last executing test programs: 8.201641628s ago: executing program 3 (id=71): syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="c57f7c3be0ff5aa6c2eaa0d481040dc8e39389be7567e4174d2347b98332e793ec0072b455229bc941645df1fd76b5e75fa40930338a91b7fcfbeeef16546cd8d2632f"], 0x0) 5.146740146s ago: executing program 3 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="afb6c0634e4e", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x98, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0xa, 0x6, "f9b3e7", 0x8, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, [@srh={0x2e, 0xc, 0x4, 0x6, 0x4, 0x60, 0xe, [@remote, @private0, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1]}]}}}}}}}}, 0xd2) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 2.143009272s ago: executing program 3 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x5, 0x1009, 0xfffffff9, 0xc34}]}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000008c}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r7) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x30, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x125, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}, 0x30}], 0x1}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251f0000000a0001a0a995c38b26174a6151512ccde7edd220787ee9021b63be051833c525c86aff12d0dc7b5be6efa534304e38a8f83690f1ed90e618bded5d66938979b53a000820a18e250ef5c19f3eeb6dd77c943195c3061cae40eb00000000000000000000000000000000418ba7276273d862b9ea6356394ec80cd54f7c78917f90b3f43ec6e101b0205e9f704ccfde4f4774986d1a9f31bd445c"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r11, 0x0, 0x0, 0xc9100103, 0x0, 0x0) write$binfmt_aout(r8, &(0x7f0000000040)=ANY=[], 0xff2e) (async) r12 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)=0x0) timer_settime(r13, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) ioctl$TCXONC(r8, 0x540a, 0x3) 1.634858788s ago: executing program 0 (id=105): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x90c9, 0x3, 0x3}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) 1.633122398s ago: executing program 0 (id=106): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@generic="82b34392ebc2fc9f6e"]}, 0x1c}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, 0x3ff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(r0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000000)={0x9, 0x20, 0x0, 0x7fff8000}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000480)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.496259182s ago: executing program 0 (id=107): getgroups(0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee01]) setgroups(0x3, &(0x7f0000005540)=[r0, 0x0, r1]) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x275, 0x40000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) unshare(0x2000000) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) connect$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000040)=0x895f) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x3) 1.476783163s ago: executing program 0 (id=108): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) modify_ldt$read(0x0, &(0x7f0000001ec0)=""/103, 0x67) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb", 0x48}], 0x1}}], 0x1, 0x400c404) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b330000000000000000050000000c0099004d000000fdffffff10005d800c"], 0x30}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_mreq(r7, 0x29, 0x7, 0x0, &(0x7f0000000180)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') (async) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) (async) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) 1.366737487s ago: executing program 0 (id=109): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000400)="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", 0x110) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x74, 0x0, 0x7fff0000}]}) setitimer(0x1, &(0x7f0000000040), 0x0) (async) getitimer(0x1, &(0x7f0000000740)) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="74726092bf3d66ac13f38face76f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8f) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.364607607s ago: executing program 0 (id=110): r0 = timerfd_create(0x6, 0x80000) write(r0, &(0x7f0000000580)="a6b634213271f906ab377e58f65d9dde2f6b260992651d07a053827e3ced591c94ab877ad6203a00e62f0f51902375dbaa4bc819117b3623fe57e5fd9e78eb3a631f81ff1b1b1cfa5953d89aacb0bb03931d5f329e0a2e08c1a7e54e15130c76f2c9bcf2aea41002d30282b6f4b36891b802cb5a2274f0", 0x77) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x4202) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x80000001, 0x0, 0x2}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES8=r1], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0xf, 0x97, {0x97, 0x21, "88a7111d01ac80618276fdd90cfe201d05b2959efc450b68585f658d65381a4fb004007abccdbb7a7fdd228f8467ccc38d122005582ff6e2d165b5358b87617844ce5494f0b7e2480e3dd57054ea0d9afee8620ee926cfcbdc311a693e8ecb7f9d5e914ecc14edda528148ec4c8d0a37fd6b18d7f0856fed3371c5e772496ca6de3eac16eba8a833beb3c4c6f7db61451f792ac037"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0x16, 0x3c, "cf60ed96414e87c09005e167d9c463053c9978bce0d5ddaf9681dfa6b0bf06fae758de3cffe51b644d14367bb4704464de1ec63268f21d5b64da7798"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x6, 0x97, 0x40, 0x100, 0x7, 0x7, 0x40, 0xffff, 0x5, 0x8, 0xa469, 0x40}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xffff}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 1.230482701s ago: executing program 1 (id=113): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x1, 0x0, 0x2, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast1, {[@noop, @cipso={0x86, 0x3e, 0x3, [{0x2, 0xd, "71a1026bc9ebabd3ba6e1a"}, {0x6, 0x5, "46b0ae"}, {0x2, 0x3, "89"}, {0x1, 0x4, 'jg'}, {0x2, 0xe, "0ae767e94127845bbbae5899"}, {0x5, 0x11, "e174af5f60eae245b1e024930862bb"}]}, @rr={0x7, 0xb, 0x18, [@multicast2, @empty]}, @rr={0x7, 0x1b, 0x60, [@multicast2, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @local, @local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xeb, [@empty, @remote, @multicast2, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x9, 0x5, @vifc_lcl_ifindex=r1, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa8b}]}, 0x48}}, 0x4) getegid() (async) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x71, 0x1, {{0x0, 0x3, 0x4}, 0xffffff08}}, 0x18) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) pipe2$9p(&(0x7f0000000400), 0x0) (async) r4 = open$dir(&(0x7f0000000440)='./file0\x00', 0x2000, 0xa) statx(r4, &(0x7f0000000480)='./file0\x00', 0x0, 0x7ff, &(0x7f00000004c0)) (async) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x8, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd89}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c002}, 0x40040) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknodat$loop(r4, &(0x7f0000000740)='./file0\x00', 0x100, 0x1) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000780), 0x1, 0x40) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000880)={0x60, 0x15, 0x6, 0x6, 0x81, 0x1, &(0x7f00000007c0)="4cd16e8735a4334f155bd14b983ff2d20777156b8cf1c466f5491bd8bf5c23d97e853ecb90c370113d9e72725ded030d683cb33c03c1a75d269d28a0a1bffe8849f59af27fd6b05dedb734820482609f5b885c2a834a50c0c3cca79bbe36d6b032dd9caa9d461935a7f1a6f4448fa3a403c02ab0d096a2803b7034e620e3ebb76c"}) (async) r6 = syz_open_dev$evdev(&(0x7f00000008c0), 0x8001, 0x10000) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000900)={0x9, 0x5, 0x0, 0x7, 0x8000, 0x7f}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000980)={'team_slave_1\x00', &(0x7f0000000940)=@ethtool_eee={0x44, 0x3, 0xfff, 0x2, 0x8, 0x1, 0xa1c, 0x8001, [0x8, 0x7]}}) (async) r8 = openat2(r4, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x4043c0, 0xc0, 0x20}, 0x18) ioctl$KVM_TDX_GET_CPUID(r8, 0xc008aeba, &(0x7f0000000a80)={0x5, 0x0, &(0x7f0000000a40)={0x1, 0x0, [{0x80000019, 0x7, 0x0, 0x3, 0x1c00000, 0xffff}]}}) (async) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000ac0)) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r10, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001240)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d00)={0x4e0, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1ac, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7068091cd1a77b1e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x190, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8ddec42669bcc329}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8463de10e433444b}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000814}, 0x20048801) 1.230281711s ago: executing program 1 (id=114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x200, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000440)={0x18, 0x7000000, 0x1f, 0x1, 0x0, r0, 0x0}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) io_setup(0x7, &(0x7f0000000000)) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) listen(r2, 0x3) 1.229325331s ago: executing program 3 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f00000000c0), 0xc0000008, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) sendmmsg$inet(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000006c0)="3118944f0cb6f5fb3d9f8e69cdadb4df2f50", 0x12}], 0x1}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) wait4(r1, &(0x7f00000000c0), 0xc0000008, &(0x7f0000000280)) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) (async) sendmmsg$inet(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000006c0)="3118944f0cb6f5fb3d9f8e69cdadb4df2f50", 0x12}], 0x1}}], 0x1, 0x0) (async) 1.218364721s ago: executing program 3 (id=116): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0xfffe}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) socket$inet6_udp(0xa, 0x2, 0x0) 1.147371203s ago: executing program 1 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xf8, 0x0, 0x2, 0xf520111d4fc7a369, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xccb19e1306ad7a1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x41010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000100)={{0xc3, 0x4, 0x3, 0xc6, 0x64, 0x4, 0x1a4, 0x51}, "919f3f355be2abb849b4d2e4ee8793495a40866760ecf4b5381c5615e2dfe798ad7994db299c9222f0a6707fa931b269141bb91e", ['\x00', '\x00']}, 0x254) 866.725273ms ago: executing program 2 (id=118): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808241c09f3b1118c0905810308000000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) socketpair(0x27, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r2, 0x1, 0x6c, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x59, 0x6, 0x8050, 0x80, 0x10, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r3, &(0x7f0000000280)="8253198f6418ffa9549a6372a664000000000000000000000000800000003a2dbf71b025e4f206347eff8e28c282e9077f27390a0751f6579e5a9344717f7ea5f1c25d1234d3a1a08654fb854fcef276d5241bb3cee5b2c2c19c6b1fcaa5b3658cf8dbd522640be69772d0", 0x6b) r4 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 707.470027ms ago: executing program 3 (id=119): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x1029ae) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010902640002016270060904000001020d0000052406000105240001000d240f0101000000000003020406241a03000b0424139e0424130209058103ff030008080901000000000000000904010102020d000009058202"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 608.493071ms ago: executing program 1 (id=120): symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{0x0, 0x0, 0xfffffffffffffe01}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) truncate(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc61) 554.847432ms ago: executing program 1 (id=121): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000040)=0xfffffffffffffebd) 554.093612ms ago: executing program 1 (id=122): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7934fb3c9cbb5b12, 0x150) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1dc, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "6c421452cd28d10cf85fc3f70f360cf805a64e6dc9ebd54fea0f443c20c5b5b45b4643ea918d3f3b3143bdfdeb366b7b4752fc4f744b0fb2cb60b9dc6962736f254cd5af"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "d9f941173efd22b18a34237b382164065e2b7fae8d37b53e09712c0de2b2649317d7cd0f08abbcb57212127c8ebf9732a830be4aec2d044c428b3f015f1b2f2c8a23060cb6463a0bc5eb2a57bd8aa62130521cbb76dd98b10e9fdd40151d401f43ce17039c6c75037ff6de60e35501c37b7aeab50a7d7968433b0b52e0dd6f7e15a7d6d7f632f0a5c4b43d9e568bf820cfda1cd38f9ea1af9f1f1f0ccfd06cbbeca0b74c96c811c0405232aaef83a0928935c4"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "339faa435b688da879251f1fc1334c1aac8c08808f9736d9ec3bd63735034545bd02181cc4fe0b7b5c4facda57e551e68d1cb1a6049967f0faa00f4adac9bd51ca1d7b0bebd7b0b70ea2fddedb229a035a45ec919c700bae0b4d8cf5e03eeecc087da83cce5556c42bab80c79cb825bbfefdb38d64627c854db942fe70348a66a79fdb1c6c08b714c30be2bc42db2096170b0c104d39d4ae0e6e8bd84db64bb3e1eba7a39664ed273f5bc1fadb49b0"}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1dc, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "6c421452cd28d10cf85fc3f70f360cf805a64e6dc9ebd54fea0f443c20c5b5b45b4643ea918d3f3b3143bdfdeb366b7b4752fc4f744b0fb2cb60b9dc6962736f254cd5af"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "d9f941173efd22b18a34237b382164065e2b7fae8d37b53e09712c0de2b2649317d7cd0f08abbcb57212127c8ebf9732a830be4aec2d044c428b3f015f1b2f2c8a23060cb6463a0bc5eb2a57bd8aa62130521cbb76dd98b10e9fdd40151d401f43ce17039c6c75037ff6de60e35501c37b7aeab50a7d7968433b0b52e0dd6f7e15a7d6d7f632f0a5c4b43d9e568bf820cfda1cd38f9ea1af9f1f1f0ccfd06cbbeca0b74c96c811c0405232aaef83a0928935c4"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "339faa435b688da879251f1fc1334c1aac8c08808f9736d9ec3bd63735034545bd02181cc4fe0b7b5c4facda57e551e68d1cb1a6049967f0faa00f4adac9bd51ca1d7b0bebd7b0b70ea2fddedb229a035a45ec919c700bae0b4d8cf5e03eeecc087da83cce5556c42bab80c79cb825bbfefdb38d64627c854db942fe70348a66a79fdb1c6c08b714c30be2bc42db2096170b0c104d39d4ae0e6e8bd84db64bb3e1eba7a39664ed273f5bc1fadb49b0"}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3, 0xe40, 0x3, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x3}, 0x1, @can={{0x3, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "e8b32b0ca9479665"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040040) write$cgroup_int(r0, &(0x7f0000000500)=0x6, 0x12) (async) write$cgroup_int(r0, &(0x7f0000000500)=0x6, 0x12) r6 = syz_create_resource$binfmt(&(0x7f0000000540)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000580)="66b8b6000f00d8430f381c6700430f06c4c179135ee00f01c83ef20f126c230066baf80cb8c07c6988ef66bafc0ced0fc76b00660fe92bb9210200000f32", 0x3e}], 0x1, 0x44, &(0x7f0000000600)=[@dstype3={0x7, 0xd}, @flags={0x3, 0x80090}], 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) r8 = syz_open_pts(r0, 0x1) clock_gettime(0x0, &(0x7f0000000680)) (async) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ppoll(&(0x7f0000000640)=[{r0, 0x261}, {r8}, {r7, 0x2100}], 0x3, &(0x7f00000006c0)={r9, r10+60000000}, &(0x7f0000000700)={[0x2]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x92, 0x1ff, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40, 0x40, 0x2, 0x4}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000800)={r11, 0x1, 0x6}, 0x10) open$dir(&(0x7f0000000840)='./file0/file0\x00', 0x88000, 0x4) (async) open$dir(&(0x7f0000000840)='./file0/file0\x00', 0x88000, 0x4) nanosleep(&(0x7f0000000880)={0x77359400}, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4028040}, 0x40842) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4028040}, 0x40842) r13 = openat(r0, &(0x7f0000000a00)='./file0\x00', 0x240002, 0x8) r14 = add_key$fscrypt_provisioning(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000ac0)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) r15 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r14, 0x6417acc1, 0x1, r15) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) (async) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r13, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r16, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x10}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x82}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_GET(r13, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r1, 0x20f18b86f8612c80, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x24000000) unlinkat(r8, &(0x7f0000000e00)='./file0\x00', 0x0) (async) unlinkat(r8, &(0x7f0000000e00)='./file0\x00', 0x0) 207.599883ms ago: executing program 2 (id=123): mount(0x0, &(0x7f00000026c0)='.\x00', &(0x7f0000002680)='ramfs\x00', 0x1000040, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00tinfo\x00'], &(0x7f00000000c0)='mountinfo\x00', 0xa, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 109.074637ms ago: executing program 2 (id=124): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r2, @ANYBLOB="01001fbd7000fadbdf2500090003000000cd43dd9007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4004884) mmap(&(0x7f0000c92000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, r0, 0xffffc000) 28.386499ms ago: executing program 2 (id=125): r0 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x2, 0x6e2, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x193}}}, &(0x7f0000000100)=0x0) (async, rerun: 64) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r5) (async, rerun: 64) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) (async, rerun: 64) r6 = syz_open_pts(r5, 0x80) r7 = dup3(r6, r5, 0x80000) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) (async) r8 = syz_ublk_setup_io_uring(0x17d8, &(0x7f00000001c0)={0x0, 0x4ec4, 0x0, 0x0, 0xc2}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x942c, 0x200, 0x2, 0xf5}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89d0, 0x2, 0x2, 0x78}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x64d6, 0x8a00, 0x0, 0x397}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8003, 0x400, 0x1, 0x304}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51ab, 0x1000, 0x3, 0x188}}], 0x4, &(0x7f0000001600)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8001}, 0x0, 0x0, '\x00', {0x0, 0xe34, 0x0, &(0x7f0000000600)=@buf_4k="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"}}, &(0x7f0000001680)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async, rerun: 64) syz_ublk_setup_queues(r2, r3, &(0x7f0000000140)={0x0, 0xdc62, 0x4000, 0x1, 0x349, 0x0, r4}, &(0x7f00000016c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5434, 0x4, 0x3, 0x2cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83f2, 0x100, 0x0, 0x9b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8c0c, 0x40, 0x3, 0x2de, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e96, 0x10000, 0x0, 0x392, 0x0, r9}}], 0x4, &(0x7f0000002940)={0x2e, 0x35, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x400}, 0x0, 0x0, '\x00', {0x4, 0x43b, 0x0, &(0x7f0000001940)=@buf_512="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"}}, &(0x7f00000029c0)) (rerun: 64) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async, rerun: 64) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0xffffffff}) (rerun: 64) 28.048829ms ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x48010, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000000)='./bus\x00') (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) socket$packet(0x11, 0xa, 0x300) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300) (async) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x48010, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) (async) 0s ago: executing program 2 (id=127): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600010a00000000000000000a"], 0x18}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x8000, 0x100000000, 0xa16c, 0x7f, 0x4, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0xffffffff, 0x5, 0x8, 0xffffffffffffffff, 0x1], 0x0, 0x200}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 20.610558][ T36] audit: type=1400 audit(1779573807.139:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.611712][ T287] cgroup: Unknown subsys name 'net' [ 20.633308][ T36] audit: type=1400 audit(1779573807.139:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.660626][ T36] audit: type=1400 audit(1779573807.169:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.660961][ T287] cgroup: Unknown subsys name 'devices' [ 20.781167][ T287] cgroup: Unknown subsys name 'hugetlb' [ 20.786770][ T287] cgroup: Unknown subsys name 'rlimit' [ 20.878605][ T36] audit: type=1400 audit(1779573807.399:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.901759][ T36] audit: type=1400 audit(1779573807.399:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.926618][ T36] audit: type=1400 audit(1779573807.399:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.934800][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.958700][ T36] audit: type=1400 audit(1779573807.479:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.984223][ T36] audit: type=1400 audit(1779573807.479:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.015783][ T36] audit: type=1400 audit(1779573807.539:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.041314][ T36] audit: type=1400 audit(1779573807.539:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.041649][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.800201][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.807271][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.814585][ T294] bridge_slave_0: entered allmulticast mode [ 21.820792][ T294] bridge_slave_0: entered promiscuous mode [ 21.828212][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.835280][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.842360][ T294] bridge_slave_1: entered allmulticast mode [ 21.848469][ T294] bridge_slave_1: entered promiscuous mode [ 21.888147][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.895240][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.902464][ T297] bridge_slave_0: entered allmulticast mode [ 21.908598][ T297] bridge_slave_0: entered promiscuous mode [ 21.915927][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.922973][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.930098][ T297] bridge_slave_1: entered allmulticast mode [ 21.936225][ T297] bridge_slave_1: entered promiscuous mode [ 22.010959][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.018026][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.025092][ T296] bridge_slave_0: entered allmulticast mode [ 22.031221][ T296] bridge_slave_0: entered promiscuous mode [ 22.042468][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.049532][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.056579][ T295] bridge_slave_0: entered allmulticast mode [ 22.062844][ T295] bridge_slave_0: entered promiscuous mode [ 22.068977][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.076018][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.083070][ T296] bridge_slave_1: entered allmulticast mode [ 22.089182][ T296] bridge_slave_1: entered promiscuous mode [ 22.098127][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.105256][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.112304][ T295] bridge_slave_1: entered allmulticast mode [ 22.118434][ T295] bridge_slave_1: entered promiscuous mode [ 22.227114][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.234276][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.241600][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.248620][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.258691][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.265747][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.273027][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.280063][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.301044][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.308180][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.315467][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.322492][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.343679][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.350735][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.357994][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.365024][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.392669][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.400387][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.407638][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.415023][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.422850][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.430118][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.437289][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.444591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.467464][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.474521][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.482319][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.489364][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.514206][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.521265][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.529088][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.536195][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.544326][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.551375][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.559669][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.566688][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.574413][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.581459][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.592811][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.599871][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.635046][ T295] veth0_vlan: entered promiscuous mode [ 22.657093][ T296] veth0_vlan: entered promiscuous mode [ 22.666855][ T294] veth0_vlan: entered promiscuous mode [ 22.678697][ T295] veth1_macvtap: entered promiscuous mode [ 22.694532][ T294] veth1_macvtap: entered promiscuous mode [ 22.710354][ T297] veth0_vlan: entered promiscuous mode [ 22.719178][ T296] veth1_macvtap: entered promiscuous mode [ 22.733711][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.737056][ T297] veth1_macvtap: entered promiscuous mode [ 22.788381][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.846952][ T320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.869168][ T311] kernel write not supported for file /uinput (pid: 311 comm: kworker/0:3) [ 22.898439][ T313] tipc: Started in network mode [ 22.903790][ T313] tipc: Node identity 84e, cluster identity 4711 [ 22.905799][ T330] syz.2.6: attempt to access beyond end of device [ 22.905799][ T330] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 22.911391][ T328] input: syz1 as /devices/virtual/input/input4 [ 22.929555][ T313] tipc: Node number set to 2126 [ 22.935373][ T330] EXT4-fs (loop2): unable to read superblock [ 23.121787][ T359] netlink: 25 bytes leftover after parsing attributes in process `syz.2.13'. [ 23.131835][ T359] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 23.329390][ T66] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.480561][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 23.494673][ T66] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 23.503751][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.511772][ T66] usb 4-1: Product: syz [ 23.515910][ T66] usb 4-1: Manufacturer: syz [ 23.520508][ T66] usb 4-1: SerialNumber: syz [ 23.599323][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.727597][ T66] usb 4-1: MBOX3: Invalid descriptor size=103. [ 23.733892][ T45] usb 2-1: device descriptor read/64, error -71 [ 23.740578][ T66] usb 4-1: MBOX3: Invalid descriptor size=103. [ 23.747128][ T66] usb 4-1: MBOX3: Invalid descriptor size=103. [ 23.756019][ T66] usb 4-1: USB disconnect, device number 2 [ 23.989395][ T45] usb 2-1: device descriptor read/64, error -71 [ 23.989408][ T311] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.160375][ T311] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 24.168550][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.178914][ T311] usb 1-1: config 0 has no interface number 0 [ 24.186489][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 24.195668][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.203672][ T311] usb 1-1: Product: syz [ 24.207832][ T311] usb 1-1: Manufacturer: syz [ 24.212442][ T311] usb 1-1: SerialNumber: syz [ 24.217611][ T311] usb 1-1: config 0 descriptor?? [ 24.239499][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.262638][ T398] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.288750][ T400] process 'syz.3.25' launched './file0' with NULL argv: empty string added [ 24.300729][ T400] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 24.310381][ T400] kvm: pic: level sensitive irq not supported [ 24.310442][ T400] kvm: pic: non byte read [ 24.369342][ T45] usb 2-1: device descriptor read/64, error -71 [ 24.610209][ T45] usb 2-1: device descriptor read/64, error -71 [ 24.719326][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.719422][ T45] usb usb2-port1: attempt power cycle [ 24.799338][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.870904][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.880603][ T311] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 24.889853][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.897897][ T311] usb 4-1: Product: syz [ 24.902327][ T311] usb 4-1: Manufacturer: syz [ 24.906923][ T311] usb 4-1: SerialNumber: syz [ 24.970745][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 24.981660][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.992710][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.002498][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 25.015488][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.022113][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 25.031153][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.040252][ T10] usb 3-1: config 0 descriptor?? [ 25.069417][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.090594][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.114461][ T421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.123040][ T421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.132842][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.144019][ T311] usb 4-1: USB disconnect, device number 3 [ 25.153150][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.220328][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.447750][ T10] ryos 0003:1E7D:3138.0001: item fetching failed at offset 3/5 [ 25.455480][ T10] ryos 0003:1E7D:3138.0001: parse failed [ 25.461418][ T10] ryos 0003:1E7D:3138.0001: probe with driver ryos failed with error -22 [ 25.469321][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 25.490329][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.620456][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.642060][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 25.642076][ T36] audit: type=1400 audit(1779573812.169:155): avc: denied { read } for pid=423 comm="syz.3.33" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 25.670734][ T36] audit: type=1400 audit(1779573812.169:156): avc: denied { open } for pid=423 comm="syz.3.33" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 25.693699][ T36] audit: type=1400 audit(1779573812.169:157): avc: denied { map } for pid=423 comm="syz.3.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.694822][ T425] loop3: detected capacity change from 0 to 7 [ 25.717659][ T36] audit: type=1400 audit(1779573812.169:158): avc: denied { read write } for pid=423 comm="syz.3.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.726190][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.748395][ T45] usb usb2-port1: unable to enumerate USB device [ 25.757982][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.766647][ T36] audit: type=1400 audit(1779573812.169:159): avc: denied { ioctl } for pid=423 comm="syz.3.33" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 25.772974][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.773549][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.797342][ T36] audit: type=1400 audit(1779573812.169:160): avc: denied { write } for pid=423 comm="syz.3.33" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 25.804968][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.805646][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.814697][ T36] audit: type=1400 audit(1779573812.169:161): avc: denied { create } for pid=418 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.836706][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.837182][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.844718][ T36] audit: type=1400 audit(1779573812.169:162): avc: denied { connect } for pid=418 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.853785][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.854852][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.873059][ T36] audit: type=1400 audit(1779573812.169:163): avc: denied { read } for pid=418 comm="syz.2.32" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 25.880685][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 25.889908][ T36] audit: type=1400 audit(1779573812.169:164): avc: denied { open } for pid=418 comm="syz.2.32" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 26.021539][ T10] usb 3-1: USB disconnect, device number 2 [ 26.037794][ T430] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 26.045522][ T430] netlink: 17 bytes leftover after parsing attributes in process `syz.3.34'. [ 26.056244][ T431] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 26.063835][ T431] netlink: 17 bytes leftover after parsing attributes in process `syz.3.34'. [ 26.370902][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.401818][ T443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 26.439228][ T447] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 26.447979][ T447] SELinux: failed to load policy [ 26.453564][ T447] netlink: 5 bytes leftover after parsing attributes in process `syz.1.41'. [ 26.495355][ T10] usb 1-1: USB disconnect, device number 2 [ 26.519300][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 26.525517][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.545511][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.558522][ T311] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 26.571532][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.581493][ T311] usb 4-1: config 0 descriptor?? [ 26.631168][ T459] input: syz0 as /devices/virtual/input/input6 [ 26.819527][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.969478][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 26.980377][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.991552][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 27.003926][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.011023][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.018075][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.025152][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.038260][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.044919][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.052035][ T9] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 27.061156][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.068197][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.075241][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.083346][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.090754][ T311] itetech 0003:06CB:73F4.0002: unknown main item tag 0x0 [ 27.097963][ T9] usb 3-1: config 0 descriptor?? [ 27.104820][ T311] itetech 0003:06CB:73F4.0002: hidraw0: USB HID v0.04 Device [HID 06cb:73f4] on usb-dummy_hcd.3-1/input0 [ 27.204923][ T31] usb 4-1: USB disconnect, device number 4 [ 27.219308][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 27.304308][ T456] ======================================================= [ 27.304308][ T456] WARNING: The mand mount option has been deprecated and [ 27.304308][ T456] and is ignored by this kernel. Remove the mand [ 27.304308][ T456] option from the mount to silence this warning. [ 27.304308][ T456] ======================================================= [ 27.339833][ T456] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 27.369308][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 27.375541][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.383906][ T45] usb 2-1: config 0 has no interface number 0 [ 27.391678][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.400775][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.408775][ T45] usb 2-1: Product: syz [ 27.412953][ T45] usb 2-1: Manufacturer: syz [ 27.417551][ T45] usb 2-1: SerialNumber: syz [ 27.422900][ T45] usb 2-1: config 0 descriptor?? [ 27.428708][ T45] smsc95xx v2.0.0 [ 27.550300][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.558855][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.569992][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.578503][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.588342][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.596058][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.603905][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.611837][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.619643][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.627303][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.635054][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 27.643647][ T9] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v1.01 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 27.830233][ T311] usb 3-1: USB disconnect, device number 3 [ 27.969308][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.120424][ T9] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 28.127723][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 28.137496][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 28.150037][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 28.159432][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.167428][ T9] usb 4-1: Product: syz [ 28.172142][ T9] usb 4-1: Manufacturer: syz [ 28.176741][ T9] usb 4-1: SerialNumber: syz [ 28.182077][ T9] usb 4-1: config 0 descriptor?? [ 28.188078][ T9] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 28.250309][ T475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.52'. [ 28.329493][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.355339][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.388798][ T473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.397407][ T473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.409574][ T9] usb 4-1: USB disconnect, device number 5 [ 28.599971][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 28.612185][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 28.623093][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 28.634128][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 28.647722][ T45] usb 2-1: USB disconnect, device number 6 [ 28.789732][ T492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 28.921728][ T499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=499 comm=syz.3.59 [ 29.109325][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.169325][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.259313][ T311] usb 1-1: device descriptor read/64, error -71 [ 29.260423][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.276491][ T45] usb 2-1: config 1 interface 1 altsetting 247 bulk endpoint 0x82 has invalid maxpacket 1024 [ 29.286684][ T45] usb 2-1: config 1 interface 1 has no altsetting 1 [ 29.294748][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.303832][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.312008][ T45] usb 2-1: Product: syz [ 29.316152][ T45] usb 2-1: Manufacturer: syz [ 29.320768][ T45] usb 2-1: SerialNumber: syz [ 29.327618][ T45] cdc_mbim 2-1:1.0: skipping garbage [ 29.332977][ T45] usb 2-1: selecting invalid altsetting 1 [ 29.339297][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 29.345530][ T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 29.353891][ T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 29.362001][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 29.370971][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 29.381900][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 29.393104][ T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 29.402187][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.410324][ T9] usb 4-1: Product: syz [ 29.414489][ T9] usb 4-1: Manufacturer: syz [ 29.419063][ T9] usb 4-1: SerialNumber: syz [ 29.424690][ T9] usb 4-1: config 0 descriptor?? [ 29.430406][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 29.436317][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 29.444221][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 29.519346][ T311] usb 1-1: device descriptor read/64, error -71 [ 29.630452][ T9] usb 4-1: USB disconnect, device number 6 [ 29.731257][ T45] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 29.737478][ T45] cdc_mbim 2-1:1.0: bind() failure [ 29.743270][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 29.750127][ T45] cdc_ncm 2-1:1.1: bind() failure [ 29.756457][ T45] usb 2-1: USB disconnect, device number 7 [ 29.769374][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.899345][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.139339][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.249415][ T311] usb usb1-port1: attempt power cycle [ 30.409356][ T480] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.409402][ T481] Bluetooth: hci0: command 0x1003 tx timeout [ 30.439341][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.589321][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 30.594425][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.602947][ T9] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 30.611143][ T9] usb 4-1: config 0 has no interface number 0 [ 30.617216][ T9] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 30.629548][ T9] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 30.640676][ T9] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 42751, setting to 1024 [ 30.652134][ T9] usb 4-1: config 0 interface 200 has no altsetting 0 [ 30.659516][ T311] usb 1-1: device descriptor read/8, error -71 [ 30.666408][ T9] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 30.675638][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.683742][ T9] usb 4-1: Product: syz [ 30.687899][ T9] usb 4-1: Manufacturer: syz [ 30.692514][ T9] usb 4-1: SerialNumber: syz [ 30.697623][ T9] usb 4-1: config 0 descriptor?? [ 30.702908][ T504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.790686][ T311] usb 1-1: device descriptor read/8, error -71 [ 30.913851][ T9] usb 4-1: USB disconnect, device number 7 [ 31.029323][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.050385][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.139392][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 31.139408][ T36] audit: type=1400 audit(1779573817.669:203): avc: denied { ioctl } for pid=523 comm="syz.1.66" path="socket:[6160]" dev="sockfs" ino=6160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.169695][ T36] audit: type=1400 audit(1779573817.669:204): avc: denied { connect } for pid=523 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.188822][ T36] audit: type=1400 audit(1779573817.669:205): avc: denied { write } for pid=523 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.207923][ T36] audit: type=1326 audit(1779573817.669:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=523 comm="syz.1.66" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1719ce59 code=0x0 [ 31.233141][ T311] usb 1-1: device descriptor read/8, error -71 [ 31.349387][ T311] usb usb1-port1: unable to enumerate USB device [ 31.409629][ T36] audit: type=1400 audit(1779573817.929:207): avc: denied { read } for pid=528 comm="syz.2.68" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.446725][ T36] audit: type=1400 audit(1779573817.939:208): avc: denied { open } for pid=528 comm="syz.2.68" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.470610][ T36] audit: type=1400 audit(1779573817.939:209): avc: denied { ioctl } for pid=528 comm="syz.2.68" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.495833][ T36] audit: type=1400 audit(1779573817.969:210): avc: denied { connect } for pid=535 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.516264][ T36] audit: type=1400 audit(1779573818.039:211): avc: denied { write } for pid=535 comm="syz.2.69" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 31.568173][ T36] audit: type=1400 audit(1779573818.089:212): avc: denied { lock } for pid=535 comm="syz.2.69" path="socket:[5466]" dev="sockfs" ino=5466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 31.719319][ T45] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 31.838627][ T542] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 31.849359][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.099308][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.349323][ T45] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 32.479304][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.529304][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.680721][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 32.689473][ T31] usb 3-1: config 4 has an invalid interface number: 162 but max is 2 [ 32.697702][ T31] usb 3-1: config 4 has an invalid interface descriptor of length 3, skipping [ 32.706719][ T31] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 32.715524][ T31] usb 3-1: config 4 has an invalid interface number: 29 but max is 2 [ 32.724009][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.730292][ T31] usb 3-1: config 4 has an invalid interface number: 241 but max is 2 [ 32.738525][ T31] usb 3-1: config 4 has no interface number 0 [ 32.744638][ T31] usb 3-1: config 4 has no interface number 1 [ 32.750718][ T31] usb 3-1: config 4 has no interface number 2 [ 32.756800][ T31] usb 3-1: config 4 interface 162 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 32.767785][ T31] usb 3-1: config 4 interface 162 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 32.780990][ T31] usb 3-1: config 4 interface 29 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 32.791857][ T31] usb 3-1: config 4 interface 29 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 32.802637][ T31] usb 3-1: config 4 interface 29 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 32.813488][ T31] usb 3-1: config 4 interface 29 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 32.825815][ T31] usb 3-1: config 4 interface 29 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 32.836651][ T31] usb 3-1: config 4 interface 29 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 32.847523][ T31] usb 3-1: config 4 interface 29 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 32.858410][ T45] usb usb4-port1: attempt power cycle [ 32.866243][ T31] usb 3-1: config 4 interface 29 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 32.876889][ T31] usb 3-1: config 4 interface 29 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 32.887534][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 32.898272][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 32.909154][ T31] usb 3-1: config 4 interface 241 altsetting 2 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 32.915421][ T576] netlink: 'syz.0.81': attribute type 63 has an invalid length. [ 32.928603][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x8C, skipping [ 32.928632][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 32.928653][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 32.939745][ T576] netlink: 5 bytes leftover after parsing attributes in process `syz.0.81'. [ 32.950480][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 32.966230][ T576] gretap0: entered allmulticast mode [ 32.974250][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 32.986517][ T576] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 33.009307][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 33.023217][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 33.034215][ T31] usb 3-1: config 4 interface 241 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 33.047344][ T31] usb 3-1: config 4 interface 162 has no altsetting 0 [ 33.054264][ T31] usb 3-1: config 4 interface 29 has no altsetting 0 [ 33.061071][ T31] usb 3-1: config 4 interface 241 has no altsetting 0 [ 33.069660][ T31] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=ab.ac [ 33.078816][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.087783][ T31] usb 3-1: Product: ဇ [ 33.092243][ T31] usb 3-1: Manufacturer: Ѝ [ 33.096755][ T31] usb 3-1: SerialNumber: ц [ 33.229775][ T45] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 33.248159][ T585] loop9: detected capacity change from 0 to 7 [ 33.254922][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.264095][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.272127][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.281306][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.289232][ T482] loop9: unable to read partition table [ 33.295057][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.295230][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.304096][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.318002][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.326201][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.335446][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.344215][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.353398][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.361494][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.370652][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.378524][ T585] loop9: unable to read partition table [ 33.378723][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.384420][ T585] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 33.393328][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.409574][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.418713][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.427069][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.436234][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.460521][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.480380][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 33.488565][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.498920][ T9] usb 1-1: config 0 has no interface number 0 [ 33.506717][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 33.515926][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.524143][ T9] usb 1-1: Product: syz [ 33.528327][ T9] usb 1-1: Manufacturer: syz [ 33.533046][ T9] usb 1-1: SerialNumber: syz [ 33.538269][ T9] usb 1-1: config 0 descriptor?? [ 33.544230][ T31] pl2303 3-1:4.162: required endpoints missing [ 33.669354][ T571] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.719321][ T45] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 33.744677][ T31] pl2303 3-1:4.29: required endpoints missing [ 33.745715][ T9] usb 1-1: USB disconnect, device number 7 [ 33.759345][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.820858][ T571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.829299][ T571] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.840190][ T571] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 33.852816][ T571] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 33.861893][ T571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.869911][ T571] usb 2-1: Product: syz [ 33.874070][ T571] usb 2-1: Manufacturer: syz [ 33.878655][ T571] usb 2-1: SerialNumber: syz [ 33.890322][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.946455][ T31] pl2303 3-1:4.241: required endpoints missing [ 33.999407][ T45] usb usb4-port1: unable to enumerate USB device [ 34.086963][ T571] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.094366][ T571] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.101789][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.109177][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.116700][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.124138][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.131877][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.139314][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.146765][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.155612][ T571] usb 2-1: unable to issue vendor read request (ret = -71) [ 34.165361][ T571] usb 2-1: USB disconnect, device number 8 [ 34.187700][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.490075][ T595] syzkaller1: entered promiscuous mode [ 34.495561][ T595] syzkaller1: entered allmulticast mode [ 34.519373][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.669306][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 34.676360][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 34.684631][ T31] usb 1-1: config 0 has no interface number 0 [ 34.690788][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 34.700827][ T31] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.710787][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 34.720825][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 34.729038][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 34.738856][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.747562][ T31] usb 1-1: Product: syz [ 34.751828][ T31] usb 1-1: Manufacturer: syz [ 34.756419][ T31] usb 1-1: SerialNumber: syz [ 34.761589][ T31] usb 1-1: config 0 descriptor?? [ 34.766822][ T593] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.899325][ T571] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 34.977799][ T31] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 34.985344][ T31] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 34.994562][ T31] usb 1-1: USB disconnect, device number 8 [ 35.029324][ T571] usb 4-1: device descriptor read/64, error -71 [ 35.239009][ T668] kvm: kvm [667]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x9 [ 35.248466][ T668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 35.279345][ T571] usb 4-1: device descriptor read/64, error -71 [ 35.314225][ T10] usb 3-1: USB disconnect, device number 4 [ 35.529353][ T571] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 35.589334][ T586] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.659312][ T571] usb 4-1: device descriptor read/64, error -71 [ 35.699307][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.719340][ T586] usb 2-1: device descriptor read/64, error -71 [ 35.850529][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.861502][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.871280][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 35.880355][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.889116][ T10] usb 3-1: config 0 descriptor?? [ 35.899318][ T571] usb 4-1: device descriptor read/64, error -71 [ 35.959364][ T586] usb 2-1: device descriptor read/64, error -71 [ 36.011182][ T571] usb usb4-port1: attempt power cycle [ 36.199315][ T586] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.298326][ T10] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x3 [ 36.305187][ T10] arvo 0003:1E7D:30D4.0004: item fetching failed at offset 5/7 [ 36.313011][ T10] arvo 0003:1E7D:30D4.0004: parse failed [ 36.318704][ T10] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -22 [ 36.329610][ T586] usb 2-1: device descriptor read/64, error -71 [ 36.349315][ T571] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 36.370267][ T571] usb 4-1: device descriptor read/8, error -71 [ 36.500890][ T571] usb 4-1: device descriptor read/8, error -71 [ 36.507091][ T10] usb 3-1: USB disconnect, device number 5 [ 36.579329][ T586] usb 2-1: device descriptor read/64, error -71 [ 36.689516][ T586] usb usb2-port1: attempt power cycle [ 36.759325][ T571] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 36.780314][ T571] usb 4-1: device descriptor read/8, error -71 [ 36.910341][ T571] usb 4-1: device descriptor read/8, error -71 [ 37.019450][ T571] usb usb4-port1: unable to enumerate USB device [ 37.029615][ T586] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 37.050540][ T586] usb 2-1: device descriptor read/8, error -71 [ 37.073551][ T698] syzkaller0: entered promiscuous mode [ 37.079091][ T698] syzkaller0: entered allmulticast mode [ 37.085627][ T698] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 37.093995][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.095080][ T698] futex_wake_op: syz.2.102 tries to shift op by -1; fix this program [ 37.180302][ T586] usb 2-1: device descriptor read/8, error -71 [ 37.250375][ T45] usb 1-1: config 0 has no interfaces? [ 37.257264][ T45] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 37.266351][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.274362][ T45] usb 1-1: SerialNumber: syz [ 37.279590][ T45] usb 1-1: config 0 descriptor?? [ 37.419322][ T586] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 37.440378][ T586] usb 2-1: device descriptor read/8, error -71 [ 37.487066][ T45] usb 1-1: USB disconnect, device number 9 [ 37.580279][ T586] usb 2-1: device descriptor read/8, error -71 [ 37.689407][ T586] usb usb2-port1: unable to enumerate USB device [ 38.064950][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 38.064967][ T36] audit: type=1400 audit(1779573824.589:226): avc: denied { create } for pid=710 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.276840][ T36] audit: type=1400 audit(1779573824.799:227): avc: denied { append } for pid=720 comm="syz.0.109" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.317294][ T36] audit: type=1400 audit(1779573824.829:228): avc: denied { read write } for pid=720 comm="syz.0.109" dev="sockfs" ino=5823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.369286][ T36] audit: type=1400 audit(1779573824.889:229): avc: denied { create } for pid=727 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 38.699307][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 38.850308][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.862891][ T9] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 38.871987][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.880197][ T9] usb 1-1: Product: syz [ 38.884537][ T9] usb 1-1: Manufacturer: syz [ 38.889378][ T9] usb 1-1: SerialNumber: syz [ 38.894819][ T9] usb 1-1: config 0 descriptor?? [ 38.900720][ T9] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 38.907103][ T9] usb 1-1: No valid video chain found. [ 38.972824][ T36] audit: type=1400 audit(1779573825.499:230): avc: denied { connect } for pid=751 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.009442][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 39.082455][ T36] audit: type=1400 audit(1779573825.609:231): avc: denied { getopt } for pid=755 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.160317][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.171467][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 39.182280][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 39.193326][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.202500][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.210571][ T10] usb 3-1: Product: syz [ 39.214750][ T10] usb 3-1: Manufacturer: syz [ 39.219365][ T10] usb 3-1: SerialNumber: syz [ 39.230511][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 39.389305][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 39.395919][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.404314][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.413153][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.423295][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.425531][ T749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.434240][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.448180][ T10] cdc_ncm 3-1:1.0: bind() failure [ 39.451365][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 39.468321][ T45] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.469049][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 39.481215][ T36] audit: type=1400 audit(1779573825.999:232): avc: denied { mount } for pid=763 comm="syz.2.123" name="/" dev="ramfs" ino=5881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.488363][ T10] cdc_ncm 3-1:1.1: bind() failure [ 39.511350][ T45] usb 4-1: config 1 interface 1 has no altsetting 0 [ 39.522022][ T10] usb 3-1: USB disconnect, device number 6 [ 39.534975][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.544447][ T36] audit: type=1400 audit(1779573826.059:233): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.555303][ T766] netlink: 37 bytes leftover after parsing attributes in process `syz.2.124'. [ 39.564552][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.581681][ T45] usb 4-1: Product: syz [ 39.586161][ T45] usb 4-1: Manufacturer: syz [ 39.592746][ T45] usb 4-1: SerialNumber: syz [ 39.617446][ T773] incfs: ino conflict with backing FS 3 [ 39.617881][ T36] audit: type=1400 audit(1779573826.139:234): avc: denied { mount } for pid=772 comm="syz.2.126" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.625267][ T775] incfs: mount failed -22 [ 39.645325][ T36] audit: type=1400 audit(1779573826.159:235): avc: denied { mounton } for pid=772 comm="syz.2.126" path="/29/bus/file0" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.681089][ T297] ------------[ cut here ]------------ [ 39.686646][ T297] WARNING: CPU: 1 PID: 297 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 39.696017][ T297] Modules linked in: [ 39.700003][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Not tainted syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 39.711661][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 39.721862][ T297] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 39.727513][ T297] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 51 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 b2 3e ff <0f> 0b e9 3e ff ff ff e8 4a b2 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 39.747256][ T297] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 39.753444][ T297] RAX: ffffffff8249147a RBX: 0000000000000000 RCX: ffff888102f52600 [ 39.761479][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.769502][ T297] RBP: ffffc9000b69fb70 R08: ffff888130c0cb9f R09: 1ffff11026181973 [ 39.777487][ T297] R10: dffffc0000000000 R11: ffffed1026181974 R12: 0000000000000000 [ 39.785538][ T297] R13: dffffc0000000000 R14: ffff888130c0cb00 R15: ffff88811b7b4dd0 [ 39.793565][ T297] FS: 000055558072d500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.802674][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.809342][ T297] CR2: 0000200000001000 CR3: 0000000130968000 CR4: 00000000003526b0 [ 39.817322][ T297] Call Trace: [ 39.821091][ T297] [ 39.824032][ T297] ovl_do_remove+0x81b/0xda0 [ 39.828619][ T297] ? ovl_set_redirect+0x780/0x780 [ 39.833675][ T297] ? down_write+0xee/0x2b0 [ 39.838103][ T297] ? __cfi_down_write+0x10/0x10 [ 39.842993][ T297] ovl_rmdir+0x1e/0x30 [ 39.847072][ T297] vfs_rmdir+0x3e0/0x560 [ 39.851348][ T297] incfs_kill_sb+0x109/0x230 [ 39.855947][ T297] deactivate_locked_super+0xd8/0x2a0 [ 39.861350][ T297] deactivate_super+0xb8/0xe0 [ 39.866038][ T297] cleanup_mnt+0x406/0x4a0 [ 39.870472][ T297] __cleanup_mnt+0x1d/0x40 [ 39.874948][ T297] task_work_run+0x1e5/0x260 [ 39.879574][ T297] ? __cfi_task_work_run+0x10/0x10 [ 39.884749][ T297] ? __x64_sys_umount+0x12e/0x180 [ 39.889814][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 39.895192][ T297] ? __kasan_check_read+0x15/0x20 [ 39.900242][ T297] resume_user_mode_work+0x35/0x50 [ 39.905353][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 39.910834][ T297] do_syscall_64+0x63/0xf0 [ 39.915248][ T297] ? clear_bhb_loop+0x50/0xa0 [ 39.919943][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.925855][ T297] RIP: 0033:0x7f6f7a59e097 [ 39.930288][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 39.950032][ T297] RSP: 002b:00007ffc0bd3fa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 39.958463][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f7a59e097 [ 39.966459][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0bd3faf0 [ 39.974477][ T297] RBP: 00007ffc0bd3faf0 R08: 00007ffc0bd40af0 R09: 00000000ffffffff [ 39.982479][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0bd40be0 [ 39.990564][ T297] R13: 00007f6f7a6321ca R14: 0000000000009ae5 R15: 00007ffc0bd41cb0 [ 39.998633][ T297] [ 40.001671][ T297] ---[ end trace 0000000000000000 ]--- [ 40.007409][ T297] ------------[ cut here ]------------ [ 40.007947][ T45] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 40.012906][ T297] WARNING: CPU: 0 PID: 297 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 40.019723][ T45] cdc_ncm 4-1:1.0: bind() failure [ 40.028961][ T297] Modules linked in: [ 40.035274][ T45] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 40.037875][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor Tainted: G W syzkaller #0 abd407d91653e73ff3b9de718fd37c0b8ddb7a3a [ 40.050689][ T45] usb 4-1: USB disconnect, device number 16 [ 40.059144][ T297] Tainted: [W]=WARN [ 40.068803][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.078957][ T297] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 40.084623][ T297] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 51 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 b2 3e ff <0f> 0b e9 3e ff ff ff e8 4a b2 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 40.104281][ T297] RSP: 0018:ffffc9000b69fb48 EFLAGS: 00010293 [ 40.110379][ T297] RAX: ffffffff8249147a RBX: 0000000000000000 RCX: ffff888102f52600 [ 40.118368][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.126391][ T297] RBP: ffffc9000b69fb70 R08: ffff888130c0cb9f R09: 1ffff11026181973 [ 40.134392][ T297] R10: dffffc0000000000 R11: ffffed1026181974 R12: 0000000000000000 [ 40.142406][ T297] R13: dffffc0000000000 R14: ffff888130c0cb00 R15: ffff88811b7b4dd0 [ 40.150408][ T297] FS: 000055558072d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.159374][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.165964][ T297] CR2: 00007f0d173ea2f8 CR3: 0000000130968000 CR4: 00000000003526b0 [ 40.173958][ T297] Call Trace: [ 40.177234][ T297] [ 40.180184][ T297] ovl_do_remove+0x81b/0xda0 [ 40.184786][ T297] ? ovl_set_redirect+0x780/0x780 [ 40.189847][ T297] ? down_write+0xee/0x2b0 [ 40.194367][ T297] ? __cfi_down_write+0x10/0x10 [ 40.199217][ T297] ovl_rmdir+0x1e/0x30 [ 40.203337][ T297] vfs_rmdir+0x3e0/0x560 [ 40.207652][ T297] incfs_kill_sb+0x1a0/0x230 [ 40.212299][ T297] deactivate_locked_super+0xd8/0x2a0 [ 40.217689][ T297] deactivate_super+0xb8/0xe0 [ 40.222396][ T297] cleanup_mnt+0x406/0x4a0 [ 40.226826][ T297] __cleanup_mnt+0x1d/0x40 [ 40.231298][ T297] task_work_run+0x1e5/0x260 [ 40.235899][ T297] ? __cfi_task_work_run+0x10/0x10 [ 40.241036][ T297] ? __x64_sys_umount+0x12e/0x180 [ 40.246088][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.251681][ T297] ? __kasan_check_read+0x15/0x20 [ 40.256718][ T297] resume_user_mode_work+0x35/0x50 [ 40.261860][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 40.267349][ T297] do_syscall_64+0x63/0xf0 [ 40.271785][ T297] ? clear_bhb_loop+0x50/0xa0 [ 40.276471][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.282400][ T297] RIP: 0033:0x7f6f7a59e097 [ 40.286825][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.306490][ T297] RSP: 002b:00007ffc0bd3fa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.314952][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6f7a59e097 [ 40.323071][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0bd3faf0 [ 40.331085][ T297] RBP: 00007ffc0bd3faf0 R08: 00007ffc0bd40af0 R09: 00000000ffffffff [ 40.339068][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0bd40be0 [ 40.347080][ T297] R13: 00007f6f7a6321ca R14: 0000000000009ae5 R15: 00007ffc0bd41cb0 [ 40.355096][ T297] [ 40.358121][ T297] ---[ end trace 0000000000000000 ]--- [ 41.329858][ T10] usb 1-1: USB disconnect, device number 10