last executing test programs: 3m10.297373987s ago: executing program 0 (id=286): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e4", 0x1}], 0x1, 0x3, 0x0) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "0100"}}) 3m8.292633161s ago: executing program 0 (id=297): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x5, 0x3, 0x60, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, 0x8, 0x10, 0x0, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x5, 0x0, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x64, 0x0, 0x3, 0x29, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x1, [{@local, 0x5}]}]}}}}}) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @broadcast}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x8, 0x871e, 0x80, 0x7, {{0x38, 0x4, 0x3, 0x3f, 0xe0, 0x66, 0x0, 0x40, 0x2f, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1b, 0x30, [@private=0xa010102, @loopback, @multicast2, @broadcast, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0x1f, 0x5b, [@rand_addr=0x64010101, @local, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x2, [{@empty, 0x4}]}, @rr={0x7, 0x17, 0xdc, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x0, [{@rand_addr=0x64010102, 0x800}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x2e, 0x3, 0x5, [{@loopback, 0xfffffc09}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x636}]}, @timestamp_addr={0x44, 0x3c, 0x4a, 0x1, 0x9, [{@rand_addr=0x64010102, 0x80}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@loopback, 0x2000}, {@local, 0x6}, {@private=0xa010101, 0x9}, {@remote, 0x101}, {@private=0xa010102, 0xffffffff}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f00000017c0)={0x18c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0x880) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f00000017c0)={0x18c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0x880) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)=""/4101, 0x1005}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xa38}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x120, 0x0) 3m8.278508491s ago: executing program 0 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'rose0\x00', 0x600}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x80000000}) r5 = dup(r1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000009ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x7b) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'rose0\x00', 0x600}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$inet(0x2, 0x3, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x80000000}) (async) dup(r1) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000009ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x7b) (async) 3m8.149498125s ago: executing program 0 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) utimes(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) ptrace$poke(0x5, r0, &(0x7f0000000240), 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) unshare(0x26020480) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r4, r9, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) r10 = fsmount(r2, 0x0, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0x12) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 3m8.054169358s ago: executing program 0 (id=300): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x13, 0xffffffff, 0x8, 0x0, 0x80000, 0xa000, 0x6, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) unshare(0x22020400) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m7.947297622s ago: executing program 0 (id=301): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) (async) ftruncate(r0, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) pipe(&(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x181881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000640)={0xa, 0x0, [{0x2, 0x0, 0x2, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x0, 0x40, 0x6, 0xb6a, 0x6}, {0xb, 0x800001, 0x1, 0x6, 0x6d, 0x8}, {0xc0000000, 0x64, 0x7, 0x2, 0x9, 0x4, 0x800}, {0x80000001, 0x4, 0x2, 0x7, 0x0, 0x8, 0x1}, {0x6, 0xb, 0x2, 0x9, 0x1, 0x6, 0x7}, {0xd, 0x5, 0x0, 0x3, 0x6, 0x1}, {0x10000000f, 0x0, 0x3, 0xd0, 0x1, 0x8, 0x3}, {0xb, 0x400202, 0x6, 0x5, 0x6, 0x9, 0xe7}, {0x6, 0x4, 0x0, 0xa, 0x800, 0x0, 0x34000000}]}) (async) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025002010000000009ea1f0000ff0140000a24010400050205020724070500000508240805040004960d24060101030200010006000609240305fd02060581092403060103040505072404ad75"], 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x8, 0x3}]}, 0xc, 0x3) (async) syz_usb_connect$midi(0x0, 0x47, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x7d, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xcf, 0x7}], [{{0x9, 0x5, 0x9, 0x1, 0x10, 0x3, 0x6, 0x6f, {0xc, 0x25, 0x1, 0x8, "31f7a2f30365f725"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x6, 0x3, 0x2, 0xff, 0x4}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x439}}]}) 3m7.881660234s ago: executing program 32 (id=301): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) (async) ftruncate(r0, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) pipe(&(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x181881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000640)={0xa, 0x0, [{0x2, 0x0, 0x2, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x0, 0x40, 0x6, 0xb6a, 0x6}, {0xb, 0x800001, 0x1, 0x6, 0x6d, 0x8}, {0xc0000000, 0x64, 0x7, 0x2, 0x9, 0x4, 0x800}, {0x80000001, 0x4, 0x2, 0x7, 0x0, 0x8, 0x1}, {0x6, 0xb, 0x2, 0x9, 0x1, 0x6, 0x7}, {0xd, 0x5, 0x0, 0x3, 0x6, 0x1}, {0x10000000f, 0x0, 0x3, 0xd0, 0x1, 0x8, 0x3}, {0xb, 0x400202, 0x6, 0x5, 0x6, 0x9, 0xe7}, {0x6, 0x4, 0x0, 0xa, 0x800, 0x0, 0x34000000}]}) (async) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025002010000000009ea1f0000ff0140000a24010400050205020724070500000508240805040004960d24060101030200010006000609240305fd02060581092403060103040505072404ad75"], 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x8, 0x3}]}, 0xc, 0x3) (async) syz_usb_connect$midi(0x0, 0x47, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x1, 0x7d, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xcf, 0x7}], [{{0x9, 0x5, 0x9, 0x1, 0x10, 0x3, 0x6, 0x6f, {0xc, 0x25, 0x1, 0x8, "31f7a2f30365f725"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x6, 0x3, 0x2, 0xff, 0x4}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x439}}]}) 2m52.509594044s ago: executing program 2 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async, rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (rerun: 64) getdents(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus\x00', 0x142) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 2m52.508054264s ago: executing program 2 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x47261af65e6430a4}}, 0x24, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1800) capset(&(0x7f0000000100)={0x399f1316}, &(0x7f0000000080)={0x0, 0x0, 0x800, 0xc}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x10e}], 0x1, 0x40000100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74000000060a030400000000000000000a00000a0900010073797a3100000000400004803c0001800a00010071756575650000002c000280060002400fea00000600014000010000060003400001000006000240"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={0x20, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@nested={0x4, 0xb}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) 2m52.502769014s ago: executing program 2 (id=417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2963}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_io_uring_complete(0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2f}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) read(r10, &(0x7f0000000140)=""/83, 0x53) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0, 0xa}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r11, &(0x7f0000000080), 0x8) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xb4, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7e5a884f, 0x44}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x1, 0x0, {0x6, 0x1ee2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1708, 0x40, 0x2f}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x0, 0x5, 0xff7b, 0xd, 0x7, 0x6, 0x3, 0x40, 0x6, 0x9b, 0x8008, 0x4, 0x3, 0x6, 0x1, 0x1]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x1, 0x0, 0x0, {0x9, 0x0, 0x0, 0x180, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0x3, 0x9}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x2400c804}, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x14, 0x28, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0x8e}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) 2m51.652641271s ago: executing program 2 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (rerun: 64) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x88000, 0x0) (async, rerun: 32) r2 = pidfd_getfd(r1, r1, 0x0) (rerun: 32) setns(r2, 0x66020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8914, 0x0) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) (async, rerun: 64) r6 = userfaultfd(0x80001) (rerun: 64) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)=0x0) ptrace$poke(0x1, r7, &(0x7f0000000140), 0x8) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x23, &(0x7f0000000080), &(0x7f0000000200)=0x14) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, 0x0) 2m51.585573733s ago: executing program 2 (id=419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) r5 = socket(0x11, 0x3, 0x0) setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @multicast}, 0x80, &(0x7f0000007fc0)=[{&(0x7f00000004c0)="02010200002d3922ff65b4355e953d23d254f00000008100", 0x18}], 0x1}, 0x816) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4cc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x44, 0x24, 0x200, 0x70bd27, 0x25dfdbff, 0xffffd4ff, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20050000}, 0x40014) 2m51.536545015s ago: executing program 2 (id=420): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x6ec, @local, 0xffffffff}, {0xa, 0x4e23, 0xa, @private1, 0x1}, 0x0, {[0x8000, 0x6, 0x108f4253, 0xe, 0x3, 0x7, 0x5, 0xfffffffc]}}, 0x5c) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x6ec, @local, 0xffffffff}, {0xa, 0x4e23, 0xa, @private1, 0x1}, 0x0, {[0x8000, 0x6, 0x108f4253, 0xe, 0x3, 0x7, 0x5, 0xfffffffc]}}, 0x5c) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, 0x0) (async) 2m51.469619367s ago: executing program 33 (id=420): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x6ec, @local, 0xffffffff}, {0xa, 0x4e23, 0xa, @private1, 0x1}, 0x0, {[0x8000, 0x6, 0x108f4253, 0xe, 0x3, 0x7, 0x5, 0xfffffffc]}}, 0x5c) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x6ec, @local, 0xffffffff}, {0xa, 0x4e23, 0xa, @private1, 0x1}, 0x0, {[0x8000, 0x6, 0x108f4253, 0xe, 0x3, 0x7, 0x5, 0xfffffffc]}}, 0x5c) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, 0x0) (async) 2m35.174411666s ago: executing program 1 (id=500): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000000)=0x4, 0x4) r2 = openat$cgroup_subtree(r0, &(0x7f0000001040), 0x201, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000003100)={0xfeef, 0x0, '\x00', 0x1, 0x0}) 2m35.130988027s ago: executing program 1 (id=501): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000004001", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100638a350000000000010000fa9b64789cbccd890400", @ANYBLOB="1e2e7ebb3d26472451799ea3d7154aa8e93add46181c3b8ce3be88fd44e1c2c9c221df26e98e", @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=r2], 0x38}}, 0x4) r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r3) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r3], 0x1}, 0x58) prctl$PR_SET_UNALIGN(0x6, 0x2) 2m35.078991689s ago: executing program 1 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setstatus(r0, 0x4, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x3}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000000740)=""/377, 0x179) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x7fffffff, 0x4) 2m35.078735799s ago: executing program 1 (id=505): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x54, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x4, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x20000003, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xa, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x10000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0xeb2, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0x996, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x7, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x7038, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffb, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0x8000, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x10000005, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x3, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r2) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) (async) rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x54, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x4, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x20000003, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xa, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x10000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0xeb2, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0x996, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x7, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x7038, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffb, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0x8000, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x10000005, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x3, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) close(r2) (async) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) (async) 2m32.061779515s ago: executing program 1 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) epoll_create(0x17f5) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x4) 2m31.189055523s ago: executing program 1 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) clock_settime(0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000005c0)=0xc) sched_rr_get_interval(r2, &(0x7f0000000600)) r3 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x3, 0x0, 0x40000005], [0x8, 0x7, 0x6, 0x0, 0x8, 0xd9]}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=r7]) mount$9p_unix(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x250804, &(0x7f0000000480)={'trans=unix,', {[{@version_u}, {@afid={'afid', 0x3d, 0x6}}, {@access_any}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'asymmetric\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x31, 0x66, 0x32, 0x63, 0x5, 0x37], 0x2d, [0x33, 0x66, 0x30, 0x61], 0x2d, [0x35, 0x0, 0x0, 0x36], 0x2d, [0x32, 0x38, 0x33, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x38, 0x32, 0x37, 0x732fb7239ab5a93f, 0x37]}}}, {@flag='sync'}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fsname={'fsname', 0x3d, 'n'}}, {@uid_lt={'uid<', 0xee00}}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x50, 0x1, {0x22, 0x788}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xe9, 0x8}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setuid(0xee01) fcntl$setlease(r8, 0x400, 0x0) r9 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f00000002c0)={r3, &(0x7f0000000180)='^\x05\\@:\x00', 0x2000, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x3]}, {0xa, 0x1, 0x6, 0xde}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8}) r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x8003, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x400}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040)=0xb) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r10) close(r0) 2m15.756401335s ago: executing program 34 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) clock_settime(0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000005c0)=0xc) sched_rr_get_interval(r2, &(0x7f0000000600)) r3 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x3, 0x0, 0x40000005], [0x8, 0x7, 0x6, 0x0, 0x8, 0xd9]}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYRESDEC=r7]) mount$9p_unix(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x250804, &(0x7f0000000480)={'trans=unix,', {[{@version_u}, {@afid={'afid', 0x3d, 0x6}}, {@access_any}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'asymmetric\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x31, 0x66, 0x32, 0x63, 0x5, 0x37], 0x2d, [0x33, 0x66, 0x30, 0x61], 0x2d, [0x35, 0x0, 0x0, 0x36], 0x2d, [0x32, 0x38, 0x33, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x38, 0x32, 0x37, 0x732fb7239ab5a93f, 0x37]}}}, {@flag='sync'}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fsname={'fsname', 0x3d, 'n'}}, {@uid_lt={'uid<', 0xee00}}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x50, 0x1, {0x22, 0x788}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xe9, 0x8}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setuid(0xee01) fcntl$setlease(r8, 0x400, 0x0) r9 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f00000002c0)={r3, &(0x7f0000000180)='^\x05\\@:\x00', 0x2000, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x3]}, {0xa, 0x1, 0x6, 0xde}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8}) r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x8003, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x400}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040)=0xb) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r10) close(r0) 1m22.415794404s ago: executing program 4 (id=908): syz_usb_connect$uac1(0x5, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x7c, 0x4, {0x7, 0x25, 0x1, 0x4, 0xc2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x5, 0xf6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x40, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1000}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x80, 0x5, 0x3, 0xef, 0x1}, 0x60, &(0x7f0000000480)={0x5, 0xf, 0x60, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "6e53d454d9dd89675147de07cfbe31ee"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b2ffa702f45f3d31eb6421088a62e0ef"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0e2fac15c2ea8f0a896b70abc6d213ec"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7f, 0x0, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bb2ab18a26e5056ddec4fc6ff9d7f093"}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}]}) 1m21.287305431s ago: executing program 4 (id=912): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008ef17a460000000000001090224000100009027090400fe01070000000903c100fe0122280009058103000409c001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2022280000002821c263138526792c3c9aeace91"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000002c0)={0x20, 0x18, 0x4, "d2df43e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x20, 0x0, 0x3, "aaeb1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x2, 0x101, {0x101, 0xf, "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"}}, &(0x7f0000000240)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "26fff6e0055f2a2bf60c5e6766e9b0844c3fe93caa913b4355d712ef0acbaa6844379a2f79758c5db34304687353b7d3d9c560bc736c954d9d2b2bfb168f04dc42b8492743b0da7b4ced173cbc4fcfef95629ff7e04d5eb8ce8b4ff61e43d186c3837846c2042334e5e01eb66347cd0dca2935e3623d67be73edfa1c54"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x0, 0x11, 0xb3, "92418d1db66b8de02d815a823793ebc8a10d4466debd628c450e68d98eda2e9943ef602180704faed83ec5a0011e6df7f3ea60f542101cca2ca8725d2078f4e191265d03472ada26cea756cdc7abe279c3c43436961ecc4e2e3542a8243ab8c235b4e4284374740624c6d399cdf8d9791b1c9b36ec6de23ac5b7457f2d952436e0fb7002f4f5ce1b49112e0ec7eaf4b5f4f755b409673c3b926acd96d51e9359553b4af1ecea0f4536d9a1a1ea660faa5c3926"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x81, 0x1, '?'}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "cbeeea"}, &(0x7f0000000500)={0x20, 0x83, 0x1, "a4"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "381918f3"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "30ec3e"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 1m18.261672957s ago: executing program 4 (id=925): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001480)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40114}, 0x10) 1m18.244924328s ago: executing program 4 (id=926): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003220000400705a1a440000102030109025c0002010280080904000001020d0000052406000105240009000d240f0100080000050009000406241a027c1609058103ff030807050904010000020d0000090401a0"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xfc477000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = epoll_create1(0x80000) userfaultfd(0x80003) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000000100"], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) epoll_pwait(r3, &(0x7f0000000540)=[{}], 0x1, 0x200, 0x0, 0x0) 1m16.785546784s ago: executing program 4 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8c0400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[], 0x0) (async) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) 1m16.729524686s ago: executing program 4 (id=936): io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x7, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) getsockname$inet(r3, 0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) (async) readv(r6, &(0x7f0000000840)=[{&(0x7f0000001880)=""/4084, 0xff4}], 0x1) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x100000000003, 0xb2, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x4, 0x4, 0x11f, 0x9, 0x3, 0x9, 0x1b0ee0e8], 0x0, 0x2a80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0xa, 0x12) 1m16.637800929s ago: executing program 35 (id=936): io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x7, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) getsockname$inet(r3, 0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) (async) readv(r6, &(0x7f0000000840)=[{&(0x7f0000001880)=""/4084, 0xff4}], 0x1) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x100000000003, 0xb2, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x4, 0x4, 0x11f, 0x9, 0x3, 0x9, 0x1b0ee0e8], 0x0, 0x2a80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0xa, 0x12) 40.837557049s ago: executing program 5 (id=1152): open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) (async) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) (async) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) (async) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, &(0x7f0000000040)=""/40, 0x28) (async) getdents(r6, &(0x7f0000000040)=""/40, 0x28) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 40.80987376s ago: executing program 5 (id=1153): syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x400) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syslog(0x4, 0xfffffffffffffffe, 0xff14) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007c, 0x80001) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) unshare(0x400) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syslog(0x4, 0xfffffffffffffffe, 0xff14) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007c, 0x80001) (async) dup3(r2, r3, 0x0) (async) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) (async) 40.677083004s ago: executing program 5 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) unlink(&(0x7f0000000000)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) setreuid(r0, r1) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x88408, &(0x7f0000000280)={[{@index_on}, {@metacopy_on}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) 40.617261636s ago: executing program 5 (id=1155): socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) setns(r2, 0x24020000) setreuid(0xee01, 0xee01) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ddfcffff120020002bbd7000ffdbdf25ac1414aa000000000000000000000000000004d60a00330000001000010000000000000008001800ff0000000c00150059073500ac0d0000080016000000008008000c00ff010000ad2d591880bc0d6a6baa03215405ed3c40e751ad3a599bde2ebe9df78cc01e91d60abdb89a3e058bd50348b0938bf629e661eb72a269ee090a093b70cb957a0b5b14ff5b724ecf31026145fb018c40d141a97b7d1acedd8abbd2ea1fe8709b8fd57ea1abf0"], 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x1) unshare(0x44040200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000100)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'netpci0\x00', 0x1000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) writev(r0, 0x0, 0x0) 40.588193527s ago: executing program 5 (id=1157): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000000080)=0xfffffdd9) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r2, 0x0, 0x2, &(0x7f0000000100)="813f0ea6", 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x7c, 0x4, {0x7, 0x25, 0x1, 0x4, 0xc2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x40, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1000}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 40.380164254s ago: executing program 5 (id=1158): connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) (async) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1}, 0x107, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10000, 0x500}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x20040804) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 40.333549895s ago: executing program 36 (id=1158): connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) (async) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1}, 0x107, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10000, 0x500}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x20040804) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 22.769483895s ago: executing program 8 (id=1285): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x32f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xcd, 0xc5, 0x3a, 0x20, 0x4e8, 0x8001, 0xb45d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31d, 0x2, 0x8, 0x4, 0x10, 0x81, "", [{{0x9, 0x4, 0x6f, 0xdd, 0x1, 0xbf, 0x8, 0xcb, 0x5, [], [{{0x9, 0x5, 0x7, 0x10, 0x58, 0xc0, 0x2, 0xe, [@generic={0x77, 0x22, "3647f896a771f5af0fc9466799070bab7a619df03bfb957ba17e2eb26357cff59a704732acc71671041bc4a449e66ee5e10873dbcaf80c2f45919cbe8c7c900d3d6333adcb23587c5a81cb5da297f47c1b9919a09632ced44803adf2ebc7caf4f29946032f98a4452a73178402e97d8dc615a57211"}, @generic={0xa6, 0x6, "cefaa47f88954bc881ce6e4a8cc7d2428a1df0cd808b92b5ceca09eabff2d540af1edc2d90eb3efe96589c5694328a353d762bdb3984fb2852352f75a8f5a481681e4c212aba56dfd0760e63edf653e413311f11cf8c8422e9e8ae468cc04abd4ea5bd6e7d9ac5948b918de1380e4f160a91e5fa5acc0bb98df3bb3a8f6be58482a77457895007441d64ef0f4b8088a168aaa2021053a966b23a36cf51e075d4abadb6ff"}]}}]}}, {{0x9, 0x4, 0x5d, 0x6, 0xc, 0x94, 0xd3, 0xd7, 0x10, [], [{{0x9, 0x5, 0xa, 0x3, 0x400, 0x4, 0xc8, 0x0, [@generic={0x71, 0x23, "8d1c6a68e97d7c9c31f4083fddbe78a99ba08922ea1b094ed770d961d60c0cd9cfc23a0c3168397f6aa8f35fbdb1d7e7877735eccf62a8d6006b8525f8288a149f43eb5d19c6e695e3fbd8cd01305062f7887d17f0fa25bfde3a00ae268798960c7be555064e0eb2f6c9694e1a1121"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x2, 0x46, 0x40}}, {{0x9, 0x5, 0xe, 0x7f7f3c5fc5677942, 0x400, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5c, 0x45, 0x61, [@generic={0x2f, 0x23, "a19d8cdb46ce6fe9b4b44f95502c0e6812f66d09f59a13dd2661e475160223930d4508ee8ce8b647606c547fa6"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8c, 0x4, 0xc2}}, {{0x9, 0x5, 0x7, 0xc, 0x0, 0x3, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @generic={0x29, 0xd, "2cd55637f7bf45dee524882dd877f3671ad0e695c65cc61b9eed1086a92ef3486c8ac82fb0c10f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x0, 0xc, 0xfd, [@generic={0x4e, 0x23, "6d46677906d1cc135feb3199b44b0aae4940e02232651db82801ffeeeff5e0e8dfeed83150918e7991c8af63e471064ea48ab96fb6525a20eeefc7599e8c01218c5934b99bcb12a5b9c151f4"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x63, 0x9, 0x40}}, {{0x9, 0x5, 0x2, 0x9, 0x3ff, 0x8, 0x7f, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0x2f, 0x1, [@generic={0x44, 0x4, "b2b69c26f2bd8920c35f03b1113f20842caa95aa8c6c8b499ae49398af5aa670fd322130893da313eb1f0aa2b78e7851acc6e2111357e17585b71350c42fc6b4eff1"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x8b, 0x12, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x110, 0x3, 0x3, 0x7, 0x20, 0x5}, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="9b042dbc6c"], 0x1, [{0xef, &(0x7f00000009c0)=@string={0xef, 0x3, "e94b969f2fd66bb9626038c2ed60eb757397d4f3484f4116a471792eaee63e1c92d8a77126921db9b7cf6193699da24a8a60ae91936ae6d4db223d0ee740bfa8e4e98584021548663b446edd889f5211a443a0286fa2a851728e540be189a10c0caaaa8b128e128b19d06d0d8783e6e6defef0c198e84f7874162072bb1c4d58630166aa4bcefda061f3a563ea78a93135641c65c052e2a8d75bd4b0ee278d35a206e6ef82147b20c58158084045426cc02cf25e26f08bdac39a376d3ae0687460e871e9ee9f2d45e367606d883c8b37823333751a72d31ffa1b37d935c2f54eb29733717322ab9d6f5c8c45a3"}}]}) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x4, 0x60, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2d}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0xf8, '77Y'}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x8, "ea7088da64"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x0, 0x9, 0xa, 0x6, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x5, 0x7, {0x7, 0x25, 0x1, 0x4, 0x68, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x8, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9, 0x401}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0xe7, 0x7, 0xef, 0x1c}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x0, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfe, 0x8, 0xa}]}, 0x2, [{0x95, &(0x7f00000001c0)=@string={0x95, 0x3, "e6f477d795f828c65d22bae3c9d672529b54e05147106c22fbd0d352704a60a3de90fb09575416d205a1e4841296e2197393cc93a267ec3ec567e6a60ae12feac24214665eb91c5a04c41a20b62a54a9017e547b698eaa7c5ace11b84eaf1062cfd764d2af4ce70f65cc08f95090495908abcd7d4efc69f77a7f6b932bd8ef36e7050c2bc37102b6d04525446f82b384ac9fac"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x7}}]}) (async) r0 = syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x4, 0x60, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2d}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0xf8, '77Y'}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x8, "ea7088da64"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x0, 0x9, 0xa, 0x6, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x5, 0x7, {0x7, 0x25, 0x1, 0x4, 0x68, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x8, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9, 0x401}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1, 0xe7, 0x7, 0xef, 0x1c}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x0, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfe, 0x8, 0xa}]}, 0x2, [{0x95, &(0x7f00000001c0)=@string={0x95, 0x3, "e6f477d795f828c65d22bae3c9d672529b54e05147106c22fbd0d352704a60a3de90fb09575416d205a1e4841296e2197393cc93a267ec3ec567e6a60ae12feac24214665eb91c5a04c41a20b62a54a9017e547b698eaa7c5ace11b84eaf1062cfd764d2af4ce70f65cc08f95090495908abcd7d4efc69f77a7f6b932bd8ef36e7050c2bc37102b6d04525446f82b384ac9fac"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x7}}]}) syz_usb_disconnect(r0) 22.086219477s ago: executing program 8 (id=1295): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r0 = syz_usb_connect$uac3(0x3, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x19, 0x40, 0x6, {0x8, 0xb, 0x1, 0x2, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1d, 0x9}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x101, 0x3, 0x3, 0x10, 0x8000, 0xb22, 0x8, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x77, 0x1e, {0xa, 0x25, 0x25, 0x50000, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x3ff, 0x400a, 0x4, 0x7, 0x1, 0x4, 0x7c}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3a, 0xc1, 0x5, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7fff}}}}}}}}]}}, &(0x7f0000000000)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xa, 0x21, 0x95, 0x40}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x2, "f61f5a6d50877cb38e0664f60398787970fd7add113ca88c8457b3d4d826e635a69e86b79b26b87b70573209853f527c70bdec820a"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}, {0xa2, &(0x7f0000000280)=@string={0xa2, 0x3, "04bb45c5b9b27745eaa585f5d6ed2a7aadbb0ca86c522e65b04576d38398dfcdd69f8d202fd917cb7e6b1c2099919c39475d11245f9e4c2490f47a84351d1ae6f48db0342451d5cf7b405ead5118f0840e62aa318af3c718276f81bd7a62c1123c38c6a25df324856f79fc3608ed8337d96259b6db64e0b6305706cec664ba31236be5d496f28813ac7e28c59d72826833b0edc86ac6a60bbec975d5f850fc66"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc01}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "ec9c3440ecab98885ba83225df18bf55fc7371d8c35391e4ebc7d826458d0fc47914334c32ea56238c"}}]}) syz_usb_control_io$uac3(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x20, 0x0, 0xea, {0xea, 0x30, "78556ce15f2e2a7966e93823ea9d65e28f7df569a4434a53d211ab5368430f63ca2b32382abad8f59ea5ac81b90d27e9b8bb11b0410ebce26a25734ac5a20eec1ff9f81d9598d4abe3caa7a8ec3629d8752060d68a6be801b7d5e3ae2a657291f66627a546211ca4168710c94516398312a6f453034c50bc8f8eb3bd3bf2350c195b78f656bc4cabe54914b634b5a664d5ddeb2451f226da8c1485eb255ff97dd3143b5e1e0d79c97d5621a19bded5c48b14c976fdb6b80907eb5fdcc1c7bcbcdc105ad7935e483118c1da559be2de878a9c4171827a4203aee2f2b12077fca3801f186f42e35494"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x6d, "4e2df4f5dac24641a388501402073c2fc284d3521d2c5cd11fe11c5bdadb99273940282aada2de5cf0b84fc42766fba13bc1ea0e8c589a155b330fe1e83b9efc29028bac5e4a0f4c1b22a87fb2d49f2577ff64d2e2760f7ab587c058c139c685f3ec91ddb4040f9b9d17c5ebed"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000700)={0x20, 0x81, 0x1, "83"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "b82be9"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "694b9b"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "9a"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "79ee9b"}}) (async) syz_usb_control_io$uac3(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x20, 0x0, 0xea, {0xea, 0x30, "78556ce15f2e2a7966e93823ea9d65e28f7df569a4434a53d211ab5368430f63ca2b32382abad8f59ea5ac81b90d27e9b8bb11b0410ebce26a25734ac5a20eec1ff9f81d9598d4abe3caa7a8ec3629d8752060d68a6be801b7d5e3ae2a657291f66627a546211ca4168710c94516398312a6f453034c50bc8f8eb3bd3bf2350c195b78f656bc4cabe54914b634b5a664d5ddeb2451f226da8c1485eb255ff97dd3143b5e1e0d79c97d5621a19bded5c48b14c976fdb6b80907eb5fdcc1c7bcbcdc105ad7935e483118c1da559be2de878a9c4171827a4203aee2f2b12077fca3801f186f42e35494"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x6d, "4e2df4f5dac24641a388501402073c2fc284d3521d2c5cd11fe11c5bdadb99273940282aada2de5cf0b84fc42766fba13bc1ea0e8c589a155b330fe1e83b9efc29028bac5e4a0f4c1b22a87fb2d49f2577ff64d2e2760f7ab587c058c139c685f3ec91ddb4040f9b9d17c5ebed"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000700)={0x20, 0x81, 0x1, "83"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "b82be9"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "694b9b"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "9a"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "79ee9b"}}) 21.564274543s ago: executing program 8 (id=1306): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x400, 0xe0, 0xfffffff9, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xe, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x3, 0x1, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x7, 0x40000001c, 0x3, 0x8000, 0x80000000106c, 0x100, 0x9, 0x4, 0xd4, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21.513458785s ago: executing program 8 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x149d}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) (async) mprotect(&(0x7f0000682000/0x3000)=nil, 0x3000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) 20.985690472s ago: executing program 8 (id=1313): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.events\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000046c0)=""/4096, 0x1000) setuid(0xee00) 20.964797502s ago: executing program 8 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdb08000200000300000800010075647000ecabe5dfd108a164feb61e88d252a1b4174fc02db2335309b70d7b1bf53e01237b9ba267b91f49f3d49a050276b0a9930b580473197d8e3ddaf83c26593be72f7ec43248c917810d65052e891107967d11d910b2c6613063950ea361f772a79f5f50f7d2aa457ec73b5bd16caae353a518c4f75d8daf999eba9d0f3ba824d903fc38bb9505fac68544dcf19ac84450a1b3d8d052f33bf8030b62daf4174a500e38db95b6c998dbc769a74a9588befde9d2304a55f7c747740de98f"], 0x2c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x20000000) 20.899414985s ago: executing program 37 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdb08000200000300000800010075647000ecabe5dfd108a164feb61e88d252a1b4174fc02db2335309b70d7b1bf53e01237b9ba267b91f49f3d49a050276b0a9930b580473197d8e3ddaf83c26593be72f7ec43248c917810d65052e891107967d11d910b2c6613063950ea361f772a79f5f50f7d2aa457ec73b5bd16caae353a518c4f75d8daf999eba9d0f3ba824d903fc38bb9505fac68544dcf19ac84450a1b3d8d052f33bf8030b62daf4174a500e38db95b6c998dbc769a74a9588befde9d2304a55f7c747740de98f"], 0x2c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x20000000) 9.149100839s ago: executing program 6 (id=1345): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000300008802c0000800400098024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400020077673000"/82], 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x3, 0x8, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x1, 0x0, 0x0, 0x3, 0xfffffffc, 0x100003, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001400)={0x2020}, 0x2020) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x64000) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x98, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '%\\,:-#\\*)'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '&,c\x83%.%}(*'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x20004080) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x2, 0x5, 0x5}, 0x2, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x7, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb78a, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x4, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x6, 0x67, 0x9483, 0x10, 0xe, 0x2, 0xef, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x4, 0x9], [0x3, 0x7, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x7, 0xfff, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x5, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x6, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x2, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x6, 0x6, 0xb0fa, 0x4, 0x7ff, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x6, 0x800, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3e, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0x2, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x5, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x80000000, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x3, 0x8, 0x2, 0x2, 0x101]}, 0x45c) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f00005d6000/0x4000)=nil, 0x4000) (async) munlockall() (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r10, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xbc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa0003010520060904000000010100000a240108002f000201020c24020306020408070080fc072408e100080509240605020108000309240301ff010506fb0904010000010200000904010101010200000a2402028000b10c07fa0724010306011009050109ff0343060d0225"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 9.148530539s ago: executing program 3 (id=1346): mkdir(&(0x7f0000000540)='./file0\x00', 0x20) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000200000000000400070000000000080000000000000020"], 0x24, 0x3) syz_usb_connect$cdc_ncm(0x5, 0xce, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x2, 0x1, 0x5, 0x30, 0xdc}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x9, 0x2, 0x8, 0x8}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe5dc72ee8d8eee2, 0x81, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37d5c87a8d7dcfde62307820d7609678"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x68, &(0x7f0000000340)=@string={0x68, 0x3, "08e46219a0ae3f76fb440f88cd6c8d317941b4ea86c4199f85720fa0dfbe1a9d67467c2123cd4af54850413697f5535457c70c0b6fed47433440fe82b77d0d490167679cc9b598cbc89febffcf24f887cfb9fb1b32c3a794a2c60000231b83d9494c7f29ca9f"}}, {0x4, &(0x7f00000008c0)=@string={0x0, 0x3, "634a1c91b81f97ce168539bc10519f2ce22106653b661bb64c2e85a70ed9269482bc189d1c42d025d30178e5d7a07bebe6fa0352f2256e1d7a593b3686f4cb796c771707f7f1ea32df1e6a5abeb7be6e9e7676cb32aa97bd22dd1eae743e8353ab272f4f9e666e87787f06a3388a7e65470018eb0f62f95a6853291289bf8eef390be492c277c3af0acb0ba38b7690e87263a9d603d744060dc5679cd0707f259f8d45143f"}}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) close_range(r0, r0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x4, 0x4) syz_usb_connect(0x1, 0x1e6, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xf4, 0xa5, 0x40, 0x20, 0x1949, 0xae0d, 0xa0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d4, 0x1, 0x9, 0x3, 0x0, 0x6, "", [{{0x9, 0x4, 0xa8, 0xd, 0x8, 0xff, 0x5d, 0x1, 0x10, [], [{{0x9, 0x5, 0xe, 0x4, 0x0, 0xa5, 0xb3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x45, 0x1}]}}, {{0x9, 0x5, 0xe, 0x3, 0x500, 0x10, 0x81, 0x0, [@generic={0xe, 0x31, "e19211e054382813f1109e28"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x9, 0x3, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x2, [@generic={0xee, 0x24, "42361c8de9d0cbf08b01950f4dc9054de9dc264f4e8ef38f8b828761213d35d5080737f394925987b9e1ef29046e52dd3277780060d5c8dacc9d4fa6de2ddc10e20c2d1ad2d550f7ec7a17e7623f044ed9bd3053dc8a1884d9b20cc507a85ff66129fa1d81a0ddbe3d03f79f2d181589ac5bb7dac56df5f4a851db49de3cd42d0bc0aaa2bd0b3fe4b92126d6650f5c5a6dbbe68cc2c3f21e0eb472fd07bd029900e4935dc30034d7ad9f71ea3db9a670540f3e8e7327777fb9e12fba3a0b220a2ab46a329233cfb13a9490c5e7b6117a3308fb2454e1b7c92b17afce483ee1972ba5b133a637eb1ba55ae0a8"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x2, 0x2, 0xff}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x85, 0x91, 0x91, [@generic={0x54, 0x21, "e33826439c4c91f37287ee52b471f5cc6f7048881d76187db232963125dfde8479c1d7dce0c03944b86d03fe7fe965b5555a5a83e019edd8b4759ddbdebcc315b18c8fa5c27d704b3dfd7f2650f1caa1e0e9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xf, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xbfe1}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x4, 0x7, 0xfc, 0x10, 0x8}, 0x3e, &(0x7f0000000680)={0x5, 0xf, 0x3e, 0x2, [@generic={0x25, 0x10, 0xa, "ba5cb03265e35e879e6af9837cc78cdc3dc79e769bf21472d9458b80c9b0b4a80b0e"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "162be9bc3fd64d4ce84e7c85f44889b8"}]}, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x13248101a8aac4d}}]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa6, 0x66}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20880}, 0x4008000) write$tun(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="413f03"], 0x329) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0x8) 7.600107419s ago: executing program 7 (id=1347): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000000c0)={0x269e, 0x7988}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000003900)={0x20071026, r4}, &(0x7f0000003940)={0x627, 0x80000000, 0x3, 0x9, 0x1, 0x8}) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) 7.598979079s ago: executing program 6 (id=1348): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x408, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r2, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)="01", 0x1, 0x82, 0x0, 0x29) r5 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x862301) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/39) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000120001000000000000000000100000000c0000000000000000000000a1001000"], 0xc4}], 0x1}, 0x0) 7.598648248s ago: executing program 3 (id=1349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 5.856819314s ago: executing program 7 (id=1350): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x6, 0x1800, 0x0, 0x3, 0x4, '\x00\b\x00'}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='\x16([%\x8e\x00\x106\xcd\xe7|\x94\x01bW\xe4\n\xea\x01\x8b\x86-\xa6\x15]\xec\x8bT\x1c\xe84\xb9\xa7&Q\xf6eC/\"\xd6\xa2\xd5\xcd\x9a\xa0\x80\xa0\fW\xb7\xf8\x95:\x91Q^\x9e\x8f\x0f\xf0RE~QT\x95\xcf@\x88', &(0x7f0000000180)='\x11\x84\xf2L%\xcf\x8b\x93\xfd2\xd5J\xaa\xaa3\x1c\x1b\x8d\x11\x87\x16A\x12_>\xa9\xa7Yt`K\xe7\x8e\x0e\xde\x1a%LSY\xc25,\x90\x88hT\xd7E\xc4\xcc\xbbh\x81\x9by&\xd9h\x98Gf\t\x90d\xca\xa3\x973]!G\x06\xea\xa8\x83\"l', 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x30, {0x30, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x9, "07447a7c33d8f9a4e2"}, 0x0}) 5.759862067s ago: executing program 6 (id=1351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond_slave_0\x00', 0x100}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="ac1414aa0000d24600020000070000000000000004d46c00000000000000000000000000000065000000090000000000000006000000b2f0e5d85800000000ffff0000000000001c250800000000000200000000000000f8ffff7ff1ffffff000000000000000006000000000000f14b6a898cf70000000000000000001f00000000000000020200000000000002000000fcffffff000000002abd7000043500000a0001fd20000000000000004800"/245, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0xc389, 0x80000000}) 5.758439047s ago: executing program 3 (id=1352): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x6, 0x9, 0x1, 0x200, 0xfff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000940)={@private0, 0x10004, 0x2, 0x0, 0x9, 0x5c5, 0x1}, &(0x7f0000000980)=0x20) socket$netlink(0x10, 0x3, 0x0) 4.023513333s ago: executing program 7 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="ca38d44da384f41622a364e7b6b349ca8da21c85845e98c852852e09a0222fb15fff7172112e6edc35bd624a6c93bff26063c1ddfe397b4819d34248dfa24e6d2bc29aae241cdbe192b8d038b3929f62ea081a5ba3246e50700892c7699a568a2062f1fc40abb6b79f51c8046fbc52b268f0084b416e764387d1e91cf4a28e59d3487169572b4f5e318df2b76c0770ce91b5e08862f85a7730bc25d719522812f6aa36c1eee891af9c5d447d0e3b15907526c97a0554bd3db8960f0b9ddb72396198bfb3df020b54caaa643754f8d661ae0000d2117afb7ca14a7b25cd0f1c81f705a462"], 0x6c}, 0x1, 0x0, 0x0, 0x6044041}, 0x40008e5) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 4.023228222s ago: executing program 6 (id=1354): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = open(&(0x7f0000000380)='./file1/file0\x00', 0x20c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r4, 0x0, 0x0) ftruncate(r3, 0x200004) r5 = dup3(r0, r1, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000000)=0x40, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @multicast1}, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x68dc}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000001c0)={{0x1, 0x2, 0x4000003, 0x3, 0x1000000}}) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) read(r8, &(0x7f0000000200)=""/248, 0xf8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5422) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r9, r9, 0x0) 4.021805673s ago: executing program 3 (id=1355): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x2d, {0x2d, 0x31, "7d611870cced50a6dc9b9baae6e4fb073473109cb53837f15d7c0201458010d302afc5df88633154ce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.949324155s ago: executing program 7 (id=1356): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x2}}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x200) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x9795, {0x2000004, 0x1000000000000000, 0x1000000975a, 0x40000000000305, 0x3, 0x40b, {0x5, 0x800000000000005, 0x1, 0xfe2b25f, 0x1ffffffffffffffe, 0x0, 0xc, 0x4, 0x3, 0x4000, 0x3, r2, r3, 0x2, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0) 2.078502895s ago: executing program 7 (id=1357): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) (async) sendmmsg$sock(r0, &(0x7f0000003680)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8840) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x174, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffd}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8fb7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20004080}, 0x81) 2.078101555s ago: executing program 6 (id=1358): r0 = socket(0x10, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x9b, 0xff, 0x4, 0x50, @empty, @loopback, 0x700, 0x700, 0x8000, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x100) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000003c0)={0x0, 0x6, 0xc000, 0x2000, &(0x7f0000002000/0x2000)=nil, 0x8, r8}) sendto$packet(r4, &(0x7f0000000780)="05031600d3fc140000004788031c09102c28fbdb63fd0e2cf76c25b9b3279ff2ff296e523f61", 0x26, 0x4, &(0x7f0000000600)={0x11, 0x8864, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9dcd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x4, 0x4) epoll_create(0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @empty, @empty, 0x700, 0x0, 0xf521, 0x5}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r9, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc63dc4751a10da6d}, 0x44001) 2.077690395s ago: executing program 3 (id=1359): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="66043d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setresgid(0x0, 0x0, 0xee01) setfsgid(0xee01) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000180)=0x7, 0x8) r3 = accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3647e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000200)={0x1, 0x1}) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x2000c080}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r9, &(0x7f0000000240)={0x6e, 0x7d, 0x2, {{0x0, 0x4f, 0x401, 0x1000, {0x10, 0x3, 0x8}, 0x8a000000, 0x1, 0x80, 0x7, 0x1, '^', 0x1, '\x00', 0x15, '/dev/bus/usb/00#/00#\x00', 0x5, '$+t\xcb+'}, 0xa, '/dev/fuse\x00', r5, r6, r5}}, 0x6e) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0xa, &(0x7f0000000000)={0xd, 0x8, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) iopl(0x3) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.519319ms ago: executing program 7 (id=1360): r0 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) shutdown(r1, 0x0) (async) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1.1178ms ago: executing program 6 (id=1361): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r0, 0x800, 0xbd6, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400048c1}, 0x24000844) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x4040, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000240)={0x5, 0x1}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000002c0)=r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000480)={[0x1, 0x20, 0x5, 0x80, 0xfff, 0xce5, 0x65, 0x5, 0x80000000, 0x4c, 0x7fff, 0x4, 0x7, 0x5, 0x0, 0xc, 0xfffffffd, 0x4, 0xffffc5cf, 0x9, 0x80000001, 0xffffff81, 0xe6d, 0x7, 0xffff, 0x7, 0x80000000, 0x3, 0x9d34, 0x9, 0x5, 0x2, 0x0, 0xd, 0x6, 0x10, 0x1, 0xe5, 0x11, 0x9, 0x43, 0x8, 0x3, 0x5, 0x3ff, 0x52e, 0x94b, 0x5, 0x8, 0x735a, 0xf40, 0x3, 0x266, 0x8, 0x0, 0x10001, 0x2f, 0x1, 0xfffffffa, 0xf6f8, 0x3, 0x1, 0x80000000, 0x0, 0x8, 0x8, 0x8001, 0x401, 0x1, 0xfffffff7, 0x6, 0x6, 0xc7, 0x6, 0x3, 0x1, 0xe, 0xb, 0x7ff, 0x1, 0x9, 0x9, 0x5cf, 0x2, 0x1, 0x8000, 0xfffffff9, 0xffff, 0x8, 0x4, 0x6, 0x8, 0x0, 0x7, 0x7, 0x8001, 0x4, 0x8001, 0x6, 0xff, 0x1, 0x939e, 0x5, 0x0, 0x1ff, 0x6, 0x8df, 0x0, 0xa47a, 0x0, 0xd5, 0x3ff, 0xcf19, 0x7f157c2d, 0x14000000, 0x9, 0x65b, 0x6, 0x63, 0x1ff, 0xa, 0x81, 0x4, 0x9, 0x7, 0x5, 0x5, 0x6, 0x75acddae, 0x0, 0x0, 0x3, 0x8, 0xd71, 0xe, 0x8, 0x8, 0x6, 0x10000, 0x401, 0x8, 0xffffffff, 0xe, 0x1c48fc5f, 0x6, 0xfff, 0x5, 0x2a, 0x1, 0x9, 0x699, 0x8, 0x35, 0x8, 0x400, 0x8001, 0x101, 0x0, 0x8, 0xfff, 0x2, 0x7ff, 0x401, 0x3, 0x101, 0x7, 0x7f, 0x9, 0x7fff, 0x4, 0x31f, 0xfec, 0x41, 0x5, 0x2, 0x5, 0x8001, 0x0, 0x0, 0x940a, 0x56a, 0xa3, 0xa, 0x101, 0xb, 0x3, 0xfffffffb, 0x3, 0xdd, 0x0, 0xfff, 0x7, 0x3ff, 0x3, 0x7, 0x1, 0x9, 0x0, 0x1, 0x1, 0x8, 0xf, 0x4, 0x408c, 0x5, 0xa, 0x76, 0x80000000, 0x0, 0x7f, 0xe0000000, 0x3, 0x8, 0x1, 0x401, 0x4, 0x8, 0xfffffffb, 0x0, 0x6, 0x21a1, 0x800, 0x1ff, 0x9ec, 0xfffffffd, 0x8, 0xffffffff, 0x8, 0x1ff, 0xc, 0x3, 0xfffffffe, 0x3, 0x7, 0x8, 0xfffffffb, 0x448, 0x4a14, 0x7, 0xb, 0xe8, 0x8, 0xfb, 0xf, 0x8, 0x46000, 0x5, 0x100, 0x7, 0x40, 0x4, 0x3, 0x400, 0x5, 0x0, 0x7, 0x2, 0x5, 0x8, 0x1, 0x4, 0x7, 0xfffeffff, 0x9, 0xffff, 0xb, 0x7, 0x7, 0x7, 0x7fffffff, 0xe, 0xc1fc, 0x9, 0x8, 0x1c6d, 0xfb, 0x4, 0x3, 0x0, 0x5, 0xffffffff, 0x9, 0x9, 0x7, 0x4b66e1dd, 0xffffff2d, 0xd1, 0x2, 0x80000001, 0x401, 0xf, 0x7, 0x30000, 0x3f7f, 0x8, 0x1, 0x1, 0x8, 0x9, 0x8, 0x57, 0x5, 0xb32, 0x800, 0x7, 0x1, 0x400, 0x80000000, 0xfffffffb, 0x6, 0x4, 0x1, 0xc, 0x9, 0x80000000, 0x0, 0x8, 0x0, 0xfff, 0x619, 0xca, 0x4, 0x9, 0x5, 0xfffffffb, 0x1, 0x7, 0x0, 0x4, 0x7, 0x1, 0x800, 0x3, 0x0, 0x6, 0xc, 0x5, 0x7, 0x80000000, 0x5, 0x6, 0x6, 0xff, 0x2, 0x2, 0xc58, 0xb, 0xc, 0x20, 0x0, 0x80000001, 0x1, 0xff, 0x0, 0xff, 0x7, 0x9f, 0x7ff, 0x1, 0xfffffffe, 0x1ff, 0x2, 0x5, 0x8, 0x2, 0x80000001, 0x4011, 0xfffffffe, 0x5, 0x9, 0x6, 0x7, 0x200, 0x4, 0x1, 0x2, 0x9454, 0x6, 0x4, 0x6, 0x3, 0xfffffffb, 0x8, 0x1, 0x6, 0x1, 0x6, 0x0, 0x636d2f21, 0x4f, 0xffff, 0x7, 0x9, 0x4, 0xfffffffa, 0xf, 0x9, 0x7, 0x0, 0x9a, 0x7, 0x5, 0x3, 0x7fffffff, 0x8, 0x100, 0xd895, 0x80000000, 0x0, 0x2, 0x101, 0x7, 0x6, 0x200, 0x8000, 0x5, 0x9, 0x4, 0x6, 0x20, 0x2, 0x7489, 0x5, 0x200, 0x1, 0x4, 0xa, 0x6, 0x6, 0x7, 0x1000, 0x7, 0x164, 0x496, 0xffff, 0x10, 0x3, 0x40, 0x4, 0x4ac7, 0xffffffff, 0x1, 0x7, 0x3, 0x7, 0x8, 0x5, 0x8001, 0x8001, 0x5, 0x1, 0xd3, 0x2, 0x1, 0x7f, 0x5, 0x9, 0x7, 0xfffeffff, 0xfffffff3, 0x5, 0x1, 0xe5, 0xff69, 0x5ed1, 0x6, 0xfffffc00, 0x7fffffff, 0xc34, 0x8, 0x2b0, 0x2b89df4b, 0x101, 0x2, 0x5, 0x2, 0xf, 0x9, 0x7, 0xff, 0xff, 0xfffffff7, 0x3, 0x7f, 0x8, 0x80000001, 0xa2b, 0x6, 0xfffffff9, 0xc, 0x5, 0x52, 0x6, 0x7, 0x800, 0x7, 0x4, 0x9, 0x0, 0xa743, 0x100, 0x101, 0x4, 0x1, 0x6, 0xfffffff8, 0x9, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x14b8, 0xa, 0x0, 0x3, 0x2, 0x1ba, 0x7fff, 0x6, 0x9a3, 0x3, 0x0, 0x1, 0x2, 0x5, 0x38, 0x80000001, 0x7, 0x1, 0xa00, 0x5, 0x5, 0xffffffff, 0xefc6, 0x594, 0x1, 0xa, 0x1, 0x1, 0x100, 0x0, 0x3, 0x10000, 0x3, 0x0, 0x101, 0x3, 0x8, 0x400, 0x80, 0x80000000, 0x7, 0x9, 0x5, 0x73c4, 0x6, 0x5, 0x2, 0x2e, 0x100, 0x9, 0x4, 0x6, 0x7f, 0x7fff, 0x7, 0xffffffff, 0x0, 0x8, 0x8, 0xff, 0xa2f, 0x7, 0xc, 0x5, 0x3, 0x5, 0x3, 0x2, 0xbd, 0x4, 0x7, 0x6, 0x8000, 0x3ec, 0x0, 0xfffffffb, 0xfffffffd, 0xf671, 0x6, 0x2fd0, 0x7, 0x4, 0x4, 0x6, 0x6, 0x6, 0x2, 0x200, 0x800, 0xffff, 0x1, 0x4, 0xff, 0x5, 0x2, 0xb, 0x0, 0x200, 0x5, 0x4, 0x8, 0x2, 0x3, 0x8, 0x7, 0xa, 0x3, 0xb, 0x68c7, 0x3, 0xffffffff, 0x5, 0x8, 0x772, 0x2, 0x6, 0x6, 0x7, 0x3, 0x0, 0x81, 0x6, 0x401, 0xffffffff, 0x1, 0x8, 0x9, 0x2, 0x81, 0xb6ce9954, 0x8d4f, 0x1, 0x6, 0x1, 0x7dc, 0x1, 0x7, 0xb70, 0x6, 0x100, 0x6, 0x80000000, 0x0, 0x4, 0xa3, 0x8, 0x38800000, 0x0, 0x5, 0x3, 0x3fff80, 0x7fff, 0x0, 0x7, 0x6, 0x3, 0x8001, 0x2, 0x5, 0x6, 0x9, 0x4, 0x0, 0x81, 0x3, 0xffff8000, 0x2, 0x3d, 0x7, 0xffffffff, 0xffff66d2, 0x6, 0x6, 0xe, 0x5, 0x2c, 0x9, 0x4, 0x1ff, 0x3ff, 0x4, 0x10, 0xccf, 0x6, 0x6, 0x5, 0x80, 0x80, 0x6, 0x9a78, 0x6, 0x40, 0x18, 0xb03b, 0x400, 0xfffff0f0, 0x0, 0xae, 0x9, 0xd, 0x0, 0xffffffff, 0x8, 0x8, 0x1ff, 0x1, 0x6, 0x1, 0x1, 0x7fffffff, 0x9000, 0x7, 0x1, 0x26, 0x62, 0x7, 0x4, 0x4, 0x4, 0x0, 0x2, 0x7, 0x1f1, 0x40, 0x3ff, 0x3, 0x4, 0xfffffffe, 0xb1, 0x5e1, 0x1, 0xbc4, 0x6, 0x52, 0xccb, 0x7, 0x5, 0x8, 0x3ff, 0x1, 0x43, 0xa, 0x8c, 0x4, 0x1, 0xb40a, 0x800, 0xfffffbff, 0x5, 0x1, 0x3, 0x6, 0x7, 0x8a7, 0xff, 0x0, 0x10001, 0x5, 0x5, 0x321, 0x89, 0x6, 0x8, 0xd8f3, 0x5, 0x10, 0x1000, 0x1, 0x7ff, 0x10001, 0xffff, 0x3, 0x6, 0x8, 0x5, 0x80000000, 0xb, 0xfffffff2, 0x1, 0xffffffff, 0xd253, 0x5, 0x6, 0x9, 0x7, 0x100, 0x7ff, 0x3c510ba3, 0x3, 0x2, 0x5, 0xfffffc00, 0x2, 0x5, 0x101, 0xffffffff, 0x8, 0x5, 0x1, 0x7fff, 0x8, 0xc, 0x6, 0xb5, 0x0, 0x5, 0x2, 0xfffffff9, 0x9, 0x7, 0x5, 0x0, 0x6, 0x80000001, 0x80000000, 0x2, 0x9, 0x4, 0xc, 0xfffffff3, 0x6, 0x0, 0x50a, 0x1, 0x8, 0x0, 0x9, 0x5, 0x5e, 0x7f, 0xfffff800, 0xab0, 0x6, 0x80, 0x200, 0x4, 0xfffffff2, 0xc, 0x77, 0x3, 0x5, 0x200, 0x800, 0x6, 0xfb, 0x7fff, 0x5, 0xd, 0xf9, 0x9, 0x6, 0x5, 0x7, 0x5, 0x4, 0xfffffffb, 0x7, 0x53, 0x1, 0x9, 0x8, 0x4, 0x8001, 0xf, 0x3, 0xd1, 0xffffffff, 0x4, 0xffffffff, 0x2, 0x5, 0x6, 0x7fffffff, 0x81, 0x9, 0x4, 0x80, 0xfffffffa, 0x5, 0xccf, 0x4742bda8, 0x8, 0x80000001, 0x743, 0x0, 0x7, 0x7, 0x6, 0x7, 0x9, 0x1, 0x9, 0x4, 0xef3, 0x51df, 0x7, 0x7f, 0x2, 0x8001, 0x40000000, 0x4, 0xfb2, 0xa0c, 0x0, 0x6, 0x80000001, 0x2c11, 0x9, 0xad23, 0xfffffff7, 0x9, 0x2, 0x7, 0x81, 0x7, 0xffff, 0x3, 0xf, 0x80, 0xa, 0x0, 0x8, 0x1, 0x1, 0x6, 0x7, 0xc, 0x5, 0x8, 0x4f, 0x9, 0x0, 0x8001, 0xd9e00000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x7ff, 0x2, 0xaebc, 0x5, 0xa, 0x20, 0xfa, 0x4, 0xc90, 0x5, 0x200, 0x3ff, 0xfffffff3, 0x8001, 0x4, 0x3bd, 0x1, 0xfffffff3, 0x0, 0x6, 0x8, 0x0, 0x9, 0x81, 0x54, 0x5, 0x6, 0x8, 0xb9, 0x101, 0x8, 0x1000, 0x5, 0x6f65c45b, 0x1, 0x1ff, 0x7fff, 0xfffffffe, 0xffffff81, 0x7ff, 0x0, 0x5, 0x8, 0x3ff, 0x400, 0x6, 0xfffff001, 0x1, 0xec9a, 0x9, 0x80000000, 0x3, 0x3, 0x57cd, 0x4, 0xfffffffc, 0xd, 0x0, 0x2, 0x5431, 0x7680, 0x7, 0x0, 0x5, 0x8, 0x6, 0xfff, 0xfffffff8, 0x8, 0x9, 0x10001, 0x1ff, 0x80000000]}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001480), 0x6000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x64, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xba}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0x64}}, 0x40000c0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000001600)={0x7, 0x3, 0xc000}) write$UHID_CREATE2(r4, &(0x7f0000001640)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x5e, 0x6a29, 0x2, 0x7, 0x7, 0xfffffffe, "1e052054b43336b78c2e8d3288d12b087d240cc4311ec0c7580b41db3c102f45f2487a3d9091b0ae2ec3ee0d70958ff0af7dcf1e648acfa48cba0cc699059d96cd4e857a4fd0a0de01a91e41aed84ff0a1a6fb501873f6b40d8c347c6252"}}, 0x176) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000017c0)=0x6) umount2(&(0x7f0000001800)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001840)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001940)=0xe8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000001980)={0xa0, 0xfffffffffffffff5, 0x0, {{0x5, 0x3, 0x3, 0x0, 0xd, 0x10000, {0x1, 0x9a, 0x0, 0x6, 0x6, 0x6, 0x6, 0x7, 0x8, 0x6000, 0xe, r8, 0x0, 0xbea, 0x8}}, {0x0, 0x1f}}}, 0xa0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000001a40)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ac0), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001fc0)={&(0x7f0000001a80), 0xc, &(0x7f0000001f80)={&(0x7f0000001b00)={0x464, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "e77e9fcb24bcd84634c45b53d997dc81ccc6654cca728b4e50ca665007c4e8b962f1c3423e7d6126b8dda304cf3f6ef5db803a172e6de0073d6f3017c647bb977a514bc5f7f36673b4c9df0376ea02afacfa8ef80e31d857a6b45769d658f3da3e87297ad021262f1b38a56bce6bd1337c5e40df7dc81f2378b1c291998a3d594d15ca0d9edc8e8b97f3e3ac48626deaff4d9c59d8ddf643f5683c8f104148dc6696b23632a2d01afbf8aaf50c531af6d700167b4f26142fded96107d088180ffcc89b6f3a6c24a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "c920a365f0d31d9f326787f318d464f02749efc3123ae3cd6a0a9d8418ba50ef75330aa94d6625dd7ee0969f35c3ec427eeac6da0f209387e70ded667e4ced509e0ca9e612c605721b45b4d0bc680b471a8afe4404d8f38584273a48be1559c29a8805d1214f0cec4d9d8cd60b9d53e127ababb3f3aaabb4993a154172609252c02762800f706c765083d1dccbdf9c157f796df6489e883d750d660f673fbbc56e23e4a73a85db97500464db1f3e307882087682f06965f4c83d71f7b434aed28fad3d07d0952fe3d4c27da7ca670b2ac144d794c4bc4af2801fd062d0eeaa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "5679eae9c582d6d667c535ac670e1ac7bb886af539b86c7164b54fc1d4d42a45e670b81ebaad3d87f1eb2ac5128927f3be3209e3e5963dfd5d19d0e01185fb2a7cb24250dccbf65ee60bb915fec6502838c3c72218954bbb300299c13dc159c0ce45f0d524c6e427e3550b11a1cb24181dd6df1c8f66c112d9f90251334dfc3b93273c3310c07ded5de1a1457efdd91d32163f8c6ecb1f9d622294e03e844f2a065c26dc63490352d150984117aa0ea1cec9375c99a54d252e7057d3a97e382695dbc14b3f551b0645dfe516376d9d598a45e6b30830acaf5fb8c2437a2ba139036107e7d40c19e6836e7735c276"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x103, 0x5, "ba06eaa953537c4ea1811bda5b6402ec1aacb22088dcd9f5aecbee86635881dcfb452bf80eba2bb4d8f2ea58f3351ae75b61ab0f5a5a8ca458ac540e6ee2d35585393375d26dc22009036688d2885762231c8a79643436c4f2c4f94caed76ee07592f36d07e0e919ff5cd0ccaf5e11bda122c230463d74a359ee3e5d83fd176431c07bc3e30d25601ff5b22c8bc8a0e0cd8f235bd3ed6eece2d5654906a20d004d5fc4989f12cd104f1f297460772e6d2d6b18c12b67fd11572ca3b8931ceb8269189549053d39915ebdc9e6c4a02b23d5ccebc99b847177534a5c9db7603957d1d8f6b5710f332a746b07b14b6bc49747102defbf4b5f9b9a37c906e7e64a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x464}}, 0x20004840) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) read$FUSE(r4, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000004040)={0x20, 0x0, r10, {0x6, 0x0, 0xb45, 0x8}}, 0x20) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000004080)={0x2, 0x2, 0xffffffffffff8261, 0x7ff, 0xffffff7f, 0x4}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000040c0)={@id={0x2, 0x0, @auto="c5be1e8603486ae43b4fc699f9ee42f7"}}) 0s ago: executing program 3 (id=1362): ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x4, 0x0, [0xb, 0x8000, 0x8, 0x1], 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20800, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, &(0x7f0000000040)={0x400, 0xa}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x4, 0x1, [0x6]}}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x400000, 0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r3, 0x69d78000) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00210000000000000000000700000005000000000000000a0002"], 0x30}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ffff00000000000000002a0000000e0001"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ffff00000000000000002a0000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) kernel console output (not intermixed with test programs): o 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.295810][ T45] usb 6-1: unit 0 not found! [ 169.301809][ T45] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 169.312184][ T45] usb 6-1: unit 0 not found! [ 169.322076][ T45] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 169.332324][ T45] usb 6-1: USB disconnect, device number 61 [ 169.344184][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.375597][ T340] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 169.385205][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.393987][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.440404][ T429] usb 7-1: 0:2 : does not exist [ 169.445622][ T429] usb 7-1: unit 5: unexpected type 0x03 [ 169.454621][ T429] usb 7-1: USB disconnect, device number 35 [ 169.525624][ T340] usb 5-1: Using ep0 maxpacket: 32 [ 169.533473][ T340] usb 5-1: config 176 has too many interfaces: 216, using maximum allowed: 32 [ 169.542437][ T340] usb 5-1: config 176 has an invalid descriptor of length 170, skipping remainder of the config [ 169.552931][ T340] usb 5-1: config 176 has 0 interfaces, different from the descriptor's value: 216 [ 169.563803][ T340] usb 5-1: New USB device found, idVendor=0b95, idProduct=2731, bcdDevice=ce.f6 [ 169.572918][ T340] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 169.581011][ T340] usb 5-1: Product: syz [ 169.585242][ T340] usb 5-1: Manufacturer: syz [ 169.589920][ T340] usb 5-1: SerialNumber: syz [ 169.645593][ T45] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 169.660973][ T3653] netlink: 'syz.3.902': attribute type 15 has an invalid length. [ 169.669437][ T3653] netlink: 'syz.3.902': attribute type 15 has an invalid length. [ 169.796724][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.807734][ T340] usb 5-1: USB disconnect, device number 68 [ 169.817524][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.826691][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.834780][ T45] usb 6-1: SerialNumber: syz [ 169.925601][ T570] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 170.065593][ T570] usb 4-1: device descriptor read/64, error -71 [ 170.265630][ T340] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 170.305632][ T570] usb 4-1: device descriptor read/64, error -71 [ 170.416791][ T340] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.427019][ T340] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 170.437900][ T340] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.452577][ T340] usb 7-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 170.453288][ T45] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 170.462053][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.481213][ T340] usb 7-1: Product: syz [ 170.485416][ T340] usb 7-1: Manufacturer: syz [ 170.490293][ T340] usb 7-1: SerialNumber: syz [ 170.496395][ T3659] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 170.556624][ T570] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 170.605592][ T429] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 170.686907][ T570] usb 4-1: device descriptor read/64, error -71 [ 170.709510][ T340] usb 7-1: MIDIStreaming interface descriptor not found [ 170.722666][ T340] usb 7-1: USB disconnect, device number 36 [ 170.755618][ T429] usb 5-1: Using ep0 maxpacket: 16 [ 170.763745][ T429] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 170.772863][ T429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.780963][ T429] usb 5-1: Product: syz [ 170.785179][ T429] usb 5-1: Manufacturer: syz [ 170.789856][ T429] usb 5-1: SerialNumber: syz [ 170.853432][ T331] usb 6-1: USB disconnect, device number 62 [ 170.861085][ T331] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 170.925596][ T570] usb 4-1: device descriptor read/64, error -71 [ 171.002438][ T429] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.009532][ T429] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 171.016960][ T429] usb 5-1: unable to issue vendor read request (ret = -71) [ 171.024583][ T429] usb 5-1: unable to issue vendor read request (ret = -71) [ 171.032305][ T429] usb 5-1: unable to issue vendor read request (ret = -71) [ 171.039964][ T429] usb 5-1: unable to issue vendor read request (ret = -71) [ 171.041814][ T570] usb usb4-port1: attempt power cycle [ 171.059808][ T429] usb 5-1: USB disconnect, device number 69 [ 171.229276][ T3721] netlink: 108 bytes leftover after parsing attributes in process `syz.6.909'. [ 171.239031][ T3721] overlayfs: failed to clone lowerpath [ 171.385612][ T570] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 171.406699][ T570] usb 4-1: device descriptor read/8, error -71 [ 171.430639][ T3727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3727 comm=syz.5.911 [ 171.495598][ T340] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 171.546685][ T570] usb 4-1: device descriptor read/8, error -71 [ 171.635618][ T340] usb 7-1: device descriptor read/64, error -71 [ 171.755644][ T331] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 171.785639][ T570] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 171.806550][ T570] usb 4-1: device descriptor read/8, error -71 [ 171.875652][ T340] usb 7-1: device descriptor read/64, error -71 [ 171.905629][ T331] usb 5-1: Using ep0 maxpacket: 8 [ 171.911980][ T331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.918749][ T331] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 171.927827][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.937015][ T331] usb 5-1: config 0 descriptor?? [ 171.942424][ T570] usb 4-1: device descriptor read/8, error -71 [ 172.055800][ T570] usb usb4-port1: unable to enumerate USB device [ 172.115609][ T340] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 172.245631][ T340] usb 7-1: device descriptor read/64, error -71 [ 172.485634][ T340] usb 7-1: device descriptor read/64, error -71 [ 172.595697][ T340] usb usb7-port1: attempt power cycle [ 172.762182][ T36] audit: type=1400 audit(1781940007.705:472): avc: denied { mounton } for pid=3735 comm="syz.5.914" path="/148/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 172.784478][ T36] audit: type=1400 audit(1781940007.705:473): avc: denied { mount } for pid=3735 comm="syz.5.914" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.848768][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.857407][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.935626][ T340] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 172.956646][ T340] usb 7-1: device descriptor read/8, error -71 [ 173.086609][ T340] usb 7-1: device descriptor read/8, error -71 [ 173.325900][ T340] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 173.353426][ T340] usb 7-1: device descriptor read/8, error -71 [ 173.486724][ T340] usb 7-1: device descriptor read/8, error -71 [ 173.548015][ T3759] usb usb8: check_ctrlrecip: process 3759 (syz.3.920) requesting ep 01 but needs 81 [ 173.595684][ T340] usb usb7-port1: unable to enumerate USB device [ 173.805636][ T429] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 173.957158][ T429] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.966928][ T429] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 173.976070][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.984091][ T429] usb 4-1: Product: Ы [ 173.988308][ T429] usb 4-1: Manufacturer: ⩇불斈풯㽅斂嗗ጩ迩 [ 173.995844][ T429] usb 4-1: SerialNumber: syz [ 174.208287][ T429] usb 4-1: USB disconnect, device number 106 [ 174.221307][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.253029][ T45] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 174.261440][ T45] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.532412][ T45] usb 5-1: USB disconnect, device number 70 [ 174.655617][ T429] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 174.675601][ T340] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 174.736868][ T3781] input: syz0 as /devices/virtual/input/input22 [ 174.805563][ T429] usb 6-1: Using ep0 maxpacket: 16 [ 174.813006][ T429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 174.825173][ T429] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 174.835566][ T340] usb 7-1: Using ep0 maxpacket: 32 [ 174.844891][ T340] usb 7-1: unable to get BOS descriptor or descriptor too short [ 174.845743][ T429] usb 6-1: can't read configurations, error -71 [ 174.863566][ T340] usb 7-1: config 7 has an invalid interface number: 194 but max is 0 [ 174.872586][ T340] usb 7-1: config 7 has no interface number 0 [ 174.875687][ T45] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 174.884616][ T340] usb 7-1: config 7 interface 194 has no altsetting 0 [ 174.898937][ T340] usb 7-1: New USB device found, idVendor=0572, idProduct=1324, bcdDevice=aa.65 [ 174.915559][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.923710][ T340] usb 7-1: Product: syz [ 174.927938][ T340] usb 7-1: Manufacturer: syz [ 174.932567][ T340] usb 7-1: SerialNumber: syz [ 175.037049][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.045550][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.055952][ T45] usb 5-1: config 1 interface 1 has no altsetting 1 [ 175.064144][ T45] usb 5-1: New USB device found, idVendor=0507, idProduct=a4a1, bcdDevice= 0.40 [ 175.073533][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.081771][ T45] usb 5-1: Product: syz [ 175.086388][ T45] usb 5-1: Manufacturer: syz [ 175.091028][ T45] usb 5-1: SerialNumber: syz [ 175.145571][ T3382] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 175.153877][ T340] usb 7-1: USB disconnect, device number 41 [ 175.304737][ T36] audit: type=1400 audit(1781940010.245:474): avc: denied { map } for pid=3774 comm="syz.4.926" path="socket:[28539]" dev="sockfs" ino=28539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.336031][ T3382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.347725][ T3382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 175.356962][ T3775] tipc: Can't bind to reserved service type 1 [ 175.359997][ T3382] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 175.373873][ T3382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.387984][ T3382] usb 4-1: config 0 descriptor?? [ 175.393305][ T3787] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 175.506338][ T45] usb 5-1: selecting invalid altsetting 1 [ 175.512341][ T45] cdc_ncm 5-1:1.0: bind() failure [ 175.518518][ T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 175.525313][ T45] cdc_ncm 5-1:1.1: bind() failure [ 175.531688][ T45] usb 5-1: USB disconnect, device number 71 [ 175.838157][ T3382] hid-generic 0003:04F3:0755.0028: unknown main item tag 0x0 [ 175.845678][ T3382] hid-generic 0003:04F3:0755.0028: unknown main item tag 0x0 [ 175.853846][ T3382] hid-generic 0003:04F3:0755.0028: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 175.895629][ T429] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 176.043677][ T3382] usb 4-1: USB disconnect, device number 107 [ 176.050250][ T429] usb 6-1: Using ep0 maxpacket: 32 [ 176.058395][ T429] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.070845][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 176.082194][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.093470][ T429] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.102863][ T429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.111949][ T429] usb 6-1: config 0 descriptor?? [ 176.119883][ T3793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 176.132022][ T429] hub 6-1:0.0: USB hub found [ 176.291953][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.299083][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.306276][ T3808] bridge_slave_0: entered allmulticast mode [ 176.312682][ T3808] bridge_slave_0: entered promiscuous mode [ 176.319540][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.326648][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.334117][ T3808] bridge_slave_1: entered allmulticast mode [ 176.334323][ T429] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 176.342269][ T3808] bridge_slave_1: entered promiscuous mode [ 176.437342][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.444443][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.454335][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.461427][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.489712][ T3808] veth0_vlan: entered promiscuous mode [ 176.502154][ T3808] veth1_macvtap: entered promiscuous mode [ 176.541940][ T429] usbhid 6-1:0.0: can't add hid device: -71 [ 176.548454][ T429] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 176.570697][ T766] bridge_slave_1: left allmulticast mode [ 176.586146][ T429] usb 6-1: USB disconnect, device number 64 [ 176.590263][ T766] bridge_slave_1: left promiscuous mode [ 176.597864][ T766] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.607105][ T766] bridge_slave_0: left allmulticast mode [ 176.612866][ T766] bridge_slave_0: left promiscuous mode [ 176.618625][ T766] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.635631][ T570] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 176.727816][ T766] veth1_macvtap: left promiscuous mode [ 176.733420][ T766] veth0_vlan: left promiscuous mode [ 176.785620][ T570] usb 7-1: Using ep0 maxpacket: 16 [ 176.794604][ T570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 176.803891][ T570] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 176.811914][ T570] usb 7-1: can't read configurations, error -71 [ 176.825581][ T331] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 176.955630][ T331] usb 4-1: device descriptor read/64, error -71 [ 177.060262][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.940'. [ 177.081249][ T36] audit: type=1400 audit(1781940012.025:475): avc: denied { append } for pid=3820 comm="syz.5.941" name="pfkey" dev="proc" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.097301][ T3821] netlink: 64 bytes leftover after parsing attributes in process `syz.5.941'. [ 177.114554][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 177.195735][ T331] usb 4-1: device descriptor read/64, error -71 [ 177.355625][ T3382] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 177.445917][ T331] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 177.506877][ T3382] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.515184][ T3382] usb 6-1: config 179 has no interface number 0 [ 177.521700][ T3382] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 177.533020][ T3382] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 177.544057][ T3382] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 177.555436][ T3382] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 136, setting to 8 [ 177.566565][ T3382] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.579911][ T3382] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.585728][ T331] usb 4-1: device descriptor read/64, error -71 [ 177.589007][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.604790][ T3821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.612517][ T3821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.645623][ T570] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 177.796760][ T570] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.806567][ T570] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.816334][ T570] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.829496][ T331] usb 4-1: device descriptor read/64, error -71 [ 177.838127][ T570] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.847329][ T570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.852457][ T3382] usb 6-1: USB disconnect, device number 65 [ 177.852559][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 177.855513][ T570] usb 7-1: Product: syz [ 177.861343][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 177.870458][ T570] usb 7-1: Manufacturer: syz [ 177.887163][ T570] usb 7-1: SerialNumber: syz [ 177.894160][ T570] hub 7-1:1.0: bad descriptor, ignoring hub [ 177.900339][ T570] hub 7-1:1.0: probe with driver hub failed with error -5 [ 177.945731][ T331] usb usb4-port1: attempt power cycle [ 178.094417][ T3823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.102945][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.104733][ T3823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.113693][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.243633][ T570] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.276156][ T570] usb 7-1: USB disconnect, device number 43 [ 178.282909][ T570] usblp0: removed [ 178.295659][ T331] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 178.317966][ T331] usb 4-1: device descriptor read/8, error -71 [ 178.446783][ T331] usb 4-1: device descriptor read/8, error -71 [ 178.625598][ T45] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 178.685632][ T331] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 178.716644][ T331] usb 4-1: device descriptor read/8, error -71 [ 178.775585][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 178.781847][ T45] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.792828][ T45] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.805966][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 178.812627][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 178.821715][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.830594][ T45] usb 6-1: config 0 descriptor?? [ 178.856643][ T331] usb 4-1: device descriptor read/8, error -71 [ 178.965708][ T331] usb usb4-port1: unable to enumerate USB device [ 179.239645][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.246733][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.253776][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.260947][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.267992][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.274954][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.281996][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.289005][ T45] lg-g15 0003:046D:C227.0029: unknown main item tag 0x0 [ 179.296880][ T45] lg-g15 0003:046D:C227.0029: hidraw0: USB HID v0.03 Device [HID 046d:c227] on usb-dummy_hcd.5-1/input0 [ 179.335625][ T331] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 179.439937][ T340] usb 6-1: USB disconnect, device number 66 [ 179.485730][ T331] usb 7-1: Using ep0 maxpacket: 32 [ 179.492045][ T331] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 179.500207][ T331] usb 7-1: config 2 has no interface number 0 [ 179.506384][ T331] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 179.516447][ T331] usb 7-1: config 2 interface 88 has no altsetting 0 [ 179.524427][ T331] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 179.533614][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 179.541680][ T331] usb 7-1: Product: syz [ 179.545902][ T331] usb 7-1: Manufacturer: syz [ 179.550544][ T331] usb 7-1: SerialNumber: syz [ 179.560837][ T3832] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 179.796868][ T3832] rust_binder: 3831:3832 transaction to 0 failed: EINVAL [ 179.797017][ T3832] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 179.811332][ T36] audit: type=1400 audit(1781940014.745:476): avc: denied { setopt } for pid=3831 comm="syz.6.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.995636][ T65] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 180.145927][ T65] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 180.154916][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.162636][ T65] usb 4-1: can't read configurations, error -61 [ 180.232668][ T36] audit: type=1400 audit(1781940015.175:477): avc: denied { mounton } for pid=3831 comm="syz.6.945" path="/89/file0" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 180.240539][ T3832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.256150][ T806] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.267015][ T3832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.315614][ T570] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 180.323711][ T65] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 180.467042][ T570] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.475516][ T570] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.485978][ T570] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.494979][ T65] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 180.504051][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.511701][ T65] usb 4-1: can't read configurations, error -61 [ 180.518198][ T570] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 180.527358][ T65] usb usb4-port1: attempt power cycle [ 180.532883][ T570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.541240][ T570] usb 6-1: Product: syz [ 180.545432][ T570] usb 6-1: Manufacturer: syz [ 180.550089][ T570] usb 6-1: SerialNumber: syz [ 180.760023][ T570] usb 6-1: selecting invalid altsetting 1 [ 180.766121][ T570] usb 6-1: unit 3 not found! [ 180.771056][ T570] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 180.778357][ T570] usb 6-1: invalid MIXER UNIT descriptor 6 [ 180.786322][ T570] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 180.796648][ T570] usb 6-1: USB disconnect, device number 67 [ 180.808170][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.885619][ T65] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 180.906346][ T65] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 180.915226][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.923078][ T65] usb 4-1: can't read configurations, error -61 [ 181.055629][ T65] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 181.076327][ T65] usb 4-1: too many configurations: 93, using maximum allowed: 8 [ 181.085192][ T65] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 181.092828][ T65] usb 4-1: can't read configurations, error -61 [ 181.099311][ T65] usb usb4-port1: unable to enumerate USB device [ 181.865591][ T3382] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 182.015610][ T3382] usb 6-1: Using ep0 maxpacket: 16 [ 182.022034][ T3382] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 182.030293][ T3382] usb 6-1: config 0 has no interface number 0 [ 182.036497][ T3382] usb 6-1: config 0 interface 184 altsetting 0 endpoint 0x81 has an invalid bInterval 65, changing to 10 [ 182.047801][ T3382] usb 6-1: config 0 interface 184 altsetting 0 endpoint 0x81 has invalid maxpacket 8477, setting to 1024 [ 182.059096][ T3382] usb 6-1: config 0 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.072118][ T3382] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 182.081223][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.090164][ T3382] usb 6-1: config 0 descriptor?? [ 182.245571][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.254036][ T331] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 182.266082][ T331] asix 7-1:2.88: probe with driver asix failed with error -71 [ 182.282589][ T331] usb 7-1: USB disconnect, device number 44 [ 182.319150][ T36] audit: type=1326 audit(1781940017.265:478): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.6.958" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd5819ce59 code=0x0 [ 182.496738][ T3382] hid (null): unknown global tag 0xe [ 182.503211][ T3382] logitech-djreceiver 0003:046D:C52F.002A: unknown main item tag 0x3 [ 182.511551][ T3382] logitech-djreceiver 0003:046D:C52F.002A: unknown main item tag 0x1 [ 182.519852][ T3382] logitech-djreceiver 0003:046D:C52F.002A: unknown global tag 0xe [ 182.527723][ T3382] logitech-djreceiver 0003:046D:C52F.002A: item 0 4 1 14 parsing failed [ 182.536227][ T3382] logitech-djreceiver 0003:046D:C52F.002A: logi_dj_probe: parse failed [ 182.544510][ T3382] logitech-djreceiver 0003:046D:C52F.002A: probe with driver logitech-djreceiver failed with error -22 [ 182.701370][ T3382] usb 6-1: USB disconnect, device number 68 [ 183.015624][ T331] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 183.166742][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.177812][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.187644][ T331] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.196798][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.206239][ T331] usb 4-1: config 0 descriptor?? [ 183.222263][ T3896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.360336][ T3899] netlink: 72 bytes leftover after parsing attributes in process `syz.5.962'. [ 183.387494][ T570] hid (null): unknown global tag 0xc [ 183.392953][ T570] hid (null): report_id 2701575440 is invalid [ 183.400437][ T570] hid-generic 0006:8000:0F40.002B: unknown main item tag 0x6 [ 183.408116][ T570] hid-generic 0006:8000:0F40.002B: unknown main item tag 0xd [ 183.415708][ T570] hid-generic 0006:8000:0F40.002B: unexpected long global item [ 183.423546][ T570] hid-generic 0006:8000:0F40.002B: probe with driver hid-generic failed with error -22 [ 183.448696][ T3904] support for the xor transformation has been removed. [ 183.475601][ T65] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 183.627034][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 183.635213][ T65] usb 7-1: not running at top speed; connect to a high speed hub [ 183.645335][ T65] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 183.654511][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.662704][ T65] usb 7-1: Product: syz [ 183.666970][ T65] usb 7-1: Manufacturer: syz [ 183.671600][ T65] usb 7-1: SerialNumber: syz [ 183.695587][ T45] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 183.824897][ T331] usb 4-1: language id specifier not provided by device, defaulting to English [ 183.845572][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 183.851207][ T45] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 183.866106][ T45] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.875246][ T45] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 183.886819][ T45] usb 6-1: Product: syz [ 183.891036][ T45] usb 6-1: Manufacturer: syz [ 183.895822][ T65] usb 7-1: invalid MIDI in EP 0 [ 183.899880][ T45] r8152-cfgselector 6-1: Unknown version 0x0000 [ 183.907465][ T45] r8152-cfgselector 6-1: config 0 descriptor?? [ 183.920123][ T65] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 183.933171][ T65] usb 7-1: USB disconnect, device number 45 [ 183.946343][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.116843][ T3904] support for the xor transformation has been removed. [ 184.130683][ T45] r8152-cfgselector 6-1: USB disconnect, device number 69 [ 184.200585][ T3910] can0: slcan on ptm0. [ 184.226404][ T331] uclogic 0003:256C:006D.002C: failed retrieving Huion firmware version: -71 [ 184.235347][ T331] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 184.243181][ T331] uclogic 0003:256C:006D.002C: probe with driver uclogic failed with error -71 [ 184.255393][ T331] usb 4-1: USB disconnect, device number 116 [ 184.505651][ T45] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 184.655615][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 184.662223][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 184.673384][ T45] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 184.685989][ T45] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 184.695063][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.703110][ T45] usb 6-1: Product: syz [ 184.707309][ T45] usb 6-1: Manufacturer: syz [ 184.711907][ T45] usb 6-1: SerialNumber: syz [ 184.725700][ T331] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 184.772866][ T3933] netlink: 'syz.3.969': attribute type 30 has an invalid length. [ 184.781617][ T3933] No source specified [ 184.875577][ T331] usb 7-1: Using ep0 maxpacket: 16 [ 184.884340][ T331] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 184.893471][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.901545][ T331] usb 7-1: Product: syz [ 184.905810][ T331] usb 7-1: Manufacturer: syz [ 184.910507][ T331] usb 7-1: SerialNumber: syz [ 184.921766][ T45] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 184.941169][ T45] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 184.948472][ T45] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.949047][ T3908] can0 (unregistered): slcan off ptm0. [ 184.967822][ T45] usb 6-1: USB disconnect, device number 70 [ 185.086945][ T65] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 185.123549][ T331] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.130621][ T331] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 185.138172][ T331] usb 7-1: unable to issue vendor read request (ret = -71) [ 185.146422][ T331] usb 7-1: unable to issue vendor read request (ret = -71) [ 185.153998][ T331] usb 7-1: unable to issue vendor read request (ret = -71) [ 185.161831][ T331] usb 7-1: unable to issue vendor read request (ret = -71) [ 185.176208][ T331] usb 7-1: USB disconnect, device number 46 [ 185.193063][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.225608][ T65] usb 4-1: device descriptor read/64, error -71 [ 185.465621][ T65] usb 4-1: device descriptor read/64, error -71 [ 185.487586][ T36] audit: type=1400 audit(1781940020.435:479): avc: denied { shutdown } for pid=3978 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.563541][ T36] audit: type=1400 audit(1781940020.505:480): avc: denied { relabelfrom } for pid=3985 comm="syz.5.974" name="XDP" dev="sockfs" ino=30111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.563555][ T3986] SELinux: Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped). [ 185.595976][ T36] audit: type=1400 audit(1781940020.545:481): avc: denied { relabelto } for pid=3985 comm="syz.5.974" name="XDP" dev="sockfs" ino=30111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:lvm_control_t:s0" [ 185.715588][ T65] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 185.855595][ T65] usb 4-1: device descriptor read/64, error -71 [ 185.885717][ T36] audit: type=1400 audit(1781940020.835:482): avc: denied { getopt } for pid=4008 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.096862][ T65] usb 4-1: device descriptor read/64, error -71 [ 186.160704][ T4031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.992'. [ 186.211026][ T65] usb usb4-port1: attempt power cycle [ 186.427221][ T331] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 186.571732][ T65] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 186.582153][ T331] usb 6-1: Using ep0 maxpacket: 16 [ 186.588397][ T331] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 186.600779][ T65] usb 4-1: device descriptor read/8, error -71 [ 186.607507][ T331] usb 6-1: New USB device found, idVendor=0582, idProduct=0101, bcdDevice= 0.40 [ 186.616615][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.624642][ T331] usb 6-1: Product: syz [ 186.628803][ T331] usb 6-1: Manufacturer: syz [ 186.633402][ T331] usb 6-1: SerialNumber: syz [ 186.738176][ T65] usb 4-1: device descriptor read/8, error -71 [ 186.853629][ T331] usb 6-1: found format II with max.bitrate = 4, frame size=11 [ 186.861345][ T331] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 186.871275][ T331] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 186.884953][ T331] usb 6-1: USB disconnect, device number 71 [ 186.904974][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.984642][ T65] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 187.006352][ T65] usb 4-1: device descriptor read/8, error -71 [ 187.140454][ T65] usb 4-1: device descriptor read/8, error -71 [ 187.221749][ T429] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 187.252746][ T65] usb usb4-port1: unable to enumerate USB device [ 187.380464][ T429] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.389369][ T429] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 187.398652][ T429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.409081][ T429] usb 7-1: config 0 descriptor?? [ 187.423436][ T4053] vlan0: entered promiscuous mode [ 187.675023][ T65] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 187.829571][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 187.836082][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.839230][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.843269][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.858143][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.860737][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.871783][ T65] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 187.876250][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.885774][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.892188][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.900678][ T65] usb 6-1: Product: syz [ 187.907390][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.917997][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.921548][ T65] usb 6-1: Manufacturer: syz [ 187.925210][ T429] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 187.937462][ T65] usb 6-1: SerialNumber: syz [ 187.953252][ T429] apple 0003:05AC:027D.002D: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0 [ 188.046275][ T4046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.056789][ T4046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.066046][ T331] usb 7-1: USB disconnect, device number 47 [ 188.162196][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.171656][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.183276][ T65] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 188.204605][ T65] usb 6-1: USB disconnect, device number 72 [ 188.232295][ T4052] vlan0: left promiscuous mode [ 188.280924][ T36] audit: type=1400 audit(1781940023.158:483): avc: denied { create } for pid=4077 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 188.282166][ T4078] rust_binder: 4077:4078 transaction to 0 failed: ENOENT [ 188.632125][ T65] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 188.796661][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 188.803546][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.813517][ T65] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 188.822627][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.830763][ T65] usb 4-1: Product: syz [ 188.834971][ T65] usb 4-1: Manufacturer: syz [ 188.839631][ T340] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 188.847237][ T65] usb 4-1: SerialNumber: syz [ 188.870319][ T341] hid (null): invalid report_count 655679783 [ 188.876452][ T341] hid (null): unknown global tag 0xe [ 188.882487][ T341] hid (null): unknown global tag 0xc [ 188.887905][ T341] hid (null): global environment stack underflow [ 188.894383][ T341] hid (null): invalid report_count 1673441630 [ 188.900531][ T341] hid (null): unknown global tag 0xc [ 188.905932][ T341] hid (null): report_id 0 is invalid [ 188.911263][ T341] hid (null): unknown global tag 0xd [ 188.916583][ T341] hid (null): invalid report_count 411591363 [ 188.922676][ T341] hid (null): report_id 32023 is invalid [ 188.928336][ T341] hid (null): report_id 0 is invalid [ 188.933681][ T341] hid (null): unknown global tag 0xe1 [ 188.939106][ T341] hid (null): unknown global tag 0xe2 [ 188.944596][ T341] hid (null): invalid report_count 29360 [ 188.952081][ T341] hid (null): unknown global tag 0x85 [ 188.957514][ T341] hid (null): invalid report_size 29859 [ 188.963110][ T341] hid (null): unknown global tag 0xc [ 188.968571][ T341] hid (null): invalid report_size 1086305191 [ 188.974665][ T341] hid (null): unknown global tag 0xd [ 188.980175][ T341] hid (null): invalid report_size -1493324452 [ 188.988586][ T341] hid (null): unknown global tag 0xc [ 188.993985][ T341] hid (null): invalid report_size 16068 [ 188.999593][ T341] hid (null): unknown global tag 0xe [ 189.004946][ T341] hid (null): report_id 1166930610 is invalid [ 189.011055][ T341] hid (null): unknown global tag 0xe [ 189.014470][ T340] usb 7-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 189.016474][ T429] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 189.027818][ T340] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.034275][ T341] hid (null): report_id 3776356882 is invalid [ 189.044214][ T340] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x25, changing to 0x5 [ 189.049430][ T341] hid (null): unknown global tag 0xc [ 189.061527][ T340] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 8194, setting to 1024 [ 189.071612][ T341] hid (null): invalid report_size 50533 [ 189.082893][ T341] hid (null): unknown global tag 0xc [ 189.085455][ T65] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 189.088265][ T341] hid (null): unknown global tag 0xd [ 189.099154][ T65] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 189.104609][ T341] hid (null): unknown global tag 0xe [ 189.109997][ T65] usb 4-1: unable to issue vendor read request (ret = -71) [ 189.112408][ T341] hid (null): report_id 0 is invalid [ 189.120487][ T340] usb 7-1: New USB device found, idVendor=c499, idProduct=3000, bcdDevice= 0.40 [ 189.127813][ T341] hid (null): unknown global tag 0xd [ 189.137295][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.147634][ T65] usb 4-1: unable to issue vendor read request (ret = -71) [ 189.152730][ T341] hid-generic 0008:0000:025A.002E: unknown main item tag 0x3 [ 189.159551][ T65] usb 4-1: unable to issue vendor read request (ret = -71) [ 189.162962][ T341] hid-generic 0008:0000:025A.002E: invalid report_count 655679783 [ 189.171650][ T340] usb 7-1: Product: syz [ 189.178192][ T341] hid-generic 0008:0000:025A.002E: item 0 4 1 9 parsing failed [ 189.181969][ T65] usb 4-1: unable to issue vendor read request (ret = -71) [ 189.190043][ T341] hid-generic 0008:0000:025A.002E: probe with driver hid-generic failed with error -22 [ 189.200126][ T340] usb 7-1: Manufacturer: syz [ 189.219653][ T340] usb 7-1: SerialNumber: syz [ 189.228380][ T429] usb 6-1: Using ep0 maxpacket: 16 [ 189.232486][ T65] usb 4-1: USB disconnect, device number 121 [ 189.240494][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.260142][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.270378][ T429] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.286594][ T429] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.296185][ T429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.305577][ T429] usb 6-1: config 0 descriptor?? [ 189.462205][ T340] usb 7-1: 1:1 : bogus bTerminalLink 0 [ 189.473011][ T340] usb 7-1: USB disconnect, device number 48 [ 189.484076][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.518999][ T36] audit: type=1400 audit(1781940024.374:484): avc: denied { create } for pid=4084 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.727505][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.734859][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.742264][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.749503][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.756791][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.764034][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.771245][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.778506][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.786120][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.793508][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.800764][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.808395][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.815674][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.822895][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.830198][ T429] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 189.842342][ T429] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002F/input/input23 [ 189.856705][ T429] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 189.868750][ T341] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 189.935747][ T340] usb 6-1: USB disconnect, device number 73 [ 190.028978][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 190.035376][ T341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.042076][ T341] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 190.051184][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.059925][ T341] usb 4-1: config 0 descriptor?? [ 190.234136][ T429] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 190.270973][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.279640][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.287831][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.296585][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.304728][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.313538][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.321903][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.330524][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.338970][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.347625][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.399102][ T429] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.410102][ T429] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.419926][ T429] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 190.429009][ T429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.437750][ T429] usb 7-1: config 0 descriptor?? [ 190.463396][ T36] audit: type=1400 audit(1781940025.291:485): avc: denied { write } for pid=4098 comm="syz.5.1015" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.568073][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0xd [ 190.580518][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0x0 [ 190.590291][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0x0 [ 190.597737][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0x0 [ 190.605065][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0x0 [ 190.611988][ T341] wacom 0003:056A:00EC.0030: unknown main item tag 0x0 [ 190.620792][ T341] wacom 0003:056A:00EC.0030: hidraw0: USB HID v0.09 Device [HID 056a:00ec] on usb-dummy_hcd.3-1/input0 [ 190.769574][ T65] usb 4-1: USB disconnect, device number 122 [ 190.855957][ T429] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 190.860278][ T340] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 190.865253][ T429] arvo 0003:1E7D:30D4.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 191.033401][ T340] usb 6-1: Using ep0 maxpacket: 32 [ 191.041325][ T340] usb 6-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 191.050486][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.058581][ T340] usb 6-1: Product: syz [ 191.062835][ T340] usb 6-1: Manufacturer: syz [ 191.067511][ T340] usb 6-1: SerialNumber: syz [ 191.118921][ T36] audit: type=1326 audit(1781940025.925:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.1014" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd5819ce59 code=0x0 [ 191.225905][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.234614][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.282449][ T340] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 191.289504][ T340] usb 6-1: unit 5 not found! [ 191.303978][ T340] usb 6-1: USB disconnect, device number 74 [ 191.319524][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 191.586152][ T11] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 191.740790][ T11] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 191.751153][ T11] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.765074][ T11] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 191.774208][ T11] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.782305][ T11] usb 4-1: Manufacturer: syz [ 191.789103][ T11] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 192.067026][ T11] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 192.136622][ T4115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.145859][ T4115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.221588][ T11] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.233172][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 192.244433][ T11] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.253640][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.265509][ T11] usb 6-1: config 0 descriptor?? [ 192.271119][ T4114] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 192.282347][ T11] hub 6-1:0.0: USB hub found [ 192.430454][ T36] audit: type=1326 audit(1781940027.206:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.7.1020" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05de79ce59 code=0x0 [ 192.486121][ T11] hub 6-1:0.0: 1 port detected [ 192.689618][ T4114] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1019'. [ 192.698984][ T4124] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1019'. [ 192.710611][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.721312][ T4124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.730005][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.738315][ T4124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.747250][ T11] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 192.754137][ T11] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 192.763505][ T11] usbhid 6-1:0.0: can't add hid device: -71 [ 192.769686][ T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 192.793006][ T11] usb 6-1: USB disconnect, device number 75 [ 193.077988][ T429] arvo 0003:1E7D:30D4.0031: couldn't init struct arvo_device [ 193.093436][ T429] arvo 0003:1E7D:30D4.0031: couldn't install keyboard [ 193.102878][ T429] arvo 0003:1E7D:30D4.0031: probe with driver arvo failed with error -71 [ 193.115285][ T429] usb 7-1: USB disconnect, device number 49 [ 193.476859][ T429] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 193.538052][ T341] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 193.640075][ T429] usb 7-1: Using ep0 maxpacket: 16 [ 193.646677][ T429] usb 7-1: unable to get BOS descriptor or descriptor too short [ 193.656732][ T429] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 193.665899][ T429] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.674144][ T429] usb 7-1: Product: syz [ 193.678388][ T429] usb 7-1: Manufacturer: syz [ 193.683239][ T341] usb 6-1: device descriptor read/64, error -71 [ 193.689570][ T429] usb 7-1: SerialNumber: syz [ 193.907198][ T429] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 193.914296][ T429] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 193.921869][ T429] usb 7-1: unable to issue vendor read request (ret = -71) [ 193.929669][ T429] usb 7-1: unable to issue vendor read request (ret = -71) [ 193.937099][ T341] usb 6-1: device descriptor read/64, error -71 [ 193.943708][ T429] usb 7-1: unable to issue vendor read request (ret = -71) [ 193.951879][ T429] usb 7-1: unable to issue vendor read request (ret = -71) [ 193.963867][ T429] usb 7-1: USB disconnect, device number 50 [ 193.985737][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.201239][ T341] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 194.343985][ T341] usb 6-1: device descriptor read/64, error -71 [ 194.479708][ T429] usb 4-1: USB disconnect, device number 123 [ 194.487819][ T36] audit: type=1400 audit(1781940029.234:488): avc: denied { create } for pid=4129 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 194.582446][ T36] audit: type=1400 audit(1781940029.322:489): avc: denied { accept } for pid=4129 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.583187][ T4131] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 194.610489][ T341] usb 6-1: device descriptor read/64, error -71 [ 194.721159][ T341] usb usb6-port1: attempt power cycle [ 194.955539][ T429] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 195.067485][ T341] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 195.089068][ T341] usb 6-1: device descriptor read/8, error -71 [ 195.109962][ T429] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7 [ 195.122428][ T429] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.131597][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.139643][ T429] usb 4-1: Product: syz [ 195.143861][ T429] usb 4-1: Manufacturer: 뽐燃㣘鰻悿Ḥ먊㿛⮿窖¹芕说ߋ혒䔯헛甫谖ᆊ뿅譿 [ 195.154600][ T429] usb 4-1: SerialNumber: syz [ 195.221420][ T341] usb 6-1: device descriptor read/8, error -71 [ 195.474878][ T341] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 195.496170][ T341] usb 6-1: device descriptor read/8, error -71 [ 195.570823][ T429] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 195.576738][ T340] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 195.576873][ T429] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 195.595901][ T429] usb 4-1: USB disconnect, device number 124 [ 195.609226][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.629582][ T341] usb 6-1: device descriptor read/8, error -71 [ 195.730336][ T340] usb 7-1: config 0 interface 0 has no altsetting 0 [ 195.736982][ T340] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 195.746257][ T340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.749972][ T341] usb usb6-port1: unable to enumerate USB device [ 195.761481][ T340] usb 7-1: config 0 descriptor?? [ 195.983448][ T340] usbhid 7-1:0.0: can't add hid device: -71 [ 195.993152][ T340] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.006022][ T340] usb 7-1: USB disconnect, device number 51 [ 196.046816][ T4158] rust_binder: Write failure EINVAL in pid:374 [ 196.097088][ T4160] SELinux: policydb string does not match my string SE Linux [ 196.111142][ T4160] SELinux: failed to load policy [ 196.252139][ T4171] input: syz1 as /devices/virtual/input/input28 [ 196.360369][ T11] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 196.502623][ T340] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 196.512909][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 196.519715][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.529696][ T11] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 196.538822][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.546870][ T11] usb 4-1: Product: syz [ 196.551056][ T11] usb 4-1: Manufacturer: syz [ 196.555702][ T11] usb 4-1: SerialNumber: syz [ 196.666893][ T340] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 196.676991][ T340] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 196.688244][ T340] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.697384][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.705428][ T340] usb 7-1: Product: syz [ 196.709643][ T340] usb 7-1: Manufacturer: syz [ 196.714271][ T340] usb 7-1: SerialNumber: syz [ 196.756763][ T341] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 196.768834][ T11] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.775825][ T11] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 196.783053][ T11] usb 4-1: unable to issue vendor read request (ret = -71) [ 196.790546][ T11] usb 4-1: unable to issue vendor read request (ret = -71) [ 196.798214][ T11] usb 4-1: unable to issue vendor read request (ret = -71) [ 196.805651][ T11] usb 4-1: unable to issue vendor read request (ret = -71) [ 196.818734][ T11] usb 4-1: USB disconnect, device number 125 [ 196.828996][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.910389][ T341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.917158][ T341] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 196.926541][ T341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.928821][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.940100][ T341] usb 6-1: config 0 descriptor?? [ 196.946343][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.968616][ T340] cdc_ncm 7-1:1.0: bind() failure [ 196.975105][ T340] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 196.982547][ T340] cdc_ncm 7-1:1.1: bind() failure [ 196.992767][ T340] usb 7-1: USB disconnect, device number 52 [ 197.366537][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x6 [ 197.373570][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 197.380499][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 197.387362][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 197.394178][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 197.401257][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 197.408256][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x4 [ 197.415104][ T341] sony 0003:054C:0268.0032: unknown main item tag 0x5 [ 197.421961][ T341] sony 0003:054C:0268.0032: global environment stack underflow [ 197.429583][ T341] sony 0003:054C:0268.0032: item 0 0 1 11 parsing failed [ 197.436763][ T341] sony 0003:054C:0268.0032: parse failed [ 197.442515][ T341] sony 0003:054C:0268.0032: probe with driver sony failed with error -22 [ 197.529203][ T45] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 197.571570][ T341] usb 6-1: USB disconnect, device number 80 [ 197.581740][ T4181] SELinux: failed to load policy [ 197.587038][ T4181] syzkaller1: entered promiscuous mode [ 197.592806][ T4181] syzkaller1: entered allmulticast mode [ 197.681515][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 197.692044][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.700702][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.894809][ T429] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 198.048576][ T429] usb 7-1: unable to get BOS descriptor or descriptor too short [ 198.056658][ T429] usb 7-1: not running at top speed; connect to a high speed hub [ 198.065638][ T429] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 198.074456][ T429] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.088935][ T429] usb 7-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 198.098113][ T429] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.106245][ T429] usb 7-1: Product: syz [ 198.110705][ T429] usb 7-1: Manufacturer: syz [ 198.115362][ T429] usb 7-1: SerialNumber: syz [ 198.189182][ T4207] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 198.196897][ T4207] SELinux: failed to load policy [ 198.326672][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.335324][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.453250][ T11] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 198.550207][ T429] usb 7-1: MIDIStreaming interface descriptor not found [ 198.559916][ T429] usb 7-1: USB disconnect, device number 53 [ 198.571407][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.607658][ T11] usb 6-1: config 255 has an invalid interface number: 251 but max is 0 [ 198.618259][ T11] usb 6-1: config 255 has no interface number 0 [ 198.624574][ T11] usb 6-1: config 255 interface 251 altsetting 44 has an endpoint descriptor with address 0x16, changing to 0x6 [ 198.636626][ T11] usb 6-1: config 255 interface 251 altsetting 44 endpoint 0x6 has invalid maxpacket 38114, setting to 64 [ 198.648215][ T11] usb 6-1: config 255 interface 251 altsetting 44 endpoint 0x1 has invalid maxpacket 1616, setting to 64 [ 198.676481][ T11] usb 6-1: config 255 interface 251 has no altsetting 0 [ 198.686283][ T11] usb 6-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice=88.d8 [ 198.697074][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.705117][ T11] usb 6-1: Product: syz [ 198.709525][ T11] usb 6-1: Manufacturer: syz [ 198.714157][ T11] usb 6-1: SerialNumber: syz [ 198.720125][ T4209] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 198.744804][ T4216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.753470][ T4216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.934107][ T11] usb 6-1: USB disconnect, device number 81 [ 199.084117][ T36] audit: type=1400 audit(1781940033.748:490): avc: denied { read } for pid=4219 comm="syz.6.1053" name="file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.107789][ T36] audit: type=1400 audit(1781940033.748:491): avc: denied { open } for pid=4219 comm="syz.6.1053" path="/123/file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.135417][ T36] audit: type=1400 audit(1781940033.797:492): avc: denied { mount } for pid=4221 comm="syz.6.1054" name="/" dev="configfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 199.158681][ T36] audit: type=1400 audit(1781940033.797:493): avc: denied { search } for pid=4221 comm="syz.6.1054" name="/" dev="configfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.162643][ T4222] netlink: 'syz.6.1054': attribute type 46 has an invalid length. [ 199.294902][ T36] audit: type=1401 audit(1781940033.945:494): op=setxattr invalid_context="" [ 199.312853][ T4242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.321510][ T4242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.495190][ T4262] fuse: Unknown parameter '0x0000000000000047' [ 199.501587][ T340] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 199.581657][ T4264] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.581808][ T4264] rust_binder: 4256:4264 transaction to 0 failed: ENOENT [ 199.721184][ T429] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 199.812419][ T340] usb 7-1: device descriptor read/64, error -71 [ 200.055680][ T340] usb 7-1: device descriptor read/64, error -71 [ 200.248318][ T429] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 200.298967][ T340] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 200.400294][ T429] usb 6-1: Using ep0 maxpacket: 16 [ 200.406673][ T429] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 200.416721][ T429] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 200.425854][ T429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.433950][ T429] usb 6-1: Product: syz [ 200.438165][ T429] usb 6-1: Manufacturer: syz [ 200.440883][ T340] usb 7-1: device descriptor read/64, error -71 [ 200.442913][ T429] usb 6-1: SerialNumber: syz [ 200.455838][ T429] r8152-cfgselector 6-1: Unknown version 0x0000 [ 200.462210][ T429] r8152-cfgselector 6-1: config 0 descriptor?? [ 200.683896][ T340] usb 7-1: device descriptor read/64, error -71 [ 200.795386][ T340] usb usb7-port1: attempt power cycle [ 201.139682][ T340] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 201.162009][ T340] usb 7-1: device descriptor read/8, error -71 [ 201.293461][ T340] usb 7-1: device descriptor read/8, error -71 [ 201.534537][ T340] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 201.555854][ T340] usb 7-1: device descriptor read/8, error -71 [ 201.687483][ T340] usb 7-1: device descriptor read/8, error -71 [ 201.797801][ T340] usb usb7-port1: unable to enumerate USB device [ 202.609901][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.633327][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.659101][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.670921][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.688751][ T4312] serio: Serial port ttyS3 [ 202.809537][ T11] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 202.826244][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.835088][ T45] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 202.851287][ T45] usb 4-1: chopping to 0 config(s) [ 202.868264][ T45] usb 4-1: can't read configurations, error -32 [ 202.883966][ T36] audit: type=1400 audit(1781940037.500:495): avc: denied { sys_module } for pid=4322 comm="syz.7.1080" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 202.922852][ T429] r8152-cfgselector 6-1: Unknown version 0x0000 [ 202.929222][ T429] r8152-cfgselector 6-1: bad CDC descriptors [ 202.941523][ T429] r8152-cfgselector 6-1: USB disconnect, device number 83 [ 202.971178][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 202.977632][ T11] usb 7-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 202.988246][ T11] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.001628][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 203.007045][ T4326] kvm: kvm [4325]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x7 [ 203.008265][ T11] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 203.016830][ T45] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 203.026820][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.043782][ T11] usb 7-1: config 0 descriptor?? [ 203.050455][ T11] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 203.173435][ T45] usb 4-1: device descriptor read/64, error -32 [ 203.249663][ T4336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.261031][ T429] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 203.263586][ T4336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.405978][ T429] usb 6-1: Using ep0 maxpacket: 32 [ 203.412288][ T429] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.424062][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.435020][ T45] usb 4-1: device descriptor read/64, error -32 [ 203.441330][ T429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.451155][ T429] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.460312][ T429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.469277][ T429] usb 6-1: config 0 descriptor?? [ 203.475597][ T429] hub 6-1:0.0: USB hub found [ 203.547517][ T45] usb usb4-port1: attempt power cycle [ 203.679796][ T429] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 203.851012][ T4345] fuse: Unknown parameter 'rootmode' [ 203.875728][ T4347] 9pnet_fd: Insufficient options for proto=fd [ 203.882531][ T4347] netlink: 'syz.3.1088': attribute type 63 has an invalid length. [ 203.889074][ T4328] netlink: 199 bytes leftover after parsing attributes in process `syz.5.1082'. [ 203.891766][ T4347] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1088'. [ 203.900504][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 203.919154][ T429] usbhid 6-1:0.0: can't add hid device: -71 [ 203.925298][ T429] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 203.933613][ T45] usb 4-1: device descriptor read/8, error -32 [ 203.952150][ T429] usb 6-1: USB disconnect, device number 84 [ 203.980596][ T36] audit: type=1400 audit(1781940038.578:496): avc: denied { mounton } for pid=4296 comm="syz.6.1074" path="/130/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 203.981339][ T4349] overlayfs: failed to resolve '/ᡵMyJDǼoF(LvRkcBODRre6$JdD_U`ji{;l8j -gwΰj'Hٽٯ': -2 [ 204.020205][ T4349] fuse: Unknown parameter '00000000000000000000006' [ 204.063340][ T45] usb 4-1: device descriptor read/8, error -32 [ 204.305418][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.326093][ T45] usb 4-1: device descriptor read/8, error -32 [ 204.457487][ T45] usb 4-1: device descriptor read/8, error -32 [ 204.568005][ T45] raw-gadget.1 gadget.3: failed to queue suspend event [ 204.575029][ T45] usb usb4-port1: unable to enumerate USB device [ 204.679089][ T11] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 204.745995][ T4355] raw_sendmsg: syz.3.1091 forgot to set AF_INET. Fix it! [ 204.766920][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.775602][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.830543][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 204.837568][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.846311][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.855405][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.863670][ T11] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 204.871316][ T11] usb 6-1: can't read configurations, error -71 [ 205.595323][ T340] usb 7-1: USB disconnect, device number 58 [ 205.647073][ T4369] FAULT_INJECTION: forcing a failure. [ 205.647073][ T4369] name failslab, interval 1, probability 0, space 0, times 0 [ 205.660053][ T4369] CPU: 0 UID: 0 PID: 4369 Comm: syz.6.1096 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 205.660086][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.660100][ T4369] Call Trace: [ 205.660107][ T4369] [ 205.660115][ T4369] __dump_stack+0x21/0x30 [ 205.660149][ T4369] dump_stack_lvl+0x140/0x1c0 [ 205.660179][ T4369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.660208][ T4369] ? mtree_range_walk+0x573/0x730 [ 205.660231][ T4369] ? _parse_integer_limit+0x195/0x1e0 [ 205.660257][ T4369] dump_stack+0x19/0x20 [ 205.660285][ T4369] should_fail_ex+0x3d7/0x530 [ 205.660312][ T4369] should_failslab+0xac/0x100 [ 205.660337][ T4369] __kmalloc_cache_noprof+0x41/0x470 [ 205.660360][ T4369] ? __genradix_ptr_alloc+0x193/0x630 [ 205.660380][ T4369] __genradix_ptr_alloc+0x193/0x630 [ 205.660401][ T4369] proc_map_files_readdir+0x50a/0x9d0 [ 205.660423][ T4369] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 205.660443][ T4369] ? downgrade_write+0x460/0x460 [ 205.660464][ T4369] ? down_read_killable+0x7f/0x100 [ 205.660488][ T4369] ? __cfi_down_read_killable+0x10/0x10 [ 205.660512][ T4369] ? mutex_lock+0x97/0x1d0 [ 205.660541][ T4369] ? __cfi_mutex_lock+0x10/0x10 [ 205.660561][ T4369] ? bpf_lsm_file_permission+0xd/0x20 [ 205.660589][ T4369] iterate_dir+0x203/0x5e0 [ 205.660615][ T4369] __se_sys_getdents+0xf6/0x250 [ 205.660639][ T4369] ? fput+0x1a4/0x240 [ 205.660666][ T4369] ? __x64_sys_getdents+0xa0/0xa0 [ 205.660692][ T4369] ? ksys_write+0x1f3/0x260 [ 205.660712][ T4369] ? __cfi_filldir+0x10/0x10 [ 205.660738][ T4369] ? __cfi_ksys_write+0x10/0x10 [ 205.660759][ T4369] ? __kasan_check_read+0x15/0x20 [ 205.660780][ T4369] __x64_sys_getdents+0x7f/0xa0 [ 205.660805][ T4369] x64_sys_call+0x26e0/0x2ee0 [ 205.660825][ T4369] do_syscall_64+0x57/0xf0 [ 205.660856][ T4369] ? clear_bhb_loop+0x50/0xa0 [ 205.660877][ T4369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.660908][ T4369] RIP: 0033:0x7efd5819ce59 [ 205.660926][ T4369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.660943][ T4369] RSP: 002b:00007efd59110028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 205.660966][ T4369] RAX: ffffffffffffffda RBX: 00007efd58415fa0 RCX: 00007efd5819ce59 [ 205.660982][ T4369] RDX: 0000000000000ffd RSI: 0000200000001f80 RDI: 0000000000000003 [ 205.660995][ T4369] RBP: 00007efd59110090 R08: 0000000000000000 R09: 0000000000000000 [ 205.661007][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.661021][ T4369] R13: 00007efd58416038 R14: 00007efd58415fa0 R15: 00007ffeeb53a078 [ 205.661039][ T4369] [ 205.929165][ T11] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 205.966394][ T4377] syz.6.1098(4377): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 205.977546][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.982152][ T36] audit: type=1400 audit(1781940040.559:497): avc: denied { map } for pid=4378 comm="syz.3.1099" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.003234][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.067115][ T36] audit: type=1400 audit(1781940040.648:498): avc: denied { create } for pid=4380 comm="syz.6.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.086534][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 206.093420][ T11] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 206.101607][ T11] usb 6-1: config 0 has no interface number 0 [ 206.107773][ T11] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 206.117832][ T11] usb 6-1: config 0 interface 196 has no altsetting 0 [ 206.126008][ T11] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 206.135098][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.143109][ T11] usb 6-1: Product: syz [ 206.147271][ T11] usb 6-1: Manufacturer: syz [ 206.151859][ T11] usb 6-1: SerialNumber: syz [ 206.157286][ T11] usb 6-1: config 0 descriptor?? [ 206.162547][ T4361] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 206.542655][ T4385] fuse: Bad value for 'group_id' [ 206.547747][ T4385] fuse: Bad value for 'group_id' [ 206.566156][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.574813][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.108328][ T36] audit: type=1400 audit(1781940041.679:499): avc: denied { create } for pid=4397 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 207.128694][ T36] audit: type=1400 audit(1781940041.679:500): avc: denied { write } for pid=4397 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 207.153156][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.161860][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.171522][ T4401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.180156][ T4401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.283036][ T11] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 207.292177][ T11] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 207.622401][ T45] usb 6-1: USB disconnect, device number 86 [ 207.653504][ T45] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 207.707889][ T4428] sit0: entered promiscuous mode [ 207.714470][ T4428] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 207.722574][ T4428] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1108'. [ 207.732073][ T4429] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 207.740273][ T4429] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1108'. [ 207.845750][ T36] audit: type=1400 audit(1781940042.413:501): avc: denied { read write } for pid=4444 comm="syz.3.1113" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.872888][ T36] audit: type=1400 audit(1781940042.413:502): avc: denied { open } for pid=4444 comm="syz.3.1113" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.149014][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1114'. [ 208.699926][ T4481] fuse: Unknown parameter 'froup_id' [ 209.046900][ T340] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 209.198035][ T340] usb 7-1: Using ep0 maxpacket: 16 [ 209.204323][ T340] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.214776][ T340] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.232082][ T340] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.245631][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.253959][ T340] usb 7-1: Product: syz [ 209.258168][ T340] usb 7-1: Manufacturer: syz [ 209.263147][ T340] usb 7-1: SerialNumber: syz [ 209.478543][ T4498] support for the xor transformation has been removed. [ 209.487057][ T4498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40416 sclass=netlink_tcpdiag_socket pid=4498 comm=syz.6.1124 [ 209.501917][ T340] usb 7-1: 0:2 : does not exist [ 209.506850][ T340] usb 7-1: unit 9 not found! [ 209.519314][ T340] usb 7-1: USB disconnect, device number 59 [ 209.527092][ T4500] netlink: 'syz.7.1125': attribute type 13 has an invalid length. [ 209.535475][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.573481][ T4510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.582197][ T4510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.691714][ T429] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 209.842770][ T429] usb 6-1: Using ep0 maxpacket: 8 [ 209.849001][ T429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.859162][ T429] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.868193][ T429] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.880299][ T429] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 209.889409][ T429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.897451][ T429] usb 6-1: Product: syz [ 209.901630][ T429] usb 6-1: Manufacturer: syz [ 209.906283][ T429] usb 6-1: SerialNumber: syz [ 210.114016][ T4507] overlay: ./file1 is not a directory [ 210.114022][ T4508] overlay: ./file1 is not a directory [ 210.146284][ T429] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 210.155532][ T429] usb 6-1: 1:1 : format type 33 is not supported yet [ 210.163752][ T429] usb 6-1: 0:2 : does not exist [ 210.176359][ T429] usb 6-1: USB disconnect, device number 87 [ 210.189447][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.222161][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.232278][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.267929][ T36] audit: type=1400 audit(1781940044.824:503): avc: denied { read } for pid=4527 comm="syz.6.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.691961][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1139'. [ 210.702816][ T36] audit: type=1404 audit(1781940045.252:504): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 210.718559][ T36] audit: type=1400 audit(1781940045.252:505): avc: denied { ioctl } for pid=4540 comm="syz.5.1139" path="socket:[35775]" dev="sockfs" ino=35775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 210.743821][ T36] audit: type=1404 audit(1781940045.252:506): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 210.743883][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1139'. [ 210.887401][ T4557] netlink: 'syz.3.1145': attribute type 4 has an invalid length. [ 210.913777][ T4560] can0: slcan on ttyS3. [ 211.029943][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 211.029964][ T36] audit: type=1400 audit(1781940045.569:538): avc: denied { write } for pid=4562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.061569][ T36] audit: type=1400 audit(1781940045.599:539): avc: denied { add_name } for pid=4562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.090645][ T36] audit: type=1400 audit(1781940045.599:540): avc: denied { create } for pid=4562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.123259][ T36] audit: type=1400 audit(1781940045.599:541): avc: denied { write } for pid=4562 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=7130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.131674][ T429] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 211.164292][ T36] audit: type=1400 audit(1781940045.599:542): avc: denied { append } for pid=4562 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=7130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.192505][ T36] audit: type=1400 audit(1781940045.709:543): avc: denied { remove_name } for pid=4576 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=7130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.220298][ T4560] can0 (unregistered): slcan off ttyS3. [ 211.220316][ T36] audit: type=1400 audit(1781940045.709:544): avc: denied { unlink } for pid=4576 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=7130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.236641][ T4560] Falling back ldisc for ttyS3. [ 211.249240][ T45] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 211.293850][ T4583] netlink: 'syz.3.1148': attribute type 58 has an invalid length. [ 211.326221][ T4588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1033 sclass=netlink_route_socket pid=4588 comm=syz.3.1149 [ 211.350525][ T429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 211.364401][ T429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.378362][ T429] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 211.389217][ T4588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.396505][ T4588] IPv6: NLM_F_CREATE should be set when creating new route [ 211.403837][ T4588] IPv6: NLM_F_CREATE should be set when creating new route [ 211.411446][ T429] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 211.424990][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 211.434960][ T36] audit: type=1400 audit(1781940045.977:545): avc: denied { execmem } for pid=4586 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 211.455446][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 211.461701][ T36] audit: type=1400 audit(1781940045.997:546): avc: denied { name_bind } for pid=4586 comm="syz.3.1149" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 211.461995][ T429] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.484324][ T36] audit: type=1400 audit(1781940045.997:547): avc: denied { node_bind } for pid=4586 comm="syz.3.1149" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 211.494319][ T429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.521077][ T429] usb 6-1: Product: syz [ 211.525713][ T429] usb 6-1: Manufacturer: syz [ 211.530372][ T429] usb 6-1: SerialNumber: syz [ 211.535086][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.546034][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.560374][ T45] usb 7-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 211.569623][ T45] usb 7-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 211.578079][ T45] usb 7-1: Product: syz [ 211.583034][ T45] usb 7-1: config 0 descriptor?? [ 211.780380][ T429] usb 6-1: bad CDC descriptors [ 211.788627][ T429] usb 6-1: USB disconnect, device number 88 [ 211.849073][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.859450][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.175730][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.184666][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.585518][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.592839][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.600186][ T4623] bridge_slave_0: entered allmulticast mode [ 212.606738][ T4623] bridge_slave_0: entered promiscuous mode [ 212.613410][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.620504][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.627633][ T4623] bridge_slave_1: entered allmulticast mode [ 212.634148][ T4623] bridge_slave_1: entered promiscuous mode [ 212.704479][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.711629][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.718978][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.726067][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.756432][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.763802][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.774065][ T763] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.781154][ T763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.790224][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.797297][ T818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.830637][ T4623] veth0_vlan: entered promiscuous mode [ 212.850042][ T4623] veth1_macvtap: entered promiscuous mode [ 212.953813][ T818] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 212.954638][ T4636] netlink: 'syz.7.1162': attribute type 27 has an invalid length. [ 213.174112][ T429] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 213.285715][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.294392][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.303787][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.312838][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.322640][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.325910][ T429] usb 9-1: Using ep0 maxpacket: 8 [ 213.335885][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.344998][ T429] usb 9-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 213.354247][ T429] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.362929][ T429] usb 9-1: Product: syz [ 213.367313][ T429] usb 9-1: Manufacturer: syz [ 213.371989][ T429] usb 9-1: SerialNumber: syz [ 213.380235][ T429] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 213.390078][ T429] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 213.401683][ T429] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 213.417817][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.582677][ T11] usb 9-1: USB disconnect, device number 2 [ 214.003771][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 214.016396][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 214.026579][ T45] usb 7-1: USB disconnect, device number 60 [ 214.320506][ T45] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 214.341505][ T11] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 214.383033][ T4656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.391688][ T4656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.471333][ T45] usb 7-1: device descriptor read/64, error -71 [ 214.492640][ T11] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.503769][ T11] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.514264][ T11] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 214.523399][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.531482][ T11] usb 9-1: SerialNumber: syz [ 214.538477][ T11] usb 9-1: bad CDC descriptors [ 214.543480][ T11] usb-storage 9-1:1.0: USB Mass Storage device detected [ 214.551272][ T11] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 214.559249][ T11] scsi host1: usb-storage 9-1:1.0 [ 214.712555][ T45] usb 7-1: device descriptor read/64, error -71 [ 214.918439][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.927136][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.953799][ T45] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 215.084472][ T45] usb 7-1: device descriptor read/64, error -71 [ 215.094262][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.102887][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.325839][ T45] usb 7-1: device descriptor read/64, error -71 [ 215.436394][ T45] usb usb7-port1: attempt power cycle [ 215.777911][ T45] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 215.799008][ T45] usb 7-1: device descriptor read/8, error -71 [ 215.929917][ T45] usb 7-1: device descriptor read/8, error -71 [ 216.169823][ T45] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 216.190995][ T45] usb 7-1: device descriptor read/8, error -71 [ 216.321704][ T45] usb 7-1: device descriptor read/8, error -71 [ 216.347535][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.356285][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.365514][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 216.365532][ T36] audit: type=1400 audit(1781940050.879:607): avc: denied { create } for pid=4694 comm="syz.8.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.391268][ T36] audit: type=1400 audit(1781940050.879:608): avc: denied { connect } for pid=4694 comm="syz.8.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.410895][ T36] audit: type=1400 audit(1781940050.879:609): avc: denied { read } for pid=4694 comm="syz.8.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.431167][ T45] usb usb7-port1: unable to enumerate USB device [ 216.839696][ T36] audit: type=1326 audit(1781940051.347:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4704 comm="syz.7.1182" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05de79ce59 code=0x0 [ 216.888769][ T36] audit: type=1400 audit(1781940051.397:611): avc: denied { create } for pid=4707 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.908267][ T36] audit: type=1400 audit(1781940051.397:612): avc: denied { write } for pid=4707 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.928035][ T36] audit: type=1400 audit(1781940051.397:613): avc: denied { connect } for pid=4707 comm="syz.8.1183" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.955399][ T36] audit: type=1400 audit(1781940051.397:614): avc: denied { write } for pid=4707 comm="syz.8.1183" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.978766][ T36] audit: type=1400 audit(1781940051.417:615): avc: denied { create } for pid=4704 comm="syz.7.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.004281][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.013089][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.023245][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.032025][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.040771][ T36] audit: type=1400 audit(1781940051.517:616): avc: denied { read write } for pid=4714 comm="syz.8.1185" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.108152][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1189'. [ 217.121276][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1189'. [ 217.693490][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.703307][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.001565][ T4778] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 218.082793][ T4780] netlink: 'syz.6.1196': attribute type 4 has an invalid length. [ 218.093140][ T4780] netlink: 'syz.6.1196': attribute type 4 has an invalid length. [ 218.301177][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.309798][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.349491][ T340] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 218.500106][ T340] usb 7-1: Using ep0 maxpacket: 16 [ 218.506575][ T340] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 218.518083][ T340] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 218.530398][ T340] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.539472][ T340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.547523][ T340] usb 7-1: Product: syz [ 218.551745][ T340] usb 7-1: Manufacturer: syz [ 218.556365][ T340] usb 7-1: SerialNumber: syz [ 219.397080][ T4807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4807 comm=syz.3.1206 [ 219.568648][ T340] cdc_ncm 7-1:1.0: bind() failure [ 219.576908][ T340] usb 7-1: USB disconnect, device number 65 [ 220.090066][ T4812] netlink: 'syz.6.1208': attribute type 1 has an invalid length. [ 220.097960][ T4812] netlink: 'syz.6.1208': attribute type 2 has an invalid length. [ 220.107218][ T4812] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.114636][ T4812] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.199827][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1213'. [ 220.209015][ T4823] tipc: Invalid UDP bearer configuration [ 220.209039][ T4823] tipc: Enabling of bearer rejected, failed to enable media [ 220.389916][ T4833] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1217'. [ 220.422695][ T4836] 9pnet: Unknown protocol version 9 [ 221.176522][ T4853] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1224'. [ 221.297701][ T4863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4863 comm=syz.8.1227 [ 221.351620][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.360363][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.701947][ T331] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 221.862474][ T331] usb 7-1: Using ep0 maxpacket: 32 [ 221.868727][ T331] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.882240][ T331] usb 7-1: config 0 has no interface number 0 [ 221.896666][ T331] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.906004][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.914245][ T331] usb 7-1: Product: syz [ 221.918480][ T331] usb 7-1: Manufacturer: syz [ 221.923166][ T331] usb 7-1: SerialNumber: syz [ 221.928765][ T331] usb 7-1: config 0 descriptor?? [ 221.935337][ T331] smsc95xx v2.0.0 [ 222.337473][ T331] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 222.348482][ T331] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 222.925856][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.934453][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.014862][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.024242][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.033984][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 223.034003][ T36] audit: type=1400 audit(1781940057.524:652): avc: denied { write } for pid=4895 comm="syz.8.1235" path="socket:[37963]" dev="sockfs" ino=37963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.162375][ T331] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 223.173297][ T331] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 223.221486][ T36] audit: type=1400 audit(1781940057.713:653): avc: denied { shutdown } for pid=4897 comm="syz.7.1236" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.254260][ T36] audit: type=1400 audit(1781940057.743:654): avc: denied { create } for pid=4899 comm="syz.7.1237" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.256286][ T4900] fuse: Bad value for 'rootmode' [ 223.275199][ T36] audit: type=1400 audit(1781940057.743:655): avc: denied { mounton } for pid=4899 comm="syz.7.1237" path="/42/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.290481][ T4900] rust_binder: 142: no such ref 0 [ 223.304459][ T36] audit: type=1400 audit(1781940057.773:656): avc: denied { setattr } for pid=4899 comm="syz.7.1237" name="file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.308392][ T4900] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 223.330517][ T4900] rust_binder: Read failure Err(EFAULT) in pid:142 [ 223.330683][ T36] audit: type=1400 audit(1781940057.783:657): avc: denied { ioctl } for pid=4899 comm="syz.7.1237" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.345951][ T4900] rust_binder: 142: no such ref 0 [ 223.375636][ T4900] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 223.375658][ T4900] rust_binder: Read failure Err(EFAULT) in pid:142 [ 223.401515][ T36] audit: type=1400 audit(1781940057.893:658): avc: denied { associate } for pid=4901 comm="syz.7.1238" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 223.405202][ T4902] fuse: Unknown parameter '#W0x0000000000000009' [ 223.408366][ T36] audit: type=1400 audit(1781940057.893:659): avc: denied { mounton } for pid=4901 comm="syz.7.1238" path="/43/file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.482604][ T36] audit: type=1400 audit(1781940057.973:660): avc: denied { ioctl } for pid=4901 comm="syz.7.1238" path="socket:[38949]" dev="sockfs" ino=38949 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.621673][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.630433][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.639798][ T4907] overlayfs: failed to resolve './cgroup': -2 [ 223.957147][ T36] audit: type=1400 audit(1781940058.441:661): avc: denied { mount } for pid=4914 comm="syz.3.1241" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 224.163476][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.172162][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.390333][ T11] usb 7-1: USB disconnect, device number 66 [ 224.841500][ T11] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 224.971766][ T11] usb 7-1: device descriptor read/64, error -71 [ 225.222436][ T11] usb 7-1: device descriptor read/64, error -71 [ 225.268837][ T4960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4960 comm=syz.8.1253 [ 225.463105][ T11] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 225.603458][ T11] usb 7-1: device descriptor read/64, error -71 [ 225.812266][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.821174][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.832292][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.839439][ T4966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.846877][ T11] usb 7-1: device descriptor read/64, error -71 [ 225.854722][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.863818][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.872619][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.881722][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.954453][ T11] usb usb7-port1: attempt power cycle [ 226.305225][ T11] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 226.326184][ T11] usb 7-1: device descriptor read/8, error -71 [ 226.456532][ T11] usb 7-1: device descriptor read/8, error -71 [ 226.467702][ T798] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.474147][ T798] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.706214][ T11] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 226.727292][ T11] usb 7-1: device descriptor read/8, error -71 [ 226.857615][ T11] usb 7-1: device descriptor read/8, error -71 [ 226.966909][ T11] usb usb7-port1: unable to enumerate USB device [ 227.287603][ T4984] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.808786][ T11] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 227.960357][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 227.968933][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.979174][ T11] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 227.990171][ T11] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 228.001294][ T11] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 228.010404][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.018418][ T11] usb 7-1: Product: syz [ 228.022632][ T11] usb 7-1: Manufacturer: syz [ 228.027261][ T11] usb 7-1: SerialNumber: syz [ 228.243183][ T11] usb 7-1: USB disconnect, device number 71 [ 228.264163][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.371855][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 228.371876][ T36] audit: type=1400 audit(1781940062.850:682): avc: denied { read } for pid=5007 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.398770][ T36] audit: type=1400 audit(1781940062.850:683): avc: denied { getopt } for pid=5007 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.550382][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.551034][ T500] Bluetooth: hci0: command 0x1003 tx timeout [ 228.720327][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.728982][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.825273][ T36] audit: type=1400 audit(1781940063.299:684): avc: denied { setattr } for pid=5018 comm="syz.6.1272" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 228.906257][ T36] audit: type=1400 audit(1781940063.379:685): avc: denied { append } for pid=5021 comm="syz.6.1273" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.968103][ T36] audit: type=1400 audit(1781940063.439:686): avc: denied { map } for pid=5021 comm="syz.6.1273" path="socket:[38463]" dev="sockfs" ino=38463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.991940][ T36] audit: type=1400 audit(1781940063.439:687): avc: denied { read } for pid=5021 comm="syz.6.1273" path="socket:[38463]" dev="sockfs" ino=38463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.031245][ T36] audit: type=1400 audit(1781940063.499:688): avc: denied { execute } for pid=5034 comm="syz.3.1276" name="file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.077043][ T5040] tipc: Enabling of bearer rejected, media not registered [ 229.406846][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.415549][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.424631][ T5046] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 229.424631][ T5045] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 229.758644][ T36] audit: type=1404 audit(1781940064.227:689): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 229.775605][ T36] audit: type=1400 audit(1781940064.227:690): avc: denied { read write } for pid=5055 comm="syz.6.1283" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 229.799208][ T36] audit: type=1400 audit(1781940064.227:691): avc: denied { read write } for pid=5055 comm="syz.6.1283" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 230.560882][ T5075] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 230.566928][ T5075] syzkaller1: linktype set to 805 [ 230.572839][ T5075] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1289'. [ 230.988873][ T5109] syzkaller1: entered promiscuous mode [ 230.994446][ T5109] syzkaller1: entered allmulticast mode [ 231.818369][ T31] usb 9-1: USB disconnect, device number 3 [ 231.830490][ T770] bridge_slave_1: left allmulticast mode [ 231.836340][ T770] bridge_slave_1: left promiscuous mode [ 231.842262][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.850193][ T770] bridge_slave_0: left allmulticast mode [ 231.855945][ T770] bridge_slave_0: left promiscuous mode [ 231.861862][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.990494][ T770] veth1_macvtap: left promiscuous mode [ 231.996079][ T770] veth0_vlan: left promiscuous mode [ 233.470960][ T36] kauditd_printk_skb: 379 callbacks suppressed [ 233.470980][ T36] audit: type=1400 audit(1781940067.941:876): avc: denied { execmem } for pid=5158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 233.497351][ T36] audit: type=1400 audit(1781940067.961:877): avc: denied { watch } for pid=5159 comm="syz.3.1319" path="/331" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 234.112977][ T36] audit: type=1400 audit(1781940068.580:878): avc: denied { read write } for pid=2433 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 234.188997][ T36] audit: type=1400 audit(1781940068.650:879): avc: denied { create } for pid=5163 comm="syz.3.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 234.210275][ T36] audit: type=1400 audit(1781940068.670:880): avc: denied { mounton } for pid=5163 comm="syz.3.1321" path="/332" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 234.237189][ T36] audit: type=1400 audit(1781940068.670:881): avc: denied { execmem } for pid=5161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 234.256597][ T36] audit: type=1400 audit(1781940068.670:882): avc: denied { mounton } for pid=5163 comm="syz.3.1321" path="/332/file0" dev="tmpfs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 234.279263][ T36] audit: type=1400 audit(1781940068.670:883): avc: denied { create } for pid=5163 comm="syz.3.1321" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 234.300539][ T36] audit: type=1400 audit(1781940068.670:884): avc: denied { read write } for pid=5162 comm="syz.6.1320" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 234.323820][ T36] audit: type=1400 audit(1781940068.670:885): avc: denied { create } for pid=5162 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 235.026440][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1322'. [ 235.944168][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 238.600505][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 238.600526][ T36] audit: type=1400 audit(1781940073.064:922): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.302460][ T36] audit: type=1400 audit(1781940073.763:923): avc: denied { create } for pid=5214 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 239.330583][ T36] audit: type=1400 audit(1781940073.763:924): avc: denied { create } for pid=5211 comm="syz.7.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 239.350314][ T36] audit: type=1400 audit(1781940073.763:925): avc: denied { execmem } for pid=5210 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 239.369732][ T36] audit: type=1400 audit(1781940073.763:926): avc: denied { execmem } for pid=5211 comm="syz.7.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 239.388938][ T36] audit: type=1400 audit(1781940073.793:927): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.413022][ T36] audit: type=1400 audit(1781940073.793:928): avc: denied { read write } for pid=2433 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.437083][ T36] audit: type=1400 audit(1781940073.803:929): avc: denied { mounton } for pid=5212 comm="syz.3.1337" path="/337/file0" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 240.636799][ T36] audit: type=1400 audit(1781940075.092:930): avc: denied { create } for pid=5218 comm="syz.7.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 240.664041][ T36] audit: type=1400 audit(1781940075.112:931): avc: denied { read } for pid=5218 comm="syz.7.1338" dev="nsfs" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 243.592802][ T5241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5241 comm=syz.7.1344 [ 243.612978][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 243.612997][ T36] audit: type=1400 audit(1781940078.069:963): avc: denied { read write } for pid=2433 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.115654][ T36] audit: type=1400 audit(1781940078.569:964): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.204863][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'. [ 245.214451][ T36] audit: type=1400 audit(1781940079.658:965): avc: denied { name_bind } for pid=5247 comm="syz.7.1347" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 245.237531][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5250 comm=syz.6.1348 [ 245.250067][ T36] audit: type=1400 audit(1781940079.658:966): avc: denied { execmem } for pid=5246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 245.269590][ T36] audit: type=1400 audit(1781940079.668:967): avc: denied { name_bind } for pid=5247 comm="syz.7.1347" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 245.278536][ T5250] netlink: 'syz.6.1348': attribute type 16 has an invalid length. [ 245.291730][ T36] audit: type=1400 audit(1781940079.688:968): avc: denied { create } for pid=5248 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 245.319656][ T36] audit: type=1400 audit(1781940079.698:969): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.343766][ T36] audit: type=1400 audit(1781940079.778:970): avc: denied { read write } for pid=2433 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.943356][ T36] audit: type=1400 audit(1781940081.387:971): avc: denied { execmem } for pid=5255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 246.966261][ T36] audit: type=1400 audit(1781940081.417:972): avc: denied { read write } for pid=5256 comm="syz.7.1350" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 248.781888][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 248.781908][ T36] audit: type=1400 audit(1781940083.226:979): avc: denied { execmem } for pid=5262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 248.810340][ T36] audit: type=1400 audit(1781940083.226:980): avc: denied { create } for pid=5264 comm="syz.7.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 248.831111][ T36] audit: type=1400 audit(1781940083.246:981): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.855293][ T36] audit: type=1400 audit(1781940083.266:982): avc: denied { read write } for pid=5269 comm="syz.7.1356" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 248.878574][ T36] audit: type=1400 audit(1781940083.266:983): avc: denied { mounton } for pid=5269 comm="syz.7.1356" path="/66/file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 248.900993][ T36] audit: type=1400 audit(1781940083.266:984): avc: denied { read write } for pid=5269 comm="syz.7.1356" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 248.924435][ T36] audit: type=1400 audit(1781940083.286:985): avc: denied { read write } for pid=2433 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.331148][ T36] audit: type=1400 audit(1781940083.775:986): avc: denied { read write } for pid=3808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.720523][ T36] audit: type=1400 audit(1781940085.174:987): avc: denied { execmem } for pid=5271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 250.744041][ T36] audit: type=1400 audit(1781940085.194:988): avc: denied { mounton } for pid=5273 comm="syz.3.1359" path="/344/file0" dev="tmpfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 252.768575][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 252.792774][ T5289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5289 comm=syz.3.1362 [ 252.841357][ T5290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5290 comm=syz.3.1362 [ 252.935306][ T4184] raw-gadget.1 gadget.3: failed to queue disconnect event [ 253.098923][ T814] bridge_slave_1: left allmulticast mode [ 253.104631][ T814] bridge_slave_1: left promiscuous mode [ 253.110637][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.118520][ T814] bridge_slave_0: left allmulticast mode [ 253.124218][ T814] bridge_slave_0: left promiscuous mode [ 253.130198][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.248936][ T814] veth0_vlan: left promiscuous mode [ 253.468908][ T814] bridge_slave_1: left allmulticast mode [ 253.474662][ T814] bridge_slave_1: left promiscuous mode [ 253.480414][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.488104][ T814] bridge_slave_0: left allmulticast mode [ 253.493800][ T814] bridge_slave_0: left promiscuous mode [ 253.499483][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.507412][ T814] bridge_slave_1: left allmulticast mode [ 253.513067][ T814] bridge_slave_1: left promiscuous mode [ 253.518744][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.526177][ T814] bridge_slave_0: left allmulticast mode [ 253.531964][ T814] bridge_slave_0: left promiscuous mode [ 253.537700][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.574082][ T814] bridge0 (unregistering): left allmulticast mode [ 253.701120][ T814] veth1_macvtap: left promiscuous mode [ 253.706666][ T814] veth0_vlan: left promiscuous mode [ 253.712272][ T814] veth1_macvtap: left promiscuous mode [ 253.717869][ T814] veth0_vlan: left promiscuous mode [ 254.008949][ T814] ------------[ cut here ]------------ [ 254.014464][ T814] WARNING: CPU: 0 PID: 814 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 254.024590][ T814] Modules linked in: [ 254.028556][ T814] CPU: 0 UID: 0 PID: 814 Comm: kworker/u8:63 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 254.040357][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.050556][ T814] Workqueue: netns cleanup_net [ 254.055370][ T814] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 254.061447][ T814] Code: e8 61 b1 d2 fc 4b 83 3c 3e 00 75 19 e8 f5 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 e7 fd 79 fc 49 83 c7 08 eb c9 e8 dc fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 254.081155][ T814] RSP: 0018:ffffc9000f6d7b90 EFLAGS: 00010293 [ 254.087390][ T814] RAX: ffffffff850dc3d4 RBX: ffff88813024d8c0 RCX: ffff888133a9a600 [ 254.095403][ T814] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881047640b8 [ 254.103532][ T814] RBP: ffffc9000f6d7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 254.111553][ T814] R10: dffffc0000000000 R11: fffff52001edaf04 R12: dffffc0000000000 [ 254.119613][ T814] R13: dffffc0000000000 R14: ffff888104764000 R15: 00000000000000b8 [ 254.127668][ T814] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 254.136692][ T814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.143338][ T814] CR2: 0000200000000340 CR3: 000000010cfc4000 CR4: 00000000003526b0 [ 254.151361][ T814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.159450][ T814] DR3: 000000000000000b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 254.167472][ T814] Call Trace: [ 254.170756][ T814] [ 254.173827][ T814] cleanup_net+0x6bd/0xc90 [ 254.178403][ T814] ? __cfi_cleanup_net+0x10/0x10 [ 254.183383][ T814] process_scheduled_works+0x7d4/0x1020 [ 254.189010][ T814] worker_thread+0xc51/0x1370 [ 254.193732][ T814] kthread+0x2c9/0x370 [ 254.197875][ T814] ? __cfi_worker_thread+0x10/0x10 [ 254.203026][ T814] ? __cfi_kthread+0x10/0x10 [ 254.207684][ T814] ret_from_fork+0x67/0xa0 [ 254.212134][ T814] ? __cfi_kthread+0x10/0x10 [ 254.216733][ T814] ret_from_fork_asm+0x1a/0x30 [ 254.221567][ T814] [ 254.224616][ T814] ---[ end trace 0000000000000000 ]--- [ 254.230414][ T814] ------------[ cut here ]------------ [ 254.235884][ T814] WARNING: CPU: 0 PID: 814 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 254.246042][ T814] Modules linked in: [ 254.249987][ T814] CPU: 0 UID: 0 PID: 814 Comm: kworker/u8:63 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 254.263276][ T814] Tainted: [W]=WARN [ 254.267101][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.277242][ T814] Workqueue: netns cleanup_net [ 254.282067][ T814] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 254.288241][ T814] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 92 fd 79 fc 49 83 c7 08 eb c5 e8 87 fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 fd 79 fc 5b 41 5c 41 5e 41 [ 254.308060][ T814] RSP: 0018:ffffc9000f6d7b90 EFLAGS: 00010293 [ 254.314376][ T814] RAX: ffffffff850dc429 RBX: ffff888104764800 RCX: ffff888133a9a600 [ 254.322469][ T814] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104764808 [ 254.330612][ T814] RBP: ffffc9000f6d7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 254.338714][ T814] R10: dffffc0000000000 R11: fffff52001edaf04 R12: dffffc0000000000 [ 254.346728][ T814] R13: dffffc0000000000 R14: ffff888104764000 R15: 0000000000000008 [ 254.354779][ T814] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 254.363891][ T814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.370568][ T814] CR2: 0000200000000340 CR3: 000000010cfc4000 CR4: 00000000003526b0 [ 254.378632][ T814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.386626][ T814] DR3: 000000000000000b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 254.394667][ T814] Call Trace: [ 254.398045][ T814] [ 254.401001][ T814] cleanup_net+0x6bd/0xc90 [ 254.405430][ T814] ? __cfi_cleanup_net+0x10/0x10 [ 254.410445][ T814] process_scheduled_works+0x7d4/0x1020 [ 254.416031][ T814] worker_thread+0xc51/0x1370 [ 254.420783][ T814] kthread+0x2c9/0x370 [ 254.424894][ T814] ? __cfi_worker_thread+0x10/0x10 [ 254.430092][ T814] ? __cfi_kthread+0x10/0x10 [ 254.434747][ T814] ret_from_fork+0x67/0xa0 [ 254.439221][ T814] ? __cfi_kthread+0x10/0x10 [ 254.443843][ T814] ret_from_fork_asm+0x1a/0x30 [ 254.448666][ T814] [ 254.451715][ T814] ---[ end trace 0000000000000000 ]--- [ 254.461204][ T814] ------------[ cut here ]------------ [ 254.466718][ T814] WARNING: CPU: 1 PID: 814 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 254.476320][ T814] Modules linked in: [ 254.480307][ T814] CPU: 1 UID: 0 PID: 814 Comm: kworker/u8:63 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 254.493581][ T814] Tainted: [W]=WARN [ 254.497460][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.507568][ T814] Workqueue: netns cleanup_net [ 254.512388][ T814] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 254.518015][ T814] Code: 3c 20 00 74 08 48 89 df e8 2f 8c ed fc 48 8b 3b e8 27 82 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 d8 94 fc <0f> 0b e9 b0 fd ff ff e8 a6 d8 94 fc 0f 0b e9 18 fe ff ff e8 9a d8 [ 254.537818][ T814] RSP: 0018:ffffc9000f6d7b70 EFLAGS: 00010293 [ 254.543956][ T814] RAX: ffffffff84f2e8fe RBX: ffff88813024d8c0 RCX: ffff888133a9a600 [ 254.551992][ T814] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888133a9a600 [ 254.560042][ T814] RBP: ffffc9000f6d7b98 R08: ffffffff87d4a4c7 R09: 1ffffffff0fa9498 [ 254.568110][ T814] R10: dffffc0000000000 R11: fffffbfff0fa9499 R12: 1ffffffff0fa91e8 [ 254.576112][ T814] R13: dffffc0000000000 R14: ffff88813024e4c0 R15: dffffc0000000000 [ 254.584153][ T814] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 254.593159][ T814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.599884][ T814] CR2: 000056280274dd50 CR3: 000000010cfc4000 CR4: 00000000003526b0 [ 254.608051][ T814] Call Trace: [ 254.611370][ T814] [ 254.614307][ T814] xfrm_net_exit+0x31/0x80 [ 254.618805][ T814] cleanup_net+0x6bd/0xc90 [ 254.623282][ T814] ? __cfi_cleanup_net+0x10/0x10 [ 254.628277][ T814] process_scheduled_works+0x7d4/0x1020 [ 254.633868][ T814] worker_thread+0xc51/0x1370 [ 254.638654][ T814] kthread+0x2c9/0x370 [ 254.642763][ T814] ? __cfi_worker_thread+0x10/0x10 [ 254.648159][ T814] ? __cfi_kthread+0x10/0x10 [ 254.652788][ T814] ret_from_fork+0x67/0xa0 [ 254.657220][ T814] ? __cfi_kthread+0x10/0x10 [ 254.661941][ T814] ret_from_fork_asm+0x1a/0x30 [ 254.666789][ T814] [ 254.669890][ T814] ---[ end trace 0000000000000000 ]---