last executing test programs: 2.737595887s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x4084c}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000c40)="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", 0xfc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000ef17d9c0da57173b28aaa77502fda3e615b57e41c1a80fb29106aacd00"/67, 0x43) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003080)=ANY=[], 0x68) io_setup(0x40000000, &(0x7f0000000100)=0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x2d}, @remote, @loopback, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2, r8}) fchdir(r6) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000140)="4fbeb914331db317999ae0a32afc70d03d27809585ab8acad18bc254e4cbf6d137ed750f34d5e0608308effb9d8d13eb080c19d4e2c73cff1e3036ab797ebfb43019c71ecaa9", 0x46, 0x3, 0x0, 0x2, r6}, &(0x7f0000000240)) sendmmsg$inet6(r0, &(0x7f0000006340)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @private1, 0x8}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000880)="503e3b844de829be266a83abb2e04a823194e24c41aa0ebda323e50bc8df5bc935b79da63f3f40414ec4dfc73d9280c920789f710804f0e3dbbf09c8deacd6166ece2644a1fbcb71b5d2fd4958348546eb6f1deadc7cfb28b19207615fbda6420cffe495a71c53a8e9ab48fefcb7d768bd9811d6c5f20d1f200183f85f6e62b7e4e4bb11e31f526e95751890cf79d999358261d8e64465de7f2feb32ddd0e1ae9bf6df6a52ee096139f194025719a4f6e1494afa3861b747b99861a07426f4b7f19b38494e0fef33feb677929e488cdaee7cbd499a65e80f393147e3c792cffd9124c27acdd48d47a71d516e935c47e40cf227a0c537928d563c9f0697a2726e9c4e5a0ac4137d4169498b62e2487d043abd90eb523cc6fe9c87f5a17cc878b908cd7d0d7b06288e0b38338ed8bac886e8c5784bfa481057cc5c7ef58c94327ab02784d9215c30703a6f94bd1df85e0635d3d2a1ee9e2a5b5868c65a2c59b1576e5ef880708f049e834bf755f0886736a98f2cf949d96fa03be22ee52db51df7822d1ad739f19c67a4181f7f4ef59df9207edbbecca525a45e64c9f12a8ade280013595cf6bd8ac1aedcc46d74e139ac63239ddc0266fc35eafee45bce09468a34a4303486f37b57bc3c05e652db481ddd747133816338b089816b57459f5fe6f7cc25986f0bacc5b9008e30cfd5eff92176f606010c5be21ca49227a6507d5d6e08020f166ff93dea15dc861e0002f2e0d8ffbbc56ee390757a703296696a4d5ae1f20caee139459699bc1d9536969fb78a3bc3a0ad0c93334b6ab334d6977ea28474152089c7f3b92e51749af8fd90748ef73f5aef0fd6ef3ad2428ada3daf4570581f8a175d51c6dc13793a77dce3ec50aa392b7e4ca8c26857bf344b529cee47366b388a1abd641baa6c77ad7f3e6f219e22dc29d47827ade1fe2c240b0cc747c37cb99816da775bae2126afd1ca971efd36d9f2e63b53b63d232a1b2446ab47b945f9550ee5e033fce013a6720423467af52793129b5940346554b4922d0299865452d3d1ce26a2113bd01e38956859a40bddd4e92cf5a5326b01b1838bf001e148f40a6d95d4b1a6ea414a465fa7b8033b70ceb6b3d64cb650ac13b8f48e18224dcab4a1e147ed0c0e7a234458c9172b8d7197f17277dd7c83b0653328c4790509982ef5b3b185b9fe0f7cbaa470ca243a4db2161d305835e8170d6799decf98bb53d731791f7a9db58a08df786dd55cab5c5015f9d8bc7d9041b331e4b16a5e2540530c57e1f5f62f7afdd23a61669230b449e2e619e2113601aa282f66f3fbbf7e0c9a0fe8bb6bfef68a2a41e09ae9b11be4f46f433db5db7bd8073f28909e6dc5de9169874b0b2eac9151ced5d840031e68f54ac80f182a96319df4313d1db3e6c4fbb6b478c0825af2adb3acdd5752fa78782f33ef933bc5af4638a8c2b69bc967959808b913a74d3a5de6af8ddee3aff0405893b80d75f387d57a03d7ed892eeb2573f0dc32082cf5309668004ca3b003652b63b24452adda0a3b24efb09b981e5caa73050e4c599f5e559fba7f0715f311125743ac604e8dda29ad73da3ba947f001330cde53e919ff4771dd8a5e2a3668a6f48fad341ef555395a5fe20a8c9696ac9394d912c6d852e86fec2dffd34ce640a24ba92b06127c75bfd67cb2b97b3c9b156b57ab2ffe3a9cbe5d3355af8ee28949bafef6d9343a6fb239ba73c87836ba4b57b6f05357bcf390d2cacaeb118753d2de0b407afe2e3f150b43798d38265a65727c8fd8166f0d16cf60f9ddbb3c22649576eca766ff75fa6f5a11eb1053ef8be111baeb9679de57a5f88f8db0a3e94e46dd3ec27181092d68d2d738bdd6218b9098211c658bf9c07ecc141d40877eb4254187bcbf22332fee549e7681d28bcd74ee1570e66f7295c9fa8d6f824b5150a6710ffddc2b4f56800374128389e5c3fe2dedaa94ec81e1b0ae4a0960fbc74dea5d8b66a10d8e60942b5513cb18af94009e2857", 0x58d}, {0x0}], 0x2}}, {{&(0x7f0000004340)={0xa, 0x4e24, 0x5, @mcast2, 0xe}, 0x1c, 0x0}}], 0x2, 0x0) 2.684643529s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xb, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="7d8027244a4ded7aa659428b031f212e", 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) poll(&(0x7f000000bcc0)=[{r4, 0x40}], 0x1, 0x200) ioctl$TIOCSETD(r4, 0x5423, &(0x7f000000c240)=0x11) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 2.680636729s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x8, '\x00', 0x40}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0x8, 0xf, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x47, 0xb, '\x00', 0x46}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x68, 0x87, 0x1, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r5], 0x44}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.584469462s ago: executing program 1 (id=5): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x5e022f72c658e35d, 0x5, 0x2, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x80, 0x5, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x8001, 0xffffbffe, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[], 0x93) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.561237663s ago: executing program 2 (id=6): io_setup(0x10000, &(0x7f00000004c0)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795000072aed129d4b5247c983455b3d757e8b2333a84d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6dde0000000000000000000000000000f1d3b9661c1800"/128, 0x80) io_setup(0x6, &(0x7f0000000600)) 2.375691729s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086307032040000102030109026f0003010890050904000000010100000a240108000a000201020903f000000102000009040101010102000007240102020210082402012f0300230905010910008206000725010c99040009040200000102000009040201010102000009058209a000ff7f3507250100010200"], 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8003}, 0x20) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) (async) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086307032040000102030109026f0003010890050904000000010100000a240108000a000201020903f000000102000009040101010102000007240102020210082402012f0300230905010910008206000725010c99040009040200000102000009040201010102000009058209a000ff7f3507250100010200"], 0x0) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8003}, 0x20) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 2.292467712s ago: executing program 2 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x26000, 0x8e, 0xc8fe, 0x3, 0x0, [{0x8, 0xf3, 0xe, '\x00', 0x1}, {0x0, 0x8, 0x8, '\x00', 0x48}, {0x5, 0x4, 0xfc, '\x00', 0x4}, {0x5, 0xf5, 0x88, '\x00', 0xfb}, {0x8, 0x8, 0xd, '\x00', 0x9}, {0x3a, 0xd, 0x2, '\x00', 0xe}, {0x1, 0x0, 0xae}, {0x3, 0x0, 0x9, '\x00', 0xc}, {0x5, 0x74, 0x5, '\x00', 0x3}, {0x38, 0x1, 0x5, '\x00', 0x3}, {0xc, 0x0, 0x1c, '\x00', 0x2}, {0x6, 0x46, 0x4, '\x00', 0xff}, {0x6a, 0x81, 0xe, '\x00', 0x5}, {0x53, 0x2, 0x1, '\x00', 0x5}, {0x9, 0x7, 0x4, '\x00', 0x9}, {0xaf, 0x9, 0xd, '\x00', 0x5}, {0x4, 0x7, 0x1, '\x00', 0xb4}, {0x2, 0x5, 0x3}, {0x1, 0x8, 0x9, '\x00', 0x42}, {0x9, 0x0, 0x6, '\x00', 0x7}, {0xec, 0x5, 0xa, '\x00', 0x4}, {0x0, 0x81, 0x1, '\x00', 0x2}, {0x1, 0x1, 0x9}, {0x5, 0x0, 0x5, '\x00', 0xa1}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x180, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x5, 0x23, 0x40000004, 0x61, 0x106c, 0x100, 0x8000000000000, 0x80400004000080, 0x0, 0x8, 0x0, 0x4, 0xffefffffffffffff, 0xc000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.109273688s ago: executing program 2 (id=9): unshare(0x64000600) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0xe, 0x401) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), 0x4) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x200000, 0xd6, 0x403, 0x0, 0x0, [{0xf8, 0x2, 0x81, '\x00', 0x6}, {0x6, 0x3, 0x8, '\x00', 0x5f}, {0x3, 0x6, 0x3, '\x00', 0x3}, {0xee, 0x2, 0x2, '\x00', 0x1}, {0x1, 0xa0, 0x6, '\x00', 0x7}, {0x7, 0x0, 0x82, '\x00', 0x7f}, {0x1, 0x0, 0x8}, {0x3, 0x81, 0xe3, '\x00', 0x9}, {0x6, 0xfe, 0x9, '\x00', 0x6}, {0x5, 0xf0, 0x9, '\x00', 0xa}, {0x40, 0xc7, 0x3, '\x00', 0x8}, {0x3, 0x1, 0xf1, '\x00', 0x8}, {0x8, 0x1, 0x0, '\x00', 0x7}, {0x82, 0x81, 0x4, '\x00', 0x8}, {0x24, 0x6, 0xf, '\x00', 0x5}, {0xfb, 0x4, 0x4, '\x00', 0x6}, {0x4, 0x28, 0x0, '\x00', 0x6}, {0x8, 0x5, 0x3}, {0x9, 0x7, 0xff, '\x00', 0x9f}, {0x4, 0xd, 0x3}, {0x4, 0x55, 0xdc, '\x00', 0x4}, {0xe1, 0x6, 0x1f, '\x00', 0x3}, {0x8, 0x1, 0x5}, {0x4, 0xfb, 0x0, '\x00', 0xae}]}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0xe01, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x34}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee00, r1, r7) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0x6, 0xca, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) (async) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0x1) recvfrom(r3, &(0x7f0000000280)=""/91, 0x5b, 0x20, 0x0, 0x0) 2.034387281s ago: executing program 2 (id=10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xccc134f448c8365a, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@empty, @empty, @loopback, 0x0, 0x4, 0x9, 0x100, 0xfc8, 0x20ce00e2, r6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', r6, 0x7800, 0x8000, 0x6, 0x400, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@lsrr={0x83, 0x13, 0xa1, [@multicast1, @empty, @broadcast, @empty]}]}}}}}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = getpid() r8 = gettid() r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d00), 0x142042, 0x0) ioctl$TIOCMBIS(r9, 0x5416, &(0x7f0000000d40)=0x5) rt_tgsigqueueinfo(r7, r8, 0x2b, &(0x7f0000000080)={0x0, 0x10, 0x3}) r10 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r10, &(0x7f0000000740)=""/377, 0x179) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffe0e, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00012cbd7000fddbdf251b0000000800bf6d6f0ac9d7db"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x56eac7b753de034c) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 1.908074745s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) getitimer(0x1, &(0x7f0000000740)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040027"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc000) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102000000052406000105240000000d23622119000000000000000006241a0000120905810300020000000904fd0000020d00000904010102020d"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x40, 0x6, 0x2, {0x2, 0x5}}, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbbe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x58}}, 0x24084880) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='net/udp6\x00') ppoll(&(0x7f0000000840)=[{r6, 0x8000}], 0x1, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_on}]}) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 1.856134937s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) getitimer(0x1, &(0x7f0000000740)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040027"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc000) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102000000052406000105240000000d23622119000000000000000006241a0000120905810300020000000904fd0000020d00000904010102020d"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x40, 0x6, 0x2, {0x2, 0x5}}, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbbe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x58}}, 0x24084880) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='net/udp6\x00') ppoll(&(0x7f0000000840)=[{r6, 0x8000}], 0x1, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f0000000380)='./bus\x00') mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 1.47096376s ago: executing program 0 (id=13): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x4, 0x8}) r3 = userfaultfd(0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000180)={&(0x7f0000000100)=[{&(0x7f00000000c0)="e0588a9776e30b1595a941797aa3c916cab37dc6cc27b7d471232132a74cc859d9df069eaffcd7db00a52c712862", 0x2e}, {&(0x7f00000006c0)="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", 0x1000}], 0x2, 0x4, 0x0, 0x4f9c, 0x2, 0x5, 0x1}) r4 = socket(0xa, 0x2400000001, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0xae66}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000016c0)={0x1, 0x0, @ioapic={0x14000, 0x2, 0x6, 0x1, 0x0, [{0x0, 0x1, 0x7, '\x00', 0x8}, {0x4, 0xff, 0x5, '\x00', 0x4}, {0x8, 0x81, 0x6, '\x00', 0xc8}, {0x0, 0x7, 0x4, '\x00', 0xb}, {0x80, 0x4, 0x8, '\x00', 0x3}, {0x2, 0x5, 0x61, '\x00', 0x98}, {0x7, 0x39, 0x2, '\x00', 0x3}, {0x89, 0x2, 0x4, '\x00', 0x4}, {0x8, 0x7, 0xf8, '\x00', 0xb1}, {0x3, 0x5, 0x40, '\x00', 0xd0}, {0x5, 0x2c, 0xf2}, {0x2, 0x60, 0x1, '\x00', 0x9}, {0x5, 0xb6, 0x66, '\x00', 0x5}, {0x79, 0xfd, 0x6, '\x00', 0xa2}, {0x3, 0x8, 0x3}, {0x6, 0x2, 0xc, '\x00', 0xd1}, {0x1, 0x1, 0x8, '\x00', 0x17}, {0x4, 0xff, 0x9, '\x00', 0x7e}, {0x20, 0x9, 0xf7, '\x00', 0x2}, {0x70, 0x7, 0x82, '\x00', 0x9}, {0x0, 0x1, 0x8, '\x00', 0x4}, {0x48, 0xad, 0x5, '\x00', 0x6}, {0x4, 0x0, 0xc3, '\x00', 0x4a}, {0x6, 0x8, 0x32, '\x00', 0x1}]}}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) syz_usb_connect$uac1(0x5, 0xda, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x6, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3b}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x6}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x2, "565429442784"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x40, '|H'}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xff, "d2"}, @output_terminal={0x9, 0x24, 0x3, 0x7f, 0x304, 0x1, 0x6, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x2, 0x3, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x34, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x7fff, 0x10, 0x43}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x7, 0x1, {0x7, 0x25, 0x1, 0xc, 0x7, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0xfc, "", '%<'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7f, 0x5b, 0xff}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x401, 0xbb, 'R4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x7, 0x5d, {0x7, 0x25, 0x1, 0xc, 0x93, 0x4}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x10, 0xae, 0x7, 0x8, 0x7}, 0x55, &(0x7f0000000340)={0x5, 0xf, 0x55, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x7, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x3, 0xff00, 0x200, [0xc0cf, 0x0, 0xc0, 0xff0000, 0xff11, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x5, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xf, 0xf00, 0xd72, [0x1fe0007, 0x3fc0]}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}]}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 928.524429ms ago: executing program 1 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="200809000000e3ab29f6"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x6, 0x3, {0x3, 0xc, 'x'}}, &(0x7f0000000080)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "f1224fef0751603b4b363f5f2815192b536a82cf1abc9ed45d7c2b09682e8f7e664d69d496a140c28ec7229b448d6dce26eacdfada24791b78e1b02bb77eaefc1487f485ccdbc7648f1133851ec4a5dabde6ea6226946366eb70ef83248777f3aaf7d74b032ecd4f6f04795dcdc654d0fad7410ddadc12ab16356bb1c04102c44f8dde36167b54fb302cd3d8bb1eaf7864c6e2cf18a80e8988c882592f9ea7592bcb67f48cf93070bb27ebf86372f9ff5382e88f183dd3716d96924be8bffc7dabc218ffff362ae24ffedbd31ed099b4f41b7739025893096858291542d3d7a7e20691b0da09385135aa65654bf096"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0xf, 0xfb, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x939f}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x7f}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "769b2c66a77d3b5ae3f21768464a1077a6aab396ebea725165bdb5d86ea8918e3979733e2eded2a2f03bc48c530955"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}}) 0s ago: executing program 2 (id=15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcd8) r2 = socket(0x28, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x20005) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x20005) accept4(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000000)=0x80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 22.926494][ T36] audit: type=1400 audit(1774806818.960:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.930215][ T283] cgroup: Unknown subsys name 'net' [ 22.949171][ T36] audit: type=1400 audit(1774806818.960:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.976633][ T36] audit: type=1400 audit(1774806818.990:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.977104][ T283] cgroup: Unknown subsys name 'devices' [ 23.117450][ T283] cgroup: Unknown subsys name 'hugetlb' [ 23.123078][ T283] cgroup: Unknown subsys name 'rlimit' [ 23.278260][ T36] audit: type=1400 audit(1774806819.310:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.301664][ T36] audit: type=1400 audit(1774806819.310:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.326654][ T36] audit: type=1400 audit(1774806819.310:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.351238][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.360163][ T36] audit: type=1400 audit(1774806819.390:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.385798][ T36] audit: type=1400 audit(1774806819.390:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.416053][ T36] audit: type=1400 audit(1774806819.450:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.441692][ T36] audit: type=1400 audit(1774806819.450:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.442355][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.846105][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.853187][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.860359][ T290] bridge_slave_0: entered allmulticast mode [ 24.866898][ T290] bridge_slave_0: entered promiscuous mode [ 24.874765][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.881920][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.889043][ T290] bridge_slave_1: entered allmulticast mode [ 24.895497][ T290] bridge_slave_1: entered promiscuous mode [ 24.983204][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.990379][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.997664][ T291] bridge_slave_0: entered allmulticast mode [ 25.003966][ T291] bridge_slave_0: entered promiscuous mode [ 25.012209][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.019839][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.027362][ T291] bridge_slave_1: entered allmulticast mode [ 25.033807][ T291] bridge_slave_1: entered promiscuous mode [ 25.087544][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.094850][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.102080][ T295] bridge_slave_0: entered allmulticast mode [ 25.108689][ T295] bridge_slave_0: entered promiscuous mode [ 25.118951][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.126266][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.133377][ T295] bridge_slave_1: entered allmulticast mode [ 25.139823][ T295] bridge_slave_1: entered promiscuous mode [ 25.200953][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.208054][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.215199][ T292] bridge_slave_0: entered allmulticast mode [ 25.221748][ T292] bridge_slave_0: entered promiscuous mode [ 25.234645][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.241812][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.249055][ T292] bridge_slave_1: entered allmulticast mode [ 25.255567][ T292] bridge_slave_1: entered promiscuous mode [ 25.298968][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.306074][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.313385][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.320450][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.384645][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.391825][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.399260][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.406357][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.424148][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.431243][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.438585][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.445715][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.454040][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.461135][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.468446][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.475516][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.497480][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.505062][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.512348][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.519856][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.528235][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.535638][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.542883][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.550357][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.567951][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.575062][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.582797][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.589878][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.634570][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.641829][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.649810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.656883][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.665209][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.672251][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.680250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.687310][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.706495][ T290] veth0_vlan: entered promiscuous mode [ 25.715663][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.722898][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.736752][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.743836][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.776736][ T295] veth0_vlan: entered promiscuous mode [ 25.786053][ T290] veth1_macvtap: entered promiscuous mode [ 25.807033][ T291] veth0_vlan: entered promiscuous mode [ 25.830831][ T295] veth1_macvtap: entered promiscuous mode [ 25.839089][ T292] veth0_vlan: entered promiscuous mode [ 25.847933][ T291] veth1_macvtap: entered promiscuous mode [ 25.881363][ T292] veth1_macvtap: entered promiscuous mode [ 25.898326][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.959190][ T309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.998664][ T314] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 26.040962][ T318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 26.107330][ T323] can0: slcan on ptm0. [ 26.311823][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.475605][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.486701][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58205, setting to 64 [ 26.497648][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 26.510589][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 26.520641][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.531026][ T9] usb 2-1: config 0 descriptor?? [ 26.536358][ T322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.574431][ T347] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 26.594080][ T354] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.615127][ T315] can0 (unregistered): slcan off ptm0. [ 26.633234][ T358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.737064][ T347] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.746410][ T347] usb 1-1: config 179 has no interface number 0 [ 26.752758][ T347] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 26.774336][ T347] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 26.786015][ T347] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 26.797147][ T347] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.818327][ T347] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.839121][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.849801][ T343] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 26.947614][ T322] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 26.951880][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 26.957721][ T322] SELinux: failed to load policy [ 26.973496][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 26.981122][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 26.989944][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.000062][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.011577][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.020007][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.027918][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.035814][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.043158][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.051077][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.059558][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.068438][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.069806][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.084072][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.091467][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.099264][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.106744][ T343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.115242][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.117789][ T343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.122599][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.137900][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.145276][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.152717][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.160360][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.166858][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.168415][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.184018][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.191517][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.205527][ T10] usb 4-1: config 1 has an invalid interface number: 253 but max is 1 [ 27.214171][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.226738][ T10] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 27.235935][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.243723][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.251199][ T10] usb 4-1: config 1 has no interface number 2 [ 27.255814][ T66] usb 1-1: USB disconnect, device number 2 [ 27.257427][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.274611][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.291145][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.305724][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 27.318767][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.332319][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.339908][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 27.346878][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.354255][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.361717][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.369368][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.374774][ T46] usb 3-1: config 1 has an invalid interface number: 253 but max is 1 [ 27.377490][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.386587][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.392774][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.411557][ T46] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 27.411585][ T46] usb 3-1: config 1 has no interface number 2 [ 27.411617][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.420815][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.429553][ T46] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 27.438082][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.447669][ T46] usb 3-1: config 1 interface 1 has no altsetting 0 [ 27.458436][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.469370][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.473050][ T10] usb 4-1: Product: syz [ 27.489557][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.494980][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.504382][ T46] usb 3-1: Product: syz [ 27.509463][ T10] usb 4-1: Manufacturer: syz [ 27.513880][ T46] usb 3-1: Manufacturer: syz [ 27.518316][ T10] usb 4-1: SerialNumber: syz [ 27.522961][ T46] usb 3-1: SerialNumber: syz [ 27.527227][ T9] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 27.541484][ T46] cdc_ncm 3-1:1.253: CDC Union missing and no IAD found [ 27.542895][ T10] cdc_ncm 4-1:1.253: CDC Union missing and no IAD found [ 27.553272][ T46] cdc_ncm 3-1:1.253: bind() failure [ 27.563654][ T9] dragonrise 0003:0079:0006.0001: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 27.575279][ T10] cdc_ncm 4-1:1.253: bind() failure [ 27.581557][ T9] dragonrise 0003:0079:0006.0001: no inputs found [ 27.588129][ T9] dragonrise 0003:0079:0006.0001: force feedback init failed [ 27.599175][ T9] usb 2-1: USB disconnect, device number 2 [ 27.622177][ T396] fido_id[396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 27.674419][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.825659][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 27.838241][ T66] usb 1-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 27.847356][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.855418][ T66] usb 1-1: Product: syz [ 27.859666][ T66] usb 1-1: Manufacturer: syz [ 27.864339][ T66] usb 1-1: SerialNumber: syz [ 28.019339][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 28.019357][ T36] audit: type=1400 audit(1774806824.050:131): avc: denied { unlink } for pid=366 comm="syz.3.11" name="#1" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.035963][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 28.051013][ T36] audit: type=1400 audit(1774806824.050:132): avc: denied { mount } for pid=366 comm="syz.3.11" name="/" dev="overlay" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.065201][ T10] usb 3-1: USB disconnect, device number 2 [ 28.084534][ T371] usb 4-1: USB disconnect, device number 2 [ 28.103098][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 28.113276][ T66] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 28.130460][ T66] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 28.141444][ T66] usb 1-1: USB disconnect, device number 3 [ 28.153612][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.244459][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 28.374464][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 28.524408][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 28.529880][ T9] usb usb2-port1: attempt power cycle [ 28.666001][ T295] ------------[ cut here ]------------ [ 28.672511][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 28.682028][ T295] Modules linked in: [ 28.686255][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 28.698011][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.708122][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 28.713824][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 28.733895][ T295] RSP: 0018:ffffc9000b6af968 EFLAGS: 00010293 [ 28.740102][ T295] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff888106ea2600 [ 28.748143][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.756210][ T295] RBP: ffffc9000b6af990 R08: ffff8881115dc0bf R09: 1ffff110222bb817 [ 28.764202][ T295] R10: dffffc0000000000 R11: ffffed10222bb818 R12: 0000000000000000 [ 28.772266][ T295] R13: dffffc0000000000 R14: ffff8881115dc020 R15: ffff8881114d3110 [ 28.780305][ T295] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.789340][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.795995][ T295] CR2: 00007fffcbe59ff0 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 28.804105][ T295] Call Trace: [ 28.807503][ T295] [ 28.810474][ T295] ovl_do_remove+0x81b/0xda0 [ 28.815251][ T295] ? ovl_set_redirect+0x780/0x780 [ 28.820320][ T295] ? down_write+0xee/0x2b0 [ 28.824834][ T295] ? __cfi_down_write+0x10/0x10 [ 28.829733][ T295] ovl_rmdir+0x1e/0x30 [ 28.833848][ T295] vfs_rmdir+0x3e3/0x560 [ 28.838165][ T295] incfs_kill_sb+0x109/0x230 [ 28.842811][ T295] deactivate_locked_super+0xd5/0x2a0 [ 28.848273][ T295] deactivate_super+0xb8/0xe0 [ 28.852992][ T295] cleanup_mnt+0x406/0x4a0 [ 28.857507][ T295] __cleanup_mnt+0x1d/0x40 [ 28.861978][ T295] task_work_run+0x1e5/0x260 [ 28.866641][ T295] ? __cfi_task_work_run+0x10/0x10 [ 28.871804][ T295] ? free_nsproxy+0x223/0x290 [ 28.876575][ T295] do_exit+0x9ad/0x2720 [ 28.880861][ T295] ? __cfi_do_exit+0x10/0x10 [ 28.885539][ T295] ? __kasan_check_write+0x18/0x20 [ 28.890708][ T295] ? _raw_spin_lock_irq+0x93/0x120 [ 28.894458][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 28.895890][ T295] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.908953][ T295] ? __cfi_ksys_write+0x10/0x10 [ 28.913943][ T295] ? zap_other_threads+0x334/0x370 [ 28.919184][ T295] do_group_exit+0x229/0x2f0 [ 28.923824][ T295] __x64_sys_exit_group+0x43/0x50 [ 28.925525][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 28.928964][ T295] x64_sys_call+0x2ed2/0x2ee0 [ 28.938904][ T295] do_syscall_64+0x57/0xf0 [ 28.943377][ T295] ? clear_bhb_loop+0x50/0xa0 [ 28.948141][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.954083][ T295] RIP: 0033:0x7f4174d9c819 [ 28.958586][ T295] Code: Unable to access opcode bytes at 0x7f4174d9c7ef. [ 28.965716][ T295] RSP: 002b:00007fffcbe5a698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.974158][ T295] RAX: ffffffffffffffda RBX: 00007f4174e3206d RCX: 00007f4174d9c819 [ 28.982282][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 28.990426][ T295] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f4174e32048 [ 28.998545][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcbe5b950 [ 29.006604][ T295] R13: 00007f4174e32048 R14: 0000000000006eb1 R15: 00007fffcbe5ca20 [ 29.014693][ T295] [ 29.017736][ T295] ---[ end trace 0000000000000000 ]--- [ 29.023942][ T295] ------------[ cut here ]------------ [ 29.025894][ T36] audit: type=1400 audit(1774806825.050:133): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.029632][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 29.058599][ T295] Modules linked in: [ 29.062507][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 29.064468][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 29.075901][ T295] Tainted: [W]=WARN [ 29.087124][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.097344][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 29.103007][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 29.105397][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 29.122685][ T295] RSP: 0018:ffffc9000b6af968 EFLAGS: 00010293 [ 29.129445][ T9] usb usb2-port1: unable to enumerate USB device [ 29.134107][ T295] RAX: ffffffff824861ba RBX: 0000000000000000 RCX: ffff888106ea2600 [ 29.134129][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.156704][ T295] RBP: ffffc9000b6af990 R08: ffff8881115dc0bf R09: 1ffff110222bb817 [ 29.164745][ T295] R10: dffffc0000000000 R11: ffffed10222bb818 R12: 0000000000000000 [ 29.172752][ T295] R13: dffffc0000000000 R14: ffff8881115dc020 R15: ffff8881114d3110 [ 29.180800][ T295] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.189806][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.196459][ T295] CR2: 00007fffcbe59ff0 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 29.204513][ T295] Call Trace: [ 29.207812][ T295] [ 29.210750][ T295] ovl_do_remove+0x81b/0xda0 [ 29.215397][ T295] ? ovl_set_redirect+0x780/0x780 [ 29.220542][ T295] ? down_write+0xee/0x2b0 [ 29.225099][ T295] ? __cfi_down_write+0x10/0x10 [ 29.229987][ T295] ovl_rmdir+0x1e/0x30 [ 29.234075][ T295] vfs_rmdir+0x3e3/0x560 [ 29.238563][ T295] incfs_kill_sb+0x1a0/0x230 [ 29.243210][ T295] deactivate_locked_super+0xd5/0x2a0 [ 29.248637][ T295] deactivate_super+0xb8/0xe0 [ 29.253347][ T295] cleanup_mnt+0x406/0x4a0 [ 29.257910][ T295] __cleanup_mnt+0x1d/0x40 [ 29.262369][ T295] task_work_run+0x1e5/0x260 [ 29.267042][ T295] ? __cfi_task_work_run+0x10/0x10 [ 29.272213][ T295] ? free_nsproxy+0x223/0x290 [ 29.276951][ T295] do_exit+0x9ad/0x2720 [ 29.281162][ T295] ? __cfi_do_exit+0x10/0x10 [ 29.285825][ T295] ? __kasan_check_write+0x18/0x20 [ 29.290976][ T295] ? _raw_spin_lock_irq+0x93/0x120 [ 29.296191][ T295] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.301777][ T295] ? __cfi_ksys_write+0x10/0x10 [ 29.306688][ T295] ? zap_other_threads+0x334/0x370 [ 29.311836][ T295] do_group_exit+0x229/0x2f0 [ 29.316612][ T295] __x64_sys_exit_group+0x43/0x50 [ 29.321683][ T295] x64_sys_call+0x2ed2/0x2ee0 [ 29.326470][ T295] do_syscall_64+0x57/0xf0 [ 29.330939][ T295] ? clear_bhb_loop+0x50/0xa0 [ 29.335708][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.341641][ T295] RIP: 0033:0x7f4174d9c819 [ 29.346113][ T295] Code: Unable to access opcode bytes at 0x7f4174d9c7ef. [ 29.353153][ T295] RSP: 002b:00007fffcbe5a698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.361631][ T295] RAX: ffffffffffffffda RBX: 00007f4174e3206d RCX: 00007f4174d9c819 [ 29.369679][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 29.377710][ T295] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f4174e32048 [ 29.385757][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffcbe5b950 [ 29.393831][ T295] R13: 00007f4174e32048 R14: 0000000000006eb1 R15: 00007fffcbe5ca20 [ 29.402075][ T295] [ 29.405167][ T295] ---[ end trace 0000000000000000 ]--- [ 29.411287][ T36] audit: type=1400 audit(1774806825.440:134): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.441208][ T36] audit: type=1400 audit(1774806825.470:135): avc: denied { mount } for pid=407 comm="syz.3.16" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 29.463391][ T36] audit: type=1400 audit(1774806825.490:136): avc: denied { write } for pid=407 comm="syz.3.16" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.486692][ T36] audit: type=1400 audit(1774806825.490:137): avc: denied { open } for pid=407 comm="syz.3.16" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.511136][ T36] audit: type=1400 audit(1774806825.490:138): avc: denied { wake_alarm } for pid=407 comm="syz.3.16" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.533328][ T13] bridge_slave_1: left allmulticast mode [ 29.539073][ T13] bridge_slave_1: left promiscuous mode [ 29.545130][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.552961][ T13] bridge_slave_0: left allmulticast mode [ 29.559184][ T13] bridge_slave_0: left promiscuous mode [ 29.565061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.707503][ T13] veth1_macvtap: left promiscuous mode [ 29.713086][ T13] veth0_vlan: left promiscuous mode