last executing test programs: 2.860046369s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ebd7000fbdbdf250c0000462ab83e00", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000c0050800500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x44000) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ebd7000fbdbdf250c0000462ab83e00", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000c0050800500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x44000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="64020000", @ANYRES16, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0xa, &(0x7f00000007c0)={0xa, 0x88}, 0x0) (async) prlimit64(0x0, 0xa, &(0x7f00000007c0)={0xa, 0x88}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) (async) sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="ce72afad4aeb4768bdc76c33ec274e05cd5e89b5", 0x14}, {&(0x7f00000003c0)="c4", 0x1}, {&(0x7f0000000400)="f67dab2dee78c6ff6f2c0614291eb23783c5a1bfad92cb71e4b3a2771a0ed99e44ccd202ed442fa81cd13bc30f512d8fe25a6b97442878fc93b09ef1f2bdce2d85da04864afc8087936b9474a80ec8e2f0674c7f8aa804c8f60df995b726", 0x5e}, {&(0x7f0000000480)="a8db6538e92a68e22df4e266c8e6ca92f49945c4cca80f03b0a2c87707c23580e164fb17263afd", 0x27}], 0x4, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r5, r4, r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r5, r1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x20010800}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000940)="600ca289afa225266c6cc377992192587ae062d32db544034b57f1a8824cedc96e1e42316aa90aca63c5b678b97d2f58da4ba717f17dced6b9d2062326b5a923fedbfb04f1432d104347bee12b20", 0x4e}, {&(0x7f00000005c0)="b02f00b5f397952bd51dfaa83c455ef68c6144577a7f94f255f6f9233b3065e9efc5836241d6cea82640b17326601c5aa2e61040d315cdce8f12e5cabb2fb43682cc000000000000", 0x48}, {&(0x7f0000000cc0)="878985faa182b91ccbf121f123a2b349c56c622f83479eb32fc596860b0b41b15752ba9c08af9e5d9a79cbea5a0b1419855aa27673857df58836dc726f204daf567baa4097f52696ed9c3ac43fd32dd2a7de3bd5d31be574ff26c186b62ab864cf601ad9e91d80cbd95e41f92665098f3ac45a61bfb577b11468aa64ec24d03f8f288d5980b620e9be48be7ca52aeeaeecb30e8dd64d5ee70f12c58922e24ad8f1d405f0a110c0cc5e663523b9609ffde29b97895921fd31ff5f7c000efd054e132a666cad2087b3b559ae442e19", 0xce}], 0x3, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x10}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)="31f0dfdc3f22a5ae21861ccf78b08ad56b5f522b0f42f719f40640d1ab3a4ae64df0b03c9d4d7d92cbdced94a0cbcee593caecc5560dbca502b5c5f828ec112e3c8997415b058295e13853ffc62af3ed7f592f7d56fbaf0b9e2ab398fe4e548188aa339ece36f9554d3d7686abaca780199ed05ecf86a83012b536d87cd8cc109e1215869fbb06237631a4341328999915f136949b5f55060deae1dec83b1e395b425c11a82b4e97bd291d1c43ee551c6dd371132f31796cf09837dd0c96b4f50660abcba6edfc94e9f91632bc9c30917d4a87ffb42efd05f622dde1a5d3de63cac32b6d3a37a9c47b88788bded5b73fac", 0xf1}, {&(0x7f0000001200)="930e69ade87ab1325c6807ddb8fce118445bb8342a9b19b02c2a50c0902779bae48426c38cb3c6f01bf3809f41005b00b9376371864c4a6ba997a7cb3c12ca20408f4169587bdec66452c0461a57b8583065dfa2edf55443955b1ea5545223831085456dc9f2f255ca58b1dbdc0b4018c653", 0x72}, {&(0x7f0000001280)="fa65a1e0ad32fcb0ab8ab6bbe1d20fd300caedc2d2caf3f397b9d065b6ab4ac5829f57cd14d0a5890851ea6da0566acf8d0b0f7b326cdc09", 0x38}, {&(0x7f00000012c0)="f0b1e89ae5335852c2324f1e0e21ef3171f1908217b767db69dcb1e1676afeaca349b7f3c79b4f2d8a84b1c400dde0a22dd15a0e6ed4d35f5e46beadd687e47ec73a88c9029d8d3b94559c43c58475", 0x4f}, {&(0x7f0000001340)}, {&(0x7f0000001380)="239a4af471620290e469ddb6d80a8d258a7aa2befabbfcec871fb6799bafc2f2f18c33b121b45d56e4", 0x29}], 0x6, 0x0, 0x0, 0x10041804}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001540)="16eeedb20c87d1660e1da802aded65065067b704c34d5095332f63a5b53466f4e5c16a06552e1c3b2e36505abd6c3bcc79cc11dc2b9380ed60e7280439749eecc1956ab890b85ebddf5d10dd215cae008a7bc743de430c2e2049adf0ef3638a3238cd23a6e20eb36381d2f4ba0bd87c498cc56a016b4d8c942bfbe676a46ddbf8d3d1288115cca7f38c9cd324c7ac9a9fe74cc0556954fd615647f5d33f5d0401209e788f8dfd39e0c1c80dd1c4095b4e37c5577b28ef78621961e0a06168815463fde39498dd0d501f7990f3045fb255c68863972f0c25d9852c5a375", 0xdd}, {&(0x7f0000001640)="092448d0e1b332a7dde3c6658f717c48752a72145dae295f23c8b558de56307ae5176affe78cf1de10d6f54c37b28a7a8e494a55baea40ce47276203bbe21801200093e15483de780eed13e7cc78c019bad6dd5e86f4701d962ff088acba26a3bb2e5e2083f6d093b88028b846a2cc19cb88f9bd78d7d2b576378d75bdc449a354ce10236284975f51a35a33355cff2b9579562beb49fdf67751e4829266f6822a3aac04d313648354f97ba03a7a1add897b00e553044f6139082e", 0xbb}, {&(0x7f0000001700)="3f4b485541e1d5fb1e5828ffd120b49ec45d4c22841af4d5e873785b0d32c6b725c90c353f88c7d19c197653070f9a882d407c22a9baea2af53bd4ae9ae3c6230c96758af30bea37f09f3d3a7f97fd839e6d8f69838e8e8e89b98c5caa00ee59731ad5b0bec8b0a174aed4027f3423ca7f53142f0bdb62e91dd547ed8dcd56c5d715f530074410b7d7c7eefda0fdb37dd50a8d53b1b5", 0x96}, {&(0x7f00000017c0)="c28a457f7f6df2100ae6fb5528bc22eccb97b764813c9e27b22ee65dab66f54134f5f64e2d5a467fe307b83a06444a3de1d31e3a3a6323ca990a0cd2d470b319ca8fb5490f679b50e5ec007fac5a08842c2dc8aba2efce326f4e3b16d8975301c46a7cfdb414d866dc72f433909db1c12ebe49e650e18d96cac60f982024e2293ea2d6efc157ed41e7ea1e5df33adf0b2190a7a6adef4e7bbe9663d6563c9f9adfd834bb72567748bb7e8fabba16b4aa2d05a2e0e65d8fcc0b0b429049a0390d0504bd98b38ccec4b07776f17b6e612d96d60c3ac741840d56", 0xfd}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118, 0x40}}], 0x4, 0x8000) recvmmsg(r5, &(0x7f0000000000), 0x40003d6, 0x40000001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000000000000f338"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000000000000f338"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 2.82149953s ago: executing program 0 (id=1): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xfffffff9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x2, 0x6, 0xfffa}, 0x3a, [0x7ffc, 0x5, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x1ffffffe, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xf, 0x1, 0x0, 0x0, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x95, 0x242, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x340, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x3, 0x9, 0x8, 0x4, 0x14, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0x7203, 0x10000, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0x6, 0x4e0, 0x7, 0x4, 0x9, 0x4, 0x6, 0x4, 0xd, 0xffff8005, 0x47, 0x8000, 0xfffffffd, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc46, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x10100, 0x2, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0x10000, 0x1f9, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x1, 0x4, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x6, 0x6, 0x6, 0xbf, 0x10004002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffc, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x7, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x801ff, 0x2, 0x57, 0x1, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0xc, 0x16, 0xffffffff, 0x80000002, 0xfffffffe, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x57, 0xffff343e, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff0101022000090501", @ANYRESOCT], 0x0) 2.777515471s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x20, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xd, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4023280000009b23f70ba381030000000000000000cb4fdca04716560fb3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000004dc0)={0x100000b, 0xfffffffffffffe79, 0x2, 0x4, 0x80000002, 0x7, 0x7, 0xfffffffffffffff9, 0x2000000000000002, 0x2, 0x7, 0x7, 0x1, 0x252c, 0xd04, 0x7, 0xfff, 0x6, 0x10, 0xfffffffffffffeff, 0x3, 0x82, 0x1, 0x9014, 0x11, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 2.767529952s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.403249595s ago: executing program 0 (id=5): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) r0 = geteuid() openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000800)={0x180, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="9d5da50c1c8e82c6e08e37b3a99027b98be505638a3bb33660933eefc18cf1a5859e2b769e910f22bf1eda9377b85306b89204c24762bbe2ffc1f4aaf6462fe8b2f0f87b8e2e5cc1f563d4a316978f5bed6bb657120ddcefe4770ba3a5f13f248dfdd55cb9880eee324e55b09cb84bdaf91e46f7eabe30d832ed229738c551870f6eb7b95dd481c462a23fca981637d96ff01f856eb4e7decb5a73d583e700d5a9cb54040f1c24317997c5d9032808251760ad", @nested={0x8, 0x10e, 0x0, 0x1, [@generic, @nested={0x4, 0x1e}]}, @typed={0x5, 0xfc, 0x0, 0x0, @str='\x00'}, @nested={0xaa, 0x166, 0x0, 0x1, [@nested={0x4, 0x167}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="ca9bd913eb7ac04c4530cd92d6db6072f558f8377f40870a7b2c59e7a81463781be157ff72c99a6f8fd32584a3ee56388184c06a200a5f64255b93d64e51e11fe73c8d0799c06d479ac4af62008b0d30a698fe0e973995b94babc7424a8fddf7f37128d296ac56598a26dfb344813c21cbe5c1e849838861ee0a98b17df7e6eee96b4e10c07f342c5ac3571801ffa58314c95110e519", @nested={0x4, 0x137}]}]}, 0x180}, {&(0x7f0000000b00)={0x1214, 0x1e, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0x14, 0x35, 0x0, 0x1, [@nested={0x4, 0x143}, @nested={0x4, 0x119}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}]}, @nested={0xc, 0xaf, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @fd}]}, @nested={0xc, 0x40, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="aa2fce08119227bdc07350edfe244fc4fc3ac0edb4f0cce0a72892659047e30206871e782278cf10f725eefa3822546e1d1a8ff6872735c140cabc72d790cca5d5cb912e540466c1583848fe10c50a29e3124c448b049b7cc03cdb67a69d9d73c459a2d0e82d43bab7c664150cb34f948f2e0245092c25b3fcb0acd64fce69e26fac8a00e7f9acd9d25b21d78387651375af2afbbe8bdb2fb7a32537c4288c33602b7e0afa74ab3b28f499c17cc53950b88111e85d36a53ffa71c9f1fd7c4643f7467103714c7a818d04855799afc7ddf0c62c0ede89dddc", @generic="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", @generic="1bb55113f98c9f00009ae04cdfa2c09c5392a0911070dd4f0db26f805e9230477ce4610fb626152d6bbfa6b8c6778d84535f50ee3751329f55f09c5b06221be9b8cc13415b38a760eb35a0e9abc529248f98f325ed912a403219fab85814c7e015a1d4192f479939a0edca2e2a7c00220d42384df0e347568b", @nested={0x7f, 0x167, 0x0, 0x1, [@typed={0x14, 0x160, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x4}, @nested={0x4, 0x147}, @generic="8efe64555670d3777c1f707ea30f5dae7c4414bc0a0ec4616a52a4d7e7ea5bb18a55d2080269f864885666a3fb6f571d234714502d941fed16f60bfeeee95b37df4fe789c46075911ec4cde45fc4237e5611b5a781f6fbfa4cd2e7", @generic="867d8bed"]}, @typed={0x4, 0x58}]}, 0x1214}, {&(0x7f00000026c0)={0x1168, 0x2a, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0x4, 0x67}, @typed={0x7, 0xe6, 0x0, 0x0, @str='^-\x00'}, @typed={0x8, 0x28, 0x0, 0x0, @uid=r0}, @generic="dee916d6a169caae759317e823c43dc76772657b0d7b3093313fcea98788b01f141667daeb7d5a703a16985ab3541b7e5e13a369de80b04b893155b81dad278edb3e5cb258867592d7f54db46f43d597edcee1cc60f794e2f4019ec2368bd000ae463e7cd8be234f1d88088c43793e4d34913aff45759dfc05a957e43ce88c3ea7b137baae84676a4a97e85ec44c2389c9b3a060e1888cb33c1bdd6ce4993439b5a49216be49d1ccc4726cf5784047c7f046ca2373f93d947d5aab6e45f1d08a4d37b34cd7dd23a18684dd21d91640ab3a92926b79ff3fd3bcc642d96197c851547ca45c1f16147908959fcfdcef8a28e9c822ce45792f256fd07cbe5ba9109708bc5c9e5622953653e38bf7e9346295a9324966c5d8bafd4ecb83b34429e658b01f3e78bc69b4d8f41d756e93324dda44a4ae5b00d90f84b16d3093120c68e25e74b578830dc74a842a1e20e7482928b1e98195004969bce962192582ffa43e29c200bbe92fe240816dbe510483e4f7678d7e8b4226d1551894bb6f03d8f2ad5f6e5def3a52f967cc83e86c3d97768ba2fc08a88d250087dbc83af8bb72c9689d85beaf2543f2df571402c7c89523890cbda6fb0f22d22832676ddc4d95638fdb41735e436110349f7c4895c97cd12071d7fb14c268fbe86e6be4a244586c5261e1138867744c11bb47b9475fdf23b5785ea7955a03f8a437729b13d72e5459530b9234b9fc37878111702c1dd6323f1b6abe476457275b65bb254d44651489e1516376499e00a5f1e31aa609f9044747bb2b5b01967048dce3ad8657fb7fc26a7258161a47f8d24e00487b117acda95a9bba20e7a4343f16d65b8c0bee6d0712c8c023fecbf8df50004b3ceabfc60bb08f3d0d371ac31480501746d9b5a3f90dce6869089c970c6bb0ef6fc31e5751c002d83b70eb9e8398223b0619652652caffaf602e03b8d87c287da93b900ab6367f521ea6b925e7e0f5d738539895d2d04b3a7fb93272efb13af4b1558be298211640b8d3e05e15ddf661857d56bb78d2a991a99829d2457f57c9a8ee68e136050241f510f427892d98b39ee09318d85a0a7565de2bd0bc17a36813541ff5449f1e2f062df690b5e22d80b51eee608076ceb7952488f8ade042dcfe6485114e1b73bddd758972bc6b34bc7b3dd14a59c3ec174b72160f79de7cb38976e123698a8d409d8f496c67a2cabea4242212d665b63a10437cdb8822a2ce45c16e8316395b2f85fbb9c846abd3b38f66d117772bef07f976ecf2b832f5bfaa78278fe79dbb296842182149799b44017b2c01b5c5757b5b49373623adb742224e438ed73b4b94afa998c0a13a954effa8e0cf3479363b3b4e89f9a7549f46dcbc378ffc5f4ed67da68b878a836caaf88a483941067e067b0bcd482a98c5639f1cf3e25e75da511fcf99b0ad0eba4f841ab8d07fbbc3b1673803d37e9d2f607b33041d259601068488b1540224847fb5a9b7afd085137c72673e2a2f312bc24932ef0ed25872e279fe1f716718c4e42156d1d7722f2ffc2551c29b2d03257b1c5b6187c2b76b81724f6abb46eb79908bb8ca3b77741dc1f999c7d1ed7913f7db7a57612d4124fd9f676ad8404347ef12abd5f765689dd17824fb5fba29c57abc886b185e33574b0990e735cf9cdf7c16a6f8e9fa59f6d244af3bea7049c216567c49d55b51809662007d774df909444e11bb4ba09ffb6e937ba17710a285d238be6fec7fc3b6447255129d7af76be51f915f309ccbc8b8df193d97f33b72dc6e17e199f944deba7667a950e14cd4cb7d044245ac5e243a802287712dd68b648b15256e07fe0de157205eebb4737567b314c9d6ed70d180bfb7fba0053c1936d5418c50d0e6c6cc5053c553082693b03fa0ee68e07be91b7ba3d165f1bee26cd3893807dc7471240d19784bc8c6b7c35caf7339e2cd2dd1609e1f27d2ea538de4aaad0fdb96a323eff02a7db31bf9c915cadbd7d8fbf8ba21276018b8831f465498bc2313d8257a470296b8cbefe641b88ed3c4dc4b4aa3bd209f60134b4f69f2f8ca6174879994628e1ca28d3b07663b788e203b118b90d9dfdc0699f0c74f05bc94d185fcce816a4d44e823e456143909d5e7176fcbb0bb5e47cacf70b6165e462146ce58f530fbf73b86108f7f74579a18975f6fc03a03ae9eccfe988ef619c0931a81f8f2d4e418e329acc2248b0d6ce459e73e394930e01a054053ba5123eba3c6363b464e274a3f852372e611c01e7ace564fec41d71d9befeccd8a32cd32824cdebacd09eb14537f74ab0e67878b5ab7c3a025d95d11ecf6e9f72633f760cc99d0e3d3b15a11f2214c576908379c597d94ee12158a2d1b5aafdfdd43fc05d8ad2f4ade71b84199c7307d68409d256f2f5342d54acb099dc4bcf16a039c1916967c48ccbcf227dbe64c8ddcda21bd3342d59249932d2a5f0a1ca032e3e192dabc615f0e2bf844b71c49e1e0dafadab3f93922ce47a566acff11e85e139da522341a6fbad440a2931667afeccdbd56301ca0c42a39e036e1abcfd2a5d6f1a16f73e8e006233a8125ebc607dddc08d40c33ba7c67864f8590f3cc31955c497c58641d9e82ab9e427d94fdac39dae3821b4091fef4256864e232c1964e5528a1b87313350963a8816e7c3bc098073710782fab03f54d2b73868055ff10997cadfa61b5d0827cfabcfca16a5e5fda47c037ba0aa164936955b1f85e658d3f49c3ec2a645aba636850812380428f1ce3ea6db929196659148aa78a8513ea3bcad52c4ca3c567e2644354658a73b4c7b31052f863a9192c5a124fadd09f1bc185cecc0ed879b5398358a71325156a47adbd6ab2b859193052585c709f69283472b7fec6d25f9c16493b1f78eef82a16a17169fe80641277f4e002a762b718dec587b7a4a43a588dc8fdd96ee7d739e14f7fc1aa857471df021787bfdb8d57e2989ca6913089fed2d4946db4d82246cf661f6470d3e84f3d0ae60d4d04b3c3972105c9ea99872fef1da4ebf2c1410ba6ef403917e3d36f0c12464e6c15cab7b2c8ca2af9279ed7d9660f9d3243798b1d056107e29fee1ab25c14c13df424af82c5eb876ef650f08bdda8dad56a45764d5dc4924379519c9281043f6ef00b755c4f66374c74f622516e68091b36937a71c7258defecc99fc5f3503a3d5db1a7ac2780aa23dc375b733e4d349b0439a8525edf4c61fdeb8f40679eb257f20359664d866a9afd96cbd272ec208ded08aac559e1e75209a8aa681fe7ffdb6959fbc630b807e6474c21059fd0c74e343f913a9cf9ca8d37eecd86b72807f50f19ba1b74293c220a939f6924ba33d0a0bc6752bd4c96e0b3ffd0a33881937f9c3635e47488547edf8dbd90df9efd74fcf18180ed512169aec4c10f25fe50bbc56717fc475eb422f8e9f7aa8d37321474f2a6bf87d4fee5768e24275ff7026964d9d6d49a5ec52481229ab8f4daa9beea2eff9205e02b196dea7659f0c0da9b6bb99a9eef1537a57882b44414ef807b2f8912ac6cc895e24f6a434ec5f5e95e1b462df71fc28743c06f469981f0f2a49cbc8bee6c5f3ab4c540cac5c8ef4592009179f2164a09b0bbb74ef891e9c1339a82203c51bb4094b363f0df5c1976a5a0d743749b852e8a18708a0eac744d8a4e1e20aed783b06b9060797c17ee7d97ee500117096808a207ed2750de5f3c2d0b7a6168d9dedcf47b24c4f2c2802bd339c8f0da09bc12693f50151adf57f98178c64dd755de87d4e2f105b270e246602b15cf4608a5f6c6a30751890cff6d3792ff49667c0809399669c9fac114f70ea2cbd43f5c2d662e6e7461f9bbcdabda8caba93df4fece990dd05fa59f0228ae72adc52097cfcbc4a09cd994fddbb39cdc77608adf282d1a79e78fc78b635c9545e63cdb7697c2bc802743aa5d62272dd8a664335826a52732da21a2ae422de6c94b3f50daf4cd3005b5cca86da3c4b0d877dfd6b6a88d8302574ad0fcd057b23e0fde6fa28907b48ad6b55e486635ac391a490b9a29751a54b7357e5fe6b2aa3bf6ca472e81a68ca2ecd4b8c94b8982d197a25ff655c9058d962e8fef90b72e3064e1aeef4479d98a46f636dee20d18dbe48e49bcf00f1b11e9b93501df3362da748d7d8f5dc4ce2104f6a48237317a9fbd506b40d2322db4718d09b114f47d504d1bbd90b82b13cd36d2edb5f5e598ca0a1d928bf30d1a2d3f18997a4f4d4811c28f1dc5497cad27ca603f449c7625a0f32eb372b938798861acfe934d977803f473a7e9934a250470921cfebd78d087eca6c3b0747c394ba54ea3a160cc8b07af7bfe921e4a2649cd93167d58011715c8de4531060d3a1a7c0fbc68483f306a7316ceebee4e0506b79c5ebf7d4c863c51bb4b38386c561ece257a5332c451f2671168ce216c35899a50b66f518a4e67c6e537a769356bcd6db19da70ede8a144a89b9a9000685bddc8fbf78b1c451b150a133692fd82c3c7a2653505588aef01f592acfea7b278c9cf865a94e698280fa23640040c8542f9b800e9200cf20cba0d459d44875391adcc26c68ee4100f8b1b5f49c6caca6389129956de0c91e61bae4274e9e5d4d6b4259f7f173d0c60e5f9ae5fc4d1d5f9f2c7dd1228afda23b703a37586880dc81daebb9fe00852a784d5aefb0f2cce18ecd6b5331f6cc1a9b5c2b03f116a2ebaeac9e0a714c3b5836b0ec6ffd60b757f7a8723218a60673c5dae87614fccbadd7f3100c981be41ca7cafdf5f71809c7ed957e27c21b12916d782d31e3faf4ed7d627882dd7b5f9df7569b6a8e73489e10ab3dfff99d38549aa617bf2b74993a2199151e406cbfb601f4204062378309dc07ac8b90d064026090c044bc70e46203f1d86fb98601c2c83a2bf3534404cfdfc11a574b5cf9a4784a4252e5a7cd6b4103534a5a1c82a0b76d00cbaf9d4d03d0486bb1fd201c7265d960a538154536ed2ec808787bf9a503ef04a0185dba6e3624785bd624d6ab3a9cdc2942c01c3f6496d0ff0953059c5f8bdb7a0a8b96344d0fe39dcdf27ed577940aeba7db06991861ba2049168e9624b9eeb7f6fe31d02ac6461859be944c1bc6ceb2b87a0ede2257e8b7cf8fcba766f38e5b304d76540f83f2a35a2f94e8101b71e689413e0d387fb17de53aec9a7e143cdda55f344093cc0619e3a907664c73552d88d999916ba3c2ba57fab44d1c78ec48c538afb3b631557e67809d292a17c20c2eb03d89c079666c08dc57a0541cdbf97c29c70330286c2ca17ed7f32adaa2f915bf7a8e6a307889a8d6ab606b5d82eabb1b139ad8f2a1fb5938a797eb4127a9cbb5220adf5f08e463c171cec2070cc9d4114281b01482195d0029e9c45c19d38a9385460b2e8921a93fa756a65d00dd6a0a154bdbe4a56300d873d03d34e4b0c27fc5b1110f7b4c8b0ff376872d89a75753823e2b41f628001235ef5109e03d56534b9c1384bd388c2a84a3abb5abcaffd6d9ad0b9f280a41cc320617a12be7c3b02af72efb3df0a4df590d356b0a22d95523ccdaa3d3e373b15488f7aa172df4484be2ec31d777661e023e1739e3528d4031903aded6db605e6d7a2805ef004590e687a7c73ded9a4c9c45f3270dba2538772b1f3ea128881b6ec519814dbff371164466a9ab49a7011ccf4ac545316c5d5d8b3aa72f7127e12a4507831dad5e54563434ee11e16718efa88b0b8189e14fbeff128ceb98b4c7c4d25e834bc93ab873457389833c9f5ec3f223f04f6c188f6364082686d57ea2e41fa1e8afe6843775564f2e2fff8082782b3e3dff944d108296fa", @nested={0xa8, 0x8b, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x138}, @generic="11980be322b5", @nested={0x4, 0x62}, @nested={0x4, 0x5}, @generic="a8334a3136fb6b1d04e5eb9ccc9c1f53e82395a56a2c05d46eb6601f4ebbe4f50b9a6a981d2e34ac60650e96fc6345b0abd0bb866274b6ecd9565ef31f28b1a9116cc38ef2ae6869429ff2cd0b06efc92efc62866cdb2e47bef3cbe2e50e080c658a6c7862054119c04e18b03a1fd97f7879f9f4740c"]}, @typed={0x8, 0x109, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="1ecd9480b02fab2902507c23d26a0198d24e49f02a8837271a636c65e7cb4a701a62f50261243bde76445f5cb2a7d3ff1e3a84ef0da76fcde37c94f829358c2057cdb149ad89d304b97b1c406649f8a067f122e93f9f0ad217a7c676a3deb4380cf587825e241ad6993cfe2be7ad05801d1a7d25bdc32e2ef199832223b86277c12dfb666bd75bbb9f16d3b0afea72a64a2af3"]}, 0x1168}, {&(0x7f0000003840)={0x260, 0x1c, 0x1, 0x70bd29, 0x25dfdbfc, "", [@generic="b7fcad96f183533c6a0a9edbe8e329adf5ed7fa226f2800e3c972aa705d7c2e4da56574dadf31173cb95b0d3a37806c4fe4a3541cd083de8", @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x9}, @generic="5e27d7469cb212f857c2891e5975c3f2d710d66f09d399d131bf57cc073c5ad292a127d0a66feeefc9", @generic="2defe09b16ec00b0d5c8ab25ec60474592c4082cac0632c0076ce36541c4f0855ff3371f2c2bb8235b64cc27eb816df7b72052e8bf2283fd56e5c60bf1ee37ce067249fbcacc9c2ee925d0eda44a8ff18a0ec79461bce567d0ef2d1bbec924fa81b9dafac839317adf9fb29e3a0689e4", @typed={0x8, 0xec, 0x0, 0x0, @u32}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @typed={0x4, 0x110}, @typed={0x91, 0xba, 0x0, 0x0, @binary="c2be1d2e90804d3cab42efe9aec40eadcd41cc58c1a04a3e3c9535f9aaab9a4f6405a02e62f5c879a004f7c6cfabd8f9301898ecb1578e11a81c0d8f40893ca5e0045db1534d55d74a5eb33f1d2efd9f7cb640c8643291a9d33497e34191f4879e29e8f388e8a6e9d40f2255199f0f447317ee1cecb3727b2ee72358208ece564891d4e3be19e0a366cb552e08"}, @typed={0x7, 0xbc, 0x0, 0x0, @str='#-\x00'}, @generic="09d46e37a843e08e45d778c1a369ca767a1b6f032fa061fbc91862a7df20f2abcb6664cdcdf2ad971f06fb96db6e7a077845324e5e3583f53cb26f83498ba9783b83ad6d45ca6a4509921b2307e3f6d98374dac9db231ab460b7b163273a83db193dfd75d5c42fe6a214783565675884917b131ddf2206255eacd29cba7f6bb2e9d64cb40c7164c11622365024d04fb5747ca8d8bcf374669d5c4c6d82a38a8d3f723a5511fa0ee2af2e26ef41f5dcfa522d9a2e3809966bdcf0b0f082d57838d60ab097"]}, 0x260}, {&(0x7f0000003ac0)={0xc0, 0x1d, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="0a1af33c33ddd37a77a1c538dc3a4f69f781505bf89b7adc7b47b7e35758ab96ac5ed13689a5a4ea5a375918a8396bc3d809e8fc8f7ea6c87536efa7cedf2e5a27986480e6e3ea929086f14d126347f17d04d3259b59610554d15c8b68bb47a35eba18921cc1374e7a0a73b38f16f73666b3f86e05a117d597af42f30ae17b767a8721bb3cb6130636a74fa4ce98404f7fbe49f65e17d50731f90de715b62dbd5150aa38903c3c447de1534f0f"]}, 0xc0}], 0x5, &(0x7f0000004400)=[@cred={{0x1c}}], 0x20, 0x20000}, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 908.872002ms ago: executing program 1 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, r0}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) (async) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 842.900364ms ago: executing program 1 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x608}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c094}, 0x20000c00) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000002500)={0x78, 0x0, r3, {0x80000001, 0x5, 0x0, {0x4, 0x7, 0x10, 0x6e17, 0x2, 0xdc, 0x8, 0xfffffeff, 0x10001, 0x4000, 0x4, 0x0, 0xffffffffffffffff, 0x5}}}, 0x78) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="080008000f0014000400466f"], 0xfdef) 679.326299ms ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000041c0)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000001, 0x5230860e, 0xfffd, 0xc, 0x1, 0x4056, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) wait4(r1, 0x0, 0xa, 0x0) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000880)=""/164, 0xa4) r2 = userfaultfd(0x801) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x0) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 679.036299ms ago: executing program 3 (id=9): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x8008af26, &(0x7f0000000040)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x9}}, 0x30) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getsockname$packet(r3, 0x0, &(0x7f0000000640)) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xc1449000) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x42) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x891d, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) (async) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x3, 0x2, 0x2c, @mcast1, @mcast1, 0x20, 0x7, 0x9, 0xffff}}) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x7, 0x4) sendmmsg$unix(r9, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0xc5752c159bc79345, 0x0, 0x8, 0xce, {{0x13, 0x4, 0x2, 0x29, 0x4c, 0x64, 0x0, 0x73, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x36, 0x1, [{0x0, 0xf, "d83868720043b137908b27adf5"}, {0x7, 0x9, "ee945707cd8688"}, {0x7, 0x10, "bb1c67d27242d29479e71f7d1845"}, {0x6, 0x8, "9ee75051ea11"}]}]}}}}}) 661.82527ms ago: executing program 3 (id=10): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f0000000380)='0\x00\xfa\xb8F\n9\xea\xbe\x92\x1eY\xbe\xd7\b\xa7\xc4\x19\'\xaaF\xc6< \x06\xccf\xa7\x10[1\xbc\xd5*\xb2\\\xa8\xb1p\x99X\xd0\x96\x87\xf9\x18\x94\xca-\xe9T\xf1\f4\x19\x9b\xda\xd0\x1fJ\xb4\xc8S\xadbo\x1b2\xfd\x1c6\x9c=\x89D\xafIhg\a\xae\x9cn{\x18\':\xf0\xbe\xa7\xedxmh@\\\x91\xc13\x17T\xc7\xe0\xe2\x02\x15ur\xae\xdeB<\x16\x02\xebg\xd9x\xb1L\x82\xdcI~r\x85\xd5\x1d\xb18\x88\x1d\x11\xb3-AR]53n\n\x81K\x7fA\xb2x\x94\xa9\xfe\xa11\x12\x18l\x7f\xd5k\xb5$\xc7I\xbc\xf3\\\xe8\x16I\x95A\x05\xcd\xdf\xd2\x02e\xab/N\x9fb\x19O\\\x19w\xebW\xfb\xef\xcf\xd0\xa9\x98:\x81\xbf\xae\xe5n\x0eo\xbe\f\xe0\x96\x047\x15!\xff\xf4\xe7\xe7\xa6\xc6&$\x0e3\xa1z1n\xa3\xf9\xa0A\x85_\x98f\xae\xd3]f\x97\x80?\xaa\x80|b\t\x02\xd1a\xf2\xdf>\xea\v\xa5\"\xfeI\xcd\x87\xea\xde\xd6?)\x1bt\xbe\x11\x89\xb5+.\xf5E\x87\xf4\xb1tH,|\xa4\xba\x81\xa1\x88\xac\x1b\xa8U\xa2\xc1\x89XO\xccK\xcd\xa2Xo-\xcb\x11KQy\x8c\xb9\x9f \xf1\xce\x06\xc1\x89\xfe\x0fP\xbb\x8ee\x11\xdaA\xd8\x1f&\xe0\xd2\xb4ksA\xae\"$\x03wU\xfc\x96\xd2n\xcc\xc6\xb4\x05\xe6s\xe7G\x98\x88\x80\x82\xd9\x9e\xf2B\xb4I\xe0L\a\b_\x15\x14\\a\xbf\xf3\x02\x03\xd3F\x19\x0eQ\x1d\xdd\xfa1\v\xdc\x87\x17\x85\xd0bUx\x87\x971]n\xb1\xcfjF\x10LmQE\xb8', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000340)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x11c}}, 0x800) setuid(0xee00) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) syz_usb_connect$uac2(0x1, 0xb3, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1045, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x5, 0xf0, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x6, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x2, 0x9, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3}, @as_header={0x10, 0x24, 0x1, 0x5, 0xa, 0x1, 0x2, 0xd5, 0x1, 0x28}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x579, 0x56bd, 0x0, "b29ee7107e53"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x80, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x100, 0x8, 0x10, "9e955a3b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x420, 0xe, 0x6, 0xd, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x8, 0xb0}}}}}}}}]}}, 0x0) 0s ago: executing program 3 (id=11): creat(&(0x7f0000000000)='./file0\x00', 0x1d8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) socket$nl_generic(0x10, 0x3, 0x10) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lseek(0xffffffffffffffff, 0x3, 0x4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 29.104437][ T36] audit: type=1400 audit(1781173921.180:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.107953][ T287] cgroup: Unknown subsys name 'net' [ 29.127129][ T36] audit: type=1400 audit(1781173921.180:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.154546][ T36] audit: type=1400 audit(1781173921.210:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.154951][ T287] cgroup: Unknown subsys name 'devices' [ 29.262689][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.268323][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.364022][ T36] audit: type=1400 audit(1781173921.440:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.387241][ T36] audit: type=1400 audit(1781173921.440:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.412070][ T36] audit: type=1400 audit(1781173921.440:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.443457][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.452396][ T36] audit: type=1400 audit(1781173921.530:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.477945][ T36] audit: type=1400 audit(1781173921.530:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.500851][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.503634][ T36] audit: type=1400 audit(1781173921.560:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.537896][ T36] audit: type=1400 audit(1781173921.560:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.394067][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.401199][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.408290][ T294] bridge_slave_0: entered allmulticast mode [ 30.414856][ T294] bridge_slave_0: entered promiscuous mode [ 30.432357][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.439435][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.446722][ T294] bridge_slave_1: entered allmulticast mode [ 30.453132][ T294] bridge_slave_1: entered promiscuous mode [ 30.470997][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.478054][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.485165][ T296] bridge_slave_0: entered allmulticast mode [ 30.491417][ T296] bridge_slave_0: entered promiscuous mode [ 30.502489][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.509547][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.516820][ T296] bridge_slave_1: entered allmulticast mode [ 30.523246][ T296] bridge_slave_1: entered promiscuous mode [ 30.574626][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.581729][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.588804][ T295] bridge_slave_0: entered allmulticast mode [ 30.595163][ T295] bridge_slave_0: entered promiscuous mode [ 30.605148][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.612636][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.619730][ T295] bridge_slave_1: entered allmulticast mode [ 30.626099][ T295] bridge_slave_1: entered promiscuous mode [ 30.653037][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.660115][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.667567][ T297] bridge_slave_0: entered allmulticast mode [ 30.674067][ T297] bridge_slave_0: entered promiscuous mode [ 30.680654][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.687707][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.694821][ T297] bridge_slave_1: entered allmulticast mode [ 30.701111][ T297] bridge_slave_1: entered promiscuous mode [ 30.842378][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.849497][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856863][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.863941][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.872580][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.879634][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.886977][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.894074][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.906355][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913467][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.920782][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.927832][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.938957][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.946046][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.953378][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.960443][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.015857][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.023362][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.030927][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.038122][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.045940][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.053228][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.060942][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.068132][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.078852][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.085929][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.102699][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.109760][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.117533][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.124578][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.132401][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.139470][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.159601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.166667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.184147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.191242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.199365][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206454][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.229173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.236240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.247995][ T296] veth0_vlan: entered promiscuous mode [ 31.275907][ T296] veth1_macvtap: entered promiscuous mode [ 31.287659][ T294] veth0_vlan: entered promiscuous mode [ 31.319191][ T297] veth0_vlan: entered promiscuous mode [ 31.337399][ T294] veth1_macvtap: entered promiscuous mode [ 31.345451][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.366652][ T297] veth1_macvtap: entered promiscuous mode [ 31.374094][ T295] veth0_vlan: entered promiscuous mode [ 31.406097][ T295] veth1_macvtap: entered promiscuous mode [ 31.455171][ T319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.660276][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.720271][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.730352][ T316] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 31.740239][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.810472][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 31.816894][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 31.825210][ T31] usb 3-1: config 0 has no interface number 0 [ 31.831835][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 31.840241][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.849310][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.857765][ T31] usb 3-1: Product: syz [ 31.862700][ T31] usb 3-1: Manufacturer: syz [ 31.867382][ T31] usb 3-1: SerialNumber: syz [ 31.873428][ T31] usb 3-1: config 0 descriptor?? [ 31.879285][ T31] smsc75xx v1.0.0 [ 31.880354][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 31.884907][ T316] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.892333][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.899901][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 31.910517][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.914740][ T316] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 31.925228][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 31.936343][ T316] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.948733][ T10] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 31.959961][ T316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.972791][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 31.979441][ T316] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 31.987917][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 31.994399][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.004186][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.015364][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.024494][ T10] usb 1-1: Product: syz [ 32.034765][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.034788][ T10] usb 1-1: Manufacturer: syz [ 32.034806][ T10] usb 1-1: SerialNumber: syz [ 32.044654][ T45] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.067367][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.074423][ T316] usb 4-1: config 0 descriptor?? [ 32.079514][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 32.089017][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.091462][ T322] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 32.103521][ T45] usb 2-1: config 0 descriptor?? [ 32.126170][ T326] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.127126][ T328] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.144478][ T326] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 32.153415][ T328] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 32.178322][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 32.189297][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 32.199018][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 32.209439][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 32.264110][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.276688][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 32.287764][ T10] usb 1-1: USB disconnect, device number 2 [ 32.287788][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.514464][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.524295][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.531301][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.539405][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.547638][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.554584][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.561515][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.569653][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.577927][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.584837][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.591795][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.599902][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.608043][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.615055][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.621986][ T316] logitech-djreceiver 0003:046D:C52F.0001: unknown main item tag 0x0 [ 32.630110][ T316] logitech-djreceiver 0003:046D:C52F.0001: item 0 4 0 11 parsing failed [ 32.638570][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.645514][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.652531][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.659436][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.666622][ T316] logitech-djreceiver 0003:046D:C52F.0001: logi_dj_probe: parse failed [ 32.674921][ T316] logitech-djreceiver 0003:046D:C52F.0001: probe with driver logitech-djreceiver failed with error -22 [ 32.686061][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.692975][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.699838][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.708483][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.715440][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.722424][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.729401][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.736451][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.742753][ T324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.743467][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.754332][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.758599][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.782616][ T324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.790471][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.797451][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.805239][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.812765][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.819726][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.826696][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.834229][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.854251][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.861258][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.868221][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.875281][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.882251][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.889216][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.903290][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.910247][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.917228][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.924351][ T45] wacom 0003:056A:00B2.0002: unknown main item tag 0x0 [ 32.931683][ T45] wacom 0003:056A:00B2.0002: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 32.942106][ T45] wacom 0003:056A:00B2.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.1-1/input0 [ 32.954188][ T45] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B2.0002/input/input4 [ 32.969932][ T45] usb 2-1: USB disconnect, device number 2 [ 33.001671][ T10] usb 4-1: USB disconnect, device number 2 [ 33.011636][ T335] fido_id[335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 33.090271][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.241485][ T331] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.250668][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.259406][ T331] usb 1-1: config 0 descriptor?? [ 33.475253][ T340] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7'. [ 33.539181][ T343] capability: warning: `syz.1.8' uses 32-bit capabilities (legacy support in use) [ 33.671274][ T331] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 33.686443][ T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 33.758502][ T331] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 34.176452][ T331] usb 1-1: USB disconnect, device number 3 [ 34.297585][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 34.297604][ T36] audit: type=1400 audit(1781173926.370:130): avc: denied { execute } for pid=357 comm="syz.3.11" name="file0" dev="incremental-fs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.327869][ T297] ------------[ cut here ]------------ [ 34.333271][ T36] audit: type=1400 audit(1781173926.370:131): avc: denied { read open } for pid=357 comm="syz.3.11" path="/3/bus/file0" dev="incremental-fs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.333508][ T297] WARNING: CPU: 1 PID: 297 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 34.358437][ T36] audit: type=1400 audit(1781173926.400:132): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.364958][ T297] Modules linked in: [ 34.389029][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Not tainted syzkaller #0 d17067fa43c370e744802cb602e9182a4a42e9ef [ 34.400739][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.410937][ T297] RIP: 0010:drop_nlink+0xce/0x110 [ 34.416051][ T297] Code: 04 00 00 be 08 00 00 00 e8 7f 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 75 b8 03 cc e8 e2 68 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 34.435726][ T297] RSP: 0018:ffffc9000b67fc60 EFLAGS: 00010293 [ 34.441911][ T297] RAX: ffffffff81f25f4e RBX: ffff888114044f50 RCX: ffff888102bdcc00 [ 34.449929][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.458052][ T297] RBP: ffffc9000b67fc88 R08: 0000000000000003 R09: 0000000000000004 [ 34.466101][ T297] R10: dffffc0000000000 R11: fffff520016cff7c R12: dffffc0000000000 [ 34.474135][ T297] R13: 1ffff110228089f3 R14: ffff888114044f98 R15: 0000000000000000 [ 34.482182][ T297] FS: 000055556cf0b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.491256][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.497884][ T297] CR2: 000055556cf2e958 CR3: 000000012fb82000 CR4: 00000000003526b0 [ 34.505944][ T297] Call Trace: [ 34.507536][ T36] audit: type=1400 audit(1781173926.580:133): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.509263][ T297] Stopping sshd: [ 34.509275][ T297] shmem_rmdir+0x5f/0x90 [ 34.537673][ T297] vfs_rmdir+0x3e3/0x560 [ 34.541992][ T297] incfs_kill_sb+0x109/0x230 [ 34.546629][ T297] deactivate_locked_super+0xd5/0x2a0 [ 34.552086][ T297] deactivate_super+0xb8/0xe0 [ 34.556813][ T297] cleanup_mnt+0x406/0x4a0 [ 34.561317][ T297] __cleanup_mnt+0x1d/0x40 [ 34.565785][ T297] task_work_run+0x1e5/0x260 [ 34.570500][ T297] ? __cfi_task_work_run+0x10/0x10 [ 34.575660][ T297] ? __x64_sys_umount+0x12e/0x180 [ 34.580745][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.586156][ T297] ? __kasan_check_read+0x15/0x20 stopped /usr/sbi[ 34.591504][ T297] resume_user_mode_work+0x35/0x50 n/sshd (pid 202)[ 34.598016][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 34.604792][ T297] do_syscall_64+0x63/0xf0 [ 34.609287][ T297] ? clear_bhb_loop+0x50/0xa0 [ 34.614041][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.619982][ T297] RIP: 0033:0x7f6524f9e097 [ 34.624499][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 OK[ 34.644328][ T297] RSP: 002b:00007ffe26780cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.652881][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6524f9e097 [ 34.661065][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe26780d70 [ 34.669128][ T297] RBP: 00007ffe26780d70 R08: 00007ffe26781d70 R09: 00000000ffffffff [ 34.677185][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe26781e00 [ 34.685224][ T297] R13: 00007f65250321ca R14: 00000000000085ca R15: 00007ffe26781e40 [ 34.693365][ T297] [ 34.696416][ T297] ---[ end trace 0000000000000000 ]--- [ 34.709763][ T316] usb 3-1: USB disconnect, device number 2 [ 34.715842][ T297] ================================================================== [ 34.723966][ T297] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 34.730248][ T297] Write of size 4 at addr 0000000000000168 by task syz-executor/297 [ 34.738323][ T297] [ 34.740692][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Tainted: G W syzkaller #0 d17067fa43c370e744802cb602e9182a4a42e9ef [ 34.740736][ T297] Tainted: [W]=WARN [ 34.740745][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.740759][ T297] Call Trace: [ 34.740767][ T297] [ 34.740775][ T297] __dump_stack+0x21/0x30 [ 34.740813][ T297] dump_stack_lvl+0x140/0x1c0 [ 34.740846][ T297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.740881][ T297] print_report+0x3d/0x70 [ 34.740912][ T297] kasan_report+0x162/0x1a0 [ 34.740942][ T297] ? ihold+0x24/0x70 [ 34.740969][ T297] ? _raw_spin_unlock+0x45/0x60 [ 34.740999][ T297] ? ihold+0x24/0x70 [ 34.741026][ T297] kasan_check_range+0x25a/0x2b0 [ 34.741056][ T297] __kasan_check_write+0x18/0x20 [ 34.741079][ T297] ihold+0x24/0x70 [ 34.741103][ T297] vfs_rmdir+0x26a/0x560 [ 34.741134][ T297] incfs_kill_sb+0x109/0x230 [ 34.741156][ T297] deactivate_locked_super+0xd5/0x2a0 [ 34.741188][ T297] deactivate_super+0xb8/0xe0 [ 34.741217][ T297] cleanup_mnt+0x406/0x4a0 [ 34.741245][ T297] __cleanup_mnt+0x1d/0x40 [ 34.741270][ T297] task_work_run+0x1e5/0x260 [ 34.741299][ T297] ? __cfi_task_work_run+0x10/0x10 [ 34.741328][ T297] ? __x64_sys_umount+0x12e/0x180 [ 34.741348][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 34.741369][ T297] ? __kasan_check_read+0x15/0x20 [ 34.741392][ T297] resume_user_mode_work+0x35/0x50 [ 34.741414][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 34.741442][ T297] do_syscall_64+0x63/0xf0 [ 34.741473][ T297] ? clear_bhb_loop+0x50/0xa0 [ 34.741495][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.741530][ T297] RIP: 0033:0x7f6524f9e097 [ 34.741550][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 34.741568][ T297] RSP: 002b:00007ffe26780cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.741592][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6524f9e097 [ 34.741607][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe26780d70 [ 34.741621][ T297] RBP: 00007ffe26780d70 R08: 00007ffe26781d70 R09: 00000000ffffffff [ 34.741637][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe26781e00 [ 34.741652][ T297] R13: 00007f65250321ca R14: 00000000000085ca R15: 00007ffe26781e40 [ 34.741670][ T297] [ 34.741679][ T297] ================================================================== Stopping crond: [ 34.987897][ T297] Disabling lock debugging due to kernel taint stopped /usr/sbi[ 34.995469][ T297] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 35.003125][ T36] audit: type=1400 audit(1781173927.080:134): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 35.003631][ T297] #PF: supervisor write access in kernel mode [ 35.003646][ T297] #PF: error_code(0x0002) - not-present page [ 35.037425][ T297] PGD 800000010efab067 P4D 800000010efab067 PUD 0 [ 35.043985][ T297] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 35.050095][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Tainted: G B W syzkaller #0 d17067fa43c370e744802cb602e9182a4a42e9ef [ 35.063262][ T297] Tainted: [B]=BAD_PAGE, [W]=WARN [ 35.068321][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.076131][ T36] audit: type=1400 audit(1781173927.080:135): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.078415][ T297] RIP: 0010:ihold+0x2a/0x70 [ 35.104227][ T297] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 35.106499][ T36] audit: type=1400 audit(1781173927.080:136): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.123870][ T297] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 35.123895][ T297] RAX: ffff888102bdcc00 RBX: 0000000000000000 RCX: ffff888102bdcc00 [ 35.123912][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.146554][ T36] audit: type=1400 audit(1781173927.080:137): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.151174][ T297] RBP: ffffc9000b67fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 35.151194][ T297] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888114044f5c [ 35.151210][ T297] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 35.151224][ T297] FS: 000055556cf0b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.160128][ T36] audit: type=1400 audit(1781173927.080:138): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.167184][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.167203][ T297] CR2: 0000000000000168 CR3: 000000012fb82000 CR4: 00000000003526b0 [ 35.167222][ T297] Call Trace: [ 35.167229][ T297] [ 35.188750][ T36] audit: type=1400 audit(1781173927.080:139): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.195693][ T297] vfs_rmdir+0x26a/0x560 [ 35.195732][ T297] incfs_kill_sb+0x109/0x230 [ 35.293639][ T297] deactivate_locked_super+0xd5/0x2a0 [ 35.299074][ T297] deactivate_super+0xb8/0xe0 [ 35.303821][ T297] cleanup_mnt+0x406/0x4a0 [ 35.308288][ T297] __cleanup_mnt+0x1d/0x40 [ 35.312763][ T297] task_work_run+0x1e5/0x260 [ 35.317403][ T297] ? __cfi_task_work_run+0x10/0x10 [ 35.322568][ T297] ? __x64_sys_umount+0x12e/0x180 [ 35.327723][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.333143][ T297] ? __kasan_check_read+0x15/0x20 [ 35.338217][ T297] resume_user_mode_work+0x35/0x50 [ 35.343373][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 35.348881][ T297] do_syscall_64+0x63/0xf0 [ 35.353345][ T297] ? clear_bhb_loop+0x50/0xa0 [ 35.358068][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.364029][ T297] RIP: 0033:0x7f6524f9e097 [ 35.368498][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.388161][ T297] RSP: 002b:00007ffe26780cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.396629][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6524f9e097 [ 35.404659][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe26780d70 [ 35.412685][ T297] RBP: 00007ffe26780d70 R08: 00007ffe26781d70 R09: 00000000ffffffff [ 35.420708][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe26781e00 [ 35.428730][ T297] R13: 00007f65250321ca R14: 00000000000085ca R15: 00007ffe26781e40 [ 35.436753][ T297] [ 35.439813][ T297] Modules linked in: [ 35.443763][ T297] CR2: 0000000000000168 [ 35.447950][ T297] ---[ end trace 0000000000000000 ]--- [ 35.453446][ T297] RIP: 0010:ihold+0x2a/0x70 [ 35.457996][ T297] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 5f 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 3c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 35.477670][ T297] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 35.483783][ T297] RAX: ffff888102bdcc00 RBX: 0000000000000000 RCX: ffff888102bdcc00 [ 35.491802][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.499823][ T297] RBP: ffffc9000b67fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 35.507846][ T297] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff888114044f5c [ 35.515871][ T297] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 35.523889][ T297] FS: 000055556cf0b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.532886][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.539519][ T297] CR2: 0000000000000168 CR3: 000000012fb82000 CR4: 00000000003526b0 [ 35.547541][ T297] Kernel panic - not syncing: Fatal exception [ 35.554228][ T297] Kernel Offset: disabled [ 35.558574][ T297] Rebooting in 86400 seconds..