c10fa8260e281f934ab9c3730747666f857a7a13881769e92f9d74a81616703a959348896f192f159e2a3bfdaa5db00db5699a40972740753fb2a6f1670a8a"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "08076fb74db932975744e70b77437e61d3b687f062ca0bb9df78aa8f1a705f95e15d8b9acd1d61bb197891b26ba596b6db655075f141d614b3ed70f4885ab6a410588010587cd2745890f982e17f608da1361d05f8593f2c6f90984ab5cf2d75d62b01d38989d0f9adc1644a0d5fb3df537e9d8ac502230f77ad500f569d3d7f5ecd41ff45fe47d06142f70c9ba34b9b03da3b7ee747d279cf4dc25a530601db9077a7e4647e"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x20, 0xf, 0xe4, "cfc41c5aaf6d72a3ff2d21fc2a37a26c35e6cc7e4d26b320386cdfd3de2ca1933533c7523b040a411c03349d3a5f901bd79d6775034718a4f0821a1da32c903f8aa24ca24ad1bb1842a955d194b417bdc4eda6406c8a587de08e74aeba968de34f82ef9d4694e4ee8baf793cb3ce1b37cf68f3140ac180a1e58dcd8856ae57270b71e784d35fe94be1f4d68f501022f55eec1ebe8a7246d8d90a55bc4e208c14cb822de0e6e4c7f73fad3ffe54677926ea214cfa46fc7e33234c87161cff0c21372ec2412688c138580d2cf9a7bee4677d7c545b6b470d32e48bc88dc8c953d54e8d23f1"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000d80)={0x20, 0x81, 0x1, "85"}, &(0x7f0000000dc0)={0x20, 0x82, 0x1, 'q'}, &(0x7f0000000e00)={0x20, 0x83, 0x2, "ce93"}, &(0x7f0000000e40)={0x20, 0x84, 0x3, "425b8f"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, "52d2e2"}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.368132231s ago: executing program 1 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe9a8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x9498e17e2907101c, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x99, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0xdd4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0x80, 0x9}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 3.214919703s ago: executing program 1 (id=77): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x10}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000000)=0x4, 0x4) 3.157345197s ago: executing program 1 (id=78): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r11, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r11, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/15, 0xf}, 0x9}], 0x1, 0x1000400000de, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r13) sendmsg$IEEE802154_LIST_IFACE(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="071f2cbd7000fedbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r12, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r14, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}}, 0x363e48f310df1897) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x6, 0x8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x40, r9, 0x60b, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060}, 0x40000) 3.057731364s ago: executing program 2 (id=79): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="f081550000a000000f00481865470f21d10fbe252e8a094d36420f705626002e670f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x5a}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd2000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, &(0x7f0000000000)=[@cr4={0x1, 0x100ca1}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.929609463s ago: executing program 2 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x400200, 0x10) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0x7b1d4c6c508275a3, 0x126) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000080000000000000000070000000703330703e50000"], 0x18}}], 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) syz_clone(0x100480, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)={&(0x7f0000b33000/0x2000)=nil, 0x40000, 0x8}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.840297559s ago: executing program 3 (id=81): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r1}]) 2.83450154s ago: executing program 2 (id=82): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in=@private=0xa010102, 0xfffb, 0x4, 0x0, 0x0, 0xa, 0x60, 0x439d1b266f4a015b, 0x32}, {0x0, 0x4, 0x5, 0x0, 0x40, 0x8, 0x2}, {0xfffffffffffffffe, 0x3, 0x0, 0xcd17}, 0x9, 0x40000000, 0x0, 0x1, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x84000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x929d, 0x27}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15e21099045f90b0}, 0x2400c800) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000ca8fe000000200000000000000000000000000000000000000000000000000000006"], 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.749323635s ago: executing program 3 (id=83): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') lseek(r1, 0x38, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x400300, 0x0, 0x9, 0x10000001, 0x1, 0xfffffffd, 0x4}}) sendmmsg$inet6(r2, &(0x7f0000008480)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4, @local, 0x1f}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@dontfrag={{0x14, 0x29, 0x36, 0x5}}], 0x18}}], 0x1, 0x4044800) syz_usb_connect(0x5, 0x484, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x73, 0xd3, 0x49, 0x40, 0x2040, 0xd8d3, 0x8057, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x472, 0x2, 0x2, 0x1, 0x60, 0x3, "", [{{0x9, 0x4, 0xd2, 0x0, 0x8, 0xca, 0xb8, 0x6d, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x56a3, 0xf, 0x2, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x42b, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xf1b}, @mdlm_detail={0x16, 0x24, 0x13, 0x8, "c0dcbb7a8575bb0dbb8b81dd6b1d9eef0c59"}]}, @generic={0x86, 0x2, "3f4460c100314f6f5da57c3ad97bf858ba3d25db8f43fc910c41b5decfd0687a2841c430b1661fa06f62070fb49ad4d747ca987511bf30c83059945635967bba7f352b32559ca2d9559e7b02e3c776010b28467964cf970ee86890ebb017e1c07f967f7745ffb6c3eeeb196e3b0db77bce09468c1153b7aeb690383a414d309b7dca02fc"}], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x1e, 0x0, 0xd8, [@generic={0x32, 0x22, "c75b7d05540795da890e26ee2865d97d0f28d2e6913f066f7d4b74c27057702b8a98e119441530b9e825bf33370210c0"}, @generic={0xdd, 0x11, "2f0bc74a5924ec5f8062e094a0cd4690ebeb02319725e07a79285ed9fa080fd902357a3ac52bcd19fcb7fb2adc03586b46027feb825ddb040feb345e67133dfcc4fbc508450eccfd9344156917947203b4c8fe156854dbe0f5d1e68e77d46389a6679a7185ec923e40ca38db72ed1a5a59910a64b69a1c101fb9d1f09fe6a77fa3c5a1716510cee31dbec087083eed7efbbb9bde27d41ea2d38951d04fdfe25907fc9a65c61a14270a3f458cce423b22863f5e7802a5c9a5443356db6f33cf358d74c304a90b145cca2768d8cd5f4ef4e7175625e71fabc95502f5"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x51, 0xd6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x40, 0x29, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0xf0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x8}, @generic={0x63, 0x1, "d45bf0e4bd0411576a46d5977f6d9aa7b22b2852d498a0c10860d0c068f653d884b03e4624cd7421dc1635489430ad9d579c4ffb68e08667ca9a618f332fef0169f369c5854128544543474acdb8c3489ab3b10dd41e07f251f34ecb0ceb08035f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x9, 0x5b, [@generic={0x76, 0x23, "91b20d388c7eead87b902abcc836ec95ef2836c30a620e05f19cbeec1e8431511f8e6318d181dd53b9af1ea89b4a16e87b296237c08f622ce9898b308f6034c35e8b0e94f062356044bd1c226863fa94c46a9b2e5d403981501344e40c3abcfd117aee90a76cdc864da779296715810402f69ddd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x40, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xa, 0xab, 0x0, [@generic={0xa2, 0x24, "a09dd855326f5d64abd36bdfc5bded9ad097146c7e5119d243ebc1096a9ee3d303d7d8990bca3c9841a1eaaa5e8c16d563700c7fafda15e7f1adca15437ed4ee2fbfcbdd62db215ad001fb8cc70422f76b507e2512affcb11bb645ed091e7fdc57ffe8d8023ad95ae7fe9d40bcc248bb7c7ed8c98ca81d4f7f6e7b44812f658622bff92f878fd3b37c5b4c70b72fccd40685737b9bb7b1b99666b49321e51ba8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x0, 0x2}}]}}, {{0x9, 0x4, 0xf2, 0x0, 0x2, 0x59, 0xfc, 0xf8, 0x7, [], [{{0x9, 0x5, 0x80, 0x8, 0x400, 0x2, 0x6b, 0x9, [@generic={0x80, 0x22, "160fcab4639adb92efa35bf9552d8c407cd8a7bc418bda77b0ccb1cb61c8ecc45f73c0da4f242ad6343d9e12a1a9d2ab18b9907bb247e160e06590de6894796c38769ed81b9805b3af49337ade2ccc57c9b4ab16b3d932b8cc3397eead7cdc2275e8d41164b29f6131b45feca5939ef16a0a080d9e0067ec9eed85e70a89"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0xe, 0xfa}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3c, &(0x7f0000001280)=@string={0x3c, 0x3, "ad2aefeabaa00c4864148d9947bd90da953431e84741b845d6730f7e9353fd3573b88d6fa2cdf9a40f38cc49468c897a5b8ef0305d77f70c0727"}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000640)=ANY=[]) 2.692115569s ago: executing program 2 (id=84): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x52, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x54, @string={0x54, 0x3, "4054b0cb2bd5ab6cd05ef8f6e866b887a14c0e757d705395fae7d67d02c0ba0756c4f13c47a7ad631a696140581132698501e2b0e1cd8a493bafda9e43dda93e5f16ba050411e3c6d0b518e0b8f3339b2259"}}, 0x0, 0x0}, 0x0) 2.064003374s ago: executing program 0 (id=87): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x7840, 0x7, 0x12, 0x7, {{0x11, 0x4, 0x0, 0x3, 0x44, 0x64, 0x0, 0x81, 0x0, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x1b, 0xa, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @local]}, @generic={0x44, 0xf, "77423574ce4b9696fa71f66efd"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x9, 0xdbc8, 0x38, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, 0x7, 0x1, 0x3, 0x2}}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r1}, 0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r4}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r7 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="330316148114140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x62, 0x6, @broadcast}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x7, 0x5c, {{0x28, 0x4, 0x1, 0x4, 0xa0, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x2c, 0x4e, 0x0, 0xf, [0x1dff0448, 0x100, 0x7, 0x6, 0x68, 0x2, 0x4, 0x100, 0xecb, 0xb41f]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x0, [0x7f, 0xfffffffd, 0xfff]}, @end, @generic={0x82, 0x6, "6cbc0d21"}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x5f, [@remote, @private=0xa010101, @remote, @empty, @broadcast]}, @rr={0x7, 0x1b, 0x42, [@private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @empty]}, @end, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x6, 0xa, "506753d403dae925"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x7e, 0x6, 0xc0000, 0x40, @private2, @private0, 0x10, 0x8, 0xfff, 0x800}}) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r12}, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=@can={{}, 0x1, 0x0, 0x4, 0x0, "d4ff0c0000100700"}, 0x10}, 0x2}, 0x4004851) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendto$packet(r13, &(0x7f00000003c0)='\t\x00\x00\x00', 0x4, 0x24042801, &(0x7f0000000c80)={0x11, 0x8100, r14, 0x1, 0x9, 0x6, @broadcast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b00)={@rand_addr, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x48, @private1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8000, 0x8000, 0x9, 0xfffffff9}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000000c80)=ANY=[@ANYBLOB="900b0000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2801028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="2c02028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000f00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008000000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000c00000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000b00000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008effffff08000100", @ANYRES32=r5, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff0100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100008008000600", @ANYRES32=r10, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r14, @ANYBLOB="f800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff070000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000b00000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400000000e008000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB], 0xb90}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r19, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xd82, 0x0, &(0x7f0000000000)=0x7f}) (async, rerun: 32) r20 = ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x3) (rerun: 32) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32=r20, @ANYRESHEX=r20], 0x0) 2.063801344s ago: executing program 0 (id=88): r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x2, 0xc9740) r1 = socket(0xa, 0x3, 0xff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/36, 0x24}) sendmsg$inet6(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) 2.052535845s ago: executing program 0 (id=89): openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000193c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) (async) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) 1.948349652s ago: executing program 1 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0faa0f79d38fc70f009e57fc0f09670fc75a00baf80c66b82892fc8c66efbafc0c66ed660f38151e3412ba400066ed66b9800000c00f326635000100000f30", 0x3f}], 0x1, 0x62, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="6d9f3c4769ab2a113e017b1a244e5535eeab28e32bd0b52eb6b2e8a0bf", 0x1d}], 0x1}}], 0x1, 0x6008000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.795947143s ago: executing program 1 (id=91): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) exit(0x2) getpid() tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x1000009, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x30000) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r4 = syz_open_pts(r2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001980)={0x2, 0x9, 0x2, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x148, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in=@empty, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffed}, {0x20000000000004, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @sec_ctx={0xc, 0x8, {0x56, 0x8, 0x0, 0xae}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000600)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r8 = socket(0x11, 0x802, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) mincore(&(0x7f00005fe000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/137) 1.215800254s ago: executing program 2 (id=92): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x4}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)) 1.193345675s ago: executing program 2 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x100400c1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x20, 0xb, 0xfb, {0xfb, 0x22, "4b79dea34ea8231425934b53ed85cb8f3f100e7890b0ee743352b52eee11b2d0f2f2332e0a82813517c18b3e8dcd43cf673368587514efd87bca5c7bda92c84c5f0b1f50d40d7c8179d5778a1490953d6e76ddcb6bd56df5716ca64e78ddffdaff39f20b86fa162ab504a509e99cfadde9d0bc8ed03c195d84b227408c53b54aac80563f9a58ad7629acd7e029f83c803999ffd32a4541a06364b34fd64fbfbef307f085ab4a28e655837359a538d42e3c7eb12524c571ef17fe76266eb50fb7e5308e218356af701847cb5df3340f497cf69f44665cee810500018d22e368c72a9301c23ce3c799c5c9924979b1dc6c0cd8b79a9b4e76d6d3"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0x15, 0x7c, "53ea523223797beb67797032ec52bc991f68940e46c6ab3042c41408456b7a669e6d8366aab413580b3b9a940a58e1230c62f40263fadba42336fdb7010132f287fc279d73b55bf3fb61527b8f0a245984aad19b28951a824f94223ae74393a95ab527e1318578e53a2f20bc4dc95457f12cc2b179642c17da245543"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1a}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x6b, {0x69, "66603e357ab2a09de8b26982f28ae0f1c5bc0a512c715a93bd92ecc2b33510ef7059b6124d8bc7a6ed42063a852bd3c4ed7163b41a0ca53adb3f53f28ab9f59c4856b99001e386bec7f1741c4b2d285e8f75c49b7abaf959b44e0a1019e83dfea2d0e2c48f25a1cfaa"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0xfe}}) unshare(0x28000600) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.12779834s ago: executing program 3 (id=94): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @loopback}}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x5, 0x5, 0x4, 0x5}, {0xc, 0x1, 0xc, 0xdd94}, {0x0, 0xad, 0x9, 0x7}]}, 0x10) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000001d00)="770df8cb299413584bbebbe7dda6e3f34d20b99f6e80703f27633e9196bf0b0e299be047fff1acb41e92fed20edc5cd867aa3fe7f7006bdb56c79a6769e95d5130d5bec0a7a9e2ce30fe2ba679d2109c071ade83d6b010b5e153701686f3f7723c2a343bd7fa1e509a37627250ae973a82236517", 0x74) r7 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r7, &(0x7f00000061c0)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/48, 0x30}], 0x3, &(0x7f0000000a00)=""/162, 0xa2}, 0x9}, {{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000b40)=""/17, 0x11}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/154, 0x88}, {&(0x7f0000006580)=""/253, 0xf2}], 0x4, &(0x7f0000001d80)=""/133, 0x85}, 0x369a}, {{&(0x7f0000001e40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001ec0)=""/187, 0xbb}, {&(0x7f0000006480)=""/246, 0xf6}, {&(0x7f0000002080)=""/246, 0xf6}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/120, 0x78}, {&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f00000023c0)=""/64, 0x40}, {&(0x7f0000002400)=""/122, 0x7a}], 0x8, &(0x7f0000002500)=""/78, 0x4e}, 0x10001}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002600)=""/86, 0x56}, {&(0x7f0000002680)=""/175, 0xaf}, {&(0x7f0000002740)=""/51, 0x33}, {&(0x7f0000002780)=""/240, 0xf0}, {&(0x7f0000002880)}], 0x5, &(0x7f0000002940)=""/107, 0x6b}, 0x3}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000029c0)=""/9, 0x9}, {&(0x7f0000002a00)=""/191, 0xbf}, {&(0x7f0000002ac0)=""/54, 0x36}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/233, 0xe9}], 0x5, &(0x7f0000002cc0)=""/164, 0xa4}, 0x7}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/7, 0x7}], 0x1, &(0x7f0000002e00)=""/28, 0x1c}, 0x72}, {{&(0x7f0000002e40)=@isdn, 0x80, &(0x7f0000003340)=[{&(0x7f0000002ec0)=""/250, 0xfa}, {&(0x7f0000002fc0)=""/235, 0xeb}, {&(0x7f0000001b80)=""/130, 0x80}, {&(0x7f0000003140)=""/29, 0x1d}, {&(0x7f0000003180)=""/42, 0x2a}, {&(0x7f00000031c0)=""/247, 0xf7}, {&(0x7f00000032c0)=""/68, 0x44}], 0x7, &(0x7f00000033c0)=""/140, 0x8c}, 0x7ff}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/131, 0x83}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/225, 0xe1}], 0x5}, 0x3}, {{0x0, 0x20, &(0x7f0000005c40)=[{&(0x7f0000005740)=""/26, 0x1a}, {&(0x7f0000005780)=""/187, 0xbb}, {&(0x7f0000005840)=""/68, 0x44}, {&(0x7f00000058c0)=""/203, 0xcb}, {&(0x7f00000059c0)=""/189, 0xbd}, {&(0x7f0000005a80)=""/130, 0x82}, {&(0x7f0000005b40)=""/216, 0xd8}], 0x7, &(0x7f0000005cc0)=""/204, 0xcc}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005dc0)=""/54, 0x36}, {&(0x7f0000005e00)=""/107, 0x6b}, {&(0x7f0000005e80)=""/45, 0x2d}, {&(0x7f0000005ec0)=""/123, 0x7b}, {&(0x7f0000005f40)=""/236, 0xec}, {&(0x7f0000006040)=""/147, 0x93}], 0x6, &(0x7f0000006180)=""/32, 0x20}, 0x9}], 0xa, 0x2000, &(0x7f0000006440)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x41, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x1000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x132, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2c0, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x5, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0xfffffffc, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x2007, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x2, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x203, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xffff, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_clone3(&(0x7f0000006780)={0x1002000, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000001c40), &(0x7f0000001c80), {0x40}, &(0x7f0000001cc0)=""/8, 0x8, &(0x7f0000006680)=""/147, &(0x7f0000006740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) pidfd_getfd(r8, r7, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x3f000000, 0x0) 1.12671306s ago: executing program 3 (id=95): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) 872.144448ms ago: executing program 0 (id=96): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 860.34964ms ago: executing program 0 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 244.164433ms ago: executing program 3 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mtu(r0, 0x29, 0x50, 0x0, &(0x7f0000000000)) 0s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 19.728838][ T36] audit: type=1400 audit(1775311239.700:64): avc: denied { mounton } for pid=268 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.730150][ T268] cgroup: Unknown subsys name 'net' [ 19.752587][ T36] audit: type=1400 audit(1775311239.700:65): avc: denied { mount } for pid=268 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.780283][ T36] audit: type=1400 audit(1775311239.720:66): avc: denied { unmount } for pid=268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.780396][ T268] cgroup: Unknown subsys name 'devices' [ 19.881920][ T268] cgroup: Unknown subsys name 'hugetlb' [ 19.887556][ T268] cgroup: Unknown subsys name 'rlimit' [ 20.039981][ T36] audit: type=1400 audit(1775311240.010:67): avc: denied { setattr } for pid=268 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.063582][ T36] audit: type=1400 audit(1775311240.010:68): avc: denied { mounton } for pid=268 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.072551][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.088573][ T36] audit: type=1400 audit(1775311240.010:69): avc: denied { mount } for pid=268 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.120594][ T36] audit: type=1400 audit(1775311240.070:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.146339][ T36] audit: type=1400 audit(1775311240.070:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.175761][ T36] audit: type=1400 audit(1775311240.140:72): avc: denied { read } for pid=268 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.201622][ T36] audit: type=1400 audit(1775311240.140:73): avc: denied { open } for pid=268 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.201816][ T268] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.060285][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.067353][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.074583][ T289] bridge_slave_0: entered allmulticast mode [ 21.080828][ T289] bridge_slave_0: entered promiscuous mode [ 21.096973][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.104206][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.111315][ T289] bridge_slave_1: entered allmulticast mode [ 21.117501][ T289] bridge_slave_1: entered promiscuous mode [ 21.148088][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.155203][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.162295][ T290] bridge_slave_0: entered allmulticast mode [ 21.168672][ T290] bridge_slave_0: entered promiscuous mode [ 21.178406][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.185525][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.192644][ T290] bridge_slave_1: entered allmulticast mode [ 21.198855][ T290] bridge_slave_1: entered promiscuous mode [ 21.205031][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.212116][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.219268][ T291] bridge_slave_0: entered allmulticast mode [ 21.225634][ T291] bridge_slave_0: entered promiscuous mode [ 21.241064][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.248210][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.255301][ T291] bridge_slave_1: entered allmulticast mode [ 21.261608][ T291] bridge_slave_1: entered promiscuous mode [ 21.283097][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.290275][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.297343][ T292] bridge_slave_0: entered allmulticast mode [ 21.303733][ T292] bridge_slave_0: entered promiscuous mode [ 21.310230][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.317289][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.324400][ T292] bridge_slave_1: entered allmulticast mode [ 21.330734][ T292] bridge_slave_1: entered promiscuous mode [ 21.472948][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.480045][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.487323][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.494374][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.508448][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.515540][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.522837][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.529907][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.543454][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.550546][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.557816][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.564871][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.591376][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.598445][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.605780][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.612834][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.655592][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.662990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.670559][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.677767][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.685231][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.692525][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.699911][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.707100][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.721675][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.728716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.755339][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.762435][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.770473][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.777557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.785345][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.792396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.800171][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.807214][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.815069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.822230][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.833443][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.840518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.849853][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.856886][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.904201][ T289] veth0_vlan: entered promiscuous mode [ 21.916690][ T290] veth0_vlan: entered promiscuous mode [ 21.937690][ T291] veth0_vlan: entered promiscuous mode [ 21.946549][ T290] veth1_macvtap: entered promiscuous mode [ 21.958764][ T292] veth0_vlan: entered promiscuous mode [ 21.972297][ T289] veth1_macvtap: entered promiscuous mode [ 21.991254][ T291] veth1_macvtap: entered promiscuous mode [ 22.000909][ T292] veth1_macvtap: entered promiscuous mode [ 22.049314][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.097593][ T315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.113002][ T313] Zero length message leads to an empty skb [ 22.129147][ T315] ======================================================= [ 22.129147][ T315] WARNING: The mand mount option has been deprecated and [ 22.129147][ T315] and is ignored by this kernel. Remove the mand [ 22.129147][ T315] option from the mount to silence this warning. [ 22.129147][ T315] ======================================================= [ 22.176902][ T326] overlayfs: empty lowerdir [ 22.237567][ T335] devpts: called with bogus options [ 22.362345][ T346] fuseblk: Unknown parameter 'group_iô—d' [ 22.379569][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.399689][ T348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 22.526861][ T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.540794][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.551854][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.561654][ T31] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 22.570936][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.579252][ T321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.587391][ T31] usb 2-1: config 0 descriptor?? [ 22.659636][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.679551][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 22.686035][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.697831][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.707741][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 22.720748][ T307] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 22.729914][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.738835][ T307] usb 3-1: config 0 descriptor?? [ 22.749563][ T321] usb 4-1: Using ep0 maxpacket: 32 [ 22.757492][ T321] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 22.766992][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.775587][ T321] usb 4-1: Product: syz [ 22.779835][ T321] usb 4-1: Manufacturer: syz [ 22.784556][ T321] usb 4-1: SerialNumber: syz [ 22.789582][ T10] usb 1-1: device descriptor read/64, error -71 [ 22.800259][ T31] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 22.807580][ T31] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 22.815490][ T31] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 22.822951][ T31] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 22.830243][ T31] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 22.838304][ T31] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 22.852488][ T31] usb 2-1: USB disconnect, device number 2 [ 22.872989][ T353] fido_id[353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 22.946905][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.954901][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.963191][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.970705][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.978100][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.985590][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 22.992894][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.000884][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.008225][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.015986][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.023273][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.030552][ T10] usb 1-1: device descriptor read/64, error -71 [ 23.036980][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.044293][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.051577][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.058885][ T307] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 23.071418][ T307] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input4 [ 23.084443][ T307] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 23.146678][ T307] usb 3-1: USB disconnect, device number 2 [ 23.169646][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 23.269569][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.329539][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 23.335954][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 23.344387][ T31] usb 2-1: config 0 has no interface number 0 [ 23.350789][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 23.362224][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 23.371557][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.379630][ T31] usb 2-1: Product: syz [ 23.383821][ T31] usb 2-1: Manufacturer: syz [ 23.388437][ T31] usb 2-1: SerialNumber: syz [ 23.393984][ T31] usb 2-1: config 0 descriptor?? [ 23.399360][ T352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.407035][ T10] usb 1-1: device descriptor read/64, error -71 [ 23.498511][ T321] usb 4-1: MIDIStreaming interface descriptor not found [ 23.511564][ T321] usb 4-1: USB disconnect, device number 2 [ 23.529889][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.619191][ T352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.651378][ T10] usb 1-1: device descriptor read/64, error -71 [ 23.759708][ T10] usb usb1-port1: attempt power cycle [ 23.859603][ T321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 23.939549][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 23.989547][ T321] usb 4-1: device descriptor read/64, error -71 [ 24.089554][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 24.096039][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.107363][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.117324][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.125061][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 24.134757][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.143823][ T307] usb 3-1: config 0 descriptor?? [ 24.153130][ T307] hub 3-1:0.0: USB hub found [ 24.161651][ T10] usb 1-1: device descriptor read/8, error -71 [ 24.229620][ T321] usb 4-1: device descriptor read/64, error -71 [ 24.290912][ T10] usb 1-1: device descriptor read/8, error -71 [ 24.352500][ T364] bridge0: port 3(syz_tun) entered blocking state [ 24.359081][ T364] bridge0: port 3(syz_tun) entered disabled state [ 24.365702][ T364] syz_tun: entered allmulticast mode [ 24.372043][ T364] syz_tun: entered promiscuous mode [ 24.377425][ T364] bridge0: port 3(syz_tun) entered blocking state [ 24.383925][ T364] bridge0: port 3(syz_tun) entered forwarding state [ 24.394387][ T307] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 24.428986][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 24.439225][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 24.450007][ T31] asix 2-1:0.188: probe with driver asix failed with error -32 [ 24.479589][ T321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 24.539552][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 24.560750][ T10] usb 1-1: device descriptor read/8, error -71 [ 24.609623][ T321] usb 4-1: device descriptor read/64, error -71 [ 24.690746][ T10] usb 1-1: device descriptor read/8, error -71 [ 24.799676][ T10] usb usb1-port1: unable to enumerate USB device [ 24.807703][ T307] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 24.816359][ T307] hid-generic 0003:046D:C31C.0003: probe with driver hid-generic failed with error -22 [ 24.859576][ T321] usb 4-1: device descriptor read/64, error -71 [ 24.969755][ T321] usb usb4-port1: attempt power cycle [ 25.119677][ T307] usb 3-1: USB disconnect, device number 3 [ 25.309577][ T321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 25.330749][ T321] usb 4-1: device descriptor read/8, error -71 [ 25.411675][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 25.411696][ T36] audit: type=1400 audit(1775311245.380:142): avc: denied { create } for pid=368 comm="syz.0.16" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.412801][ T369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.417827][ T36] audit: type=1400 audit(1775311245.380:143): avc: denied { read } for pid=368 comm="syz.0.16" name="file2" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.417866][ T36] audit: type=1400 audit(1775311245.380:144): avc: denied { open } for pid=368 comm="syz.0.16" path="/5/file2" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.496979][ T36] audit: type=1400 audit(1775311245.410:145): avc: denied { bind } for pid=368 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.510668][ T321] usb 4-1: device descriptor read/8, error -71 [ 25.517114][ T36] audit: type=1400 audit(1775311245.410:146): avc: denied { name_bind } for pid=368 comm="syz.0.16" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 25.544609][ T36] audit: type=1400 audit(1775311245.410:147): avc: denied { node_bind } for pid=368 comm="syz.0.16" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 25.566213][ T36] audit: type=1400 audit(1775311245.410:148): avc: denied { read } for pid=368 comm="syz.0.16" path="socket:[3452]" dev="sockfs" ino=3452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.591572][ T36] audit: type=1400 audit(1775311245.450:149): avc: denied { setopt } for pid=368 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.611114][ T36] audit: type=1400 audit(1775311245.450:150): avc: denied { ioctl } for pid=368 comm="syz.0.16" path="/5/file2" dev="tmpfs" ino=48 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.670951][ T384] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 25.670986][ T36] audit: type=1400 audit(1775311245.470:151): avc: denied { unlink } for pid=289 comm="syz-executor" name="file2" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 25.687516][ T386] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.779582][ T321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 25.800739][ T321] usb 4-1: device descriptor read/8, error -71 [ 25.829192][ T307] usb 2-1: USB disconnect, device number 3 [ 25.950663][ T321] usb 4-1: device descriptor read/8, error -71 [ 26.009620][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.059667][ T321] usb usb4-port1: unable to enumerate USB device [ 26.159590][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.159584][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 26.173423][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.184421][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.194276][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.207157][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.213860][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 26.223645][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.232322][ T31] usb 3-1: config 0 descriptor?? [ 26.319537][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 26.327617][ T307] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.343699][ T307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.350393][ T307] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 26.361237][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.370413][ T307] usb 2-1: config 0 descriptor?? [ 26.456278][ T401] kvm: Disabled LAPIC found during irq injection [ 26.577400][ T392] IPv6: Can't replace route, no match found [ 26.642780][ T31] lg-g15 0003:046D:C22D.0004: unknown main item tag 0x0 [ 26.650293][ T31] lg-g15 0003:046D:C22D.0004: unknown main item tag 0x0 [ 26.650673][ T411] raw_sendmsg: syz.3.27 forgot to set AF_INET. Fix it! [ 26.657276][ T31] lg-g15 0003:046D:C22D.0004: item fetching failed at offset 2/40 [ 26.657478][ T31] lg-g15 0003:046D:C22D.0004: probe with driver lg-g15 failed with error -22 [ 26.749653][ T345] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 26.785002][ T307] usbhid 2-1:0.0: can't add hid device: -71 [ 26.791493][ T307] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 26.800171][ T307] usb 2-1: USB disconnect, device number 4 [ 26.842738][ T321] usb 3-1: USB disconnect, device number 4 [ 26.899529][ T345] usb 1-1: Using ep0 maxpacket: 16 [ 26.906131][ T345] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.914647][ T345] usb 1-1: config 1 interface 0 altsetting 90 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.927620][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 26.935334][ T345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.943966][ T345] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 26.953236][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.961350][ T345] usb 1-1: Product: syz [ 26.965504][ T345] usb 1-1: Manufacturer: syz [ 26.970130][ T345] usb 1-1: SerialNumber: syz [ 27.089924][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 27.096112][ T31] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 27.104259][ T31] usb 4-1: config 0 has no interface number 0 [ 27.110400][ T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 27.120417][ T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 27.131711][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 27.140892][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.148913][ T31] usb 4-1: Product: syz [ 27.153117][ T31] usb 4-1: Manufacturer: syz [ 27.157730][ T31] usb 4-1: SerialNumber: syz [ 27.163148][ T31] usb 4-1: config 0 descriptor?? [ 27.168417][ T414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.176294][ T414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.184567][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.194343][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.392612][ T414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.399980][ T414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.599556][ T307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.608066][ T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 27.659553][ T357] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.749582][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 27.756344][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.764946][ T307] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 27.776722][ T307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.785910][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.794097][ T307] usb 3-1: Product: syz [ 27.798380][ T307] usb 3-1: Manufacturer: syz [ 27.799566][ T357] usb 2-1: device descriptor read/64, error -71 [ 27.803171][ T307] usb 3-1: SerialNumber: syz [ 27.814711][ T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 227 [ 28.017483][ T31] usb 4-1: USB disconnect, device number 7 [ 28.020270][ T418] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.039530][ T357] usb 2-1: device descriptor read/64, error -71 [ 28.279596][ T357] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.409567][ T357] usb 2-1: device descriptor read/64, error -71 [ 28.633631][ T418] netlink: 188 bytes leftover after parsing attributes in process `syz.2.30'. [ 28.649768][ T357] usb 2-1: device descriptor read/64, error -71 [ 28.682934][ T418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.692271][ T418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.701090][ T307] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 28.708859][ T307] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 28.735004][ T307] cdc_ncm 3-1:1.0: bind() failure [ 28.741098][ T307] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 28.747920][ T307] cdc_ncm 3-1:1.1: bind() failure [ 28.754427][ T307] usb 3-1: USB disconnect, device number 5 [ 28.769663][ T357] usb usb2-port1: attempt power cycle [ 28.779640][ T365] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 28.909540][ T365] usb 4-1: device descriptor read/64, error -71 [ 29.109536][ T357] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.130611][ T357] usb 2-1: device descriptor read/8, error -71 [ 29.149564][ T365] usb 4-1: device descriptor read/64, error -71 [ 29.246420][ T437] overlayfs: failed to resolve './file0': -2 [ 29.260779][ T357] usb 2-1: device descriptor read/8, error -71 [ 29.389549][ T365] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 29.407650][ T345] usbhid 1-1:1.0: can't add hid device: -71 [ 29.413705][ T345] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 29.422576][ T345] usb 1-1: USB disconnect, device number 6 [ 29.499572][ T357] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 29.519568][ T365] usb 4-1: device descriptor read/64, error -71 [ 29.527087][ T357] usb 2-1: device descriptor read/8, error -71 [ 29.619578][ T356] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.660769][ T357] usb 2-1: device descriptor read/8, error -71 [ 29.759582][ T365] usb 4-1: device descriptor read/64, error -71 [ 29.765904][ T345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.773640][ T357] usb usb2-port1: unable to enumerate USB device [ 29.780734][ T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.791794][ T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.801601][ T356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.814573][ T356] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 29.823719][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.832381][ T356] usb 3-1: config 0 descriptor?? [ 29.869703][ T365] usb usb4-port1: attempt power cycle [ 29.931196][ T345] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.942881][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.954102][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 29.963898][ T345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.976839][ T345] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.985943][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.994820][ T345] usb 1-1: config 0 descriptor?? [ 30.219560][ T365] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 30.240739][ T365] usb 4-1: device descriptor read/8, error -71 [ 30.242924][ T356] acrux 0003:1A34:0802.0005: item fetching failed at offset 3/5 [ 30.255226][ T356] acrux 0003:1A34:0802.0005: parse failed [ 30.261030][ T356] acrux 0003:1A34:0802.0005: probe with driver acrux failed with error -22 [ 30.371255][ T365] usb 4-1: device descriptor read/8, error -71 [ 30.405059][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.406236][ T345] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 30.420715][ T345] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 30.435743][ T345] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 30.450142][ T307] usb 3-1: USB disconnect, device number 6 [ 30.629591][ T365] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 30.661244][ T365] usb 4-1: device descriptor read/8, error -71 [ 30.802532][ T365] usb 4-1: device descriptor read/8, error -71 [ 30.909638][ T365] usb usb4-port1: unable to enumerate USB device [ 31.209605][ T365] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 31.366701][ T365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.375937][ T365] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 31.386622][ T365] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 31.399565][ T365] usb 3-1: string descriptor 0 read error: -22 [ 31.405800][ T365] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 31.415025][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.629376][ T365] usb 3-1: USB disconnect, device number 7 [ 31.879566][ T357] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 31.939541][ T356] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 32.019562][ T357] usb 1-1: device descriptor read/64, error -32 [ 32.099521][ T356] usb 4-1: Using ep0 maxpacket: 8 [ 32.105638][ T356] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 32.113904][ T356] usb 4-1: config 0 has no interface number 1 [ 32.120093][ T356] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 32.131064][ T356] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 32.142961][ T356] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 32.154364][ T356] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 32.165430][ T356] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.180598][ T356] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 32.193064][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 32.204099][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 32.204117][ T36] audit: type=1400 audit(1775311252.170:189): avc: denied { relabelfrom } for pid=469 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.204952][ T356] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 32.219644][ T36] audit: type=1400 audit(1775311252.170:190): avc: denied { relabelto } for pid=469 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.229940][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.266340][ T356] usb 4-1: Product: syz [ 32.270726][ T356] usb 4-1: Manufacturer: syz [ 32.275397][ T356] usb 4-1: SerialNumber: syz [ 32.280348][ T357] usb 1-1: device descriptor read/64, error -32 [ 32.281214][ T356] usb 4-1: config 0 descriptor?? [ 32.294364][ T468] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.309564][ T356] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 32.318997][ T36] audit: type=1400 audit(1775311252.280:191): avc: denied { watch } for pid=471 comm="syz.1.47" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 32.449543][ T448] Bluetooth: hci0: command 0x1003 tx timeout [ 32.450436][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.694437][ T365] usb 4-1: USB disconnect, device number 12 [ 32.979389][ T36] audit: type=1400 audit(1775311252.940:192): avc: denied { mount } for pid=487 comm="syz.0.53" name="/" dev="ramfs" ino=4533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.416568][ T345] usb 1-1: USB disconnect, device number 7 [ 33.502873][ T505] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 34.630024][ T36] audit: type=1400 audit(1775311254.590:193): avc: denied { connect } for pid=511 comm="syz.0.61" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.862184][ T36] audit: type=1400 audit(1775311254.790:194): avc: denied { read } for pid=516 comm="syz.2.62" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 34.893097][ T36] audit: type=1400 audit(1775311254.790:195): avc: denied { open } for pid=516 comm="syz.2.62" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.107072][ T36] audit: type=1400 audit(35.123:196): avc: denied { mounton } for pid=524 comm="syz.1.65" path="/proc/59/task" dev="proc" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.377023][ T36] audit: type=1400 audit(35.393:197): avc: denied { getopt } for pid=529 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.404078][ T36] audit: type=1400 audit(35.423:198): avc: denied { execute } for pid=531 comm="syz.0.68" path="/17/file1" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.429543][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.589586][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 35.597095][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 35.606341][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.614565][ T10] usb 3-1: Product: syz [ 35.618741][ T10] usb 3-1: Manufacturer: syz [ 35.623367][ T10] usb 3-1: SerialNumber: syz [ 35.628557][ T10] usb 3-1: config 0 descriptor?? [ 35.699535][ T345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.849633][ T345] usb 1-1: Using ep0 maxpacket: 32 [ 35.856210][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.867129][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.877392][ T345] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 35.886642][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.895604][ T345] usb 1-1: config 0 descriptor?? [ 35.929543][ T321] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.079550][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 36.086630][ T321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.096862][ T321] usb 2-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 36.106039][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.114125][ T321] usb 2-1: Product: syz [ 36.118404][ T321] usb 2-1: Manufacturer: syz [ 36.123037][ T321] usb 2-1: SerialNumber: syz [ 36.307495][ T345] koneplus 0003:1E7D:2D51.0007: ignoring exceeding usage max [ 36.315914][ T345] koneplus 0003:1E7D:2D51.0007: item fetching failed at offset 3/5 [ 36.324071][ T345] koneplus 0003:1E7D:2D51.0007: parse failed [ 36.330140][ T345] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22 [ 36.342610][ T321] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 36.348643][ T321] usb 2-1: unit 1 not found! [ 36.353333][ T321] usb 2-1: unit 8 not found! [ 36.361729][ T321] usb 2-1: USB disconnect, device number 9 [ 36.390342][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.509407][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 36.520692][ T534] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 36.528453][ T534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.69'. [ 36.538930][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.548098][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.556757][ T321] usb 1-1: USB disconnect, device number 8 [ 37.119612][ T321] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 37.149596][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.270714][ T321] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 37.281205][ T321] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 37.290347][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.298445][ T321] usb 4-1: Product: syz [ 37.302674][ T321] usb 4-1: Manufacturer: syz [ 37.307274][ T321] usb 4-1: SerialNumber: syz [ 37.309534][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 37.311912][ T345] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 37.318669][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.333051][ T548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.334963][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 37.340403][ T548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.348381][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 37.363339][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.371524][ T10] usb 2-1: Product: syz [ 37.375786][ T10] usb 2-1: Manufacturer: syz [ 37.380666][ T10] usb 2-1: SerialNumber: syz [ 37.480752][ T345] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 37.488820][ T345] usb 1-1: config 0 has no interface number 0 [ 37.495034][ T345] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.506166][ T345] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.516009][ T345] usb 1-1: config 0 interface 1 has no altsetting 0 [ 37.522634][ T345] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 37.531703][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.540473][ T345] usb 1-1: config 0 descriptor?? [ 37.592612][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 37.599144][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 37.609460][ T10] usb 2-1: USB disconnect, device number 10 [ 37.633676][ T321] usb 4-1: USB disconnect, device number 13 [ 37.844798][ T548] mmap: syz.3.74 (548) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.148483][ T345] input: HID 2179:0053 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:2179:0053.0008/input/input5 [ 38.160651][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 38.160678][ T36] audit: type=1400 audit(38.183:213): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=507 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.189080][ T36] audit: type=1400 audit(38.183:214): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=507 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.197338][ T345] uclogic 0003:2179:0053.0008: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.0-1/input1 [ 38.229730][ T36] audit: type=1400 audit(38.253:215): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=507 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.233023][ T321] usb 3-1: USB disconnect, device number 8 [ 38.267184][ T36] audit: type=1400 audit(38.283:216): avc: denied { listen } for pid=561 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.354268][ T36] audit: type=1400 audit(38.373:217): avc: denied { connect } for pid=552 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.359651][ T356] usb 1-1: USB disconnect, device number 9 [ 38.389542][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 38.411766][ T36] audit: type=1400 audit(38.433:218): avc: denied { read } for pid=564 comm="syz.2.80" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.452557][ T36] audit: type=1400 audit(38.433:219): avc: denied { open } for pid=564 comm="syz.2.80" path="/20/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.476144][ T36] audit: type=1400 audit(38.443:220): avc: denied { append } for pid=564 comm="syz.2.80" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.499066][ T36] audit: type=1400 audit(38.443:221): avc: denied { ioctl } for pid=564 comm="syz.2.80" path="/20/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.523044][ T570] netlink: 165 bytes leftover after parsing attributes in process `syz.2.82'. [ 38.524586][ T36] audit: type=1400 audit(38.493:222): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.534605][ T570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.82'. [ 38.580646][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 38.588870][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.599694][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 38.612398][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 38.621703][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.630642][ T10] usb 2-1: Product: syz [ 38.634838][ T10] usb 2-1: Manufacturer: syz [ 38.639601][ T10] usb 2-1: SerialNumber: syz [ 38.644749][ T10] usb 2-1: config 0 descriptor?? [ 38.650872][ T10] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 38.809558][ T321] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 38.829542][ T307] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 38.859388][ T10] usb 2-1: USB disconnect, device number 11 [ 38.867515][ T431] udevd[431]: setting mode of /dev/snd/pcmC0D0p to 020660 failed: No such file or directory [ 38.869464][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.877813][ T431] udevd[431]: setting owner of /dev/snd/pcmC0D0p to uid=0, gid=29 failed: No such file or directory [ 38.925795][ T576] can0: slcan on ptm0. [ 38.979552][ T321] usb 4-1: Using ep0 maxpacket: 8 [ 38.980642][ T307] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 38.985778][ T321] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 38.995921][ T307] usb 3-1: config 0 has no interface number 0 [ 39.012940][ T576] can0 (unregistered): slcan off ptm0. [ 39.012976][ T321] usb 4-1: config 179 has no interface number 0 [ 39.022856][ T307] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.028239][ T321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 39.047203][ T321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 39.055500][ T307] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.062250][ T321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.079781][ T321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 39.092113][ T307] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.105461][ T307] usb 3-1: config 0 interface 1 has no altsetting 0 [ 39.107578][ T321] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 39.119523][ T307] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 39.126823][ T321] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 39.144012][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.151158][ T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.161417][ T572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 39.167121][ T307] usb 3-1: config 0 descriptor?? [ 39.396730][ T617] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 39.401263][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.413682][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.492620][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.499361][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.509610][ T321] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.580771][ T574] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 39.590242][ T307] usbhid 3-1:0.1: can't add hid device: -71 [ 39.597036][ T307] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 39.606635][ T307] usb 3-1: USB disconnect, device number 9 [ 39.624386][ T10] usb 4-1: USB disconnect, device number 14 [ 39.624498][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 39.639234][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 39.660737][ T321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.671018][ T321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 39.679927][ T321] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.694429][ T321] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 39.703604][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.712336][ T321] usb 1-1: Product: syz [ 39.718443][ T321] usb 1-1: Manufacturer: syz [ 39.723100][ T321] usb 1-1: SerialNumber: syz [ 39.728450][ T321] usb 1-1: config 0 descriptor?? [ 39.934369][ T10] usb 1-1: USB disconnect, device number 10 [ 40.409590][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.579566][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 40.585860][ T10] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.597008][ T10] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.610054][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.616709][ T10] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 40.625875][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.634478][ T10] usb 3-1: config 0 descriptor?? [ 41.094742][ T642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.103373][ T642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.113351][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.120522][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.127599][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.134785][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.141914][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.148980][ T10] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x0 [ 41.156099][ T10] hid-rmi 0003:0461:4E72.0009: report_id 0 is invalid [ 41.162933][ T10] hid-rmi 0003:0461:4E72.0009: item 0 0 1 8 parsing failed [ 41.170348][ T10] hid-rmi 0003:0461:4E72.0009: parse failed [ 41.176290][ T10] hid-rmi 0003:0461:4E72.0009: probe with driver hid-rmi failed with error -22 [ 41.327586][ T644] ------------[ cut here ]------------ [ 41.333098][ T644] WARNING: CPU: 1 PID: 644 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 41.343412][ T644] Modules linked in: [ 41.347319][ T644] CPU: 1 UID: 0 PID: 644 Comm: syz.0.99 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 41.358659][ T644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 41.368770][ T644] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 41.375061][ T644] Code: 3f de 72 ff eb 08 e8 58 b5 09 ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff ac 25 03 cc e8 39 b5 09 ff <0f> 0b 45 31 e4 eb cb e8 2d b5 09 ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 41.395006][ T644] RSP: 0018:ffffc9000de5faf0 EFLAGS: 00010287 [ 41.401143][ T644] RAX: ffffffff827df5a7 RBX: ffff888131d40ee0 RCX: 0000000000080000 [ 41.409131][ T644] RDX: ffffc90001a42000 RSI: 0000000000000238 RDI: 0000000000000239 [ 41.417149][ T644] RBP: ffffc9000de5fb30 R08: ffff88810ae7b900 R09: 0000000000000002 [ 41.425170][ T644] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 41.433178][ T644] R13: 0000000000002004 R14: 1ffffffff0e41096 R15: dffffc0000000000 [ 41.441251][ T644] FS: 00007fee06b106c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 41.450267][ T644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.456867][ T644] CR2: 00007fee05c4edd5 CR3: 000000012baee000 CR4: 00000000003526b0 [ 41.464871][ T644] Call Trace: [ 41.468337][ T644] [ 41.471381][ T644] current_check_refer_path+0x8ee/0xd40 [ 41.476958][ T644] ? hook_file_free_security+0xc0/0xc0 [ 41.482449][ T644] hook_path_rename+0x44/0x60 [ 41.487149][ T644] security_path_rename+0x1d8/0x2a0 [ 41.492381][ T644] do_renameat2+0x634/0xc40 [ 41.497344][ T644] ? __cfi_do_renameat2+0x10/0x10 [ 41.502414][ T644] ? strncpy_from_user+0x14d/0x270 [ 41.507565][ T644] ? __kasan_check_write+0x18/0x20 [ 41.512818][ T644] ? __kasan_check_write+0x18/0x20 [ 41.517955][ T644] __x64_sys_renameat2+0xdc/0x100 [ 41.523050][ T644] x64_sys_call+0x2e18/0x2ee0 [ 41.527839][ T644] do_syscall_64+0x57/0xf0 [ 41.532294][ T644] ? clear_bhb_loop+0x50/0xa0 [ 41.536984][ T644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.542923][ T644] RIP: 0033:0x7fee05b9c819 [ 41.547353][ T644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.566995][ T644] RSP: 002b:00007fee06b10028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 41.575477][ T644] RAX: ffffffffffffffda RBX: 00007fee05e15fa0 RCX: 00007fee05b9c819 [ 41.575480][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.589713][ T644] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 41.597709][ T644] RBP: 00007fee05c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 41.605752][ T644] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 41.613863][ T644] R13: 00007fee05e16038 R14: 00007fee05e15fa0 R15: 00007fff08f6a348 [ 41.621887][ T644] [ 41.624917][ T644] ---[ end trace 0000000000000000 ]--- [ 43.144835][ T307] usb 3-1: USB disconnect, device number 10