last executing test programs: 5m21.536791764s ago: executing program 0 (id=82): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="08000500e0025ab2"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x50, 0x1, {0x22, 0x788}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xe9, 0x8}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 5m20.305311032s ago: executing program 0 (id=91): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x20020054) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0xffc99a3b00000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) r0 = eventfd(0x80) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x708955a9, 0x9}) 5m20.212478115s ago: executing program 0 (id=92): syz_usb_connect$uac2(0x0, 0x8f, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x140c}}, {0xad, &(0x7f0000000cc0)=@string={0xad, 0x3, "cea5817bb890004b3dd580d199b3eb24e2c09d663a2f549a6fe616897ebe8fe7eee5f045614b22ed20c83e5a504583fd730a30672003d1f886f7161e65b8e6d720c9d1d128a33d6eaaf6a25be1761f3816616b292129dae2d1b4019ab08829c4092b1827010958725400c2db3cfd62daaae496029bb75188248e3b7746564feab5bb1aa228dda03a9065efdd2a55c6a491a67611859d948a2a82384fff851039562a5ce04590d9e2978932"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x408}}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x1, 0xfffc}, 0xfffffffc, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xd, 0x800, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000500)) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="200e0200010002cf7b068a5c8fec3946313143fb953b8582483c16550e8b9914346792db178a53d135396a2b4bb6d349b074de97f3e101aa970191fad61525b5273c59f2c4ea4635e05dc15858aa1abba04cd5fd6ba0254a3418c8f87f85f68c2bf9e33541"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="00e002000000f610"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5m17.154865752s ago: executing program 0 (id=111): execve(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 5m17.122058833s ago: executing program 0 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x45, 0x1, 0x1, 0x38b}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r3], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="0f18de48b80b5c0000000000000f21d80f21f835400000400f23f866baf80cb860d7e5876766bafc0ced66ba2100b009ee42831bfe66baf80cb8b80c4f8fef66bafc0c66ed65460f78caf340d2757dc48135e81666baf80cb8acc12f8cef0f5ca766b800400f98cc", 0x68}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) syz_io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x45, 0x1, 0x1, 0x38b}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32=r3], 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) (async) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="0f18de48b80b5c0000000000000f21d80f21f835400000400f23f866baf80cb860d7e5876766bafc0ced66ba2100b009ee42831bfe66baf80cb8b80c4f8fef66bafc0c66ed65460f78caf340d2757dc48135e81666baf80cb8acc12f8cef0f5ca766b800400f98cc", 0x68}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 5m17.024752556s ago: executing program 0 (id=113): r0 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0x342, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x364, 0x800, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x0, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x274}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 5m17.016492737s ago: executing program 32 (id=113): r0 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0x342, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x364, 0x800, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x0, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x274}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 5m10.984518998s ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee000000000000000002000000000a81f2a8", 0x58}], 0x1) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x100015) waitid(0x0, r1, 0x0, 0x100000c, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount$fuse(0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002100), 0x36, &(0x7f0000000180)=ANY=[]) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x200002, 0x4c, 0x10}, 0x18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/50, 0x32, 0x1, &(0x7f0000000140)=""/162, 0xa2}, &(0x7f0000000240)=0x40) r4 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') execveat$binfmt(r3, r4, &(0x7f00000015c0)={[&(0x7f0000001440)='\x00', &(0x7f0000001480)='/dev/fuse\x00', &(0x7f00000014c0)='\x00', &(0x7f0000001500)='+[\x00', &(0x7f0000001540)='/dev/fuse\x00', &(0x7f0000001580)='fuse\x00']}, &(0x7f0000001700)={[&(0x7f0000001600)='}:*\x00', &(0x7f0000001640)=',\x00', &(0x7f0000001680)=')i[\x00', &(0x7f00000016c0)='fuse\x00']}, 0x1000) 5m7.868324277s ago: executing program 2 (id=183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) socket$tipc(0x1e, 0x5, 0x0) (async) 5m7.652746143s ago: executing program 2 (id=186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 5m7.059149292s ago: executing program 2 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x3a, &(0x7f0000000000)={0x20, 0x6c, 0xfffffffe}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0xff) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_io_uring_setup(0x7a01, &(0x7f0000000040)={0x0, 0x78d8, 0x1000, 0x3, 0xb3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x5069, 0x4, 0x10, r5, 0x20000000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000240)=[{0x61, 0xf9}, {0x6, 0x0, 0x0, 0x5}]}) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r7, &(0x7f0000000000), 0x4001) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000180)) r8 = dup2(r0, r0) socket(0x1a, 0x800, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x80800, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_none}, {@access_any}, {@version_L}], [{@fowner_lt={'fowner<', r9}}]}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000440)=[@wr_crn={0x67, 0x20, {0x3, 0x7fffffffffffffff}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m6.778862461s ago: executing program 2 (id=198): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_cancel(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) socket(0x11, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) 5m6.636588296s ago: executing program 2 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f0616", 0xb1}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851", 0x72}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77", 0x2c}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13e", 0x2f}], 0x4}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000002740)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=0']) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x0, 0x1000000000000008, 0x2, 0x1, 0x801, 0x5479, 0x4, 0x200000000007, 0x5, 0x9, 0x7, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x4a510}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020392ad43f400001020301090286000301010008080b0001010c200609040000000101200009240107000426000411240905060300020003000200000002000c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 5m6.636276866s ago: executing program 33 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f0616", 0xb1}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851", 0x72}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77", 0x2c}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13e", 0x2f}], 0x4}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000002740)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=0']) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x0, 0x1000000000000008, 0x2, 0x1, 0x801, 0x5479, 0x4, 0x200000000007, 0x5, 0x9, 0x7, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x4a510}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0xa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020392ad43f400001020301090286000301010008080b0001010c200609040000000101200009240107000426000411240905060300020003000200000002000c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4m6.669748505s ago: executing program 3 (id=614): pivot_root(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcffffff0000000001000000000000000c41000000000014"], 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x50) 4m6.632545237s ago: executing program 3 (id=615): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, 0x0, 0x0, 0x20000008, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0x342, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x364, 0x800, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x0, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x274}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x20000, {0x6}, 0x0, r7, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 4m5.945509378s ago: executing program 3 (id=617): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x8fcc, 0x3fe, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x5f4, 0xfffffffd], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x0, 0x3, 0xfffffffc, 0x4, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800) 4m5.8942065s ago: executing program 3 (id=618): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa2341, 0x167) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011080a030a2403512614613ae110203010902120001080090050904000000ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) mknod(0x0, 0x8001420, 0xfffffffe) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x80000500) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='O', 0x1}], 0x1, 0x7) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) syz_clone(0x40204400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa2341, 0x167) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011080a030a2403512614613ae110203010902120001080090050904000000ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) mknod(0x0, 0x8001420, 0xfffffffe) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async) inotify_init() (async) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x80000500) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='O', 0x1}], 0x1, 0x7) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) (async) syz_clone(0x40204400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 4m5.151488183s ago: executing program 3 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/172, 0xac}, {&(0x7f0000001bc0)=""/185, 0xb9}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/91, 0x5b}, {&(0x7f0000002d00)=""/186, 0xba}, {&(0x7f0000002e00)=""/202, 0xca}], 0x7}, 0xfffffffe}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005800), 0x0, 0x40, 0x0) 4m4.94779715s ago: executing program 3 (id=621): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}], 0x1}, 0xe}], 0x1, 0x40000100, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') writev(r2, &(0x7f0000000900)=[{&(0x7f00000005c0)="6c13a261798f0a895ae628ab60d6432d2889ec5c29ec9391ee3e458cb63697a9c495e329046397a17071719dc86ff67257a63553bad69d40f8905c54f55817ab0b25e8c7d7bc4cb359f57a7e258ae871d01bb3180e806d300f1df869f9a1e2cc983c29db6bda8eece68fbed9d6b0b106c2ab8c24e17560f419b70c3aaa755bdaf76a3cbeefddb63ae003c1918b52591eeb0ff8d7f042d55b4f8e8cc1097fbdc5", 0x103}, {&(0x7f0000000680)="955530f795037469d4e47bbf98c03faeb92dcd91aafc5f432c1e753380189fc7d9075ff448ec4ac33971282974853e4b1280a7e400972cd4e02fa62c570fa58570bca61e57e5243b6dd73c9ff722b31b611ae08b834541f65799576f84468e369ff709569bfc77909a7e8cec2fc0cada7da00636b8a9b384cbabdad02ff366b10c262ed5695051f17ac2759da120bb5c3d2ee6c1e99f95", 0x97}, {&(0x7f0000000880)="73a5bc57967dc3db3fb1777ad27f491f0d4944127cef4ea7b0f7c97958870aaece0beb5782cd6e26bcaef4bfa5d8d3e5d4cf681e8c699562d18d299e6fd1f24fde7df8e0950fcdde785fedb579", 0x4d}], 0x3) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0xc2000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000040)=[0xb, 0x6]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1a2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe01002}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cb53d036a3e58f773c7070000004ba2b4071b034ee220ad6b94f7c3484a65deabe2a96e812c173a8a68503894b32115ea7b95dbf415381daea9a9b00008dab1791482ed8f", @ANYRES16=r1, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x400000003, 0x1200000000}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001ec13500000000000000000007000000050000008907a36e"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4m4.923985531s ago: executing program 34 (id=621): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}], 0x1}, 0xe}], 0x1, 0x40000100, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') writev(r2, &(0x7f0000000900)=[{&(0x7f00000005c0)="6c13a261798f0a895ae628ab60d6432d2889ec5c29ec9391ee3e458cb63697a9c495e329046397a17071719dc86ff67257a63553bad69d40f8905c54f55817ab0b25e8c7d7bc4cb359f57a7e258ae871d01bb3180e806d300f1df869f9a1e2cc983c29db6bda8eece68fbed9d6b0b106c2ab8c24e17560f419b70c3aaa755bdaf76a3cbeefddb63ae003c1918b52591eeb0ff8d7f042d55b4f8e8cc1097fbdc5", 0x103}, {&(0x7f0000000680)="955530f795037469d4e47bbf98c03faeb92dcd91aafc5f432c1e753380189fc7d9075ff448ec4ac33971282974853e4b1280a7e400972cd4e02fa62c570fa58570bca61e57e5243b6dd73c9ff722b31b611ae08b834541f65799576f84468e369ff709569bfc77909a7e8cec2fc0cada7da00636b8a9b384cbabdad02ff366b10c262ed5695051f17ac2759da120bb5c3d2ee6c1e99f95", 0x97}, {&(0x7f0000000880)="73a5bc57967dc3db3fb1777ad27f491f0d4944127cef4ea7b0f7c97958870aaece0beb5782cd6e26bcaef4bfa5d8d3e5d4cf681e8c699562d18d299e6fd1f24fde7df8e0950fcdde785fedb579", 0x4d}], 0x3) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0xc2000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000040)=[0xb, 0x6]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1a2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe01002}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cb53d036a3e58f773c7070000004ba2b4071b034ee220ad6b94f7c3484a65deabe2a96e812c173a8a68503894b32115ea7b95dbf415381daea9a9b00008dab1791482ed8f", @ANYRES16=r1, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x400000003, 0x1200000000}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001ec13500000000000000000007000000050000008907a36e"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2m32.14256062s ago: executing program 6 (id=1357): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='mand\x00', 0x0, 0x0) fsmount(r3, 0x0, 0x0) setns(r2, 0x24020000) setreuid(0xee01, 0xee01) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@getsa={0xfffffffffffffcdd, 0x12, 0x20, 0x70bd2b, 0x25dfdbff, {@in=@local, 0x4d6, 0xa, 0x33}, [@policy_type={0x0, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0xff}, @mark={0xc, 0x15, {0x350759, 0xdac}}, @tfcpad={0x8, 0x16, 0x80000000}, @etimer_thresh={0x8, 0xc, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x1) unshare(0x44040200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000100)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) writev(r0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 2m32.080473232s ago: executing program 6 (id=1358): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d42, 0x801000009, 0x8001, 0x2, 0xf10a, 0x800003, 0x4002004c4, 0xa, 0x5, 0x0, 0x40000000800005, 0x2000000000000000, 0x401, 0x0, 0x9, 0x800000b], 0x2000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) (async) ptrace$cont(0x21, r0, 0x80000001, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) (async) ptrace$cont(0x20, r0, 0x9, 0x6) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x4d}, 0x45) (async) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 2m31.20719472s ago: executing program 6 (id=1362): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0xf, 0x4, "9bfe6e15"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x20, 0x16, 0x4, "7d380ca5"}, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e26, 0x1000, @empty}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000240)=0x3, 0x4) pread64(r4, &(0x7f0000000040)=""/258, 0x102, 0x5) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0xfeff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r7 = timerfd_create(0x8, 0x800) ioctl$int_in(r7, 0x5421, &(0x7f0000000200)=0xf1) 2m29.011920749s ago: executing program 6 (id=1388): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r1, &(0x7f0000000100)='./bus\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x200808, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8, &(0x7f0000000040)={[0x1ff]}, 0x8) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 2m28.712700259s ago: executing program 6 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/172, 0xac}, {&(0x7f0000001bc0)=""/185, 0xb9}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000000)=""/105, 0x69}, {&(0x7f0000002d00)=""/186, 0xba}, {&(0x7f0000002e00)=""/202, 0xca}], 0x7}, 0xfffffffe}], 0x1, 0x0, 0x0) 2m28.404776729s ago: executing program 6 (id=1395): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x1, 0x0, 0x0, "f01881a1debdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000100)=0x400, 0x4) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getrandom(&(0x7f0000000000)=""/23, 0x17, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x6, 0x9000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) getdents(r6, &(0x7f0000000f00)=""/87, 0x57) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x101c) 2m28.404470159s ago: executing program 35 (id=1395): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x1, 0x0, 0x0, "f01881a1debdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000100)=0x400, 0x4) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getrandom(&(0x7f0000000000)=""/23, 0x17, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x6, 0x9000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) getdents(r6, &(0x7f0000000f00)=""/87, 0x57) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x101c) 3.980856264s ago: executing program 4 (id=2596): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xb, @none, 0x4, 0x1}, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x8000000010, 0x3, 0x0) write(r1, &(0x7f0000000280)="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", 0xfc) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) 3.967806304s ago: executing program 4 (id=2597): r0 = socket(0x5, 0x2, 0x2000000) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd}, 0x1c) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xd, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) 3.884841077s ago: executing program 4 (id=2599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f687372000000004c000380ffff"], 0x78}, 0x1, 0x0, 0x0, 0x818}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c"], 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r1, 0x0, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xb375) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x9, r7, 0x80000000, 0x3) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x131}) read$FUSE(r4, &(0x7f0000004340)={0x2020}, 0xb375) unlink(&(0x7f0000000080)='./file0/file1\x00') 3.418224202s ago: executing program 5 (id=2608): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc8, &(0x7f0000000240)={[{0xc3, 0x4e00, "ca83e41df517c5404ce919b80228c49bc019bfa98871ec749965ff0a36ceb24920a622847f197cadd15910974573a92020148c9eb778b888a04d32e5a9b7ce06aae0aebfb588e47dea64687bbafb0a791dc5666ab1397f13352de2f1fd8ac28025326b11d056bb310b2d61fea1f1201af2f627deeceb550a74cbd92f33a0c991b9de795e6f148dbcd6a0c71cb7665e9a0ce6a4a46d9554ae6dc4e049c88d3ef2ef9b676e8de33e979ca69ce0023dc4b0752cb868506fe82eaa0e2f974a626acce3bb95"}]}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32) r4 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x1000) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x4, 0x62}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x94) ptrace(0x4206, r4) (async, rerun: 32) tkill(r4, 0x15) (rerun: 32) ptrace(0x4208, r4) (async) syz_usb_ep_write(r1, 0x82, 0x5, &(0x7f0000002340)='hello') 3.286077486s ago: executing program 5 (id=2609): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b99}, 0x4c, [0xfffffff8, 0x8, 0x5, 0x9, 0x9, 0x155f, 0x6, 0x4, 0x25cd, 0x8, 0xb4, 0xa, 0xa2b9, 0x6, 0x5, 0xe4, 0x6, 0x9, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffe, 0x2, 0x5ce8, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x18, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa5, 0x80, 0xc, 0xf9a2, 0x80000001, 0xfe, 0x0, 0x2, 0x2, 0x2, 0x100, 0x1, 0x7ff, 0x4, 0x4007f, 0x86, 0x9, 0x104], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000072, 0x7, 0xd50, 0x7, 0x5, 0x2, 0x1e20, 0x4, 0xa7, 0x1000, 0x0, 0x280b398, 0x400000, 0x0, 0x4, 0x1f, 0x7, 0x1, 0x6, 0x1003, 0xc, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff7, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x80203, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x95, 0x7fffffff, 0x3, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x8000, 0x9, 0x3, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x7, 0xd3, 0x2, 0x3437, 0x403, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x401, 0x5, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x100055, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x10009d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0xffffffff, 0x2, 0xbd, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x8bdc, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800000, 0x8004, 0x5, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x800009, 0x1ff, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x5, 0x2000001, 0x9]}, 0x45c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x5}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0xdddd0000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000300)=',\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.216729308s ago: executing program 5 (id=2610): clock_gettime(0xfffffffffffffff9, 0x0) r0 = socket(0x10, 0x3, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = getpid() getpriority(0x2, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r3 = socket(0x11, 0x3, 0x1) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x6) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf255d00000008000300", @ANYRES32=r6, @ANYBLOB="0c00990006000000470000000800a500010000000800a500000000000800a500000000001000a6800a00060008021100000100001c00a6800a00060008021100000100000a00060008021100000100000800a50001000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8090) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000431000/0x3000)=nil) setsockopt(r3, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x711601, 0x0) sendto$inet(r3, &(0x7f0000000000)="7488477bea64932ecf146fc19e67cb0aae95f7fcb121186604c9", 0x1a, 0x8000, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r3, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r9, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000240)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d", 0x1c}, {&(0x7f0000000500)="55f0e46e7aeb504dca2fb5", 0xb}, {&(0x7f00000002c0)="ba27dbcc9c7c396af4", 0x9}], 0x4}, 0x40011) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.197813009s ago: executing program 4 (id=2611): timer_create(0x7, &(0x7f0000000180)={0x0, 0x40, 0x2, @thr={&(0x7f0000000000)="00d53034e17d9a04df5a70857eb0a81c7b532445a3b01b6bd61a5d3f18309e1f1fc326b2e37256c2fea5595ac7ee6021b29d3db3e959d4e7746853666177f3aa5648eaf9486c683db6c200a700a61a583ef67e493efe1ae6bef5e9db972a5b11984b89eeec30f571b9f0e7c1215536b69f3366c5fc56dcda9db30e6ae7a9c85e0de8e5373380e2187900f7538210f5d36944a5cd256fe4687e3b1ddb4ebc9b61f4103cc5964a1b989c9f4640a55f49ddda40839e9f66fc16515755bce2577a2550654e39ede6777a50ea46fbbf88876348ffa0c1a8d4cb499bd3c8a8b08f25b34bf1da06eee6b432cbe3eb518cad059b2f", &(0x7f0000000100)="65a13bd16792deb60bef047e5f3774aa74480e9db123af45082b83458b254e04976ac789a87b7adaf0552f4191ddfb84aeb571fa85401e10a63333f5f5e719f339024c09e855f1a5f1ab9600cc79b54d77da229bc2f3f9fdbbc6ecc0d461511634a2ef04dac731bf27aa7d3341dfe2169e7478d88c5e1101fe"}}, &(0x7f00000001c0)=0x0) timer_gettime(r0, &(0x7f0000000200)) r1 = syz_clone(0x20020000, &(0x7f0000000240)="d75ae9b06b5a34a4a74abf8b6d13ec2af766e0", 0x13, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="f752cfa6824d4b9bf1600bab06fbbd19ba96e51ddc36940ae21cf1d911d42b92206e88ea33c48805a2a3e8b6c5816a6095f31b6dca10699ac68346dc6749469eb88056b44dc50f4e31a1ed3d29ac76378d0a252e00073b9efe30cfe081a4fb4b3aa07b65cfd7a6f7328524b55391cc3478c30019f54eb45858c0b45fbbfacbc3d21e3bcec7ad2062e0196bf22259a98b37d35a692867b4a8fa1f5ea3ab1d375125a245885b7ba1dbe88d0679d974f08d999d20a1d1eba352c7dc3d983ae7d524dec0aa9185f8b13cf4e33438b73ed85299ae940427b94f90e3afa7bc51192f39") ptrace(0x11, r1) (async) ptrace(0x11, r1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x244000, &(0x7f0000000440)={@align=0x3, {0xb, 0x2, 0x0, 0x3}}, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x7fff}, 0x2, &(0x7f0000000680)=[{0x3, 0x9, &(0x7f0000000500)='\x00', &(0x7f0000000540)="33bfa3db00a5fe904cb33f833d30ea5a3c7221c4fc817335f4b7afdd0a1977691199811a62f4975156369b", 0x2b}, {0x1, 0x2, &(0x7f0000000580)='!\':%,:\x00', &(0x7f00000005c0)="fa5a7a8353261a1ddb8f7081ebab7ced349bd2e9ce3e83c43570174d69dbc5024af437cb3ded5507beeefcb673427b6bbc85c9786fecd012ca151afa4104ea8c82a1666b1aaf030fae29f0c03be56f5e0f280d6d19e477aa18b2dd2b491523cdb763854c242fd3d913e9ff3d086224bd2dc3771f749120bfaa40829930f1bac1652204a82178770293c3438230cd73fa6e5349e4ba7d181960ec643824f2e1c257f3226bc675b59deffa30", 0xab, 0x2}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x244000, &(0x7f0000000440)={@align=0x3, {0xb, 0x2, 0x0, 0x3}}, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x7fff}, 0x2, &(0x7f0000000680)=[{0x3, 0x9, &(0x7f0000000500)='\x00', &(0x7f0000000540)="33bfa3db00a5fe904cb33f833d30ea5a3c7221c4fc817335f4b7afdd0a1977691199811a62f4975156369b", 0x2b}, {0x1, 0x2, &(0x7f0000000580)='!\':%,:\x00', &(0x7f00000005c0)="fa5a7a8353261a1ddb8f7081ebab7ced349bd2e9ce3e83c43570174d69dbc5024af437cb3ded5507beeefcb673427b6bbc85c9786fecd012ca151afa4104ea8c82a1666b1aaf030fae29f0c03be56f5e0f280d6d19e477aa18b2dd2b491523cdb763854c242fd3d913e9ff3d086224bd2dc3771f749120bfaa40829930f1bac1652204a82178770293c3438230cd73fa6e5349e4ba7d181960ec643824f2e1c257f3226bc675b59deffa30", 0xab, 0x2}]}) cachestat(r2, &(0x7f0000000740)={0x2, 0x4}, &(0x7f0000000780), 0x0) (async) cachestat(r2, &(0x7f0000000740)={0x2, 0x4}, &(0x7f0000000780), 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000007c0)={0x7, 0x600, {0x52, 0x10, 0x0, {0x1, 0x1000}, {0x2, 0x4}, @cond=[{0x0, 0x200, 0xc, 0x5, 0x2, 0x5410}, {0x7, 0x3, 0x0, 0x9, 0x4, 0x5}]}, {0x51, 0x0, 0x1, {0x8, 0x7}, {0x8, 0xa42f}, @const={0x9, {0x9c, 0x5, 0x9, 0x7}}}}) timer_delete(r0) fcntl$getown(r2, 0x9) (async) r3 = fcntl$getown(r2, 0x9) setrlimit(0x2, &(0x7f0000000840)={0xd1e, 0xfffffffffffffff4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x3c}}, 0x81) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a00)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a00)={'wpan0\x00'}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r7) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000ac0)={{r8, r9+10000000}, {0x0, 0x989680}}, &(0x7f0000000b00)) rt_sigtimedwait(&(0x7f0000000b40)={[0x7]}, &(0x7f0000000b80), &(0x7f0000000c00)={0x0, 0x989680}, 0x8) r10 = epoll_create1(0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7088e560f6f513f9) timer_gettime(r0, &(0x7f0000000c80)) setrlimit(0x2, &(0x7f0000000cc0)={0xa83d, 0x8000000000000000}) syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000011c0)=0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r15 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r11, &(0x7f0000001480)={&(0x7f0000000d00)=@proc={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc, &(0x7f00000013c0)=[{&(0x7f0000000d40)={0x24, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@local}, @nested={0xc, 0x123, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x24}, {&(0x7f0000000d80)={0xfc, 0x1c, 0x20, 0x70bd2a, 0x25dfdbff, "", [@typed={0x11, 0x5f, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @typed={0x8, 0x4c, 0x0, 0x0, @uid=0xee01}, @nested={0x57, 0x95, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="9df86749a45f7fbff745db3c93cd27c268000590c298d758670f5dc87a3bda75affca01a6a0b91f0adad32a6b72d81a4c9df252ff684d2bf74755e0c55df742c95a11ee1279295e02f618bf64bc35b"]}, @typed={0xb, 0x1b, 0x0, 0x0, @str='!\':%,:\x00'}, @generic="ee7f071a289b702f0d01889638d9744597766656c23d5630590842ddbdc5b59ffc58e4f47e75829a460fadc2052bb0b32ff335190287bbb3c81b37e352b6115c8dc010ae73cd60447afad7ad5bdf853a3571d8b7a72fd52d214d78f82887f12b8323a48dba10a195e45c"]}, 0xfc}, {&(0x7f0000000e80)={0x338, 0x11, 0x800, 0x70bd29, 0x25dfdbff, "", [@generic="ab5f411a91f5146c60bdc066fd3ef9c819093f0ed419e604c7028fe0d9e940ce418d019884d7b634bc9623679a2c4778a03e947cf32d3daae6b33301c06e0181d2", @nested={0x2e4, 0x4a, 0x0, 0x1, [@generic="c1769541e99d15279dcb6575b3ac0eb6c7b11db017e29764dcd4453aa23022db4ea28abc0e0ab1cb0a463c4746cc482de9e13127d1790605555a3dc3cac97434f6db34d3c77ed691e7989c8ab7dd6048ba7e841a894dea8feb9609d85637885b2438e0e03c51dc159aa10509d81ccc3ba8db460601973b1c9c2f1210473014eb70dba226477ae19303f49261091e762bae6d7659d867761bbc7c5522e8cf748e3a1ed5638b303b21fe687c7368a1789de41a7ed7fa271376f16e949ba4bdc9fe50f9d1f41c4194c02c6e45727c2d53903f97c2c2816e5696570c67b5", @nested={0x4, 0x15e}, @generic="f7f32b3a82869034bf0b0b968e3b7cb5b27be8540722ff22575961b1cfff73a15e207569feb9cd37da4abf8da2529220464341f53e62e181b901baa97f2c3cc35b943d807e6db6a97565f2bd149b7364e19fa457a495c268c457e12472947010e74beb70fc702b62787ffeb2edaecd16ba5710ff16e9b5282eaa19bba82e12228177393ae22dd41e7f000d5b083fe1cce49480b02fddfcf97fc2f13ca6022a9ba3493aacb760", @nested={0x4, 0x102}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@remote}, @typed={0x93, 0xc5, 0x0, 0x0, @binary="3be36a1534827efb245440b91bfdd18d0c83a136021d0768040244f828a72cd4a17cc9310426eca2515b74deb78feb497399dab9fb9a22c5d2c4936347a21a940b142169bd406044ce4cffd6909df265e70d100fa5524cbfede40756309905c0f3e99069b5ca80332a64b60c30a364c9ccb027ab074a0a43841f3ccbc2874347ab17b013798f50d3a4e507e2f1ed05"}, @generic="8b85578aa555306a45291f22ff9644dc3ee58c53d931a2f7b9689cc8154b997b300bbc0eccb06745dfc2fc530d0ae668bc19695cbd7b76a83c0f180dd44928082bda4df95dc6de2ba6936a42ab5884d967140321ec57fc21cc3859d64ca710a6f50331ffa8084eb80ad580091ef3097e79c70a20c58ef37ec81d2c6b517e0c1b3e5b9bc760fd1cff22ff69c92820d1491364387cf0731f9b4eeea6b6357fbec366", @generic="7d09e254106853c08e56560e1e82f23a60feb139ab2d4acf2d"]}, @generic="bd6b"]}, 0x338}, {&(0x7f0000001200)={0x1bc, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x18, 0xd, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xa3}, @typed={0x5, 0xd6, 0x0, 0x0, @str='\x00'}]}, @nested={0xc, 0x15f, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x114}]}, @generic="b480382bc7ad827ee2bbc68a350dcb06feb3bc3fd0c5d711744c4ecf7c207e2607a36362", @nested={0x59, 0x121, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x1}, @generic="1d62a09bef8a78c45a7cdef05ea66bf3c4c31b83bf1c989edd6c90764eaa662e3fea0a18058e59e9b1fa2d882ff65a3303f6c7e2b6ed5cf5fee692143b692e3943480d642ccd56fe244d1727f5"]}, @nested={0xfd, 0xc9, 0x0, 0x1, [@typed={0x4, 0x4a}, @nested={0x4, 0x14b}, @typed={0x8, 0x61, 0x0, 0x0, @u32=0x100}, @generic="971f590baa65e0616ba17cdcec946949cd7182e1f8468f8ceae2aeff56bfe585d249fc2d41af518014bc16053ddce701a9695cbb11f0ad483358d9a24af5cb79e17edef558dee1cb4ab54421dab74d050d2438ec30d05f2ced0595f8997db6512beaa5ef4588e5bc473b533dde92737403e7cb1d1616bbce198bba01a8319a211067b36b8c4a04a531f9b575268d7be8e8e73fa28523725aa151c4789d2a2f87e109ef9bfe39c9cf24f70e3fe5df0d4a053762386905020938154e3d81708eedd6b3eae97daeaf41a6bbac455e8668fff32d541a236f1790becdbdebdd1401e426eb81ec7eac97fbb0"]}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r13}]}, 0x1bc}], 0x4, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r14, r2, r12, r15, r10, r10]}}], 0x40, 0x4880}, 0xc0) (async) sendmsg$netlink(r11, &(0x7f0000001480)={&(0x7f0000000d00)=@proc={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc, &(0x7f00000013c0)=[{&(0x7f0000000d40)={0x24, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@local}, @nested={0xc, 0x123, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x24}, {&(0x7f0000000d80)={0xfc, 0x1c, 0x20, 0x70bd2a, 0x25dfdbff, "", [@typed={0x11, 0x5f, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @typed={0x8, 0x4c, 0x0, 0x0, @uid=0xee01}, @nested={0x57, 0x95, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="9df86749a45f7fbff745db3c93cd27c268000590c298d758670f5dc87a3bda75affca01a6a0b91f0adad32a6b72d81a4c9df252ff684d2bf74755e0c55df742c95a11ee1279295e02f618bf64bc35b"]}, @typed={0xb, 0x1b, 0x0, 0x0, @str='!\':%,:\x00'}, @generic="ee7f071a289b702f0d01889638d9744597766656c23d5630590842ddbdc5b59ffc58e4f47e75829a460fadc2052bb0b32ff335190287bbb3c81b37e352b6115c8dc010ae73cd60447afad7ad5bdf853a3571d8b7a72fd52d214d78f82887f12b8323a48dba10a195e45c"]}, 0xfc}, {&(0x7f0000000e80)={0x338, 0x11, 0x800, 0x70bd29, 0x25dfdbff, "", [@generic="ab5f411a91f5146c60bdc066fd3ef9c819093f0ed419e604c7028fe0d9e940ce418d019884d7b634bc9623679a2c4778a03e947cf32d3daae6b33301c06e0181d2", @nested={0x2e4, 0x4a, 0x0, 0x1, [@generic="c1769541e99d15279dcb6575b3ac0eb6c7b11db017e29764dcd4453aa23022db4ea28abc0e0ab1cb0a463c4746cc482de9e13127d1790605555a3dc3cac97434f6db34d3c77ed691e7989c8ab7dd6048ba7e841a894dea8feb9609d85637885b2438e0e03c51dc159aa10509d81ccc3ba8db460601973b1c9c2f1210473014eb70dba226477ae19303f49261091e762bae6d7659d867761bbc7c5522e8cf748e3a1ed5638b303b21fe687c7368a1789de41a7ed7fa271376f16e949ba4bdc9fe50f9d1f41c4194c02c6e45727c2d53903f97c2c2816e5696570c67b5", @nested={0x4, 0x15e}, @generic="f7f32b3a82869034bf0b0b968e3b7cb5b27be8540722ff22575961b1cfff73a15e207569feb9cd37da4abf8da2529220464341f53e62e181b901baa97f2c3cc35b943d807e6db6a97565f2bd149b7364e19fa457a495c268c457e12472947010e74beb70fc702b62787ffeb2edaecd16ba5710ff16e9b5282eaa19bba82e12228177393ae22dd41e7f000d5b083fe1cce49480b02fddfcf97fc2f13ca6022a9ba3493aacb760", @nested={0x4, 0x102}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@remote}, @typed={0x93, 0xc5, 0x0, 0x0, @binary="3be36a1534827efb245440b91bfdd18d0c83a136021d0768040244f828a72cd4a17cc9310426eca2515b74deb78feb497399dab9fb9a22c5d2c4936347a21a940b142169bd406044ce4cffd6909df265e70d100fa5524cbfede40756309905c0f3e99069b5ca80332a64b60c30a364c9ccb027ab074a0a43841f3ccbc2874347ab17b013798f50d3a4e507e2f1ed05"}, @generic="8b85578aa555306a45291f22ff9644dc3ee58c53d931a2f7b9689cc8154b997b300bbc0eccb06745dfc2fc530d0ae668bc19695cbd7b76a83c0f180dd44928082bda4df95dc6de2ba6936a42ab5884d967140321ec57fc21cc3859d64ca710a6f50331ffa8084eb80ad580091ef3097e79c70a20c58ef37ec81d2c6b517e0c1b3e5b9bc760fd1cff22ff69c92820d1491364387cf0731f9b4eeea6b6357fbec366", @generic="7d09e254106853c08e56560e1e82f23a60feb139ab2d4acf2d"]}, @generic="bd6b"]}, 0x338}, {&(0x7f0000001200)={0x1bc, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x18, 0xd, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xa3}, @typed={0x5, 0xd6, 0x0, 0x0, @str='\x00'}]}, @nested={0xc, 0x15f, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x114}]}, @generic="b480382bc7ad827ee2bbc68a350dcb06feb3bc3fd0c5d711744c4ecf7c207e2607a36362", @nested={0x59, 0x121, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x1}, @generic="1d62a09bef8a78c45a7cdef05ea66bf3c4c31b83bf1c989edd6c90764eaa662e3fea0a18058e59e9b1fa2d882ff65a3303f6c7e2b6ed5cf5fee692143b692e3943480d642ccd56fe244d1727f5"]}, @nested={0xfd, 0xc9, 0x0, 0x1, [@typed={0x4, 0x4a}, @nested={0x4, 0x14b}, @typed={0x8, 0x61, 0x0, 0x0, @u32=0x100}, @generic="971f590baa65e0616ba17cdcec946949cd7182e1f8468f8ceae2aeff56bfe585d249fc2d41af518014bc16053ddce701a9695cbb11f0ad483358d9a24af5cb79e17edef558dee1cb4ab54421dab74d050d2438ec30d05f2ced0595f8997db6512beaa5ef4588e5bc473b533dde92737403e7cb1d1616bbce198bba01a8319a211067b36b8c4a04a531f9b575268d7be8e8e73fa28523725aa151c4789d2a2f87e109ef9bfe39c9cf24f70e3fe5df0d4a053762386905020938154e3d81708eedd6b3eae97daeaf41a6bbac455e8668fff32d541a236f1790becdbdebdd1401e426eb81ec7eac97fbb0"]}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r13}]}, 0x1bc}], 0x4, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r14, r2, r12, r15, r10, r10]}}], 0x40, 0x4880}, 0xc0) 3.078051903s ago: executing program 4 (id=2612): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r4, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_usb_connect$uac1(0x2, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x8, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x4, 0x6, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x9, 0x7, {0x7, 0x25, 0x1, 0x18, 0x0, 0x7633}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xa, 0x46, 0x3, {0x7, 0x25, 0x1, 0x8, 0x2, 0x5}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0x7, 0x0, 0xb, 0x8, 0xc}, 0x4f, &(0x7f0000000740)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0xf8, 0x0, 0x8000, [0xff000f]}, @generic={0x29, 0x10, 0x3, "291dbc339612297d7c5098cb31723000f23275f3193f46f39cdd999b2dfbd718fd2766413475"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x86, 0xf9, 0xc69}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2801}}, {0xdc, &(0x7f0000000a80)=@string={0xdc, 0x3, "9440aea4116759b5adc5f34ed294b9d967e325706fb421576c453771c14f12ce183439c867c06a63cd1ab887b6901f225da45377ccaf33065f24eec2033cfb722bc31afc54b6e8bde5c8d6171fde4ef9612d48ff7648a9f3735024fb495a9ca653c7307894a697b79cf3fc627df9ea693c6ea998c3c03004a61082a6a99d4235486624ef1a8e25f6d351c6909c0f8d6d301024c85f4da2bdb83c4cbca88a43edaf2442e88f4a088578a68eb047a7989ea1f0f1f91f8e5e837fc5386cde3f9ac69098c202a7ba762e1215cc7d94f9777b7b971c8498cb076109b5"}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x0, 0x24, 0x6, {0x6, 0xb, "85639d90"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c80)={0x40, 0x6, 0x8a, "3c542931b47cd039a9495608432791e1604f322ae1dd4bf99e294dd7b0e1101ea46e2fb6c3cd3d7d133e3ae40d1f53d0df0cd2d8d36e636c6cb15c55cf3e3e1c16b583d702817827649323201dba44792a51b3a1ed1dec0bc3d628a38d676c05043793c1e41c3f4a50a598e3a3aec8ebd94dd2583bbfdec1457bb46661dc44a14f120a4aa9b4cc10b1c3"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000dc0)={0x20, 0x81, 0x2, "96b6"}, &(0x7f0000000e00)={0x20, 0x82, 0x3, "7ed14d"}, &(0x7f0000000e40)={0x20, 0x83, 0x3, "4d1925"}, &(0x7f0000000e80)={0x20, 0x84, 0x3, "874c16"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "29fa8b"}}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2d, 0x10, {{@in6=@mcast2, @in=@empty, 0x4e22, 0x0, 0xf7fb, 0x2003, 0xa, 0x80, 0x140, 0x62, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x0, 0x9, 0x8, 0x6, 0x0, 0x73}, {0x100081, 0x9, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3508, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {{@in6=@mcast2, 0x4, 0x33}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x4, 0x800, 0x0, 0x4}]}]}, 0x13c}}, 0x4080) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r10, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240488b0}, 0x40800) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120, 0x40}}, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9bfe"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5}, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1}}) syz_usb_control_io$uac2(r1, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/242, 0xf2}) 2.83272857s ago: executing program 7 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.552733311s ago: executing program 7 (id=2621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001500)={'#! ', '', [{}, {}, {}, {0x20, '.@:*:\'^)'}, {0x20, '802.15.4 MAC\x00'}, {0x20, '\xa6\\\'{#'}, {}], 0xa, "d15ab3317a5f72cb271c42"}, 0x30) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, 0xffffffffffffffff, 0x6000) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001540)={{&(0x7f00008f9000/0x3000)=nil, 0x3000}, 0x4}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x430000, 0x14a) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (async) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x10001, 0x4) (async) sendto$packet(r3, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="100a2cbd7000fbdbdf2507000000050033000200000008000600", @ANYRES32=r4, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x20008901}, 0x810) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x28fb6ca3, 0x3}) (async) pivot_root(0x0, 0x0) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/113, 0x71}], 0x2, 0x0, 0x5d}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000000687fd8efc846eeeab8c060500000000000000000001000003"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40050) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = epoll_create1(0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20002003}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000140)={0x77540947ad9a168d}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept$nfc_llcp(r6, &(0x7f0000000400), &(0x7f0000000480)=0x60) 1.552388761s ago: executing program 7 (id=2622): r0 = socket$unix(0x1, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xd2200, 0x0) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) r6 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) pipe(0x0) (async) pipe(0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x5000, 0x0, 0x58, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x20000, 0x9, 0x2000008, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0xc0, 0x3) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0xc0, 0x3) write$P9_RLCREATE(r9, &(0x7f0000000200)={0x18, 0xf, 0x2, {{0x20, 0x1}, 0x9}}, 0x18) (async) write$P9_RLCREATE(r9, &(0x7f0000000200)={0x18, 0xf, 0x2, {{0x20, 0x1}, 0x9}}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000240)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) listen(r10, 0xfffff7fe) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f0000000100)=0x1000) connect$unix(r12, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r12, &(0x7f0000000440)=@file={0x1}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0xf4, 0x3, 0x6, 0x58, @remote, @mcast2, 0x7800, 0x10, 0x6, 0x7ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0xf4, 0x3, 0x6, 0x58, @remote, @mcast2, 0x7800, 0x10, 0x6, 0x7ff}}) sendto$packet(r10, &(0x7f0000000280)="690be192432def0bf3923a9dcb6d067f66edb9492a51c0a65e62b27c67954eacac8498575de7e09f87ab237ed68075e934e4f2e066", 0x35, 0x4000800, &(0x7f00000003c0)={0x11, 0x4, r13, 0x1, 0x4, 0x6, @broadcast}, 0x14) (async) sendto$packet(r10, &(0x7f0000000280)="690be192432def0bf3923a9dcb6d067f66edb9492a51c0a65e62b27c67954eacac8498575de7e09f87ab237ed68075e934e4f2e066", 0x35, 0x4000800, &(0x7f00000003c0)={0x11, 0x4, r13, 0x1, 0x4, 0x6, @broadcast}, 0x14) syz_usb_connect$midi(0x2, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000205207110040000102030100ff0004c00809040000020103200800054102080000ac0204250100090504032000a1070704250100000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$midi(0x2, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000205207110040000102030100ff0004c00809040000020103200800054102080000ac0204250100090504032000a1070704250100000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.144868634s ago: executing program 1 (id=2625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.144364414s ago: executing program 1 (id=2626): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000b, 0x12, r0, 0xd65f3000) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000001d80)='\x00\x000/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') r1 = socket(0x11, 0x4, 0x3) setsockopt(r1, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x447f, 0x72, 0x5, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mknod(&(0x7f0000000000)='./file0\x00', 0x3acaade64ad88abf, 0x77b) landlock_create_ruleset(&(0x7f00000003c0)={0x2201, 0x0, 0x0, 0xe4}, 0x30, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="60ab5295e6cdfa7b00000000b5030000005491d88f84403628ec00003bac530643ba7d7e4948a4d43a8cb04b9c07305860cca2877468190d07f30e30c2c96526aad7da38c058fa60dff02bf53ee4f3320431c9fa307914624c5a3a3435189f17625db42265b548d9712858cfb3910f89143c0465380152d862ec38dcb9f02f4569a311fcaa5646080507f332975a73cc5d958501aa285ff82ee6ee390630b906a1dc9c2d733e0a738c61f1061d3c94e5233d78a6c13318ddbefe3e6ab17d98fa1b47da687a6d857b86f43386032e3054b782559ed538a577de4530bab456", @ANYRESOCT=r4], 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x1f, 0x7, 0x200, 0x7, 0x4}, 0x14) r7 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r7, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0xfffffffe, 0x4, 0x4, 0x1, {0xa, 0x4e21, 0xa011, @empty, 0x9d3}}}, 0x3a) getsockname(r6, 0x0, &(0x7f0000000840)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x8, 0x40, 0x0, 0x10001}, {0x1, 0x14, 0x4a, 0x3}, {0x3, 0x81, 0xfc}, {0x401, 0x4, 0x2, 0x7fffffff}, {0xf801, 0x2, 0x4, 0xe}]}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0xd, 0x8, 0x63, 0x5, 0x2, 0x1}) 1.092046786s ago: executing program 1 (id=2627): r0 = syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async, rerun: 64) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.045548127s ago: executing program 7 (id=2628): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2443, 0x22) fcntl$getflags(r0, 0x401) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x5da8e8c1b1c0691d) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) 608.881081ms ago: executing program 5 (id=2629): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306020603040703"], 0x0) 571.496242ms ago: executing program 1 (id=2630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) timer_create(0xb, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) sendto$inet6(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c0d4) (async) r3 = dup(r1) sendto(r3, &(0x7f0000000140)="0d153b5b2b1f5d56a0aa913352425145cc1668d70af1efa4bb7d83978243835d6049b3fe6097db5a9009f72f735ab2cc79cefbc518d42271d84ba4f7782964e9741cfc218b0fa31844041e34631c", 0x4e, 0x40000, &(0x7f0000000280)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xe, 0x0, &(0x7f0000000040)=0xfffffffffffffebd) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0x9}) (async) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "040008", 0x16, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1e}]}}}}}}}, 0x4c) 548.467133ms ago: executing program 1 (id=2631): r0 = socket$pptp(0x18, 0x1, 0x2) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) close(0x3) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0x5, {0xa, 0x25, 0x25, 0x4, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) socket$pptp(0x18, 0x1, 0x2) (async) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) (async) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) (async) close(0x3) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0x5, {0xa, 0x25, 0x25, 0x4, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async) 148.825945ms ago: executing program 7 (id=2632): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x8fcc, 0x3fe, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x5f4, 0xfffffffd], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x0, 0x3, 0xfffffffc, 0x4, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800) 117.499187ms ago: executing program 5 (id=2633): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) (rerun: 32) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="344022f537a3", 0x6}], 0x1}}], 0x1, 0x4001c00) (async) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000140)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r5}, 0x14) (async) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r5, @ANYBLOB="000000de"], 0x28}}], 0x1, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) splice(r0, 0x0, r6, 0x0, 0x1100000000f336, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$unix(r8, 0x0, 0x0, 0x20000410) (async) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) (async) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) (async) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="efe84d69ec9effc51bf1e4e9926a2901002bbd7000aadbdf2503010400000002000500000014000100fc0000000000000000005afe4786d0b88723ebd0"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) 94.643547ms ago: executing program 7 (id=2634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 31.450899ms ago: executing program 36 (id=2634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 7.04002ms ago: executing program 4 (id=2636): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008050b3d18000000000001090224000100003001090400000b03000300092109800a01222c0009058103ff03112240c55c7b41e4271d204c41c989a9518cca0e18de69da14c45dba87048b7c954995e5c0405bf83ccd3bbd819f1762b41510b2e6f875abac140765f95a056db32595e255ec872a973186c3efb80a385a1cdac4c1000000000000"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) open(&(0x7f0000000080)='./file0\x00', 0x109943, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000040)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_fuse_handle_req(r4, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282ccffabcf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x1, {0x8, 0x6, 0x0, {0x5, 0x0, 0xe418000000, 0x81, 0xc7, 0x1, 0x9e9, 0xfffffffe, 0xb876, 0x2000, 0x7893b06e, 0xffffffffffffffff, 0x0, 0x3d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f000027b000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x12, r2, 0x0) close_range(r3, r3, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2f}}, 0x14) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xff) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x21, 0x2c, {0x2c, 0x23, "e7e6da6e41eaddfb0a8a34d2dd23ee248c364bf0cc12a1ac3369688a105a7e746fb1400590136b7103bd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.21743ms ago: executing program 5 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x4000) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f0000000100)='.log\x00', 0x0, 0x20) read$FUSE(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301609216042d0202ff6229010a02010209050101000203ff0609050a0308"], 0x0) setsockopt$inet_int(r8, 0x0, 0x17, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280100001800150028bd7000fffbfffe0a0000000202000000000000100002"], 0x128}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 0s ago: executing program 1 (id=2638): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xc8, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x1}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x6}}, @proto={0x5, 0x19, 0x6c}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a", @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYRES8=r3, @ANYRESOCT=r1], 0x24}], 0x1}, 0x4000000) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00030000000006040000000000f93132", 0x39}], 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000002c0)={'ip6gre0\x00', @broadcast}) kernel console output (not intermixed with test programs): or -71 [ 277.483499][ T9] usb 6-1: USB disconnect, device number 125 [ 277.504308][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.060023][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.068614][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.095728][ T6465] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 278.109937][ T6465] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 278.248080][ T6467] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1964'. [ 278.313496][ T45] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 278.475129][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 278.483507][ T45] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 278.492126][ T45] usb 6-1: config 0 has no interface number 0 [ 278.498340][ T45] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 278.508498][ T45] usb 6-1: config 0 interface 196 has no altsetting 0 [ 278.518961][ T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 278.528695][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.536756][ T45] usb 6-1: Product: syz [ 278.541062][ T45] usb 6-1: Manufacturer: syz [ 278.545741][ T45] usb 6-1: SerialNumber: syz [ 278.555266][ T45] usb 6-1: config 0 descriptor?? [ 278.567502][ T6463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 278.783635][ T45] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 278.806480][ T45] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 278.820576][ T45] usb 6-1: USB disconnect, device number 126 [ 278.897043][ T6474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1967'. [ 278.975848][ T36] kauditd_printk_skb: 552 callbacks suppressed [ 278.975867][ T36] audit: type=1400 audit(1781909765.646:117065): avc: denied { create } for pid=6475 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.025215][ T36] audit: type=1400 audit(1781909765.676:117066): avc: denied { setopt } for pid=6475 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.050759][ T36] audit: type=1400 audit(1781909765.676:117067): avc: denied { create } for pid=6475 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.071224][ T36] audit: type=1400 audit(1781909765.676:117068): avc: denied { setopt } for pid=6475 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.091479][ T36] audit: type=1400 audit(1781909765.676:117069): avc: denied { create } for pid=6475 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.112245][ T36] audit: type=1400 audit(1781909765.746:117070): avc: denied { wake_alarm } for pid=6477 comm="syz.4.1969" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.175260][ T36] audit: type=1400 audit(1781909765.836:117071): avc: denied { create } for pid=6485 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.198184][ T36] audit: type=1400 audit(1781909765.866:117072): avc: denied { write } for pid=6485 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.228713][ T36] audit: type=1400 audit(1781909765.866:117073): avc: denied { read } for pid=6485 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.280406][ T36] audit: type=1400 audit(1781909765.866:117074): avc: denied { read } for pid=6485 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.313990][ T6492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1974'. [ 279.585319][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.605327][ T31] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 279.735316][ T31] usb 6-1: device descriptor read/64, error -71 [ 279.743825][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.754734][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.764475][ T45] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 279.773510][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.782710][ T45] usb 2-1: config 0 descriptor?? [ 279.975339][ T31] usb 6-1: device descriptor read/64, error -71 [ 280.072214][ T6515] sit0: entered promiscuous mode [ 280.078135][ T6515] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 280.086592][ T6515] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1983'. [ 280.193674][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.201631][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.209567][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.217432][ T31] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 280.224874][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.233188][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.241107][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.248995][ T45] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 280.258655][ T45] hid-thrustmaster 0003:044F:B65D.002A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 280.270739][ T45] hid-thrustmaster 0003:044F:B65D.002A: Wrong number of endpoints? [ 280.385444][ T31] usb 6-1: device descriptor read/64, error -71 [ 280.398644][ C1] hid-thrustmaster 0003:044F:B65D.002A: Unknown packet type 0x6d47, unable to proceed further with wheel init [ 280.611334][ T425] usb 2-1: USB disconnect, device number 11 [ 280.627662][ T31] usb 6-1: device descriptor read/64, error -71 [ 280.749095][ T31] usb usb6-port1: attempt power cycle [ 281.095490][ T31] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 281.117281][ T31] usb 6-1: device descriptor read/8, error -71 [ 281.247756][ T31] usb 6-1: device descriptor read/8, error -71 [ 281.455514][ T425] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.485532][ T31] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 281.507835][ T31] usb 6-1: device descriptor read/8, error -71 [ 281.517823][ T6564] netlink: 'syz.4.2001': attribute type 30 has an invalid length. [ 281.617494][ T425] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 281.625822][ T425] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 281.634931][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.644667][ T425] usb 2-1: config 0 descriptor?? [ 281.652415][ T31] usb 6-1: device descriptor read/8, error -71 [ 281.653195][ T425] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 281.766001][ T31] usb usb6-port1: unable to enumerate USB device [ 281.864383][ T31] usb 2-1: USB disconnect, device number 12 [ 282.130459][ T6572] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2005'. [ 282.638599][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 282.689824][ T908] Bluetooth: hci0: Frame reassembly failed (-84) [ 282.815672][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 282.823349][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.836236][ T45] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 282.845268][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.854612][ T45] usb 2-1: config 0 descriptor?? [ 283.280285][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.287589][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0xd [ 283.294817][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.302084][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.309312][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.316547][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.323758][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.331037][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.338398][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.345592][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.352800][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.360012][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.367259][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.374464][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.381681][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.388894][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.396115][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.403317][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.410526][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.417739][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.424936][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.432200][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.439443][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.446693][ T45] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 283.454989][ T45] greenasia 0003:0E8F:0012.002B: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 283.466448][ T45] greenasia 0003:0E8F:0012.002B: no inputs found [ 283.476930][ T45] usb 2-1: USB disconnect, device number 13 [ 283.505297][ T6595] fido_id[6595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 283.987818][ T36] kauditd_printk_skb: 439 callbacks suppressed [ 283.987833][ T36] audit: type=1400 audit(1781909770.655:117514): avc: denied { create } for pid=6607 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.038904][ T36] audit: type=1400 audit(1781909770.655:117515): avc: denied { create } for pid=6607 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.077679][ T36] audit: type=1400 audit(1781909770.655:117516): avc: denied { create } for pid=6607 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.122771][ T36] audit: type=1400 audit(1781909770.655:117517): avc: denied { create } for pid=6607 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.145545][ T36] audit: type=1400 audit(1781909770.655:117518): avc: denied { create } for pid=6607 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.167235][ T36] audit: type=1400 audit(1781909770.685:117519): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.192388][ T36] audit: type=1400 audit(1781909770.685:117520): avc: denied { read write open } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.248930][ T36] audit: type=1400 audit(1781909770.685:117521): avc: denied { ioctl } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.291999][ T36] audit: type=1400 audit(1781909770.755:117522): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.316455][ T36] audit: type=1400 audit(1781909770.755:117523): avc: denied { read write open } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.627494][ T66] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 284.656683][ T66] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.765903][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.772033][ T573] Bluetooth: hci0: command 0x1003 tx timeout [ 285.085952][ T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 285.235962][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 285.244482][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.253419][ T66] usb 6-1: too many configurations: 74, using maximum allowed: 8 [ 285.264093][ T66] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 285.272314][ T66] usb 6-1: can't read configurations, error -61 [ 285.406020][ T66] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 285.557166][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 285.565528][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.573591][ T66] usb 6-1: too many configurations: 74, using maximum allowed: 8 [ 285.585425][ T66] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 285.597374][ T66] usb 6-1: can't read configurations, error -61 [ 285.604094][ T66] usb usb6-port1: attempt power cycle [ 285.658141][ T6668] 9pnet: Could not find request transport: fL [ 285.956074][ T66] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.977361][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 285.988889][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 286.001842][ T66] usb 6-1: too many configurations: 74, using maximum allowed: 8 [ 286.016511][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 286.020613][ T66] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 286.035934][ T66] usb 6-1: can't read configurations, error -61 [ 286.166154][ T66] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 286.180384][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.191990][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.202820][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.204616][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 286.215902][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.230841][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.243504][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 286.243887][ T45] usb 2-1: config 0 descriptor?? [ 286.256082][ T66] usb 6-1: too many configurations: 74, using maximum allowed: 8 [ 286.276076][ T66] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 286.296080][ T66] usb 6-1: can't read configurations, error -61 [ 286.306941][ T66] usb usb6-port1: unable to enumerate USB device [ 286.325829][ T6678] fuse: Unknown parameter '0x0000000000000004' [ 286.663987][ T45] plantronics 0003:047F:FFFF.002D: unknown main item tag 0xd [ 286.672823][ T45] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 286.683797][ T45] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 286.940958][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.949571][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.958718][ T45] usb 2-1: USB disconnect, device number 14 [ 287.314215][ T6698] fuse: Unknown parameter '0x0000000000000004' [ 287.435168][ T6700] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 287.761081][ T6719] fuse: Unknown parameter '0x0000000000000004' [ 287.910642][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 288.226904][ T6745] fuse: Unknown parameter '0x0000000000000004' [ 288.306343][ T45] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 288.320174][ T6750] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2075'. [ 288.446363][ T45] usb 6-1: device descriptor read/64, error -71 [ 288.696408][ T45] usb 6-1: device descriptor read/64, error -71 [ 288.755779][ T6767] fuse: Unknown parameter 'fd0x0000000000000004' [ 288.936427][ T45] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 289.008647][ T36] kauditd_printk_skb: 551 callbacks suppressed [ 289.008667][ T36] audit: type=1400 audit(1781909775.674:118075): avc: denied { create } for pid=6778 comm="syz.4.2087" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.041195][ T36] audit: type=1400 audit(1781909775.674:118076): avc: denied { map } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.069051][ T36] audit: type=1400 audit(1781909775.674:118077): avc: denied { read write } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.076480][ T45] usb 6-1: device descriptor read/64, error -71 [ 289.095541][ T36] audit: type=1400 audit(1781909775.674:118078): avc: denied { map } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.143324][ T36] audit: type=1400 audit(1781909775.674:118079): avc: denied { read write } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.173658][ T36] audit: type=1400 audit(1781909775.674:118080): avc: denied { map } for pid=6778 comm="syz.4.2087" path="socket:[53122]" dev="sockfs" ino=53122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 289.197316][ T36] audit: type=1400 audit(1781909775.684:118081): avc: denied { ioctl } for pid=6740 comm="syz.5.2072" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.222671][ T36] audit: type=1400 audit(1781909775.714:118082): avc: denied { create } for pid=6778 comm="syz.4.2087" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.244117][ T36] audit: type=1400 audit(1781909775.714:118083): avc: denied { map } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.268483][ T36] audit: type=1400 audit(1781909775.714:118084): avc: denied { read write } for pid=6778 comm="syz.4.2087" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.416484][ T45] usb 6-1: device descriptor read/64, error -71 [ 289.436488][ T425] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 289.526881][ T45] usb usb6-port1: attempt power cycle [ 289.588366][ T425] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.599473][ T425] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 289.610458][ T425] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.623331][ T425] usb 2-1: config 0 interface 0 has no altsetting 0 [ 289.629965][ T425] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 289.639004][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.648389][ T425] usb 2-1: config 0 descriptor?? [ 289.655686][ T6791] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 289.866543][ T45] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 289.888782][ T45] usb 6-1: device descriptor read/8, error -71 [ 290.018734][ T45] usb 6-1: device descriptor read/8, error -71 [ 290.090256][ T425] usbhid 2-1:0.0: can't add hid device: -71 [ 290.105957][ T425] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.115879][ T425] usb 2-1: USB disconnect, device number 15 [ 290.256612][ T45] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 290.278522][ T45] usb 6-1: device descriptor read/8, error -71 [ 290.408462][ T45] usb 6-1: device descriptor read/8, error -71 [ 290.506678][ T425] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 290.517067][ T45] usb usb6-port1: unable to enumerate USB device [ 290.557404][ T6802] fuse: Unknown parameter 'fd0x0000000000000004' [ 290.657910][ T425] usb 2-1: not running at top speed; connect to a high speed hub [ 290.667847][ T425] usb 2-1: config 8 has an invalid interface number: 247 but max is 0 [ 290.676068][ T425] usb 2-1: config 8 has no interface number 0 [ 290.682192][ T425] usb 2-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 290.693237][ T425] usb 2-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 290.704310][ T425] usb 2-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping [ 290.715539][ T425] usb 2-1: config 8 interface 247 altsetting 54 has an invalid descriptor for endpoint zero, skipping [ 290.726978][ T425] usb 2-1: config 8 interface 247 altsetting 54 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.736909][ T425] usb 2-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 290.755094][ T425] usb 2-1: config 8 interface 247 has no altsetting 0 [ 290.767730][ T425] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d [ 290.776773][ T425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.784737][ T425] usb 2-1: Product: syz [ 290.788908][ T425] usb 2-1: Manufacturer: syz [ 290.793510][ T425] usb 2-1: SerialNumber: syz [ 290.809221][ T6800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 291.019911][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.028446][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.067406][ T425] usb 2-1: USB disconnect, device number 16 [ 291.083341][ T6822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6822 comm=syz.5.2098 [ 291.201114][ T553] udevd[553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.247/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.251104][ T6834] fuse: Unknown parameter 'fd0x0000000000000004' [ 291.363942][ T6839] veth1: entered allmulticast mode [ 291.379539][ T6838] veth1: left allmulticast mode [ 291.706316][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.729196][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.877662][ T6854] netlink: 'syz.7.2108': attribute type 30 has an invalid length. [ 291.943686][ T6857] netlink: 'syz.4.2109': attribute type 4 has an invalid length. [ 291.946802][ T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 291.996806][ T425] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 292.096790][ T31] usb 6-1: device descriptor read/64, error -71 [ 292.138357][ T425] usb 2-1: device descriptor read/64, error -71 [ 292.180356][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 292.356914][ T31] usb 6-1: device descriptor read/64, error -71 [ 292.396842][ T425] usb 2-1: device descriptor read/64, error -71 [ 292.606877][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 292.636875][ T425] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 292.756910][ T31] usb 6-1: device descriptor read/64, error -71 [ 292.776878][ T425] usb 2-1: device descriptor read/64, error -71 [ 293.006922][ T31] usb 6-1: device descriptor read/64, error -71 [ 293.016911][ T425] usb 2-1: device descriptor read/64, error -71 [ 293.117003][ T31] usb usb6-port1: attempt power cycle [ 293.127462][ T425] usb usb2-port1: attempt power cycle [ 293.466946][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 293.466967][ T425] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.489335][ T31] usb 6-1: device descriptor read/8, error -71 [ 293.499773][ T425] usb 2-1: device descriptor read/8, error -71 [ 293.630001][ T425] usb 2-1: device descriptor read/8, error -71 [ 293.636999][ T31] usb 6-1: device descriptor read/8, error -71 [ 293.877034][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 293.889827][ T425] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 293.909539][ T31] usb 6-1: device descriptor read/8, error -71 [ 293.920155][ T425] usb 2-1: device descriptor read/8, error -71 [ 294.037638][ T36] kauditd_printk_skb: 476 callbacks suppressed [ 294.037654][ T36] audit: type=1400 audit(1781909780.714:118559): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.071575][ T31] usb 6-1: device descriptor read/8, error -71 [ 294.073833][ T425] usb 2-1: device descriptor read/8, error -71 [ 294.084447][ T36] audit: type=1400 audit(1781909780.744:118560): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.110857][ T36] audit: type=1400 audit(1781909780.744:118561): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.137530][ T36] audit: type=1400 audit(1781909780.744:118562): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.163475][ T36] audit: type=1400 audit(1781909780.744:118563): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.189144][ T425] usb usb2-port1: unable to enumerate USB device [ 294.197126][ T31] usb usb6-port1: unable to enumerate USB device [ 294.198021][ T36] audit: type=1400 audit(1781909780.744:118564): avc: denied { ioctl } for pid=6841 comm="syz.1.2104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.229534][ T36] audit: type=1400 audit(1781909780.744:118565): avc: denied { ioctl } for pid=6848 comm="syz.5.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.255387][ T36] audit: type=1400 audit(1781909780.744:118566): avc: denied { ioctl } for pid=6841 comm="syz.1.2104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.281251][ T36] audit: type=1400 audit(1781909780.744:118567): avc: denied { ioctl } for pid=6841 comm="syz.1.2104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.307247][ T36] audit: type=1400 audit(1781909780.744:118568): avc: denied { ioctl } for pid=6841 comm="syz.1.2104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.790952][ T6890] netlink: 'syz.5.2120': attribute type 30 has an invalid length. [ 295.623138][ T6919] netlink: 'syz.1.2129': attribute type 30 has an invalid length. [ 296.265255][ T6951] netlink: 'syz.5.2138': attribute type 30 has an invalid length. [ 296.887424][ T425] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 297.045925][ T425] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 297.058930][ T425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.069962][ T425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.079711][ T425] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.092640][ T425] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.101736][ T425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.111110][ T425] usb 6-1: config 0 descriptor?? [ 297.267424][ T66] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 297.417443][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 297.424378][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.436040][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.449294][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 297.458335][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.467583][ T66] usb 2-1: config 0 descriptor?? [ 297.521777][ T425] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 297.530595][ T425] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 297.541792][ T425] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 297.779638][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.788195][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.801830][ T31] usb 6-1: USB disconnect, device number 17 [ 297.880809][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.889217][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.897323][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.905480][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.913587][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.921701][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.929797][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.937926][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.946011][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.954122][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.962210][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.970306][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.978418][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 297.986484][ T66] logitech-djreceiver 0003:046D:C532.002F: unknown main item tag 0x0 [ 298.192571][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 298.337705][ T6976] 9pnet_fd: Insufficient options for proto=fd [ 298.445537][ T6982] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2147'. [ 298.630279][ T6990] tipc: Started in network mode [ 298.640617][ T6990] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 298.650467][ T6990] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 298.659237][ T6990] tipc: Enabled bearer , priority 10 [ 298.702262][ T6992] kernel profiling enabled (shift: 4) [ 299.047695][ T36] kauditd_printk_skb: 905 callbacks suppressed [ 299.047714][ T36] audit: type=1400 audit(1781909785.723:119474): avc: denied { read write } for pid=7000 comm="syz.5.2154" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.076818][ T7001] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.085384][ T7001] audit: audit_lost=848 audit_rate_limit=0 audit_backlog_limit=64 [ 299.093251][ T7001] audit: backlog limit exceeded [ 299.098434][ T7001] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.104939][ T7001] audit: audit_lost=849 audit_rate_limit=0 audit_backlog_limit=64 [ 299.112772][ T7001] audit: backlog limit exceeded [ 299.112907][ T7005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.118568][ T7001] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.130689][ T7001] audit: audit_lost=850 audit_rate_limit=0 audit_backlog_limit=64 [ 299.778203][ T425] tipc: Node number set to 1 [ 300.044729][ T425] usb 2-1: USB disconnect, device number 21 [ 300.139530][ T7037] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2163'. [ 300.517821][ T425] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 300.698318][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.709418][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.719268][ T425] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 300.728454][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.738792][ T425] usb 2-1: config 0 descriptor?? [ 301.150971][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.160560][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.168800][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.177286][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.185143][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.200384][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.226701][ T425] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 301.247009][ T425] hid-thrustmaster 0003:044F:B65D.0030: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 301.267979][ T425] hid-thrustmaster 0003:044F:B65D.0030: Wrong number of endpoints? [ 301.352989][ C0] hid-thrustmaster 0003:044F:B65D.0030: Unknown packet type 0x6d47, unable to proceed further with wheel init [ 301.457974][ T45] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 301.553960][ T425] usb 2-1: USB disconnect, device number 22 [ 301.610610][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.619989][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.630111][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 301.644321][ T45] usb 6-1: string descriptor 0 read error: -22 [ 301.650731][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.659794][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.678071][ T7054] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 301.696802][ T45] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 302.056040][ T425] usb 6-1: USB disconnect, device number 18 [ 302.141635][ T7066] veth1: entered allmulticast mode [ 302.149693][ T7065] veth1: left allmulticast mode [ 302.188267][ T7068] netlink: 'syz.1.2176': attribute type 30 has an invalid length. [ 302.397208][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2180'. [ 302.411703][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2180'. [ 302.549410][ T7086] sock: sock_timestamping_bind_phc: sock not bind to device [ 302.588845][ T7088] fuse: Unknown parameter '©ü[ÒúS˜¡ï' [ 302.708077][ T45] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 302.732909][ T7095] kvm: kvm [7094]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 302.741753][ T7095] kvm: kvm [7094]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 302.868082][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 302.893812][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.907765][ T45] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 302.922390][ T45] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 302.937294][ T45] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 302.951369][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 302.962020][ T45] usb 6-1: config 1 interface 1 has no altsetting 0 [ 302.989321][ T45] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 303.008129][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.029056][ T45] usb 6-1: Product: syz [ 303.036410][ T45] usb 6-1: Manufacturer: syz [ 303.048151][ T45] usb 6-1: SerialNumber: syz [ 303.164986][ T7105] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2191'. [ 303.199092][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2191'. [ 303.239234][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2194'. [ 303.246295][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2191'. [ 303.291561][ T45] usb 6-1: selecting invalid altsetting 0 [ 303.308694][ T45] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 303.701784][ T45] usb 6-1: USB disconnect, device number 19 [ 303.874415][ T7144] overlayfs: empty lowerdir [ 304.016794][ T7152] batadv_slave_1: entered promiscuous mode [ 304.026010][ T7151] batadv_slave_1: left promiscuous mode [ 304.066006][ T36] kauditd_printk_skb: 1889 callbacks suppressed [ 304.066024][ T36] audit: type=1400 audit(1781909790.733:121322): avc: denied { create } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.107827][ T36] audit: type=1400 audit(1781909790.733:121323): avc: denied { write } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.143600][ T36] audit: type=1400 audit(1781909790.733:121324): avc: denied { read } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.211417][ T36] audit: type=1400 audit(1781909790.733:121325): avc: denied { read } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.246655][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'. [ 304.261816][ T36] audit: type=1400 audit(1781909790.743:121326): avc: denied { write } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.274530][ T7168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=7168 comm=syz.4.2215 [ 304.303259][ T36] audit: type=1400 audit(1781909790.743:121327): avc: denied { read } for pid=7156 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.340169][ T36] audit: type=1400 audit(1781909790.803:121328): avc: denied { create } for pid=7154 comm="syz.1.2209" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.364526][ T36] audit: type=1400 audit(1781909790.803:121329): avc: denied { map } for pid=7154 comm="syz.1.2209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.393653][ T36] audit: type=1400 audit(1781909790.803:121330): avc: denied { read write } for pid=7154 comm="syz.1.2209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.422539][ T36] audit: type=1400 audit(1781909790.803:121331): avc: denied { map } for pid=7154 comm="syz.1.2209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.438316][ T425] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 304.601023][ T425] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.609232][ T425] usb 2-1: not running at top speed; connect to a high speed hub [ 304.618204][ T425] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 304.633390][ T425] usb 2-1: language id specifier not provided by device, defaulting to English [ 304.644221][ T425] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 304.653316][ T425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.661317][ T425] usb 2-1: Product: syz [ 304.665465][ T425] usb 2-1: Manufacturer: ⧄亨ç¤ï¼å¿ƒì¤¨âƒ´×Œî‹å¹²èª¤å›¦ã•¸ï¬€å [ 304.673828][ T425] usb 2-1: SerialNumber: syz [ 304.728401][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 304.880215][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 304.888465][ T9] usb 6-1: config 0 has no interface number 0 [ 304.909534][ T425] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 304.922994][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 304.932988][ T425] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 304.942008][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.953482][ T425] usb 2-1: USB disconnect, device number 23 [ 304.959478][ T9] usb 6-1: Product: syz [ 304.963698][ T9] usb 6-1: Manufacturer: syz [ 304.969433][ T9] usb 6-1: SerialNumber: syz [ 304.976935][ T9] usb 6-1: config 0 descriptor?? [ 305.045198][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 305.047179][ T7183] overlayfs: failed to clone upperpath [ 305.688508][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 305.806344][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 305.826029][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 305.841463][ T9] asix 6-1:0.251: probe with driver asix failed with error -71 [ 305.853575][ T9] usb 6-1: USB disconnect, device number 20 [ 305.865518][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 305.877284][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.887775][ T31] usb 2-1: Product: syz [ 305.893042][ T31] usb 2-1: Manufacturer: syz [ 305.898057][ T31] usb 2-1: SerialNumber: syz [ 305.911054][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 305.925763][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 306.138857][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.147390][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.159781][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 306.166102][ T31] r8152-cfgselector 2-1: bad CDC descriptors [ 306.189345][ T31] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 306.260442][ T7204] can0: slcan on ptm0. [ 306.598550][ T45] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.750837][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 306.762441][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 306.778574][ T45] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 306.792364][ T7202] can0 (unregistered): slcan off ptm0. [ 306.798890][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.820351][ T45] usb 6-1: config 0 descriptor?? [ 307.244594][ T45] input: HID 28bd:0905 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0905.0031/input/input63 [ 307.282709][ T45] uclogic 0003:28BD:0905.0031: input,hidraw0: USB HID v0.81 Mouse [HID 28bd:0905] on usb-dummy_hcd.5-1/input0 [ 307.466927][ T310] usb 6-1: USB disconnect, device number 21 [ 307.511011][ T425] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.698702][ T425] usb 2-1: Using ep0 maxpacket: 16 [ 307.705729][ T425] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 307.716536][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.727422][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.737168][ T425] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 307.750130][ T425] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 307.759175][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.768368][ T425] usb 2-1: config 0 descriptor?? [ 307.983933][ T7245] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.983957][ T7245] rust_binder: Read failure Err(EFAULT) in pid:1182 [ 308.013430][ T7245] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 308.022326][ T7245] rust_binder: Read failure Err(EFAULT) in pid:1182 [ 308.486643][ T425] usbhid 2-1:0.0: can't add hid device: -71 [ 308.499476][ T425] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 308.508086][ T425] usb 2-1: USB disconnect, device number 25 [ 308.750782][ T7268] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2236'. [ 308.976826][ T7282] 9pnet_fd: Insufficient options for proto=fd [ 309.102502][ T36] kauditd_printk_skb: 963 callbacks suppressed [ 309.102532][ T36] audit: type=1400 audit(1781909795.772:122295): avc: denied { read write } for pid=7285 comm="syz.1.2244" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.158277][ T36] audit: type=1400 audit(1781909795.812:122296): avc: denied { read write open } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.184349][ T36] audit: type=1400 audit(1781909795.812:122297): avc: denied { ioctl } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.233190][ T36] audit: type=1400 audit(1781909795.812:122298): avc: denied { ioctl } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.259957][ T36] audit: type=1400 audit(1781909795.812:122299): avc: denied { ioctl } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.286709][ T36] audit: type=1400 audit(1781909795.812:122300): avc: denied { ioctl } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.318918][ T36] audit: type=1400 audit(1781909795.812:122301): avc: denied { read write } for pid=961 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.349204][ T36] audit: type=1400 audit(1781909795.812:122302): avc: denied { read write open } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.374336][ T36] audit: type=1400 audit(1781909795.812:122303): avc: denied { ioctl } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.400123][ T310] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 309.415118][ T36] audit: type=1400 audit(1781909795.932:122304): avc: denied { ioctl } for pid=7285 comm="syz.1.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.564065][ T310] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 309.578580][ T310] usb 2-1: config 4 has no interface number 0 [ 309.593788][ T310] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.605032][ T310] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.615006][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.624134][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.639395][ T310] hub 2-1:4.128: USB hub found [ 309.848526][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.859327][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.868681][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.877783][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.887618][ T310] hub 2-1:4.128: 13 ports detected [ 309.892817][ T310] hub 2-1:4.128: Using single TT (err -22) [ 309.900041][ T310] hub 2-1:4.128: insufficient power available to use all downstream ports [ 310.090146][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.098717][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.109820][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.120975][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.121330][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.133427][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.148973][ T425] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 310.164796][ T310] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 310.171430][ T310] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 310.199335][ T310] usb 2-1: USB disconnect, device number 26 [ 310.300918][ T425] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 310.310727][ T425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14385, setting to 1024 [ 310.321881][ T425] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 310.334467][ T425] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 310.343580][ T425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.351587][ T425] usb 6-1: Product: syz [ 310.355766][ T425] usb 6-1: Manufacturer: syz [ 310.361059][ T425] usb 6-1: SerialNumber: syz [ 310.366849][ T425] usb 6-1: config 0 descriptor?? [ 310.373518][ T7307] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 310.381584][ T7307] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 310.929068][ T310] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 311.079083][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 311.086650][ T310] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 311.097528][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.108439][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.118193][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 311.131164][ T310] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 311.140244][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.149762][ T310] usb 2-1: config 0 descriptor?? [ 311.564841][ T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0032/input/input64 [ 311.579226][ T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0032/input/input65 [ 311.596228][ T310] kye 0003:0458:5013.0032: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 311.971690][ T310] usb 2-1: USB disconnect, device number 27 [ 312.714969][ T7340] ªªªªªª: renamed from vlan0 (while UP) [ 312.787940][ T425] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71 [ 312.813412][ T425] usb 6-1: USB disconnect, device number 22 [ 312.859311][ T66] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 313.010309][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2267'. [ 313.033293][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.045503][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 313.078928][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.090129][ T66] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 313.099106][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.116599][ T66] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 313.126659][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.134687][ T66] usb 2-1: Product: syz [ 313.140664][ T66] usb 2-1: Manufacturer: syz [ 313.145242][ T66] usb 2-1: SerialNumber: syz [ 313.299358][ T310] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 313.369671][ T66] usb 2-1: USB disconnect, device number 28 [ 313.418176][ T553] udevd[553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 313.452979][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.465137][ T310] usb 6-1: not running at top speed; connect to a high speed hub [ 313.474568][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.486310][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.497754][ T310] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 313.506816][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.514802][ T310] usb 6-1: Product: syz [ 313.518986][ T310] usb 6-1: Manufacturer: syz [ 313.523670][ T310] usb 6-1: SerialNumber: syz [ 313.744634][ T310] usb 6-1: unit 3 not found! [ 313.754246][ T310] usb 6-1: USB disconnect, device number 23 [ 313.785528][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 313.898939][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2271'. [ 313.912393][ T7362] netlink: 'syz.1.2271': attribute type 27 has an invalid length. [ 313.978081][ T7364] kvm: kvm [7363]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0xc0010007) = 0x4000 [ 314.139438][ T36] kauditd_printk_skb: 410 callbacks suppressed [ 314.139457][ T36] audit: type=1400 audit(1781909800.801:122715): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.209789][ T36] audit: type=1400 audit(1781909800.801:122716): avc: denied { read write open } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.234980][ T36] audit: type=1400 audit(1781909800.801:122717): avc: denied { ioctl } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.286485][ T7376] netlink: 'syz.1.2275': attribute type 46 has an invalid length. [ 314.294359][ T36] audit: type=1400 audit(1781909800.841:122718): avc: denied { mount } for pid=7368 comm="syz.1.2274" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 314.359467][ T36] audit: type=1400 audit(1781909800.851:122719): avc: denied { create } for pid=7368 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 314.410155][ T36] audit: type=1400 audit(1781909800.861:122720): avc: denied { sys_admin } for pid=7368 comm="syz.1.2274" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 314.424874][ T7380] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2277'. [ 314.446277][ T36] audit: type=1400 audit(1781909800.861:122721): avc: denied { sys_admin } for pid=7368 comm="syz.1.2274" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 314.470037][ T36] audit: type=1400 audit(1781909800.861:122722): avc: denied { write } for pid=7366 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.498750][ T36] audit: type=1400 audit(1781909800.901:122723): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.523680][ T36] audit: type=1400 audit(1781909800.901:122724): avc: denied { read write open } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.609503][ T371] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 314.739577][ T371] usb 6-1: device descriptor read/64, error -71 [ 314.879560][ T311] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 314.979569][ T371] usb 6-1: device descriptor read/64, error -71 [ 315.029561][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 315.037939][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.048493][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.057381][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.072789][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.081832][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.089822][ T311] usb 2-1: Manufacturer: îˆá¥¢êº ç˜¿ä“»è æ³ã†ä…¹îª´ì’†é¼™çŠ…ê€ë»Ÿé´šä™§â…¼ì´£ï•Šåˆã™ï–—å‘“ì—ଌä‡ä€´è‹¾ç¶·ä¤æœé±§ë—‰ì®˜é¿ˆï¿«â“蟸ë§á¯»ìŒ²é’§ìš¢ [ 315.105895][ T311] usb 2-1: SerialNumber: syz [ 315.219582][ T371] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 315.359604][ T371] usb 6-1: device descriptor read/64, error -71 [ 315.372321][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.380957][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.599652][ T371] usb 6-1: device descriptor read/64, error -71 [ 315.709734][ T371] usb usb6-port1: attempt power cycle [ 316.049737][ T371] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 316.072199][ T371] usb 6-1: device descriptor read/8, error -71 [ 316.211761][ T371] usb 6-1: device descriptor read/8, error -71 [ 316.449760][ T371] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 316.471765][ T371] usb 6-1: device descriptor read/8, error -71 [ 316.601752][ T371] usb 6-1: device descriptor read/8, error -71 [ 316.709843][ T371] usb usb6-port1: unable to enumerate USB device [ 316.944707][ T7400] FAULT_INJECTION: forcing a failure. [ 316.944707][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 316.957353][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.7.2285 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 316.957373][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.957381][ T7400] Call Trace: [ 316.957386][ T7400] [ 316.957391][ T7400] __dump_stack+0x21/0x30 [ 316.957475][ T7400] dump_stack_lvl+0x140/0x1c0 [ 316.957490][ T7400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 316.957505][ T7400] ? mas_prev+0x5f/0xa0 [ 316.957591][ T7400] dump_stack+0x19/0x20 [ 316.957605][ T7400] should_fail_ex+0x3d7/0x530 [ 316.957685][ T7400] should_failslab+0xac/0x100 [ 316.957752][ T7400] kmem_cache_alloc_noprof+0x42/0x410 [ 316.957795][ T7400] ? __anon_vma_prepare+0xf4/0x560 [ 316.957831][ T7400] __anon_vma_prepare+0xf4/0x560 [ 316.957842][ T7400] do_pte_missing+0x2b85/0x4410 [ 316.957896][ T7400] ? __kasan_check_write+0x18/0x20 [ 316.957906][ T7400] ? _raw_spin_lock+0x92/0x120 [ 316.957942][ T7400] ? pte_marker_clear+0x1b0/0x1b0 [ 316.957955][ T7400] ? __pmd_alloc+0x5a6/0x9a0 [ 316.957967][ T7400] ? __cfi___pmd_alloc+0x10/0x10 [ 316.957979][ T7400] ? arch_stack_walk+0x10a/0x170 [ 316.958030][ T7400] handle_mm_fault+0x11b8/0x1bf0 [ 316.958044][ T7400] ? __cfi_handle_mm_fault+0x10/0x10 [ 316.958056][ T7400] ? find_vma+0xd3/0x120 [ 316.958068][ T7400] ? lock_mm_and_find_vma+0xb8/0x390 [ 316.958080][ T7400] do_user_addr_fault+0x4c9/0x11e0 [ 316.958114][ T7400] exc_page_fault+0x58/0xc0 [ 316.958149][ T7400] asm_exc_page_fault+0x2b/0x30 [ 316.958246][ T7400] RIP: 0010:__put_user_4+0x11/0x30 [ 316.958296][ T7400] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 53 9c 02 00 90 90 90 90 90 90 90 90 90 90 [ 316.958305][ T7400] RSP: 0018:ffffc900035174f8 EFLAGS: 00050206 [ 316.958317][ T7400] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000047c0 [ 316.958324][ T7400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.958331][ T7400] RBP: ffffc90003517670 R08: 0000000000000003 R09: 0000000000000004 [ 316.958339][ T7400] R10: dffffc0000000000 R11: fffff520006a2e70 R12: 0000000000000000 [ 316.958346][ T7400] R13: ffffffff87e28c68 R14: dffffc0000000000 R15: 1ffff920006a2ea4 [ 316.958357][ T7400] ? sk_ioctl+0x3e2/0x6f0 [ 316.958442][ T7400] ? kasan_save_stack+0x4d/0x60 [ 316.958478][ T7400] ? __cfi_sk_ioctl+0x10/0x10 [ 316.958487][ T7400] ? __kasan_check_write+0x18/0x20 [ 316.958498][ T7400] ? _raw_spin_trylock+0xb5/0x140 [ 316.958512][ T7400] ? __cfi__raw_spin_trylock+0x10/0x10 [ 316.958526][ T7400] ? _raw_spin_unlock+0x45/0x60 [ 316.958539][ T7400] ? call_rcu_nocb+0x6d7/0xc80 [ 316.958604][ T7400] ieee802154_sock_ioctl+0x170/0x400 [ 316.958648][ T7400] ? __cfi_ieee802154_sock_ioctl+0x10/0x10 [ 316.958661][ T7400] ? __cfi_avc_node_free+0x10/0x10 [ 316.958706][ T7400] sock_do_ioctl+0x118/0x330 [ 316.958716][ T7400] ? sock_show_fdinfo+0xd0/0xd0 [ 316.958726][ T7400] ? __kasan_check_write+0x18/0x20 [ 316.958736][ T7400] ? _raw_spin_trylock+0xb5/0x140 [ 316.958750][ T7400] ? __cfi__raw_spin_trylock+0x10/0x10 [ 316.958767][ T7400] sock_ioctl+0x5b5/0x7f0 [ 316.958803][ T7400] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 316.958817][ T7400] ? __cfi_sock_ioctl+0x10/0x10 [ 316.958831][ T7400] ? __kasan_check_write+0x18/0x20 [ 316.958842][ T7400] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 316.958856][ T7400] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 316.958870][ T7400] ? __cfi_sock_ioctl+0x10/0x10 [ 316.958884][ T7400] do_vfs_ioctl+0xf8b/0x2010 [ 316.958923][ T7400] ? __asan_memcpy+0x5a/0x80 [ 316.958933][ T7400] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 316.958946][ T7400] ? avc_compute_av+0x443/0x760 [ 316.958958][ T7400] ? avc_perm_nonode+0x118/0x1d0 [ 316.958969][ T7400] ? avc_has_perm_noaudit+0x360/0x360 [ 316.958982][ T7400] ? kstrtouint+0x78/0xf0 [ 316.959039][ T7400] ? kstrtouint_from_user+0x117/0x170 [ 316.959051][ T7400] ? __x64_sys_openat+0x13a/0x170 [ 316.959087][ T7400] ? avc_has_perm_noaudit+0x220/0x360 [ 316.959099][ T7400] ? avc_has_perm+0x155/0x240 [ 316.959111][ T7400] ? __cfi_avc_has_perm+0x10/0x10 [ 316.959122][ T7400] ? proc_fail_nth_write+0x184/0x220 [ 316.959167][ T7400] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 316.959183][ T7400] ? selinux_file_ioctl+0xecd/0x1480 [ 316.959213][ T7400] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 316.959223][ T7400] ? __cfi_vfs_write+0x10/0x10 [ 316.959267][ T7400] ? __kasan_check_write+0x18/0x20 [ 316.959284][ T7400] ? mutex_unlock+0x90/0x240 [ 316.959301][ T7400] ? __cfi_mutex_unlock+0x10/0x10 [ 316.959318][ T7400] ? __fget_files+0x2c5/0x340 [ 316.959384][ T7400] ? __fget_files+0x2c5/0x340 [ 316.959396][ T7400] ? bpf_lsm_file_ioctl+0xd/0x20 [ 316.959456][ T7400] ? security_file_ioctl+0x3e/0x110 [ 316.959510][ T7400] __se_sys_ioctl+0x9f/0x1b0 [ 316.959523][ T7400] __x64_sys_ioctl+0x7f/0xa0 [ 316.959536][ T7400] x64_sys_call+0x1878/0x2ee0 [ 316.959546][ T7400] do_syscall_64+0x57/0xf0 [ 316.959560][ T7400] ? clear_bhb_loop+0x50/0xa0 [ 316.959571][ T7400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 316.959607][ T7400] RIP: 0033:0x7f072739ce59 [ 316.959621][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.959631][ T7400] RSP: 002b:00007f0728257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.959643][ T7400] RAX: ffffffffffffffda RBX: 00007f0727615fa0 RCX: 00007f072739ce59 [ 316.959651][ T7400] RDX: 00002000000047c0 RSI: 000000000000541b RDI: 0000000000000004 [ 316.959658][ T7400] RBP: 00007f0728257090 R08: 0000000000000000 R09: 0000000000000000 [ 316.959666][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.959672][ T7400] R13: 00007f0727616038 R14: 00007f0727615fa0 R15: 00007fff1000afd8 [ 316.959682][ T7400] [ 317.396053][ T7402] netlink: 'syz.5.2286': attribute type 30 has an invalid length. [ 317.616828][ T311] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 317.623667][ T311] cdc_ncm 2-1:1.0: bind() failure [ 317.629803][ T311] usb 2-1: USB disconnect, device number 29 [ 318.039490][ T7416] overlayfs: failed to clone upperpath [ 318.051398][ T7416] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 318.067823][ T7416] overlayfs: missing 'lowerdir' [ 318.599999][ T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 318.752061][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.763604][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.774527][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.784372][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.797280][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.806318][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.815710][ T31] usb 6-1: config 0 descriptor?? [ 319.026679][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.035254][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.239276][ T36] kauditd_printk_skb: 745 callbacks suppressed [ 319.239293][ T36] audit: type=1400 audit(1781909805.901:123470): avc: denied { create } for pid=7435 comm="syz.1.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.265784][ T36] audit: type=1400 audit(1781909805.931:123471): avc: denied { ioctl } for pid=7429 comm="syz.5.2293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.290881][ T36] audit: type=1400 audit(1781909805.931:123472): avc: denied { ioctl } for pid=7429 comm="syz.5.2293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.316547][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 319.322495][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 319.331456][ T31] usb 6-1: USB disconnect, device number 28 [ 319.747691][ T36] audit: type=1400 audit(1781909806.411:123473): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.772026][ T36] audit: type=1400 audit(1781909806.411:123474): avc: denied { read write open } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.807402][ T36] audit: type=1400 audit(1781909806.411:123475): avc: denied { ioctl } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.852276][ T36] audit: type=1400 audit(1781909806.451:123476): avc: denied { read write } for pid=961 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.877240][ T36] audit: type=1400 audit(1781909806.451:123477): avc: denied { read write open } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.938460][ T36] audit: type=1400 audit(1781909806.451:123478): avc: denied { ioctl } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.964373][ T36] audit: type=1400 audit(1781909806.501:123479): avc: denied { create } for pid=7440 comm="syz.1.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 320.020790][ T7453] netlink: 'syz.1.2301': attribute type 30 has an invalid length. [ 320.390208][ T371] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 320.540247][ T371] usb 6-1: Using ep0 maxpacket: 16 [ 320.562989][ T371] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 320.580221][ T371] usb 6-1: config 0 has no interface number 0 [ 320.586327][ T371] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 320.596506][ T7463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2305'. [ 320.610262][ T371] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 320.633507][ T371] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 320.650568][ T371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.669480][ T371] usb 6-1: Product: syz [ 320.674218][ T371] usb 6-1: Manufacturer: syz [ 320.678819][ T371] usb 6-1: SerialNumber: syz [ 320.698630][ T371] usb 6-1: config 0 descriptor?? [ 320.720660][ T7459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 320.728172][ T7459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 320.858220][ T7476] netlink: 'syz.4.2309': attribute type 58 has an invalid length. [ 320.918658][ T7480] overlayfs: failed to resolve './file1': -2 [ 320.956935][ T7459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 320.967013][ T7459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 320.976228][ T371] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 321.092434][ T7486] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 321.101881][ T7486] kvm: pic: level sensitive irq not supported [ 321.101945][ T7486] kvm: pic: non byte read [ 321.112606][ T7486] kvm: pic: level sensitive irq not supported [ 321.112669][ T7486] kvm: pic: non byte read [ 321.123521][ T7486] kvm: pic: level sensitive irq not supported [ 321.123577][ T7486] kvm: pic: non byte read [ 321.134313][ T7486] kvm: pic: level sensitive irq not supported [ 321.134367][ T7486] kvm: pic: non byte read [ 321.144955][ T7486] kvm: pic: level sensitive irq not supported [ 321.145004][ T7486] kvm: pic: non byte read [ 321.185187][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.194437][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.209484][ T371] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 321.232889][ T371] asix 6-1:0.34: probe with driver asix failed with error -71 [ 321.270387][ T371] usb 6-1: USB disconnect, device number 29 [ 321.548076][ T7509] netlink: 'syz.1.2319': attribute type 30 has an invalid length. [ 321.750391][ T310] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 321.900390][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 321.910375][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.920898][ T310] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.939026][ T310] usb 6-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 321.948692][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.957264][ T310] usb 6-1: Product: syz [ 321.961984][ T310] usb 6-1: Manufacturer: syz [ 321.966638][ T310] usb 6-1: SerialNumber: syz [ 322.190851][ T310] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 322.226866][ T310] usb 6-1: USB disconnect, device number 30 [ 322.300574][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.103709][ T7537] netlink: 744 bytes leftover after parsing attributes in process `syz.1.2328'. [ 323.116648][ T7537] syzkaller1: entered promiscuous mode [ 323.122213][ T7537] syzkaller1: entered allmulticast mode [ 323.166346][ T7541] netlink: 'syz.4.2330': attribute type 30 has an invalid length. [ 323.233026][ T7544] netlink: 'syz.4.2332': attribute type 4 has an invalid length. [ 323.361884][ T7558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3689 sclass=netlink_route_socket pid=7558 comm=syz.4.2338 [ 323.440922][ T7564] netlink: 'syz.4.2341': attribute type 30 has an invalid length. [ 323.520575][ T371] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 323.574767][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 323.671584][ T371] usb 2-1: Using ep0 maxpacket: 8 [ 323.692793][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 323.710690][ T371] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 323.711462][ T310] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 323.727963][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.761449][ T371] usb 2-1: config 0 descriptor?? [ 323.895096][ T310] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 323.926675][ T310] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 323.936706][ T7586] netlink: 'syz.7.2347': attribute type 16 has an invalid length. [ 323.950623][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.964294][ T310] usb 6-1: Product: syz [ 323.968472][ T310] usb 6-1: Manufacturer: syz [ 323.983339][ T310] usb 6-1: SerialNumber: syz [ 323.993431][ T7586] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2347'. [ 324.017891][ T7562] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 324.026241][ T371] usbhid 2-1:0.0: can't add hid device: -71 [ 324.035045][ T371] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 324.062471][ T371] usb 2-1: USB disconnect, device number 30 [ 324.133877][ T7597] netlink: 'syz.4.2350': attribute type 30 has an invalid length. [ 324.243058][ T36] kauditd_printk_skb: 511 callbacks suppressed [ 324.243082][ T36] audit: type=1400 audit(1781909810.910:123991): avc: denied { read } for pid=7561 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.269777][ T36] audit: type=1400 audit(1781909810.930:123992): avc: denied { create } for pid=7602 comm="syz.4.2353" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.299580][ T36] audit: type=1400 audit(1781909810.930:123993): avc: denied { map } for pid=7602 comm="syz.4.2353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.344017][ T36] audit: type=1400 audit(1781909810.930:123994): avc: denied { read write } for pid=7602 comm="syz.4.2353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.374691][ T36] audit: type=1400 audit(1781909810.930:123995): avc: denied { map } for pid=7602 comm="syz.4.2353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.433117][ T310] usb 6-1: USB disconnect, device number 31 [ 324.461054][ T36] audit: type=1400 audit(1781909810.930:123996): avc: denied { read write } for pid=7602 comm="syz.4.2353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.518960][ T36] audit: type=1400 audit(1781909810.940:123997): avc: denied { map } for pid=7602 comm="syz.4.2353" path="socket:[60273]" dev="sockfs" ino=60273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 324.546767][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 324.564383][ T36] audit: type=1400 audit(1781909810.990:123998): avc: denied { read write } for pid=4616 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.608424][ T36] audit: type=1400 audit(1781909811.000:123999): avc: denied { read write open } for pid=4616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.662150][ T36] audit: type=1400 audit(1781909811.000:124000): avc: denied { ioctl } for pid=4616 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.787554][ T7623] netlink: 'syz.4.2359': attribute type 30 has an invalid length. [ 324.827397][ T7625] tmpfs: Unknown parameter 'h}ge' [ 325.266430][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 325.270807][ T425] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 325.329888][ T7644] netlink: 'syz.1.2368': attribute type 30 has an invalid length. [ 325.413257][ T425] usb 6-1: device descriptor read/64, error -71 [ 325.510858][ T7650] overlayfs: failed to clone upperpath [ 325.660853][ T425] usb 6-1: device descriptor read/64, error -71 [ 325.900897][ T425] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 326.040923][ T425] usb 6-1: device descriptor read/64, error -71 [ 326.281013][ T425] usb 6-1: device descriptor read/64, error -71 [ 326.393205][ T425] usb usb6-port1: attempt power cycle [ 326.770980][ T425] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 326.793624][ T425] usb 6-1: device descriptor read/8, error -71 [ 326.927283][ T425] usb 6-1: device descriptor read/8, error -71 [ 327.106123][ T7694] syz.4.2382: vmalloc error: size 46137344, failed to allocated page array size 90112, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 327.141046][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.4.2382 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 327.141078][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.141091][ T7694] Call Trace: [ 327.141098][ T7694] [ 327.141105][ T7694] __dump_stack+0x21/0x30 [ 327.141134][ T7694] dump_stack_lvl+0x140/0x1c0 [ 327.141164][ T7694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 327.141186][ T7694] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 327.141212][ T7694] dump_stack+0x19/0x20 [ 327.141233][ T7694] warn_alloc+0x1e7/0x2c0 [ 327.141370][ T7694] ? __kasan_slab_free+0x5f/0x80 [ 327.141400][ T7694] ? __cfi_warn_alloc+0x10/0x10 [ 327.141425][ T7694] ? __get_vm_area_node+0x201/0x3d0 [ 327.141452][ T7694] ? xt_alloc_entry_offsets+0x56/0xe0 [ 327.141530][ T7694] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 327.141572][ T7694] ? __kasan_kmalloc_large+0x1e/0x50 [ 327.141595][ T7694] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 327.141623][ T7694] ? __kmalloc_large_node_noprof+0x1e/0xd0 [ 327.141644][ T7694] ? __kmalloc_node_noprof+0x350/0x4f0 [ 327.141671][ T7694] ? nf_setsockopt+0x290/0x2b0 [ 327.141730][ T7694] ? ipv6_setsockopt+0x130/0x170 [ 327.141809][ T7694] ? __kvmalloc_node_noprof+0x128/0x300 [ 327.141861][ T7694] ? do_sock_setsockopt+0x27c/0x410 [ 327.141883][ T7694] __kvmalloc_node_noprof+0x104/0x300 [ 327.141902][ T7694] ? xt_alloc_entry_offsets+0x56/0xe0 [ 327.141925][ T7694] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 327.141944][ T7694] xt_alloc_entry_offsets+0x56/0xe0 [ 327.141967][ T7694] translate_table+0x192/0x20c0 [ 327.142018][ T7694] ? __kasan_kmalloc+0x96/0xb0 [ 327.142038][ T7694] ? ip6t_register_table+0x7f0/0x7f0 [ 327.142061][ T7694] ? __kvmalloc_node_noprof+0x128/0x300 [ 327.142077][ T7694] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 327.142103][ T7694] ? __check_object_size+0xea/0x830 [ 327.142131][ T7694] ? __cfi___check_object_size+0x10/0x10 [ 327.142151][ T7694] ? should_fail+0xf/0x20 [ 327.142174][ T7694] ? _copy_from_user+0x87/0xa0 [ 327.142193][ T7694] ? copy_from_sockptr_offset+0x77/0xb0 [ 327.142217][ T7694] do_ip6t_set_ctl+0x9c5/0xd70 [ 327.142241][ T7694] ? __cfi_do_ip6t_set_ctl+0x10/0x10 [ 327.142264][ T7694] ? avc_has_perm_noaudit+0x220/0x360 [ 327.142288][ T7694] ? __cfi_avc_has_perm+0x10/0x10 [ 327.142310][ T7694] ? __kasan_check_write+0x18/0x20 [ 327.142329][ T7694] ? mutex_unlock+0x90/0x240 [ 327.142349][ T7694] ? __cfi_mutex_unlock+0x10/0x10 [ 327.142369][ T7694] ? selinux_socket_setsockopt+0x324/0x3d0 [ 327.142428][ T7694] nf_setsockopt+0x290/0x2b0 [ 327.142455][ T7694] ipv6_setsockopt+0x130/0x170 [ 327.142477][ T7694] udpv6_setsockopt+0xa3/0xc0 [ 327.142494][ T7694] sock_common_setsockopt+0xb5/0xd0 [ 327.142509][ T7694] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 327.142527][ T7694] do_sock_setsockopt+0x27c/0x410 [ 327.142550][ T7694] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 327.142574][ T7694] __x64_sys_setsockopt+0x1b7/0x250 [ 327.142602][ T7694] x64_sys_call+0x2adc/0x2ee0 [ 327.142619][ T7694] do_syscall_64+0x57/0xf0 [ 327.142643][ T7694] ? clear_bhb_loop+0x50/0xa0 [ 327.142660][ T7694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 327.142685][ T7694] RIP: 0033:0x7f67af39ce59 [ 327.142700][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.142715][ T7694] RSP: 002b:00007f67b01d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.142736][ T7694] RAX: ffffffffffffffda RBX: 00007f67af616180 RCX: 00007f67af39ce59 [ 327.142750][ T7694] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 327.142767][ T7694] RBP: 00007f67af432e6f R08: 00000000000d0060 R09: 0000000000000000 [ 327.142780][ T7694] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 327.142793][ T7694] R13: 00007f67af616218 R14: 00007f67af616180 R15: 00007ffc6a42e1c8 [ 327.142809][ T7694] [ 327.142882][ T7694] Mem-Info: [ 327.524711][ T7694] active_anon:41659 inactive_anon:638 isolated_anon:0 [ 327.524711][ T7694] active_file:22197 inactive_file:2633 isolated_file:0 [ 327.524711][ T7694] unevictable:15479 dirty:66 writeback:0 [ 327.524711][ T7694] slab_reclaimable:5121 slab_unreclaimable:72976 [ 327.524711][ T7694] mapped:25249 shmem:33075 pagetables:1146 [ 327.524711][ T7694] sec_pagetables:3 bounce:0 [ 327.524711][ T7694] kernel_misc_reclaimable:0 [ 327.524711][ T7694] free:1452866 free_pcp:7698 free_cma:0 [ 327.524996][ T425] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 327.592896][ T7694] Node 0 active_anon:166636kB inactive_anon:2552kB active_file:88788kB inactive_file:10532kB unevictable:61916kB isolated(anon):0kB isolated(file):0kB mapped:100996kB dirty:264kB writeback:0kB shmem:132300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6900kB pagetables:4584kB sec_pagetables:12kB all_unreclaimable? no [ 327.625527][ T425] usb 6-1: device descriptor read/8, error -71 [ 327.641065][ T7694] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963284kB mlocked:0kB bounce:0kB free_pcp:5120kB local_pcp:0kB free_cma:0kB [ 327.684496][ T7694] lowmem_reserve[]: 0 3921 3921 [ 327.692147][ T7694] Normal free:2853036kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:166640kB inactive_anon:2552kB active_file:88788kB inactive_file:10532kB unevictable:61916kB writepending:264kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:26032kB local_pcp:1360kB free_cma:0kB [ 327.726561][ T7694] lowmem_reserve[]: 0 0 0 [ 327.730889][ T7694] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 327.731085][ T371] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 327.746295][ T7694] Normal: 117*4kB (UME) 27*8kB (UME) 77*16kB (UME) 71*32kB (UME) 113*64kB (UME) 90*128kB (UME) 73*256kB (UME) 53*512kB (UME) 9*1024kB (ME) 11*2048kB (UM) 672*4096kB (UM) = 2853020kB [ 327.772044][ T7694] 74069 total pagecache pages [ 327.776330][ T425] usb 6-1: device descriptor read/8, error -71 [ 327.776709][ T7694] 690 pages in swap cache [ 327.787180][ T7694] Free swap = 121504kB [ 327.791345][ T7694] Total swap = 124996kB [ 327.795485][ T7694] 2097051 pages RAM [ 327.799264][ T7694] 0 pages HighMem/MovableOnly [ 327.803954][ T7694] 352264 pages reserved [ 327.808092][ T7694] 0 pages cma reserved [ 327.813810][ T7694] Memory allocations: [ 327.817784][ T7694] 0 B 0 init/main.c:1477 func:do_initcalls [ 327.825034][ T7694] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 327.833119][ T7694] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 327.840733][ T7694] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 327.848658][ T7694] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 327.856561][ T7694] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 327.865174][ T7694] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 327.873075][ T7694] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 327.880949][ T7694] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 327.888859][ T7694] 0 B 0 init/initramfs.c:101 func:find_link [ 327.902282][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 327.907493][ T425] usb usb6-port1: unable to enumerate USB device [ 327.919429][ T371] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 327.931205][ T371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.943093][ T371] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 327.952241][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.960236][ T371] usb 2-1: SerialNumber: syz [ 327.969181][ T371] usb 2-1: 0:2 : does not exist [ 328.122129][ T7705] can0: slcan on ttynull. [ 328.252014][ T7704] can0 (unregistered): slcan off ttynull. [ 328.396653][ T371] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 328.424982][ T371] usb 2-1: 5:0: failed to get current value for ch 2 (-22) [ 328.465613][ T371] usb 2-1: 5:0: failed to get current value for ch 3 (-22) [ 328.505846][ T371] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 328.529744][ T371] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 328.566273][ T371] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 328.583495][ T371] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 328.606793][ T371] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 328.636748][ T371] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 328.672146][ T371] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 328.714865][ T371] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 328.726371][ T371] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 328.765804][ T371] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 328.796464][ T371] usb 2-1: USB disconnect, device number 31 [ 328.974339][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 329.121241][ T425] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 329.251264][ T36] kauditd_printk_skb: 687 callbacks suppressed [ 329.251282][ T36] audit: type=1400 audit(1781909815.910:124688): avc: denied { ioctl } for pid=2528 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.295339][ T425] usb 6-1: device descriptor read/64, error -71 [ 329.371700][ T36] audit: type=1400 audit(1781909815.920:124689): avc: denied { create } for pid=7754 comm="syz.7.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.467884][ T36] audit: type=1400 audit(1781909815.920:124690): avc: denied { write } for pid=7754 comm="syz.7.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.531288][ T36] audit: type=1400 audit(1781909815.920:124691): avc: denied { nlmsg_write } for pid=7754 comm="syz.7.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.571539][ T425] usb 6-1: device descriptor read/64, error -71 [ 329.601290][ T36] audit: type=1400 audit(1781909815.970:124692): avc: denied { search } for pid=7757 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.669354][ T36] audit: type=1400 audit(1781909815.970:124693): avc: denied { search } for pid=7757 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.694330][ T36] audit: type=1400 audit(1781909815.970:124694): avc: denied { search } for pid=7757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.703740][ T7738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 329.719889][ T36] audit: type=1400 audit(1781909815.970:124695): avc: denied { search } for pid=7757 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.727199][ T4616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 329.821325][ T425] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 329.984067][ T425] usb 6-1: device descriptor read/64, error -71 [ 330.272364][ T425] usb 6-1: device descriptor read/64, error -71 [ 330.381380][ T425] usb usb6-port1: attempt power cycle [ 330.571312][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 330.701330][ T45] usb 2-1: device descriptor read/64, error -71 [ 330.721338][ T425] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 330.743176][ T425] usb 6-1: device descriptor read/8, error -71 [ 330.873730][ T425] usb 6-1: device descriptor read/8, error -71 [ 330.932334][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 330.941214][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 330.950132][ T45] usb 2-1: device descriptor read/64, error -71 [ 330.956468][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 330.965376][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 331.111307][ T425] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 331.133031][ T425] usb 6-1: device descriptor read/8, error -71 [ 331.201313][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 331.264362][ T425] usb 6-1: device descriptor read/8, error -71 [ 331.341309][ T45] usb 2-1: device descriptor read/64, error -71 [ 331.371683][ T425] usb usb6-port1: unable to enumerate USB device [ 331.601293][ T45] usb 2-1: device descriptor read/64, error -71 [ 331.731386][ T45] usb usb2-port1: attempt power cycle [ 332.075706][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 332.111286][ T45] usb 2-1: device descriptor read/8, error -71 [ 332.253393][ T45] usb 2-1: device descriptor read/8, error -71 [ 332.493280][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 332.502215][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 332.527471][ T45] usb 2-1: device descriptor read/8, error -71 [ 332.651409][ T7868] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 332.664301][ T45] usb 2-1: device descriptor read/8, error -71 [ 332.771670][ T45] usb usb2-port1: unable to enumerate USB device [ 333.751324][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 333.901331][ T10] usb 2-1: device descriptor read/64, error -71 [ 334.141295][ T10] usb 2-1: device descriptor read/64, error -71 [ 334.276631][ T36] kauditd_printk_skb: 639 callbacks suppressed [ 334.276650][ T36] audit: type=1400 audit(2000000004.719:125331): avc: denied { create } for pid=7834 comm="syz.4.2420" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.304824][ T36] audit: type=1400 audit(2000000004.719:125332): avc: denied { map } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.329526][ T36] audit: type=1400 audit(2000000004.719:125333): avc: denied { read write } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.354728][ T36] audit: type=1400 audit(2000000004.719:125334): avc: denied { map } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.379358][ T36] audit: type=1400 audit(2000000004.719:125335): avc: denied { read write } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.404357][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 334.412111][ T36] audit: type=1400 audit(2000000004.719:125336): avc: denied { map } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.436708][ T36] audit: type=1400 audit(2000000004.719:125337): avc: denied { read } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.461386][ T36] audit: type=1400 audit(2000000004.769:125338): avc: denied { create } for pid=7834 comm="syz.4.2420" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.483160][ T36] audit: type=1400 audit(2000000004.769:125339): avc: denied { map } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.507643][ T36] audit: type=1400 audit(2000000004.769:125340): avc: denied { read write } for pid=7834 comm="syz.4.2420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 334.617812][ T10] usb 2-1: device descriptor read/64, error -71 [ 334.931357][ T10] usb 2-1: device descriptor read/64, error -71 [ 334.939522][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2434'. [ 335.042549][ T10] usb usb2-port1: attempt power cycle [ 335.098914][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2435'. [ 335.381303][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 335.423841][ T10] usb 2-1: device descriptor read/8, error -71 [ 335.554352][ T10] usb 2-1: device descriptor read/8, error -71 [ 335.791313][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 335.833838][ T10] usb 2-1: device descriptor read/8, error -71 [ 335.963792][ T10] usb 2-1: device descriptor read/8, error -71 [ 336.071806][ T10] usb usb2-port1: unable to enumerate USB device [ 336.464897][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2444'. [ 336.981872][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2455'. [ 337.052673][ T900] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.222035][ T7969] tipc: Started in network mode [ 337.227003][ T7969] tipc: Node identity ac14140f, cluster identity 4711 [ 337.234711][ T7969] tipc: New replicast peer: 255.255.255.255 [ 337.240882][ T7969] tipc: Enabled bearer , priority 10 [ 337.411287][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 337.583623][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.594610][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.604356][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 337.613438][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.622904][ T10] usb 2-1: config 0 descriptor?? [ 337.631315][ T310] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 337.742874][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2466'. [ 337.804723][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.817747][ T310] usb 6-1: not running at top speed; connect to a high speed hub [ 337.840142][ T310] usb 6-1: config 64 has an invalid interface number: 209 but max is 0 [ 337.853433][ T7988] fuse: Invalid rootmode [ 337.870003][ T310] usb 6-1: config 64 has no interface number 0 [ 337.878978][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.888401][ T7988] fuse: Bad value for 'group_id' [ 337.890520][ T310] usb 6-1: config 64 interface 209 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 337.901294][ T7988] fuse: Bad value for 'group_id' [ 337.914621][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.928167][ T310] usb 6-1: config 64 interface 209 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 337.941749][ T310] usb 6-1: config 64 interface 209 has no altsetting 0 [ 337.953583][ T310] usb 6-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice=be.8b [ 337.963588][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.977679][ T310] usb 6-1: Product: syz [ 337.982647][ T310] usb 6-1: Manufacturer: syz [ 337.988200][ T310] usb 6-1: SerialNumber: syz [ 338.181959][ T8002] netlink: 'syz.7.2474': attribute type 30 has an invalid length. [ 338.214483][ T310] snd-usb-audio 6-1:64.209: probe with driver snd-usb-audio failed with error -2 [ 338.235653][ T310] usb 6-1: USB disconnect, device number 40 [ 338.291561][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 338.311405][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:64.209/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.347112][ T7961] netlink: 'syz.1.2460': attribute type 6 has an invalid length. [ 338.362012][ T7961] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.379445][ T31] tipc: Node number set to 2886997007 [ 338.392521][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 338.411574][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.440420][ T10] usb 2-1: USB disconnect, device number 40 [ 339.044145][ T8033] netlink: 'syz.4.2485': attribute type 30 has an invalid length. [ 339.195282][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 339.238323][ T8041] tipc: Enabling of bearer rejected, media not registered [ 339.281927][ T36] kauditd_printk_skb: 528 callbacks suppressed [ 339.281942][ T36] audit: type=1400 audit(2000000009.729:125869): avc: denied { name_bind } for pid=8040 comm="syz.1.2489" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 339.322442][ T36] audit: type=1400 audit(2000000009.749:125870): avc: denied { name_bind } for pid=8040 comm="syz.1.2489" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 339.345280][ T36] audit: type=1400 audit(2000000009.769:125871): avc: denied { read } for pid=8043 comm="syz.7.2490" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.368853][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 339.387969][ T36] audit: type=1400 audit(2000000009.769:125872): avc: denied { read open } for pid=8043 comm="syz.7.2490" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.413413][ T31] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 339.422859][ T31] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 339.431316][ T36] audit: type=1400 audit(2000000009.769:125873): avc: denied { ioctl } for pid=8043 comm="syz.7.2490" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.433899][ T31] usb 6-1: config 3 has no interface number 0 [ 339.457649][ T36] audit: type=1400 audit(2000000009.829:125874): avc: denied { create } for pid=8040 comm="syz.1.2489" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 339.464831][ T31] usb 6-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 339.495948][ T36] audit: type=1400 audit(2000000009.829:125875): avc: denied { map } for pid=8040 comm="syz.1.2489" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 339.497016][ T31] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.534009][ T31] usb 6-1: config 3 interface 45 has no altsetting 0 [ 339.539420][ T36] audit: type=1400 audit(2000000009.829:125876): avc: denied { read write } for pid=8040 comm="syz.1.2489" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 339.559829][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 339.579493][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.588260][ T31] usb 6-1: Product: syz [ 339.593368][ T31] usb 6-1: Manufacturer: syz [ 339.598108][ T31] usb 6-1: SerialNumber: syz [ 339.602032][ T36] audit: type=1400 audit(2000000009.829:125877): avc: denied { map } for pid=8040 comm="syz.1.2489" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 339.636364][ T36] audit: type=1400 audit(2000000009.829:125878): avc: denied { read write } for pid=8040 comm="syz.1.2489" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 339.813286][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.830326][ T8057] SELinux: failed to load policy [ 339.833535][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.860892][ T8028] syzkaller1: entered promiscuous mode [ 339.866941][ T8028] syzkaller1: entered allmulticast mode [ 339.897613][ T8063] netlink: 'syz.4.2496': attribute type 30 has an invalid length. [ 339.961447][ T31] usb 6-1: USB disconnect, device number 41 [ 340.038554][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 340.127601][ T8068] overlayfs: failed to clone upperpath [ 340.219865][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 340.228804][ T8076] bridge_slave_1: left allmulticast mode [ 340.234481][ T8076] bridge_slave_1: left promiscuous mode [ 340.240095][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.428809][ T8084] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 340.428832][ T8084] rust_binder: Read failure Err(EFAULT) in pid:1381 [ 340.595989][ T8096] netlink: 'syz.5.2506': attribute type 30 has an invalid length. [ 341.031312][ T425] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 341.183202][ T425] usb 6-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 341.193885][ T425] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 341.205439][ T425] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9121, setting to 64 [ 341.216385][ T425] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.231962][ T425] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 341.241072][ T425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.249080][ T425] usb 6-1: Product: syz [ 341.253364][ T425] usb 6-1: Manufacturer: syz [ 341.257995][ T425] usb 6-1: SerialNumber: syz [ 341.266312][ T425] cdc_subset 6-1:1.0: probe with driver cdc_subset failed with error -22 [ 341.275049][ T425] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 341.282458][ T425] cdc_ncm 6-1:1.0: bind() failure [ 341.288205][ T425] cdc_subset 6-1:1.1: probe with driver cdc_subset failed with error -22 [ 341.296814][ T425] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 341.303650][ T425] cdc_ncm 6-1:1.1: bind() failure [ 341.479018][ T31] usb 6-1: USB disconnect, device number 42 [ 341.682511][ T8115] fuse: Bad value for 'fd' [ 342.271300][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 342.428409][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.450711][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2512'. [ 342.461007][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.514698][ T31] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 342.538333][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.559158][ T31] usb 6-1: config 0 descriptor?? [ 342.977835][ T8119] syz.5.2511 (8119): /proc/8118/oom_adj is deprecated, please use /proc/8118/oom_score_adj instead. [ 343.179035][ T8134] netlink: 'syz.4.2516': attribute type 30 has an invalid length. [ 343.194177][ T31] usb 6-1: language id specifier not provided by device, defaulting to English [ 343.804392][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.819381][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.832774][ T31] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #100: -71 [ 343.850858][ T31] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 343.859440][ T31] uclogic 0003:256C:006D.0033: failed probing pen v1 parameters: -71 [ 343.867634][ T31] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 343.871305][ T371] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 343.876202][ T31] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 343.896225][ T31] usb 6-1: USB disconnect, device number 43 [ 344.041318][ T371] usb 2-1: Using ep0 maxpacket: 16 [ 344.050688][ T371] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 344.060253][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.068273][ T371] usb 2-1: Product: syz [ 344.072485][ T371] usb 2-1: Manufacturer: syz [ 344.077075][ T371] usb 2-1: SerialNumber: syz [ 344.355561][ T36] kauditd_printk_skb: 1967 callbacks suppressed [ 344.355580][ T36] audit: type=1400 audit(2000000014.799:127846): avc: denied { read write } for pid=961 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.386542][ T36] audit: type=1400 audit(2000000014.799:127847): avc: denied { read write open } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.395618][ T8158] netlink: 'syz.5.2526': attribute type 30 has an invalid length. [ 344.440641][ T36] audit: type=1400 audit(2000000014.799:127848): avc: denied { ioctl } for pid=961 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.469456][ T36] audit: type=1400 audit(2000000014.839:127849): avc: denied { write } for pid=8157 comm="syz.5.2526" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.495641][ T36] audit: type=1400 audit(2000000014.839:127850): avc: denied { write } for pid=8157 comm="syz.5.2526" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.522506][ T36] audit: type=1400 audit(2000000014.869:127851): avc: denied { write } for pid=8157 comm="syz.5.2526" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.546286][ T36] audit: type=1400 audit(2000000014.869:127852): avc: denied { write open } for pid=8157 comm="syz.5.2526" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.570768][ T36] audit: type=1400 audit(2000000014.869:127853): avc: denied { read } for pid=8157 comm="syz.5.2526" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.601145][ T36] audit: type=1400 audit(2000000014.869:127854): avc: denied { read open } for pid=8157 comm="syz.5.2526" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.624983][ T36] audit: type=1400 audit(2000000014.869:127855): avc: denied { read } for pid=8157 comm="syz.5.2526" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.851765][ T8167] FAULT_INJECTION: forcing a failure. [ 344.851765][ T8167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.865002][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.5.2530 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 344.865029][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.865036][ T8167] Call Trace: [ 344.865041][ T8167] [ 344.865045][ T8167] __dump_stack+0x21/0x30 [ 344.865068][ T8167] dump_stack_lvl+0x140/0x1c0 [ 344.865082][ T8167] ? __cfi_dump_stack_lvl+0x10/0x10 [ 344.865100][ T8167] ? _parse_integer+0x2e/0x40 [ 344.865114][ T8167] ? kstrtoull+0x13b/0x1e0 [ 344.865126][ T8167] dump_stack+0x19/0x20 [ 344.865139][ T8167] should_fail_ex+0x3d7/0x530 [ 344.865160][ T8167] should_fail+0xf/0x20 [ 344.865171][ T8167] should_fail_usercopy+0x1e/0x30 [ 344.865185][ T8167] _copy_from_user+0x20/0xa0 [ 344.865195][ T8167] ___sys_sendmsg+0x1c7/0x370 [ 344.865211][ T8167] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.865224][ T8167] ? proc_fail_nth_write+0x184/0x220 [ 344.865240][ T8167] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 344.865255][ T8167] ? _raw_spin_lock_irq+0x93/0x120 [ 344.865274][ T8167] __x64_sys_sendmsg+0x1fb/0x2d0 [ 344.865287][ T8167] ? fput+0x1a4/0x240 [ 344.865302][ T8167] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 344.865319][ T8167] ? ksys_write+0x1f3/0x260 [ 344.865330][ T8167] ? __kasan_check_read+0x15/0x20 [ 344.865342][ T8167] x64_sys_call+0x2a4c/0x2ee0 [ 344.865353][ T8167] do_syscall_64+0x57/0xf0 [ 344.865367][ T8167] ? clear_bhb_loop+0x50/0xa0 [ 344.865379][ T8167] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 344.865395][ T8167] RIP: 0033:0x7f57af79ce59 [ 344.865405][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.865414][ T8167] RSP: 002b:00007f57b0691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.865427][ T8167] RAX: ffffffffffffffda RBX: 00007f57afa15fa0 RCX: 00007f57af79ce59 [ 344.865435][ T8167] RDX: 0000000024008100 RSI: 0000200000000340 RDI: 0000000000000004 [ 344.865443][ T8167] RBP: 00007f57b0691090 R08: 0000000000000000 R09: 0000000000000000 [ 344.865450][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.865457][ T8167] R13: 00007f57afa16038 R14: 00007f57afa15fa0 R15: 00007ffdaa1dbeb8 [ 344.865466][ T8167] [ 345.205450][ T8175] x_tables: unsorted entry at hook 2 [ 345.230586][ T8175] syzkaller1: entered promiscuous mode [ 345.243507][ T8175] syzkaller1: entered allmulticast mode [ 345.326256][ T8183] netlink: 'syz.5.2536': attribute type 30 has an invalid length. [ 345.359390][ T371] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 345.377519][ T371] usb 2-1: USB disconnect, device number 41 [ 346.001716][ T8212] netlink: 'syz.1.2546': attribute type 30 has an invalid length. [ 346.097228][ T573] Bluetooth: hci0: sending frame failed (-49) [ 346.103504][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 346.343336][ T8234] netlink: 'syz.5.2554': attribute type 4 has an invalid length. [ 346.412183][ T8242] netlink: 'syz.7.2556': attribute type 30 has an invalid length. [ 346.747634][ T8264] netlink: 'syz.1.2565': attribute type 30 has an invalid length. [ 347.157278][ T8284] netlink: 'syz.7.2575': attribute type 30 has an invalid length. [ 348.213827][ T8339] netlink: 'syz.5.2595': attribute type 30 has an invalid length. [ 348.298947][ T8354] FAULT_INJECTION: forcing a failure. [ 348.298947][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.312170][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.5.2600 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 348.312200][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.312211][ T8354] Call Trace: [ 348.312218][ T8354] [ 348.312226][ T8354] __dump_stack+0x21/0x30 [ 348.312257][ T8354] dump_stack_lvl+0x140/0x1c0 [ 348.312281][ T8354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 348.312305][ T8354] ? check_stack_object+0x12b/0x150 [ 348.312326][ T8354] dump_stack+0x19/0x20 [ 348.312349][ T8354] should_fail_ex+0x3d7/0x530 [ 348.312372][ T8354] should_fail+0xf/0x20 [ 348.312393][ T8354] should_fail_usercopy+0x1e/0x30 [ 348.312416][ T8354] _copy_to_user+0x24/0xa0 [ 348.312433][ T8354] simple_read_from_buffer+0xed/0x160 [ 348.312541][ T8354] proc_fail_nth_read+0x1aa/0x220 [ 348.312566][ T8354] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 348.312591][ T8354] ? bpf_lsm_file_permission+0xd/0x20 [ 348.312616][ T8354] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 348.312640][ T8354] vfs_read+0x289/0xcb0 [ 348.312659][ T8354] ? __cfi_vfs_read+0x10/0x10 [ 348.312677][ T8354] ? __kasan_check_write+0x18/0x20 [ 348.312696][ T8354] ? mutex_lock+0x97/0x1d0 [ 348.312714][ T8354] ? __cfi_mutex_lock+0x10/0x10 [ 348.312732][ T8354] ? __fget_files+0x2c5/0x340 [ 348.312755][ T8354] ksys_read+0x145/0x260 [ 348.312774][ T8354] ? __cfi_ksys_read+0x10/0x10 [ 348.312800][ T8354] ? fdget+0x188/0x1e0 [ 348.312821][ T8354] ? __kasan_check_read+0x15/0x20 [ 348.312839][ T8354] __x64_sys_read+0x7f/0x90 [ 348.312857][ T8354] x64_sys_call+0x2638/0x2ee0 [ 348.312876][ T8354] do_syscall_64+0x57/0xf0 [ 348.312899][ T8354] ? clear_bhb_loop+0x50/0xa0 [ 348.312918][ T8354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 348.312944][ T8354] RIP: 0033:0x7f57af75d68e [ 348.312961][ T8354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.312977][ T8354] RSP: 002b:00007f57b0690fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.312998][ T8354] RAX: ffffffffffffffda RBX: 00007f57b06916c0 RCX: 00007f57af75d68e [ 348.313014][ T8354] RDX: 000000000000000f RSI: 00007f57b06910a0 RDI: 0000000000000003 [ 348.313026][ T8354] RBP: 00007f57b0691090 R08: 0000000000000000 R09: 0000000000000000 [ 348.313038][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.313050][ T8354] R13: 00007f57afa16038 R14: 00007f57afa15fa0 R15: 00007ffdaa1dbeb8 [ 348.313066][ T8354] [ 348.616291][ T8358] syzkaller1: left promiscuous mode [ 348.621642][ T8358] syzkaller1: left allmulticast mode [ 348.675433][ T8360] syzkaller1: entered promiscuous mode [ 348.680942][ T8360] syzkaller1: entered allmulticast mode [ 348.828406][ T8372] cgroup: fork rejected by pids controller in /syz5 [ 348.907428][ T8503] netlink: 'syz.5.2609': attribute type 30 has an invalid length. [ 348.935248][ T8505] netlink: 328 bytes leftover after parsing attributes in process `syz.5.2610'. [ 348.971840][ T8505] Bluetooth: hci0: Frame reassembly failed (-84) [ 348.989241][ T909] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.265717][ T8517] netlink: 'syz.7.2614': attribute type 6 has an invalid length. [ 350.089842][ T36] kauditd_printk_skb: 459 callbacks suppressed [ 350.089860][ T36] audit: type=1400 audit(2000000020.529:128312): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 350.121672][ T36] audit: type=1400 audit(2000000020.549:128313): avc: denied { create } for pid=8522 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 350.133933][ T8525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8525 comm=syz.1.2617 [ 350.142340][ T36] audit: type=1400 audit(2000000020.549:128314): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 350.180026][ T36] audit: type=1400 audit(2000000020.609:128315): avc: denied { create } for pid=8524 comm="syz.1.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 350.206106][ T36] audit: type=1400 audit(2000000020.609:128316): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 350.230665][ T36] audit: type=1400 audit(2000000020.649:128317): avc: denied { write } for pid=8528 comm="syz.1.2618" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 350.255527][ T36] audit: type=1400 audit(2000000020.649:128318): avc: denied { write } for pid=8528 comm="syz.1.2618" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 350.282137][ T36] audit: type=1400 audit(2000000020.649:128319): avc: denied { read } for pid=8528 comm="syz.1.2618" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 350.307995][ T36] audit: type=1400 audit(2000000020.649:128320): avc: denied { read } for pid=8528 comm="syz.1.2618" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 350.331142][ T36] audit: type=1400 audit(2000000020.709:128321): avc: denied { read write } for pid=2528 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 351.011312][ T573] Bluetooth: hci0: command 0x1003 tx timeout [ 351.011308][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 352.034512][ T359] bridge_slave_1: left allmulticast mode [ 352.041382][ T359] bridge_slave_1: left promiscuous mode [ 352.052431][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.072495][ T359] bridge_slave_0: left allmulticast mode [ 352.078955][ T359] bridge_slave_0: left promiscuous mode [ 352.085815][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.208226][ T8598] netlink: 'syz.1.2638': attribute type 27 has an invalid length. [ 352.219517][ T359] veth1_macvtap: left promiscuous mode [ 352.225639][ T359] veth0_vlan: left promiscuous mode [ 352.257953][ T8598] ip6gre0: mtu less than device minimum [ 352.423357][ T359] ------------[ cut here ]------------ [ 352.428839][ T359] WARNING: CPU: 1 PID: 359 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 352.438852][ T359] Modules linked in: [ 352.442760][ T359] CPU: 1 UID: 0 PID: 359 Comm: kworker/u8:6 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 352.454412][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.464487][ T359] Workqueue: netns cleanup_net [ 352.469302][ T359] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 352.475360][ T359] Code: e8 61 b1 d2 fc 4b 83 3c 3e 00 75 19 e8 f5 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 e7 fd 79 fc 49 83 c7 08 eb c9 e8 dc fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 352.495014][ T359] RSP: 0018:ffffc9000b9b7b90 EFLAGS: 00010293 [ 352.501083][ T359] RAX: ffffffff850dc3d4 RBX: ffff888119478000 RCX: ffff8881138d2600 [ 352.509077][ T359] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881246103e8 [ 352.517058][ T359] RBP: ffffc9000b9b7bb0 R08: ffffffff87d4a4c7 R09: 1ffffffff0fa9498 [ 352.525103][ T359] R10: dffffc0000000000 R11: fffffbfff0fa9499 R12: dffffc0000000000 [ 352.533118][ T359] R13: dffffc0000000000 R14: ffff888124610000 R15: 00000000000003e8 [ 352.541073][ T359] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.550002][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.556776][ T359] CR2: 0000200000002380 CR3: 000000014f4be000 CR4: 00000000003526b0 [ 352.564753][ T359] Call Trace: [ 352.568025][ T359] [ 352.570942][ T359] cleanup_net+0x6bd/0xc90 [ 352.575360][ T359] ? __cfi_cleanup_net+0x10/0x10 [ 352.580297][ T359] process_scheduled_works+0x7d4/0x1020 [ 352.585930][ T359] worker_thread+0xc51/0x1370 [ 352.590608][ T359] kthread+0x2c9/0x370 [ 352.594724][ T359] ? __cfi_worker_thread+0x10/0x10 [ 352.599837][ T359] ? __cfi_kthread+0x10/0x10 [ 352.604433][ T359] ret_from_fork+0x67/0xa0 [ 352.608905][ T359] ? __cfi_kthread+0x10/0x10 [ 352.613511][ T359] ret_from_fork_asm+0x1a/0x30 [ 352.618275][ T359] [ 352.621302][ T359] ---[ end trace 0000000000000000 ]--- [ 352.626956][ T359] ------------[ cut here ]------------ [ 352.632435][ T359] WARNING: CPU: 1 PID: 359 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 352.642690][ T359] Modules linked in: [ 352.646680][ T359] CPU: 1 UID: 0 PID: 359 Comm: kworker/u8:6 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 352.660094][ T359] Tainted: [W]=WARN [ 352.663917][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.674037][ T359] Workqueue: netns cleanup_net [ 352.678814][ T359] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 352.684923][ T359] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 a0 fd 79 fc 49 81 ff f8 07 00 00 74 1b e8 92 fd 79 fc 49 83 c7 08 eb c5 e8 87 fd 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 77 fd 79 fc 5b 41 5c 41 5e 41 [ 352.704670][ T359] RSP: 0018:ffffc9000b9b7b90 EFLAGS: 00010293 [ 352.710748][ T359] RAX: ffffffff850dc429 RBX: ffff888124610800 RCX: ffff8881138d2600 [ 352.718771][ T359] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888124610808 [ 352.726782][ T359] RBP: ffffc9000b9b7bb0 R08: ffffffff87d4a4c7 R09: 1ffffffff0fa9498 [ 352.734839][ T359] R10: dffffc0000000000 R11: fffffbfff0fa9499 R12: dffffc0000000000 [ 352.742844][ T359] R13: dffffc0000000000 R14: ffff888124610000 R15: 0000000000000008 [ 352.750818][ T359] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.759774][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.766418][ T359] CR2: 0000200000002380 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 352.774473][ T359] Call Trace: [ 352.777753][ T359] [ 352.780687][ T359] cleanup_net+0x6bd/0xc90 [ 352.785144][ T359] ? __cfi_cleanup_net+0x10/0x10 [ 352.790095][ T359] process_scheduled_works+0x7d4/0x1020 [ 352.795685][ T359] worker_thread+0xc51/0x1370 [ 352.800378][ T359] kthread+0x2c9/0x370 [ 352.804676][ T359] ? __cfi_worker_thread+0x10/0x10 [ 352.809802][ T359] ? __cfi_kthread+0x10/0x10 [ 352.814429][ T359] ret_from_fork+0x67/0xa0 [ 352.818895][ T359] ? __cfi_kthread+0x10/0x10 [ 352.823643][ T359] ret_from_fork_asm+0x1a/0x30 [ 352.828410][ T359] [ 352.831475][ T359] ---[ end trace 0000000000000000 ]--- [ 352.883153][ T359] ------------[ cut here ]------------ [ 352.888649][ T359] WARNING: CPU: 1 PID: 359 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 352.898238][ T359] Modules linked in: [ 352.902166][ T359] CPU: 1 UID: 0 PID: 359 Comm: kworker/u8:6 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 352.915305][ T359] Tainted: [W]=WARN [ 352.919118][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.929193][ T359] Workqueue: netns cleanup_net [ 352.934028][ T359] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 352.939588][ T359] Code: 3c 20 00 74 08 48 89 df e8 2f 8c ed fc 48 8b 3b e8 27 82 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 d8 94 fc <0f> 0b e9 b0 fd ff ff e8 a6 d8 94 fc 0f 0b e9 18 fe ff ff e8 9a d8 [ 352.959239][ T359] RSP: 0018:ffffc9000b9b7b70 EFLAGS: 00010293 [ 352.965346][ T359] RAX: ffffffff84f2e8fe RBX: ffff888119478000 RCX: ffff8881138d2600 [ 352.973338][ T359] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881138d2600 [ 352.981321][ T359] RBP: ffffc9000b9b7b98 R08: ffffffff87d4a4c7 R09: 1ffffffff0fa9498 [ 352.989296][ T359] R10: dffffc0000000000 R11: fffffbfff0fa9499 R12: 1ffffffff0fa91e8 [ 352.997305][ T359] R13: dffffc0000000000 R14: ffff888119478c00 R15: dffffc0000000000 [ 353.005299][ T359] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.014274][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.020860][ T359] CR2: 0000200000002380 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 353.028877][ T359] Call Trace: [ 353.032373][ T359] [ 353.035317][ T359] xfrm_net_exit+0x31/0x80 [ 353.039815][ T359] cleanup_net+0x6bd/0xc90 [ 353.044263][ T359] ? __cfi_cleanup_net+0x10/0x10 [ 353.049295][ T359] process_scheduled_works+0x7d4/0x1020 [ 353.054912][ T359] worker_thread+0xc51/0x1370 [ 353.059604][ T359] kthread+0x2c9/0x370 [ 353.063701][ T359] ? __cfi_worker_thread+0x10/0x10 [ 353.068833][ T359] ? __cfi_kthread+0x10/0x10 [ 353.073451][ T359] ret_from_fork+0x67/0xa0 [ 353.077881][ T359] ? __cfi_kthread+0x10/0x10 [ 353.082500][ T359] ret_from_fork_asm+0x1a/0x30 [ 353.087268][ T359] [ 353.090285][ T359] ---[ end trace 0000000000000000 ]--- [ 353.096608][ T359] ------------[ cut here ]------------ [ 353.102100][ T359] WARNING: CPU: 1 PID: 359 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310 [ 353.111606][ T359] Modules linked in: [ 353.115501][ T359] CPU: 1 UID: 0 PID: 359 Comm: kworker/u8:6 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 353.128644][ T359] Tainted: [W]=WARN [ 353.132468][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.142569][ T359] Workqueue: netns cleanup_net [ 353.147345][ T359] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 353.152925][ T359] Code: cc e8 b2 d8 94 fc 0f 0b e9 b0 fd ff ff e8 a6 d8 94 fc 0f 0b e9 18 fe ff ff e8 9a d8 94 fc 0f 0b e9 8c fe ff ff e8 8e d8 94 fc <0f> 0b e9 f9 fe ff ff e8 82 d8 94 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 353.172570][ T359] RSP: 0018:ffffc9000b9b7b70 EFLAGS: 00010293 [ 353.178733][ T359] RAX: ffffffff84f2e922 RBX: ffff888119478000 RCX: ffff8881138d2600 [ 353.186746][ T359] RDX: 0000000000000000 RSI: ffff88812c1e6200 RDI: ffff8881000418c0 [ 353.194741][ T359] RBP: ffffc9000b9b7b98 R08: 0000000097ed1bf7 R09: 00000000961f50d4 [ 353.202756][ T359] R10: 000000000000000d R11: ffffffff8175ee80 R12: ffff88810aad8300 [ 353.210733][ T359] R13: 1ffff1102328f183 R14: 0000000000000040 R15: ffff888119478c18 [ 353.218727][ T359] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.227689][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.234323][ T359] CR2: 0000200000002380 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 353.242497][ T359] Call Trace: [ 353.245775][ T359] [ 353.248708][ T359] xfrm_net_exit+0x31/0x80 [ 353.253185][ T359] cleanup_net+0x6bd/0xc90 [ 353.257605][ T359] ? __cfi_cleanup_net+0x10/0x10 [ 353.262577][ T359] process_scheduled_works+0x7d4/0x1020 [ 353.268134][ T359] worker_thread+0xc51/0x1370 [ 353.272855][ T359] kthread+0x2c9/0x370 [ 353.276931][ T359] ? __cfi_worker_thread+0x10/0x10 [ 353.282079][ T359] ? __cfi_kthread+0x10/0x10 [ 353.286679][ T359] ret_from_fork+0x67/0xa0 [ 353.291094][ T359] ? __cfi_kthread+0x10/0x10 [ 353.295725][ T359] ret_from_fork_asm+0x1a/0x30 [ 353.300497][ T359] [ 353.303544][ T359] ---[ end trace 0000000000000000 ]--- [ 353.309201][ T359] ------------[ cut here ]------------ [ 353.314695][ T359] WARNING: CPU: 1 PID: 359 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310 [ 353.324194][ T359] Modules linked in: [ 353.328096][ T359] CPU: 1 UID: 0 PID: 359 Comm: kworker/u8:6 Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 353.341227][ T359] Tainted: [W]=WARN [ 353.345044][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.355101][ T359] Workqueue: netns cleanup_net [ 353.359866][ T359] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 353.365417][ T359] Code: ff e8 a6 d8 94 fc 0f 0b e9 18 fe ff ff e8 9a d8 94 fc 0f 0b e9 8c fe ff ff e8 8e d8 94 fc 0f 0b e9 f9 fe ff ff e8 82 d8 94 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 353.385073][ T359] RSP: 0018:ffffc9000b9b7b70 EFLAGS: 00010293 [ 353.391158][ T359] RAX: ffffffff84f2e92e RBX: ffff888119478000 RCX: ffff8881138d2600 [ 353.399159][ T359] RDX: 0000000000000000 RSI: ffff88810aad8300 RDI: ffff8881000418c0 [ 353.407149][ T359] RBP: ffffc9000b9b7b98 R08: 0000000038391577 R09: 00000000ab156860 [ 353.415135][ T359] R10: 000000000000000d R11: ffffffff8175ee80 R12: ffff88810aad8c80 [ 353.423136][ T359] R13: 1ffff1102328f182 R14: 0000000000000040 R15: ffff888119478c10 [ 353.432010][ T359] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 353.440938][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.447537][ T359] CR2: 0000200000002380 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 353.455535][ T359] Call Trace: [ 353.458802][ T359] [ 353.461732][ T359] xfrm_net_exit+0x31/0x80 [ 353.466154][ T359] cleanup_net+0x6bd/0xc90 [ 353.470550][ T359] ? __cfi_cleanup_net+0x10/0x10 [ 353.475489][ T359] process_scheduled_works+0x7d4/0x1020 [ 353.481037][ T359] worker_thread+0xc51/0x1370 [ 353.485721][ T359] kthread+0x2c9/0x370 [ 353.489790][ T359] ? __cfi_worker_thread+0x10/0x10 [ 353.494916][ T359] ? __cfi_kthread+0x10/0x10 [ 353.499511][ T359] ret_from_fork+0x67/0xa0 [ 353.503935][ T359] ? __cfi_kthread+0x10/0x10 [ 353.508538][ T359] ret_from_fork_asm+0x1a/0x30 [ 353.513309][ T359] [ 353.516319][ T359] ---[ end trace 0000000000000000 ]--- [ 353.665537][ T359] veth1_macvtap: left promiscuous mode [ 353.671027][ T359] veth0_vlan: left promiscuous mode [ 355.091589][ T36] kauditd_printk_skb: 3484 callbacks suppressed [ 355.091606][ T36] audit: type=1400 audit(2000000025.539:131806): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.119164][ T36] audit: type=1400 audit(2000000025.539:131807): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.126745][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.140294][ T36] audit: type=1400 audit(2000000025.539:131808): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.146790][ T149] audit: audit_lost=868 audit_rate_limit=0 audit_backlog_limit=64 [ 355.146806][ T149] audit: backlog limit exceeded [ 355.167892][ T36] audit: type=1400 audit(2000000025.539:131809): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.178684][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.180548][ T36] audit: type=1400 audit(2000000025.539:131810): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.202601][ T149] audit: audit_lost=869 audit_rate_limit=0 audit_backlog_limit=64 [ 360.101508][ T36] kauditd_printk_skb: 15131 callbacks suppressed [ 360.101527][ T36] audit: type=1400 audit(2000000030.549:146941): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.129407][ T36] audit: type=1400 audit(2000000030.549:146942): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.145219][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.151311][ T36] audit: type=1400 audit(2000000030.549:146943): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.157063][ T149] audit: audit_lost=870 audit_rate_limit=0 audit_backlog_limit=64 [ 360.179357][ T36] audit: type=1400 audit(2000000030.549:146944): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.186099][ T149] audit: backlog limit exceeded [ 360.213555][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.220063][ T149] audit: audit_lost=871 audit_rate_limit=0 audit_backlog_limit=64 [ 360.222311][ T36] audit: type=1400 audit(2000000030.549:146945): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0