last executing test programs: 3m42.418391899s ago: executing program 1 (id=450): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) 3m42.365345952s ago: executing program 1 (id=451): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000180)=ANY=[@ANYBLOB="12af97c5f7a201000700015200010000000009044000000e0100390a240108000b0201020824b1d9b63173a810c7af6f2a07010500070ecd28704d88e7ffcdc66215ee11240605ed05fe330600040007000300390c2402050302060237df000a092402050001031f040924030fd06e308ba2dc29a98efd7cd8404dd031852426ad13756c51991f44c0d27f96b0cdd9fb5293c49703a67c5db1f7f369dad8b6964088a02b1996c03d790922fa28ccd5851ad2eb66162392cb11d05a9b8fd647e413d46189ad", @ANYRES16=r0, @ANYRESHEX=r0], 0x0) 3m39.395559225s ago: executing program 1 (id=466): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@local, 0x80, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008094}, 0x804) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) 3m39.284321722s ago: executing program 1 (id=467): r0 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300)) syz_usb_connect(0x2, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x89, 0x25, 0x63, 0x8, 0x56e, 0x5004, 0xdbd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x4, 0x3, 0x34, 0xe9, 0x5f, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x4, 0xb2, 0x63, 0x20, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r4 = socket$inet(0x2, 0x0, 0x6) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_1\x00', 0x1, 0x8, 0x1c47}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000800000000002004e21ac1414300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1a2165a31673c00000000000000000000000000000000000000000000000000000000000000000200000002004e23ac14140e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414bb00"/407], 0x190) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0400030605060140034300080012000000bf46d32345652b000000caaf6c26c291a34549935ade4a460c89b6ec0cff3943a59b3cb50b0ae854be4dc0c63359547f5090583a86c902000000004a3200637939cc1cd10400160012000a00800000000000000000", 0xfffffffffffffee4, 0x20004000, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300)) (async) syz_usb_connect(0x2, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x89, 0x25, 0x63, 0x8, 0x56e, 0x5004, 0xdbd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x4, 0x3, 0x34, 0xe9, 0x5f, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x4, 0xb2, 0x63, 0x20, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) socket$inet(0x2, 0x0, 0x6) (async) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_1\x00', 0x1, 0x8, 0x1c47}) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000800000000002004e21ac1414300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1a2165a31673c00000000000000000000000000000000000000000000000000000000000000000200000002004e23ac14140e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414bb00"/407], 0x190) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) (async) sendto$inet6(r0, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0400030605060140034300080012000000bf46d32345652b000000caaf6c26c291a34549935ade4a460c89b6ec0cff3943a59b3cb50b0ae854be4dc0c63359547f5090583a86c902000000004a3200637939cc1cd10400160012000a00800000000000000000", 0xfffffffffffffee4, 0x20004000, 0x0, 0x0) (async) 3m38.484842578s ago: executing program 1 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ppoll(&(0x7f0000000280)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 3m38.387322264s ago: executing program 1 (id=474): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x6c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x6c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x6c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x6c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001a00), 0x2, 0x0) sendfile(r2, r4, 0x0, 0x9) (async) sendfile(r2, r4, 0x0, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) timerfd_create(0x8, 0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5240b00000000000000b2333a64d909f416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b268e99cb48ff97bb49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c1881b9bde30bf430e3cdf467a67c437e54001e53ad54111114ec056a6ddc8de74076946a74bf0435e3f9ce4709385494f84c13a5438cc6abd55abeb63242de13540a3a6f84affcad3935f1769cdfc08cb23917f2cfb3", 0xdc) 3m38.296610189s ago: executing program 32 (id=474): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x6c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x6c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x6c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x6c}], 0x1, 0x0, 0x0, 0x20400}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001a00), 0x2, 0x0) sendfile(r2, r4, 0x0, 0x9) (async) sendfile(r2, r4, 0x0, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) timerfd_create(0x8, 0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5240b00000000000000b2333a64d909f416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b268e99cb48ff97bb49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c1881b9bde30bf430e3cdf467a67c437e54001e53ad54111114ec056a6ddc8de74076946a74bf0435e3f9ce4709385494f84c13a5438cc6abd55abeb63242de13540a3a6f84affcad3935f1769cdfc08cb23917f2cfb3", 0xdc) 3m8.797004963s ago: executing program 3 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000d0005110004600000a60c6eec00be00443cfffe800000000000"], 0xfdef) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) chroot(&(0x7f0000000100)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x200040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x10b840, 0x110) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f0000002dc0)={'sit0\x00', 0x0, 0x40, 0x0, 0x2, 0x2124, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x4b, 0x4, 0x0, @local, @remote}}}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000030109021200010000100009048500002b920700"], 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302e752c68040000006b"]) 3m8.264220964s ago: executing program 3 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) r1 = syz_usb_connect(0x2, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x8801, 0x3, 0xeffff0dc, 0x9}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x47bc, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2ad4, 0x3, 0x0, 0x1, [{0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "ae2a5f6f089237b55b203a741a39870d817fbfcade523cb8e381c43cd852035dea08a659a82c0b5c34d04619475ce47319a495ccbf1121d6f41cda84ba58c7e2fc98be4bf1acdd3ddde8939084aec13d6b89b198bf3c71"}, @NFTA_SET_ELEM_EXPRESSIONS={0x108, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xd5770970de557006}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "84545db080cb5cd5889ff2f26d370a8b21f80f354c8849ff8db2793ea1b36c30ef1d823f"}]}, {0x620, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xd58c}]}}}]}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "7362e8566e49b6534149a4b15b94d7e47ffed717ff9439bc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "87a61c536a172f96c270b0ce16fca6a239305e78a3463a5d8f6e44b6d8040910b1bdf6e64c0d620a396b6757c8543fa83ee46b05f8f28912b1ee4e6c227d06212fcfe5fe8caba69e83ecf21715582c52e3fe76e9eff890fc"}, @NFTA_DATA_VALUE={0xbb, 0x1, "f8395551cbab6096afcaf851e584b4e2776c076b5d7fd5dddbd45231e45beb83f0ad96459edf26078b3cf86ed453cc974f970404f329292eaff88b2cd0735bc5e4d0c44856af876e2797909a6f841441f5ae24de48f22dc5092d47fea084e938969c0f95253c3eae3b64edd50596b5ecb89373b3aebee64353cda3ef856a9c170d823d42c641f3a38423a8543bdd5b6c36ea80b002c4dc4bb6ab391eef832e54914d9496cc8b72a15479328a5cac36e001b14af4dd27de"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "0ae567720b0e01e033dc0115fa9c3a7d37af57d77b61aa770bed00e00f0557cb44a306f1db9fd66507939eec541462978f22a035bc8dcdd7bb8739811e0b4f7520b070e950fd7fb84206c011dbfe922e01fa519918371f83e4ce2dc7280160a8df97df5f8499d42ead19bc9ca1e147d261bf5bff8dd6de63b1249203357297ed6706e93a7c6038eded24366fe6b5fd536f41d82bb222ed5c829cac463f387ed96a76724409ff1f96208cf0a11a54a4458403fa58c6dfe37ca2c0476b3e29dd"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x38, 0x1, "f84c1fbd2fbe5a6b93841a9610d9f733214fac6d64043626530385ac0089b5dfe4940ccaf667c6983c1f21d63a7c29e2bcdd18dc"}]}, @NFTA_SET_ELEM_DATA={0x16c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "46bf18827b14fdb19e06eca3d9a6ad405d43f79eb9463bddd1bf1a5b89193552240bfaef54c1a969500409db20c64ff4d6431595116f58a40f52e7822691f67f8054e9743add078319f4acc03f8f61d7b16a1e88102485c308ff601db03c93ad307132cae6a2d12848d451bef5f343e2a850b404843cbb3a74dade26811e3a635883964822666c708f95e70647920e02df798333d7163b147f6347d20b8d3042576763cdb5385d570063651ce817614e36bffb85519af1dfb23c04efb12e645d54073c3eb199ad53167a0605077b0e4cad70d6a88bf31a3e0a6e5861664dbc131523a57e01ff"}, @NFTA_DATA_VALUE={0x7a, 0x1, "26007abb3f3c90caeccca7b2bb7663feade6784838dbb6abbc8afb61152923be70272fa9e74be3df6aba4f83ede4d411c83c024fbb21eb7d24e04475a53a6cff633468cb85d97332fe94b3c93508c314c187395a02d72348721384534149cf1f327d6971e12bcbf4623bbe178870bff06445803d7787"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "522023f0349749726f65dd93df2809f70a454e97380708e020d3b8539b77077b16502e9471ef3dc69d27f2939cb3a8304d94b3dcf5c735a891668dbd1936ca14f1473b92ca9851cd22d252ddaf6eade8a98809d894af8f74318959177f4164beda5ee0ec8c9454707c79c0174bcc06f6357b943493afb3dc6461a582f3f9a0473f486aefc2aa2cbb73886134200fa1722859cb35f8c4e43e94674bfb19da7542d5d35faf25288d1aa8158063a2346aa10e"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}, {0x548, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x32, 0x1, "6372322565c27db273d511926cedb29a1689862546ce6f82739a9b038a7ca090cf00de0d708f1498da81bf6a95a3"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x57, 0x1, "f6e44bbf8929a291a0d653db405fbf3a38c2f51d195338ff4e72c04d85dbcd831326f753bc33b46bb99dbb2f6a03a4f5e9e725b28606a1043d7b16f1ce2c0270e520c61044e16714f385bd6fb3097d9caa0d56"}, @NFTA_DATA_VALUE={0x17, 0x1, "71295dfacedd4c37c65d61a943f95ec818c383"}]}, @NFTA_SET_ELEM_USERDATA={0xf7, 0x6, 0x1, 0x0, "26b20d2bd6070fdba7a8e83eccc39fc56d106180eacd788b81eabdad3b258a8166b6e7401514fa4b405ca97f09cfd34ecdc5ce72801b96dcdc1ff3183dbaf144550e91518dafcb14a653a173a48f303d7bfa60227cb56381ce4dd1fa118bba2e12ba83ae697353d1cce1a52649b4bde451564eb0f5494723ec90519bdaeed186a915e84e5c4eaae28f1bc7840651cf89e153c1e161d1e71b0eeac50d3884670e15e4eabfaa9b645e0f3c9037c1991bd48ff15421ca7b28dbc0b369393bb582083366217c0e3f968659ebb64e9b20e0ea78d329a33e93a441021303510d78ab5a6bed393a542df226a4199f348af65f7cfab87c"}, @NFTA_SET_ELEM_USERDATA={0x14, 0x6, 0x1, 0x0, "b6cd6a5a4bff0a4fde65b82ed7aa539e"}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "19bf276454790c8f3d14e1026cc6f5de94"}, @NFTA_SET_ELEM_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "d19bc0ff7d28664e1617e4c3dd045da1ee95474a141bca6335c40e3a9d63ddc9c61281ac988c78a05a"}, @NFTA_DATA_VALUE={0xec, 0x1, "da88636100f50753ad6d24ff677438c4e7b6e75abbcefaa19a23e6eac1af8b71fa418638fc31b35a46141f97544730441945f64b9da039185f95f8f84e1096a14deb0cc48d15958db261dcdc9552a34a987c482b3cd1871ac35864c2ad20268d006ac3ed9a9422317b9f3c865d1acc1944e90a95d51833807b7c745ddaf2474e2d0ad11aab545b6975406423d742bc63d37372ce756da2031bb6566c72e9de962248a1b5e1e5b6f001a39031b41d8b9f65e43653f069797f19dd50bca02b9953f40f2aa86f4cee6b2b1d521244b76edeed86ed6bd1f08c8ef4a20228c00d5bda82ef9f0d411a1304"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x3c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "a1b91b430b6fd846810e8ee098adcea2395d8ceff6d0b3637754b76c23d7cc35dea07227066d0fbc6144a0dcf878c8c0706c7fa45db844e3850e56f231bf0cf18f3289fc0e50cf449225409ec621aeb0723d4ad1fd13062ef7ac9ab68a5d133545b21e0e0141a493520106a679f089bd0071dac9e34f786c1598ee8b3e304151cc698149a6abdd0b2ea2acf7bfa806b320a12550e8a40d288e31c94650d3"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xec, 0x1, "bffa432632cf9bf0ae9a1d33d44d451ed49a4d9c50ea0be8800361101fd560a8676480b7a14fa6ab1e63924ff99cf802e7d4ff09a459c9f3c48610ade4c1baa99e9256797de62d1c9cd5a45b9bc539cc9f570c48b80dfb741c6d25e8e2336048ee82491f20c2a8143add0f1380aa2d4748b2221144ab176f10d5a5e8fbce2c5f011926def5a91a49c9b5594100a259d935d28ab02256ec96a28906e6ff314e06dce51a6b395c58c7d0d7a27b89372c6e77ebbce1ea288922ea788ca329072849b7e7be4f1a937462715a8fffe4b37a7fb678b8c6bc732e849b9c64e6a5dade797682e0156333db0c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x85, 0x1, "65fec4e00c4416e1bb93396fadfdb3438ecf33a2f03ff29ca0060e07e3ea8d10cc44b28f9ed4cb8b216db6d14a05fd0f99485f1c545da1d5c6b13a53c575c45ac4d62c88df98aef8b5a912489d3e55406aff15a30252849e643a5e150bcf37f7769e01df9a7a21f8fe7f1e73f564506ac37651202014af35db1aae3118e5a21032"}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffb2e}, @NFTA_SET_ELEM_USERDATA={0x60, 0x6, 0x1, 0x0, "f5d141da5a5a5b0c9df5045b470eb7037cd2c490508990b33f71947bf2cb747f0627c2f1fff7da61c5bffcac6ed103bff8583451d54cbf0f328bc4ea02b5454a75f77a487011eed34e42e696132cc957b2af9d60d16221ae4adff87a"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}, {0x156c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x1388, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "903e49560cb8ce442df26fc7bfcd996d69a8cd10e88ae531bdcd672c50aa532575e62dfa72938e6df5b0510a6c7b39518512ba0b0d7ab166a4c4abf17977b534a0e6b0320d7fd3d3afd30119a9b6cfdb87ffb054093ab21aeca570d76bbd44"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa4, 0x1, "737b9f26fce8d287f830882ee7bbde2613a1a380a13b38d1536c264e933afd57823dd00de15dca85c578d2612c6dc0189098fa80407dc0133f74410f2f6234520dbb87964877461f09e233ee7952792bde8b388110ababf48c302c2e584ffebbf0e7a3aee20fd708d428bb687dc918f3fea84813f3bc81f316f3976396e7ed611e7b859c6e60274529e4d7cc184d5693fe44040fa45edbaa305da7c3b3304ccf"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x3d, 0x1, "db91b4865a6256267095c736b550fd9a7f4a1a01b5e75b5e3880df0e61d8f3fcef26ab2cf08c05eea22925da3a79a68dbd788acd9970a89569"}, @NFTA_DATA_VALUE={0xdf, 0x1, "921a32294d345d86f3606d5d0b8a661c028c80edce2e2df63158e45e08a6d2685d8600e75d7a54d9de28f6b94c34a4eda6eb42c989068305b5ba12b94c63ee338012df16af641b72f5ab2a0d9f527406a798f04d0de1ceed9a4d4b90e29a7d09d2662a994d7b92b44f9720c22a2f466f69f4e72f5b7d4df4c3e492a9f364279a92f396fbad91312aecb505fc2c281e7073563273397197815db83b393f01ad3040a783388fc2808db78fd0269baa62a6754b9dd5525b739c499eed93209e93100ae18c39a55428807137ae3853f14bd7707bcc0fe51c3475687655"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "b4e6b30a652c9419ccc3de18cfb07c7cb42ab0"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "f814ef1c6c236bc38ffe9e7ef795cc6185769c2e83c29c27e7dbf0f0a5ac6ef1aec8dfee244fe8331b2bc6e4f7e0e04165b3696b39a8c2d42fe1865a0f45a6bf9a89dd0745b591b3a970ff0057f2d83b875e20cc204db46970dac7f0d949dfab85be2a324b4c29561d54f3a642fe41d74f8ff0d0f4a258a2d21aa125ee59963b9e9a6fc4de770cd50a3dbcc8939699c7b58a8934e3b57a27ad44e675cbdf47859e38ef58a504b5c7b2c6823921dafb1002ed3fa1e88d87b373efb315819233dbdf14ecfd"}, @NFTA_DATA_VALUE={0xb2, 0x1, "2cada9f761b2b001b4feecfb40e790ca5af674511661bc962f5c30164ae6d664f42cf99c7c52520f4f6d3a841693fc3ce426972b5f373b46945016ad2a671da1830b06606f13defac9d677cb5beca39e5f7672f385f30cb16629337264c64dc11669973369e77c7b625096bab99abdbe5d06c089fa136ab2e7c7f22c0930313b6ced7711d127ac69b80bfd770d7511b116d269b578d922e4d974a5fe75aa22bc0e6cde7f3421750ec4ad3800073c"}]}]}, {0x1f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "3ad266fcc46103061ce8324d9ae9d7742ce435d42fb5fab53c4d68e84770a62aaad3b3cd920caf7f71ccd5428daf9f17d186f5e9654e1885847f59dbd3e7f6afdaddea9fe4eb3fc4348ca48b100e2b74bc9de99db4370ef1a3f87ab43779f702873d037e098cf76477edacbbc5cc502d30fd07a72b472062c8c57e24802faefd906b7497a2deb3c51c339addf7698f0cc6174286a58699b02cdd1a266e2b79562f365a1182b72cf7de05c06aa367d05a4f8a6610b94d58726e81c48274feec4332dd40d6c93c9b85252f693a9d73af2f0e673516fd4fbf"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "ba0475d4576a2db505be7d6436cc7c5bd2558d1165b3c1f3432c6ec865ed2e2caaa1842281cf26699d9bbd74b1c74d76c4e159eddf2d018877bf069b644d6da9148b1d21fc7f7314247815a850c5052b1c308700bddd64fb8c2ee510a3bf437077b1546f7573a7e906cb3855f4a1409ce56f3cec266796a8ad4167fefc302362381480f6cc994d05745f2fb57f65afc230e28640331e5eeb5d2cdb2e5c5ba688cc2747a392b1b11874816ec1c38680172da3423cb6f5e0422700fcd220a64fccb3ad6391069932621c5466df4bf7f17aea9d4cffe1a8881cac2c9f1581f84a934d53b5c30672fdf08a"}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0xbfe8f31ed5d16e09}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1866dc0f}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x66, 0x1, "b5ff91f5b20e28a604d730ca202f763d652248020fcfcc51eba4ab96309fc6b79eb7c63114d1de36399127b1128668c63e55a3848f9a3680246ab5e2da512e59ee5bf75f7af4d5a7e3534bbc395bf57e86de1ee120b70d7bf4f92116e56d61aa6e07"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "751bc79a2ba021db3233ddfc04018464f6369e7ceea019739f2dec4feea08cfaa1d3837c592db74b3ccfd1273736f33e8ed0ab659b8b8735b31aa6bf0308e2342f0ad08742bec8"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a48, 0x3, 0x0, 0x1, [{0x1778, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x408, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "63a3eb2c"}, @NFTA_DATA_VALUE={0x9a, 0x1, "4f19624deb1dafea52899b5daa5f95d27c08d53396ee7d2ab32ae5ac42b79021a7b0427c2187fa0fb04421dcda843b761d09d9f1ce01b8c5019c9c5f5d7625f9091c68ccb306f44284fb3e4e979f1cbc3e25dba856188bc095cc341c5bb8a9ba9a30e67293c41a3a3b19193c4482f4c9b16a88cbcf65b34025ed61f1dc5493c59a664b5d95f2b2878ec7a8743a6eb92d8e53139675fd"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "bfbe5b6c4e6a1fb8272bec1d52f93e41422795df84ce3cc5b0a358c6efe49b7cfd0d9add819721eebef2a17e8f9676f18c474f8c3218fbaec00f5a5a8a9dc1da42356f98857ee44330ae32b392c9a47cdf8d08e45d82c6094fdb6a00267248b530c2e4c0c6866e99ac8e6612e90d08740e797f2a9522cb15ec54d5961956e9e7e5d6eba4a5c1ec8e1dfe2770636dc492914f6d861d29d039e689fc29445a65ccfd4d1e63f00861eabc0c481dd02a775cfe48ee3aeee24bc2e2f8f9fc8b588fde9ea9d77a03183366"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "b069f803d7a7de2a887aaac85bc83906c23e0a82425fb511adad2dbf249a4fd5792064dbb06b"}, @NFTA_DATA_VALUE={0xaf, 0x1, "d03a010919bd13454148fd4d4b9c64e9d1f3ed44863acc6af2f2900577af31eb96e1831b85e4f4901d6d30b0e990b9339f7bd2a4f54f9393d6b3b7550c17110796d0bb7123d10059984e1d50da2ffa34c7e76565fb3959acf142e53a65963c213753884b5e4462ac4c50d9e011a4bb7440419f5e16074ae8fe3315505fdcfb3dc3bc3d0b43591e028b144f99832a2165c81c6c423387d2a7ac1496e30029a8acb3366d11361d53fac54884"}, @NFTA_DATA_VALUE={0x83, 0x1, "5c95938d3f0380f30b3c9db0ba792d12f120220d581b64d5c3c13d377cab520bab049480b2d58badcef535a4fb4068480428d40259c0118f973dab5ea4d5627216636aec34d2cf9c7d9acf2beaf2afb4ed4cba5d45f0ca8ef09020850faf473f95d46754765305f8c9d7c5f5c0d6d3a3ff8140571cb0cada1539dd54f2f7e6"}, @NFTA_DATA_VALUE={0xa3, 0x1, "9f31a0974c5b1f3b6bba46906b5f5914a01cff99dc8015cb737e5501f074994ebd1eac918d5f9201c5d9b996232a159f91209cd6de6237733019a2ce74760951e5e03ce3c6ca6d58f348a6583d4d1e2661a5739cf5f092954c94c241a1803cf18cd29454b8cb79103206c24be376920ff1d3ce1e5c4c14c30d687339a406bec58366e4d350f863d7886b95a127aa7fe2149a9a4af5248387a61dd3d3ddaf3f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "892f8bad6d61f56143b6aeba89da2fdf76322f846ebeeb1ebd512532aa4f208872b940c257feba53affae43a11fd21e29056a9fa094dfb8f559665e580beef508832bdf953097644b8570a0932ac94fe66a9ded9fbf7eb97cca6daa965e20984122cdc5511695ec7fa25eafa5bfee2024e6d93b05a278c92c378fd339cb2b938592bf10207a49ce2657eb2c4513c4b2420b2a593fb7345f9ed28b0deafecbbe316b359c2e350e445bbfb84034b2072cfb6bdb3629c1f4bc8ad34ff3eb1cacb12cdaf9a55017ec569d911df21085e0d0aa017dd0a7ef0ecb14ddc77afc64db15b1366eb35ebdb9ecddac6629c2fe4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc, 0x1, "0350b5da8dbe5f80"}]}, @NFTA_SET_ELEM_KEY_END={0x11e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "dec155e82da06fcd38b52af87691680d7d093132505a58aaecf8c96b51a1ec811168ef58db9df471a868162d784c400e8f72e34974d809dcbd1f3aef9b52f28a4d7a654d4d9cc3245d9182a5a29413bc4b73f471941ab9b6f4a54664330bb071f5aed2d65ea794259889d6ec056c63bd22e186bfaa3aec3cc7323b8eca974faac63d037bae9e990bae6cda4580885feec0a5f5ba9df3aa63a7bbca735b2b23c87b648ddfba73e4fb913530695a029bff8d57c0ea13"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "8324b1f9d840d6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x44, 0x1, "3b26f65eb8d36a8594c2156f8e76e2a1830a7edc4a2b882ecc23f098c9e42f7dfdec3116a226ff2098aabba9c63d8455945e3d5988f7e0f090f6a9150316f288"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x2cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "b8add9418c2d7d5b0f3f4d8016df3c7b2e5125bf3857669f8168b4424d22769b3e4f01ce128d2df8f73d3dc460c8d38b6fb4369a3e79be560e1d5d855512ee2d0e82d99c7e359a0d540ce7fb723e72dfc1733f67ec96ec4507ad72160766ae8582f856fcf964e4f1fc"}, @NFTA_DATA_VALUE={0x6c, 0x1, "fa52d452d1aa9480baf5e166532f1877f6cae4476214717e7903688b93661798475c917d059b8eadbf6881dcd4200ebc982604904d25b96f5833ec18fbe67c5dd98924cedd909250801ee96e427f927edbbd8d1c6312dc6bfda1d46dcccc6c4154c99ad267353e06"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "4deb21f57385e6f80432636ab5e532270ba3a5eaa173c7bc47f35ee914be1a5aea19c75cd32c139de727e15774e842dc138fe9b3a98add0089231a06b828eea88eff53b0c8d06fe2"}]}, @NFTA_SET_ELEM_KEY_END={0x130, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "b9a7292ffb23ab01881ceed0ac8d7c6f3a6923bbbd56410d127d33dfdc32fe55217a679e2858c1fc1a958ee0814b4c0bf264b4e644f9a4f6ea8679706d684e42c5e01f5286961b30da0865f828f9a71462a6cc69e9c02db2eb87c3c97e41b3d152689e3d1afe9e38ec53e919c1ef01175c537581d133512c95a082d9e3dc76183df64bf45ee1f8a6cbbbb00a3b8d636fbcf3acc522b7014dbaedb86650bd6c71b619304ca1138a2f6df99a801709342565046981641f3438edd324e1b9776c5261712b1731345ed94fc0d3cf35e2c5ebadc8523d7fb5afe449d705fd43def4e72a31437ac20155df159895298ea2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x274, 0x3, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x1b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "7b6292ef7ae3712b6133a7c8bd65b04651aab886167189e7c28fa572765bd540022f86110c5971f4dc191342d0d35a5a581f0a2632d35a02c6e45bbc88cacf1b6f140add981c08dd61d03c895fed1aec51"}, @NFTA_DATA_VALUE={0xf7, 0x1, "2bb11c3c88ad9928c5904ea1a4190677b0893d6f5ea6d0aea01c0bd69739036ba19ec07855ae74651d56544cd5a7ccd4674530a093fa7a48235b9a85bc9ec145363cdefbe94b9e65dcc9b2b342ab3210b6835f2465e912423aed53cda551a51c334527a8d12d4d57b43335da3e1ec01561d0dfb35125b71a6711f05d1eed203e77aab3c8aaf37c9956d529bf38ee33bf201e39852437a66645f7b2305e2c2c558562d4d2099a17eebc6a3e5c0546339e9551035cbf23f4baf552047f81bf2670ee9b9c9dca847bbbf2546427eb66f2a4883de40a0d109fb3973c1dc415f28ea4bdffce7ec82914ccfe5043a583969f3ba8448b"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "f3f72b35edb2ef0b37ab4dc2c33b45dbe9648de64e317773db26f1860a1d8986a698d4e95f82b58e83f6ae0e53a3db4c7ea7068ea56cca4b5ac7621c30fe325ed5e40b25b67eee36ebc254627dd6c8d09be0ba53e2aa07691226d4f13c5676750b1377d24ff873ced8ee3a014f59605ec61216d87ffe607af00ad10a9d270a520748455f20fa8473c9633b0b8bd684f9a90cea23344a05af3532be88c40d99b3123e25e50aaa9af6"}]}]}]}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xda, 0x6, "673b115abe30a98a9347a0e92d6e8672335928f400cacc961d985a36b8777a0e6f9c9d1edc41c429042ba9a9170cfb16b0293f121738cdf2e60f50d70ff8f14815d1bd1ab13cc2f976d0ae3202516fcbacf4bd7ece4390897a42b7e0935eebdd4a706e861bd93cd4c614d9521d1ef31b575387b999a2b4ca4fb3e0cd5ff8bdc43587137f6310b02994e3641a432a648ecacfa741af869be93345b7ba99803c88edcda011a351758438229fc55a6e7d687364308d8ea84ff005740f8e3dd4683098b27f7f1c7dcce8bba9c17a9fbe5ffbbd163353be41"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_EXPR={0x70, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "b5849a4254bf7b81feee29344795edc7"}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4ae4}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000340)={"8ec5a6dd4619a8678b4ce359c5b9e0287aea06310737d02418b116326f95ae4ccd2ab7feb92f55649d227c5d81212f60bc1176549823b8517f515a32def942c693d579718390f5d00f5bafafd12596631282495dcae0e39d7edd806e1b0fe38c9baaec5ed7367f0426c8d3b3f943d7b4c2c1dd4d0f25b255f230545121dc42c6f3bfa56c5ec5b959b58ab587bdbb995866d0161e9b826973abebb5a4e89e91dda2a22ef59b9b57c3652126fcbfeeac6e62e6a91b4ec12fc1e41222906c578d1a3d70acecc11c6977fc57b784966dff51d28e7dd82d568d070ddfb75d9c526588b9a89e2b8a91acb154f2e697acbfa059ac1aedb0809beadf65793b82c175676d0af2e0708e13d37465a5f2f3e31d578aec6031b63353f642bc4a375125ba4078cfa0e97840726b856834a3419eab0efc60afe429f3f19666e9f525b1ea9aea86d38217cdef2112aff3e2a1b4696dd9cfdd9f236dab3831d5d38f4caf6c8b5fb652c8e01e5756d42eb2f816bdba2db5fd454c9273d8c266ce9b91283b2a4dc80aac9fbafcef9373f0fdc1999bbb0c85dfd860ba7c806dda83d078eef4eb1b51610306108873b06d5e82cd7a0276c8c58a75e2a07a216f910a963b6d2193011f55ad06f533b816743b752d5a9942781fe6615efcdceca1f8034b4d624e19ae082b608adafe36e7e502e194703a8f78e0e03f8fe6aeeb3cc38dfd9fb10922bb4071fe3b3fc987cce221c06e6deef8a696fe91956bc45bdb9dd8b02fa787e947d30b3b0807f8a4997bf13de810259598a696ca875c5c7e83ea57c8e1032f3a0d64b048e6cb901c5d8cba9a75109f01b8d584dda7c783205c77666a458f0cb766039ab46f361d476423b50468c175b76ec1d495d3dc2334b4e08daa9f223c8b990cc3836803398d307ea204a58e93d2deb2638573471f647b9eaa03bd58cfd58b63f9752ebdd6c62b6b20782ad7e209cb4a642f20601a8a28281eb7bbca34c157633685ca3ca7cbe74d5ad4e0638db2ee526eda0c8b841d1bacebcad21603e47a7e7f9ba57942feea71726d4d878699ede35626e88bb0beceb029dc66d6222905785600feaa8b73258c323cc8b5bfd536871db5b03e479b4486ada4de49f30714c16456814f5b311995f927fe229fb4b845f3270b2a9991c080780b0f050a1e12c701ce184715b10ebda463f1d2fd0f66c77883bd4b70820f41aa11256171d1b7ec1b7a1f6312bb718231a7e3152ff530a6750539d86ac08802cfc400c87059f061b36afbbdd248e59f7b773073a45458882dd5325ce6da4199ec7bd3822eb74089ea955b47d76b13f12a0aba1020b0f4e3bacea4e0b0ed83e599d5756f24747da40dcafebcf143c55376e6c26769ffbe46f7c04cd4dc309d000000000800"}) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x10, 0x6e, {0x6e, 0x0, "487aed39fe72acc5bf2b7692f7cc5123c341933a485c0c06eb81fedbbc576ba247d7013441a058d02a42846008a099f85d7b9a15a1cacc72799b9c9839a54cf5ac171b62992f473f6ac2a8840156614f7d104d60955a058d73a591d7d9a0651f3bead37c0082185c9b24bf68"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xb2, "9e67ff90d84db564e8480177cde92be57fa9bfb3251b13f6826f765350049eaef29141cb624d2f47407517b02024c73970109950c53d0baf7457eb603f8b03f670df20331bee53acf9d0f5a576e21ee7aa8e2ad48882745e8fe27736deaddba6c35d7f99cf8b072b5519b88c4db71114151d1cebf8591bda105202852b7a334d1773856cdf52f25c6da569f4d913417460a628beea365dd095aeb32638760d88ef10e0e2aca8aa19e359e7bb2b59f7e86a3c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x27}, &(0x7f0000000300)={0x20, 0x81, 0x1, "cd"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "d61dd5"}, &(0x7f0000000380)={0x20, 0x83, 0x2, 'M;'}, &(0x7f00000003c0)={0x20, 0x84, 0x4, "c1544937"}, &(0x7f0000000400)={0x20, 0x85, 0x3, ' ?0'}}) 3m5.173240255s ago: executing program 3 (id=717): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x42) ptrace$setregs(0xf, r0, 0x6, &(0x7f0000000400)="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") (async) r1 = socket$key(0xf, 0x3, 0x2) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x34) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xc, 0x7, 0x7, 0x4, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd2a, 0x34ff}]}, 0x20}}, 0x4800) 3m5.172899865s ago: executing program 3 (id=718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x23, {0x23, 0xb, "b6f354b06c8652ed2c6db8933df7975faaaeaf99b2c947452352f5062f278e73fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000880)=@req={0x8, 0x9, 0x9d3, 0x2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x114, 0x10, 0x613, 0x70bd28, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010101, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffc, 0x594, 0xb, 0x5, 0xfffffffffffffffc, 0x13a0000, 0x2, 0xc}, {0x0, 0x7fff, 0x0, 0x5}, {0x5, 0x0, 0x3}, 0x70bd25, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@etimer_thresh={0x8, 0xc, 0x66}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd25, 0x5}}]}, 0x114}, 0x1, 0x0, 0x0, 0x90}, 0x40) 3m2.191858689s ago: executing program 3 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e29, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffc01}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) poll(&(0x7f000000bcc0)=[{r1, 0x40}], 0x1, 0x200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f000000c240)=0x11) 3m2.118441783s ago: executing program 3 (id=742): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x60, 0xd3, 0xd9, 0x8, 0x1f38, 0x1, 0x7d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x93, 0x1, 0x94, 0xef, 0x4f, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x0, "09a1a1fe5a15"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x9}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x40, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x400}]}}]}}, {{0x9, 0x4, 0x36, 0x9, 0x1, 0x51, 0xf1, 0x9b, 0x7b, [@uac_control={{0xa, 0x24, 0x1, 0x24c}}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x7, 0x6}}]}}]}}]}}, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x7, 0x9b}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r1], 0x0) 3m2.090968325s ago: executing program 33 (id=742): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x60, 0xd3, 0xd9, 0x8, 0x1f38, 0x1, 0x7d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x93, 0x1, 0x94, 0xef, 0x4f, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x0, "09a1a1fe5a15"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x9}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x40, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x400}]}}]}}, {{0x9, 0x4, 0x36, 0x9, 0x1, 0x51, 0xf1, 0x9b, 0x7b, [@uac_control={{0xa, 0x24, 0x1, 0x24c}}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x7, 0x6}}]}}]}}]}}, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x7, 0x9b}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r1], 0x0) 2m37.509294593s ago: executing program 4 (id=848): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d025891dd3f75fdda624457ad3d5c3638"}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef93136b1587", "28aa90f4", "ff0547fd1577e7a1"}, 0x28) sendto$inet6(r1, 0x0, 0x0, 0xc1, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xa, 0x2}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a5, 0x3, 0x6, 0x7, 0x5b8, 0x2, 0x6, 0x3, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x8, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x7f8b, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x3, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x1c, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x6, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x0, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0x3, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x50000, 0xfffffffd, 0x3, 0x2, 0x89a, 0x100, 0xd3, 0x2, 0x1, 0x3, 0xfffffffb, 0x8, 0x6, 0x20000007, 0x918, 0x4, 0x0, 0x8ea, 0x5, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x0, 0x1fb, 0xb, 0x400, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x7, 0x28, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0x101, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/224, 0xe0}], 0x1) 2m37.401980919s ago: executing program 4 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1}]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000580)={{r5}, r6, 0x18, @inherit={0x58, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x9, {0x2, 0x5, 0x93ae, 0x100000000000}, [0x7, 0x6]}}, @name="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"}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000015c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f00000002c0)={0x50, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x3c}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5a5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x674}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83d2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) (async) r12 = socket$unix(0x1, 0x5, 0x0) r13 = dup2(r12, r11) close_range(r13, 0xffffffffffffffff, 0x0) (async) r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) 2m37.22533993s ago: executing program 4 (id=851): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030300c3030303034303030302c757382725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000200)=ANY=[]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) 2m37.22514255s ago: executing program 4 (id=852): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x20000, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') 2m37.22478903s ago: executing program 4 (id=853): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x4e21, @multicast1}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000440)=""/88, 0x58}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x5, 0x40000100, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x8) write$binfmt_aout(r4, 0x0, 0x6a) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000300)="dd481ea0a28dd3ad058e78c4d1f7569674787dd5402817780ac263bca36438fb7d9b33eec04d9ab3cf2cacd243c3c3be17e032145717622a30e0f26ba1882d07a2ecd8ed737e5cc833a15fabcf7022f6cafacb52b3ef8aa8ab933b635eeaeca917429a96cb616bc8", 0x4000f}], 0x1}}], 0x51, 0x40010) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000500)="ae1cd938", 0x4}], 0x1, 0x1) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1) sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x8, 0xbc, 0x7, 0xe, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0x5, 0x6, 0xbc, 0x3, 0x80000000}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@multicast1, 0x11, 0x12}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@local, 0x26, 0x14, 0x10}]}, 0x70}}, 0x84) syz_usb_connect(0x6, 0x692, 0x0, 0x0) 2m37.161003633s ago: executing program 4 (id=854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=""/4109, 0x100d}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000b80), 0x800, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 2m37.101560217s ago: executing program 34 (id=854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=""/4109, 0x100d}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000b80), 0x800, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 2m30.785127586s ago: executing program 5 (id=899): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x401, 0xfff, 0x100000000000000b, 0x180, 0x4, 0x8, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x8, 0x2, 0xfffffffffffffffb, 0x0, 0xbdb], 0x26000, 0x3c4390}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x8, 0x8001, 0x1, 0x4, 0x0, 0xfb, 0x9, 0x9, 0xd, 0xa1, 0x4, 0xff, 0x101}, {0x8, 0x800, 0x7, 0x3, 0x80, 0x4a, 0x3, 0x2, 0x2, 0xf2, 0x7, 0x7, 0x2}, {0x3, 0x100, 0x10, 0x80, 0xea, 0x6, 0xb, 0x7, 0x39, 0x6, 0x5e, 0xfa, 0x200}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.264501737s ago: executing program 5 (id=903): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast1, @private=0xa010101, 0x0, 0xff, 0x0, 0xf, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x200, 0xb943, 0x7, 0x1, 0xffff, 'veth1_virt_wifi\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) (async, rerun: 64) getcwd(&(0x7f0000000100)=""/191, 0xbf) (async, rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$TUNATTACHFILTER(r4, 0x5460, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3, 0x12) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x56ca1264d8948fe, 0x1) 2m30.245407978s ago: executing program 5 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000003c0)=""/145, 0x91}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = userfaultfd(0x80001) r4 = epoll_create(0x80) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00030000000006040000000000f93132", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20002002}) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x233ff002, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m30.129200775s ago: executing program 5 (id=905): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x74800) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf, 0x0, &(0x7f0000000600)="0eff1339fc11585855accb22a1c100"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = syz_socket_connect_nvme_tcp() r8 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) fcntl$setown(r7, 0x8, r8) r9 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) close(r3) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 2m30.080630197s ago: executing program 5 (id=906): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x0, 0x1fe, 0x0, [{0x6d, 0xda, 0x9, '\x00', 0x6}, {0x5, 0xa, 0x6e, '\x00', 0xc}, {0xfe, 0x2, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x48, '\x00', 0x81}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4, '\x00', 0xc}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0x7, 0x7, 0xb, '\x00', 0x45}, {0x6, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x2, 0x35, '\x00', 0x8}, {0x40, 0x8, 0x0, '\x00', 0x1}, {0x8, 0x4, 0x1d, '\x00', 0x2}, {0x3, 0x87, 0xc, '\x00', 0xd6}, {0x5, 0x4f, 0xfe}, {0x4, 0x0, 0xd6, '\x00', 0x7}, {0xb, 0x0, 0x3, '\x00', 0x2}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x64, 0x1, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0x5, '\x00', 0x2}, {0x3e, 0x48, 0x2, '\x00', 0x6}, {0x7, 0x9, 0x2, '\x00', 0x1}, {0x83, 0xa, 0x3, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x1, 0x7f, 0x8, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x8801, 0x3, 0xfffff2dc, 0x9}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000000)={&(0x7f0000000100), 0x0}) r5 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4083, 0xff3}) 2m29.925514227s ago: executing program 5 (id=907): setrlimit(0xc, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYBLOB="cf8994f678afd02a04b855e67382ec85f3655806ef30328ccc41b42ded21e530c17ae537c7d99fa2eb8479c98134467335fa051ad621020f52511a242a000743f55f96e9e8e08bd14ac3d99f723e79a76406c3dc"]) 2m29.890413819s ago: executing program 35 (id=907): setrlimit(0xc, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYBLOB="cf8994f678afd02a04b855e67382ec85f3655806ef30328ccc41b42ded21e530c17ae537c7d99fa2eb8479c98134467335fa051ad621020f52511a242a000743f55f96e9e8e08bd14ac3d99f723e79a76406c3dc"]) 1m53.543433546s ago: executing program 7 (id=1153): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x10, 0x80000000, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080b0}, 0x8000) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc056}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 1m53.401324154s ago: executing program 7 (id=1154): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) 1m53.400870705s ago: executing program 7 (id=1155): mmap(&(0x7f0000294000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x53d0d000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_void(r0, 0x1, 0x6c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000008c0)={0x5, 0x97, 0xf, 0x40, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)={0x45c, 0x3b, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xb0, 0x10b, 0x0, 0x1, [@nested={0x4, 0x45}, @typed={0xa6, 0x11c, 0x0, 0x0, @binary="b38c8c355d99fb4cfc70b63e5b06e0d0d0083a1b83657e326b28127d4dadc4f44a05493109e2e07019dba376b965c9e7b5748da21c8eb2763bd0e09490d8a43cf3565c5d281cf2bbb0e075dcf3b885227305993bb8c388726f19c66020c84f9889c2f3dea9fd4851aa170ff92df77be8770bb69ed0b5c7e5899b70ca763c21bfcea5c4a4efef0f7a962d5e033594be4f2cab9bd68c005be190ea0a639244cd15edfd"}]}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@mcast1}, @generic="6cd5c267e26acc8252f512c391223f2ec9d74540684c419f878bce05553e1388fe7944fdd75f3617f8aa0a5524ba13035b6779428dabef", @generic="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", @nested={0x243, 0x6a, 0x0, 0x1, [@typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x77}, @generic="c1cd97266c98a10044ebf65501f12e7fb9d316fed332dee4de093c3ce952b0d6c20924dc2b854391f215486de58738a7b895fe0a731aff413add38638a4ff03318ed8e4ca819a29827b8c659e3c007f3391ac97b15662268da4dbded5f2db24283f5dfe0c7096c22eb4fe6c115ccd3cd57bddccdcd9a0bad17e50cc23b2a3e6e2f1444b46716c80ac0f603d27e68266995b26e91fccd6c159b97698285a91bd2f5a22a939d1b948792c06224a9bb8318d0254b1a8aaed4b5916860397e9ab8c3064c1a40d0692e1f6029f8e97684739a4f1097319fcf2f775c38a90abd367ca9de9f71e71ea2c58156ccae2f1eecb6f15d9f4aa181", @typed={0x8, 0x135, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b449b891ed6bd7ed4a27aca55cab6539e2ace1d28db9bad1f8faa7f812270b1ceddcca9288c26d027876d12f51114ba2065b050dbc4945f38b6aaf62ff29874f014f6acda65f9e72341e056df6a053cd966348f21a7c9f0fe2f1e51ce8e27e7d0098817b078616bc9f021a621fb682e16e8727cfd016348716d179e205aa9f537853bfc77f4850354482f0d30b24", @generic="40995e51a0aef811eeee540aa14122a8241081ff602d631e2c750bc918e2d89a19ea2403e14204b05bd3013c303086deb111087e484318427a095cd4991d9e1c007028c090624d8fbb3ecf64f746466ff15c690c8cb4f10bdbbf49c2bba7c4ef92ccec2cfd93cb1634dde08a17a2c7f4a7edbc9435b1efb9f5302256178b86540278b1d870db15048a702c6bfd40a277", @nested={0x4, 0x89}]}, @generic="5ce874c965b2", @typed={0x8, 0xf6, 0x0, 0x0, @uid=r5}]}, 0x45c}, {&(0x7f0000000a40)={0x1018, 0x24, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x4, 0x1e}, @typed={0x1004, 0x22, 0x0, 0x0, @binary="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"}]}, 0x1018}], 0x2, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r6, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0x70, 0x20000840}, 0x840) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0xaaaaaaaaaaaad64, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x7}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) clock_adjtime(0x6, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0xb, 0x22, 0x5, 0x7, 0x89, 0x9, 0x2bf, 0x4, 0x800, 0x7, 0x1e, 0x7d55, 0x5, 0x9, 0x4, 0x10, 0x2, 0x80, 0x8, 0x6, 0x4, 0x8}) 1m53.400544424s ago: executing program 7 (id=1156): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@remote, 0x0, 0x4000, 0x10, 0x8004}, {@in6=@private0, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x800327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x80000000000000}, {0x8f, 0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x100000}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fchdir(r2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00032100000024037dadc35abd96721dcb6f2c0bdd410138220e08abbcda155b1b378bd6136e0aa6"]}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) listen(r4, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m52.063602933s ago: executing program 7 (id=1169): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket(0x28, 0x5, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x101, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x4000000000001d3, 0x4001c00) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0xfffd, 0x0, 0x0, {0xa, 0x1, 0x0, @private1}}}, 0x32) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x4000009c) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) listen(r4, 0x4) (async) r6 = userfaultfd(0x801) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000124000/0x3000)=nil, &(0x7f0000ed2000/0x3000)=nil, 0x3000}) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="bb7d645e5f608bf0006eaa3d6ed6849465c9e9e749767ae50e1b504e952fa17a9e340f577848b425848f34a4fe40300c06f07201a0de4d35f1e0dbedc5d8a80f1fa157f3e8f28cbf78f5297c941970d34616abc15e79e0d0dda3c0db7831298074517c30ac802f7936cd9c20d5d010afe2b689938b2d08bd92f33dde1146f043d97c9ae8746d4498578ff8b705a17d2ab84e35103ec13fdf34e6769844924041f8a5feeaefdde0612902489c1f44cfa191172fe2b91a504423", 0xb9}], 0x1) 1m51.996738367s ago: executing program 7 (id=1170): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) close(r0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x1913e) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x6, 0x1dddde000, 0x2000, &(0x7f0000571000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x1, 0x400, 0x80, 0x86, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m51.947643129s ago: executing program 36 (id=1170): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) close(r0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x1913e) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x6, 0x1dddde000, 0x2000, &(0x7f0000571000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x1, 0x400, 0x80, 0x86, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.251514484s ago: executing program 2 (id=2107): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3.973187658s ago: executing program 6 (id=2134): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='{*)-\x00', 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @multicast2}, &(0x7f0000000340)=0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x64, 0xffff8001, 0x28, @empty, @private0, 0x40, 0x40, 0x81, 0x2}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r12, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) (async) ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x5, 0x1, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x65, 0x0, 0xb, 0x2f, 0x0, @remote, @empty, {[@rr={0x7, 0xf, 0xf7, [@empty, @multicast1, @private=0xa010100]}, @rr={0x7, 0x7, 0x58, [@loopback]}, @lsrr={0x83, 0x7, 0x2f, [@remote]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc020000", @ANYRES16=r3, @ANYBLOB="00032dbd7000fcdbdf250e0000001c00018008000300030000000800030002000000080003000300000050000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="14000200766c616e30000000000000000000000008000300030000008100000000000000000300020000000800010000", @ANYRES32=r6, @ANYBLOB="08000300020000004c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020073797a5f74756e000000000000000000080003000300000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="48000180140002007663616e300000000000000000000000140002006970766c616e310000000000000000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r13, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/16, 0x69}, {&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000001380)=""/217, 0xd9}, {&(0x7f0000001480)=""/4102, 0x1000}], 0x4, 0x80000000, 0x3) (async) sendto(r2, &(0x7f00000005c0)="dddbe9afac0df02daba614dfbd2cbfcc7eb8ec157e557f233bbaf1cf3a46acb8350261d346546eaa717c281d2fab1a5718412e602cb6639f69795fb10763438e7fab8e5ac6023fc9ab0c30919f728aeac2da04fe2392b838dfc3d34379dde34fdf936d8138b223dc673b213e43392e37681c3e3162252095e1a6603d301d069e1453f17d79d16a926c96fefaa28b8fd834eff5288501e3ced96a10c0a396187727539dbee0", 0xa5, 0x60, &(0x7f0000000680)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) socket(0x200000100000011, 0x803, 0x0) 3.972175038s ago: executing program 6 (id=2136): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) read$eventfd(r1, &(0x7f0000000000), 0x8) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) utimensat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) 3.337199185s ago: executing program 0 (id=2139): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffd, 0x4) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x2000, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000d0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xfb, 0x81}}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="060400"/12], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 3.241293151s ago: executing program 2 (id=2140): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8c}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x5e}, 0x2, @in=@broadcast, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400}]}]}, 0x1bc}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000080)=ANY=[], 0x0) 3.134362677s ago: executing program 6 (id=2144): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) clock_gettime(0x0, &(0x7f00000063c0)={0x0, 0x0}) nanosleep(&(0x7f0000006440)={0x0, 0x989680}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) recvmmsg$unix(r1, &(0x7f00000061c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/200, 0xc8}], 0x4, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/114, 0x72}, {&(0x7f0000001600)=""/117, 0x75}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000002880)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/229, 0xe5}], 0x2, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)=""/124, 0x7c}, {&(0x7f0000002b40)=""/28, 0x1c}, {&(0x7f0000002b80)=""/164, 0xa4}, {&(0x7f0000002c40)=""/119, 0x77}, {&(0x7f0000002cc0)=""/249, 0xf9}], 0x5, &(0x7f0000002e40)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000002e80), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/214, 0xd6}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/69, 0x45}, {&(0x7f00000040c0)=""/230, 0xe6}, {&(0x7f00000041c0)=""/48, 0x30}, {&(0x7f0000004200)=""/255, 0xff}, {&(0x7f0000004300)=""/133, 0x85}, {&(0x7f00000043c0)=""/213, 0xd5}], 0x9, &(0x7f0000004580)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000004600)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f0000004680)=""/173, 0xad}, {&(0x7f0000004740)=""/19, 0x13}], 0x2, &(0x7f00000047c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f0000005a40)=[{&(0x7f00000048c0)=""/214, 0xd6}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/70, 0x46}], 0x3, &(0x7f0000005a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000005b80)=@abs, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005c00)=""/1, 0x1}, {&(0x7f0000005c40)=""/218, 0xda}, {&(0x7f0000005d40)=""/230, 0xe6}, {&(0x7f0000005e40)=""/98, 0x62}, {&(0x7f0000005ec0)=""/202, 0xca}, {&(0x7f0000005fc0)=""/31, 0x1f}, {&(0x7f0000006000)=""/159, 0x9f}], 0x7, &(0x7f0000006140)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}], 0x8, 0x40002000, &(0x7f0000006400)={r2, r3+60000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x131282, 0x0) 3.112630128s ago: executing program 6 (id=2145): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0982, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1\x00'}) getrusage(0xfffffffffffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff"], 0x98}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}}, 0x400c810) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a0000000524"], 0x0) 1.090185966s ago: executing program 8 (id=2151): recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x494f3513d8250d4e) (async) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='smb3\x00', 0x0, 0x0) 1.083689117s ago: executing program 8 (id=2152): creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xd, 0x0, 0x0, 0x33, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x899, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}}, @sadb_key={0x1f, 0x9, 0x768, 0x0, "ff3e398c214ab82b18b5476474d5daaa7c2c83dffda8f09e51c6160f6cd6a9f8173508ea34149e2a93c16e3dbfb45ef589dd1a831b208adb86668958fbf5a2565c502e4742e066402767f2c549f34b263ef9edbd35e7424ba19dd7c78dcf193a2ff6e9bf5d5ab550fad5d943403cc8fa519bbb5a7691cf24d32f3de277b6dae0794babb6c7956f27574ce2d7594dd5f7d499651b5cbf16121d1dc8de02d07c3b0829d63d59649a0148c3dddd59dacff6768de24547550ffb0c3b0097e13bef43b0ecbe4c10bf15bdd6600839519c754bb71353f0eb17c34708dbfbdd901b4714247ea94e2cdf4b0d3d1c09e5ec"}]}, 0x198}}, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x31, 0xe, 0x1, {0x5, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x1}, {0x0, @multicast, 0x4, 0x0, [0x1]}, @tcp_ip6_spec={@remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4e23, 0x4e22}, {0x0, @local, 0xa7f, 0x0, [0x1, 0x4]}, 0x9a, 0x4}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x34, r2, 0x1, 0x70bd26, 0x25dfdc00, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}}, 0x4044094) accept(r1, &(0x7f00000000c0)=@can, &(0x7f00000001c0)=0x80) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xd, 0x0, 0x0, 0x33, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x899, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}}, @sadb_key={0x1f, 0x9, 0x768, 0x0, "ff3e398c214ab82b18b5476474d5daaa7c2c83dffda8f09e51c6160f6cd6a9f8173508ea34149e2a93c16e3dbfb45ef589dd1a831b208adb86668958fbf5a2565c502e4742e066402767f2c549f34b263ef9edbd35e7424ba19dd7c78dcf193a2ff6e9bf5d5ab550fad5d943403cc8fa519bbb5a7691cf24d32f3de277b6dae0794babb6c7956f27574ce2d7594dd5f7d499651b5cbf16121d1dc8de02d07c3b0829d63d59649a0148c3dddd59dacff6768de24547550ffb0c3b0097e13bef43b0ecbe4c10bf15bdd6600839519c754bb71353f0eb17c34708dbfbdd901b4714247ea94e2cdf4b0d3d1c09e5ec"}]}, 0x198}}, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x31, 0xe, 0x1, {0x5, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x1}, {0x0, @multicast, 0x4, 0x0, [0x1]}, @tcp_ip6_spec={@remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4e23, 0x4e22}, {0x0, @local, 0xa7f, 0x0, [0x1, 0x4]}, 0x9a, 0x4}}}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x34, r2, 0x1, 0x70bd26, 0x25dfdc00, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}}, 0x4044094) (async) accept(r1, &(0x7f00000000c0)=@can, &(0x7f00000001c0)=0x80) (async) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) 1.017423561s ago: executing program 8 (id=2153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001ff, 0x2201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x3, 0x18, 0x1, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 1.017132941s ago: executing program 8 (id=2154): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1e4, r2, 0x609, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5d6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4a}, @NL80211_ATTR_IE={0x1b5, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x9}, 0xd, 0x80, @device_a, 0x3, 0x81, 0x1}}, @mesh_chsw={0x76, 0x6, {0xbe, 0x6, 0xe, 0x200}}, @gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0xdc, {0x6, 0xe, [{{0x0, 0x1}, @broadcast, 0x9, @value, 0xf}, {{}, @device_a, 0x2, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0xc, @value=@device_b, 0x3b}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x9}, {{0x0, 0x1}, @device_a, 0xc410, @value, 0xe}, {{0x0, 0x1}, @device_a, 0x1000, @value=@device_b, 0x7}, {{}, @device_a, 0xe1f, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x12000000, @value=@broadcast, 0x24}, {{}, @device_a, 0x2, @void, 0x38}, {{}, @device_a, 0x6, @void, 0x14}, {{}, @device_b, 0x9, @void, 0x21}, {{}, @broadcast, 0xd, @void, 0x3b}, {{}, @device_a, 0x10}, {{}, @broadcast, 0x3, @void, 0x16}]}}, @fast_bss_trans={0x37, 0xaa, {0x6, 0x3, "f45efb5f6ecde1614f4c10c3b8b8612b", "ef3735dd647b9f0df204c98e91893bfc8c695972ed4343e45c2ee6a48e626c42", "62b5ad7dd6b5f59db4fbaaf4e8a51c886bffdda1ce6d55012f2f20fd2a591b9b", [{0x3, 0x28, "1f41db2a1a2c684ad03bfefb7ca4d5c6560eace3918509000000000000009b4746a5a2043a91d920"}, {0x2, 0x1f, "edcc4b7b1543ca88f29e9c33002dca1ccab8c591356ee28320ae122c9d6ef7"}, {0x1, 0xb, "b888013b8d9ea30997630a"}]}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x1, 0x45) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x14, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 542.497598ms ago: executing program 8 (id=2155): syz_usb_connect(0x2, 0xe5e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x17, 0x78, 0x4a, 0x8, 0x99fa, 0x8988, 0x87f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4c, 0x4, 0xa2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x7a, 0xb8, 0x7, 0xf6, 0xb7, 0xed, 0xf9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'Q'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x4, 0xe379, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xa}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "33f5"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7f, 0xfff0, 0x9}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0xa}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xc81, 0x5}]}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xb, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x3, 0x81, 0xff}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x5, 0xe, 0x0, [@generic={0x7f, 0x0, "2631b5df8ef36217f2c79b5556ac6eb6b2068d8641d5270b80b852490717c60f311a4d52c631ef7c90e81b5ac771893cf4b8c26c0552fbcdaa5bdb7ac91bb5966a829b2a22829a22498a503038574a7a9dd569339123d80057fd8059a1242985739b53eb6710ce06e23580e1b10a8309f7febf8b2dc6d895f05da5c41f"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x8, 0xb, 0x4}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xc, 0x2, 0xc0}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x8, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x1}, @generic={0x7e, 0xc, "27c236c78df9f8ba207c88384a48da123bf57cf4053ba95012352fc46bba37bdb1c7efab64e333a139ac21d7065d06a99badd0a135e30d50513ed2eb8a5772e0fdf939cb0e37186a666d0c36291dc3ce2eddfd8afc8ef5a7e0789d135b4396dee205cbbac694f1a679997bad8c0319de099153d6a162bb2662b3b497"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x9, 0xdc, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}]}}, {{0x9, 0x4, 0x6, 0x8, 0xd, 0x8, 0x1c, 0x4e, 0xfe, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x4, 0xf9, 0x2}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x7, 0x40, 0x3}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0xba, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xe}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x65, 0xb1}, @generic={0xb5, 0x2, "bb829dec0403e5e53e6bb014c58096b4cd7bd96b1bb8460513baaa48b9f609984034d1033971cf900f1fd917768ac7a71b06fe9ebacf0db6b0fde4f344ff35af2ef79ed2bd870fda467e8b63afac0e0d7e10b29ef5a0420f139bd71eca5425d85385052ebd6bb139e0f9368ea25e0476c6b3baee1c061eb1ce3a7ade2dfa8cee47fda936dbce336f8bb88442d9e89d48bf0546c453c81d8954b766b3f5f7f6edda5c9085843f6469841cf503069d56215b56fc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x80}]}}, {{0x9, 0x5, 0x2, 0x19, 0x20, 0x6, 0x9, 0x4, [@generic={0xb4, 0x7, "bb958bb5ecd8d17b1a58578c86aa926bf635d48347dace616c0f70cdbf53001208489b74438db69a9949c9c1b82a5d56c2eda29cce42fb4d8a974c4069315249a708c15def8fe81534833b0bd28095df3170f8581d364ffe20b683c02bc2d1c2b2bc214af46c819b7b0625668982a84ed9a5db84094caeb4aad466ed58f2523054f4f8612fa23e87328d78c815e8dad6bed423d59128134c3f9bfc770660a6f8cc8048399c85f865fe58c407ff79da2a2993"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0xef, 0xff, 0x6, [@generic={0x20, 0x2, "c4d9fd1b53035a85d70342fa6cbe69ce60e46f35a41402208a911fb7daaf"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x2, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x2, 0x91}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x6, 0x42, 0x0, [@generic={0x8f, 0x7, "6ae0c48c5244c68de2a4615435559c880c232868ece82680601a2ac0871b2e9f2986f1ac29488fc6413692ea5263f12c7d0ce4b1beb97afb6b9baee6635576e7c87cb5d07b36cf69c28a604f8b6890330ceb56b333f2883c3c4ef51189c42e97a6425936adcf3e33e8e9dfd3092deb52ead78242951979f8a0069720be147a68021ac3c68f98bd028be1ec2d8e"}, @generic={0x96, 0x22, "a5cbabe4486f31e214f13e173bff56d326c873a3552dbbeeece919a0601889cd572113937592cfc2252e530e2f86958d35b724f3d8ff17eae3507e0eac5f0249c9d843fb40ee6eb6d3818bba93e3047375e935a41c6d18f31c4e2969a955fae23a1a7a7e38419bb013c4cf481c93b1e8e1883b59079bc3c68a94ff840d7c92cf4e9150242ee4ca86879f4391cd8017f7d5fd5a03"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x30, 0x7}, @generic={0xc5, 0x9, "8555727abacab4160af9649aec6bc918eb5fc01b7dcfe561e633af26b8d232111fc78d7f7751650e9799993ea3fb145e6218abff6c88b19ef5b5f635fb4a90916b3defc0b3ea909c56f93e186c6b449b504d59f740c7a02a4280c8e9046ca3ba9d61d19a1c8051df612fa79464f82232a71f1f546fffa3b3c37b4977150ca27ab4259afda5f8dc4510930f24a64b3604d75cfb5c29d09427c71a781ad6d7e582edfc675135dd97414f8fd5171049604817134fb0995e6b787882ee87a5917f66ca5ef6"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x9, 0x64}}]}}, {{0x9, 0x4, 0xf6, 0x83, 0x10, 0x62, 0x3, 0x3e, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0xd, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x54, 0x9}, @generic={0x9b, 0x7, "4b71ec0f800620b1e5da98e815c1f6e9002a5e452a42e6a044c45ec52cfc02dfa1261a27d6bfafc47b48208b8de02aa673336f6b1ad4dcefe64fb7daca3a2218729d75a90f977fbbe9c13fdd22e050ecd1416b6074fd9cfa7ab35af045e2ed680e2825844d3ce14a8cd7fd256f007ffe4f16b30391bb36f06f50441e7be5aa70670374be29253fd0f5d64dcb74a3725e82625bd36d9651f181"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x8, 0x1c, 0x8, [@generic={0xaa, 0xd, "1e33446dc25607e36350fba99b6cd0f3b90aa4281cade300a19533dcfc03680435ae21f8728767640f6bd6f678fbf1b5bb208715e4526b5abb7b9e0422ab207cd86fc8c4421b90010e2e388a7c1538b37d905f0daa21710204846252ea6fa24208f729524733269a37d87ff6b019ea9a8bb5144188c7b0da093c085dc58c8ca7e39623ed07ed0eaddd36521ba030af0c37b44d0bacde1d026d3f49aa91efe28638a15bbe8e2d65b7"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x6, 0x8, 0x3, [@generic={0xa9, 0x23, "fb3689d197ab09222248717815f5a23a73472522feacd3e87938cca5a64991dc3315a9d8f3f04b522d9c3e2c0bd9f698195b066fc751e90475a0fa75ba72d8174bfd8ab485a735448ece0b6d1b3313ea5a1514e453e140af35a7827742f7dfb90dce2656935ae15593a3dcaced76312d128c5dadd1290df0b9d80e9e324ca38bc15e44b68ff0fd168b1a3d9d58c15ec10997a944ae58219f905edb7575e5bc5180f1671cb1216f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x80, 0x2, 0x7, [@generic={0xe9, 0x22, "6521651ceba29c1bb8ba6ebd91b8b6ea82014094921940cb62e3425fd2f2c37ccf17a61013b0da2e3dfda07dfbc5bb64bfd591dd14dcb03bfa71e4ed454045aaec195d14a8274740baa0a2dd3233b8f217828b6019678e5f21d18574b280ff978f73c99c23d2fe773d87347829152a3148f61817ab1c23cae2a43a650f4bb9d8eebdc2bb658e2943d05b835ec4e1bbe7a7b75cb9977640264fd6012629320b7931171dd52e077d3f3c488fe851b9465cbff80cba39367bffc6c9684096192515ba09d3275315d4c3346bd8e1222100a9bd085d75689cfdb8fc49bb3d42dc170a18994e83596b51"}, @generic={0x18, 0x11, "ffed212c51dddb733149a45dd90959c45e6794bc69df"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xb, 0x9, 0x7f}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0xf, 0x4, [@generic={0x45, 0x7, "e778d2fcf31d7bfd08ba8dc3b45ffb8ec64c80fb34a1f73cc2147a429f9f2fbbdf60b3d969221a3cc0e6545b2a393c68f507b11302471f977f96c1587bfcc0d2e1042b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0xff, 0xfb}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x6, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xaf, 0x800}, @generic={0x1f, 0x23, "266774daedc632b5d50bec65f890ae2dffad8afeae048121027d6b783c"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x5, 0x18, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0xe, 0xf7, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x9, 0xc1, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xfd, 0x6, 0x9, [@generic={0x73, 0x9, "9e09b6f632b7ce496c388b59b270fe9d73d43df4d308d0d6298fcdefdfad7b18e96af544e5943dc14ecc670b101f015099ac993550c6e20ee33f8edb330df0ff2f4dcb6a093fa179ae6f2a7abbefc16cec051d8d668b21fec50a25fbcbf0d0b5e89ae1cd1469591a70c0fe050ee1fc957c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x5}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0xb8, 0x5, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x6, 0x5, 0xe4}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x4, 0x8, 0x1}}]}}, {{0x9, 0x4, 0xeb, 0x2, 0xe, 0xdf, 0xdc, 0x26, 0x8, [@generic={0xdd, 0xc, "0bca8609b1f328bdb78899b0244548162a71e7a4cbf6735c7bd2e8012a5877f6112a5f255bcacf497a2c0e9e4b0d6a945a1b073d64af3b4d68263883800a81f8d99d674717ca72ac4b0badf097233726eaec5d546a3ba8aab67420bf6d5f12d4ba38e84928fb4ce4e648deb207b4eef865119b7d657a1c2d1fd3fe3af9bb1952fe2fb5cb8450a501ac63fb23287cc7feecf01272b879502b0d8650fd0f05d2445a8b0f46702207a13ccd6b5fbcedd11c61849e5a2fe54eb329428be2409fb9ea510085cf3dfc839e7b3d915958025c9156eb6f7a38bf38f8747248"}], [{{0x9, 0x5, 0xb, 0x10, 0x39f, 0x81, 0x7f, 0xe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xe5, 0xc, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x9, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xc3, 0x9, 0x1, [@generic={0x46, 0xb, "4260948c896cb803e5ed685b37331ce2a26979ae057e81558adff716bcab427766721ab8f6949a07d7f6b10516d27c340b372217227f97a693b8fe188d0edfd1a62e6074"}, @generic={0x89, 0x11, "ad6fc8a155f070b86b95e764b2951673fc8443ec212718c0edf41a132a6798b959713ee17b3f35338b4e53e2947fdccca44601ebe0e49461816ed626ad249f81f171d52b151dec750eb03e3b1c519ae4b0f073d8ceeb0ff7daf6c263e6c807144051d4c8fd477f20736f6fe5266175a84050fef45c3c88b970cdf106a8744f2f6bc0e26f471493"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xee}, @generic={0xa4, 0x30, "9672c830945fc44155f008a8e699cb575b5b98a9a1566ac07836fba5b5ec7d67b9ba484aabcda6c83c04bd0e79337f71768e6a062899a7b57caf7df547e240a46f4e7f8a918060fa756a7d11687a951007c8cafee7465c27e5cea69caa0a89bb8d0c520b79053be5762982fc453fb0c627d84f255cf1aed7e44d51a03686cca977a26dfaf992b46ed3595c38db45c26b773a1229d79b16648e3647d5d992bd705e9e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0xc0, 0x81, 0x3, [@generic={0x33, 0x7, "0a6d2e2a7c54535696f549774c3350f29c3a090b60d62d8b1891e7dc049d184b9bd31b8ab2cce73eb615ea147f479a4bb6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xe, 0x8, 0x9, [@generic={0xbc, 0x23, "12450e368227fc67e8dd2fe0604160e1cbeb0a7139260732fc88abc39b7c817fbd2fc7d7951e1827608d6b5ee24c8bc69430aa5bef3eb9b18691df1e1d0acdb279506a79c4b2c82de96a3478954cdaa93b588694c0c635fe0572c52632fbcf807e0179ad4b5682435ce4864874142d6f8ae10a9e4f14db8948489b5a6e39e1f061245b8f5af332341890039a8f07ab4bf2e8dcec4c8e42b34ac0fd687d8c157407a8c6ec18b44d9c43d7b1591f9746a5a951a8376159eccc6c86"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x40}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x0, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}, @generic={0xb, 0x9eeba24d78315da5, "a2168cb5f0330d4147"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x7, 0x8, 0xb}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xd0, 0x2, 0x5}}]}}]}}]}}, 0x0) 358.654169ms ago: executing program 0 (id=2156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000200)={0x1, 0x5, 0x5, 0x1000, 0x2, 0x8}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010055, 0x0, 0x2}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0xa000, 0x30000, 0xf, 0x5, 0x6, 0xe, 0x2, 0x5, 0x7f, 0xc9, 0xfb, 0x4}, {0x2, 0x2000, 0xf, 0x4, 0x4, 0x5, 0x0, 0x4, 0x40, 0x4, 0x40, 0x6}, {0xeeee0000, 0x100000, 0x9, 0x4, 0x4, 0x1, 0x6, 0x40, 0x85, 0x81, 0x5, 0x40}, {0x200000, 0xffffffff, 0x1, 0xbc, 0x7, 0xb, 0x9, 0xfc, 0xb1, 0x4, 0x0, 0x7}, {0x0, 0xeeef0000, 0x0, 0x5, 0x3, 0x7, 0xc0, 0x8, 0x11, 0x77, 0x0, 0xfa}, {0x70000, 0x8000000, 0x4, 0x2, 0x2, 0x7, 0x56, 0xa, 0x7, 0x1, 0x5}, {0xffffffff, 0x70000, 0x0, 0x7, 0xc5, 0x7, 0x2, 0xd1, 0x10, 0xd0, 0x7, 0x6}, {0xeeef0000, 0xeeee0000, 0xb, 0x2, 0x6, 0x7, 0x3, 0x4, 0xaa, 0x3, 0x3, 0x6}, {0xeeee8000, 0x8}, {0x21e000, 0x2}, 0xc0000019, 0x0, 0x70000, 0x200062, 0xd, 0x400, 0xffffffff, [0x0, 0x5, 0x6, 0x1]}) 249.277935ms ago: executing program 0 (id=2157): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="f0a55851b354bc6bb1e65d21ce51aae740c677abdf8dd93cfcb73f2d99e5c47ceb8fb01607b38e9acc7fd05087b6afd31c46615ff1daf55f1bb424064297e01f249ef433429b235d82e448a3845a015ea2e848e5c6239b05b4ccb691d0b5f6fad465b29a1ef736e8848b3295033a5412bb3cb13fbcd7436b56b8f84f84b4be496e2af1e10c5ce7f5133811062614303603686db21ce6e53fff53aab43bec1b93c291120c92325e1e15ad7723303ee604ba4c13fcdd985c7246e52829056a87b4a6b9ec3f50d2b3832a13640e74cd513f9a0ee670fc2626d022a30e8b0a0fc1", 0xdf}, {&(0x7f0000000080)="a271bd420c2fa5ad3bbb08b099117b3ce0dc49ef60861987b4dbfc48b7a6d6eee6849ca749b494d89ca7d81cc992878cb2a89aa58119612c601d12fc3821e2ed354a566ec49666934f85a588e0d0927081b3972a02532c9567e0ea8457dab7bc6ff21151995f46df03658759f4fa4171949e0524c7e1dc339627ab38bbf2", 0x7e}, {&(0x7f0000000280)="f5d0c77b9a31a76b5c9146fa66dcd6b3dbbf50c04545438b3403bd99c082e6a26198af89cfafd2e3874fc1aff0dfdcb3779c708470db4588a86bf885fe7f4be1c5635bea52070a7d5993b6bfba77a718bba512a255de7551b511938cf2676f5aa6d18fa2d6be48e1800b94e6a138969d2c9514de2cb54b0e34ae16105cc9a7edcf770f391c4b92b8dfb968e142873987eb3f743417128f2c8db8659a4950c72a42a90b538c4d4dfba099ffe95b5749e5435365fe4928cd4acc9067f05d4ead22460eae1c8ae4ed89338bbc8bb61ea5dfbea1ef", 0xd3}], 0x3}}], 0x1, 0x40000) 249.025736ms ago: executing program 0 (id=2158): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r5, &(0x7f00000011c0)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010103}}}}) 248.828456ms ago: executing program 0 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x10}}]}}) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x8, 0x11}, 0x18) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x18) move_mount(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x20) fsync(r1) 248.556266ms ago: executing program 0 (id=2160): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x800, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) listen(r0, 0x68a48753) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001800010002000000000000000a000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7f}]}) close_range(r5, 0xffffffffffffffff, 0x0) 216.169048ms ago: executing program 2 (id=2161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) fdatasync(r2) r3 = dup2(r0, r0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) 136.356342ms ago: executing program 2 (id=2162): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160015000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nf_conntrack\x00') setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000180)="bfd9b095ad4b73c691288e930e60a6ea8889f574876bf3d91daa9107d872c90833bdf8eb4908d5d8f4b0c3e501089856f22e2b45d9448e281c01c6f4873d43c89fea2dd149aaa2084696e2dd85cd425f2226455dce0bf000993fc9e2291ba09508deaeaf3a3aef1795be6db4c615ae84d616716728e6cb5045b07273886d35af193bec34849e6013c327b613fd2aac10", 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x20000001, 0x4, 0x5, 0x903}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f00000000c0)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) 57.257227ms ago: executing program 6 (id=2163): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x21, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0xfffffffc, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x23, @mcast1, 0x23}, 0x1c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x0, 0x0) 57.015767ms ago: executing program 2 (id=2164): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ffdbdf250a00fc003a2a5e247b00000208001c80040000000000"], 0x24}], 0x1, 0x0, 0x0, 0x40}, 0x0) 56.562897ms ago: executing program 6 (id=2165): sigaltstack(&(0x7f0000000340)={0x0, 0x80000002, 0xffffffffffffff52}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xc0}, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r3, 0x0, 0x10000000000016, 0x0) 20.007999ms ago: executing program 8 (id=2166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000004", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00030400000004031538af07e0d7d85f0bc7d42bfed704977c957165db1b4ce606701c9df0168f5a8a8e8bb9d2b3b07e97153e3c0eedfe"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403c04f423c82a1f84504"], 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=2167): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/195, 0xc3}, {&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000000)=""/28, 0x1c}], 0x4) kernel console output (not intermixed with test programs): ] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 201.521376][ T4228] EXT4-fs: dax option not supported [ 201.649541][ T2174] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 201.660707][ T2174] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.670623][ T2174] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.683763][ T2174] usb 9-1: config 0 interface 0 has no altsetting 0 [ 201.690463][ T2174] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 201.699998][ T2174] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.708576][ T2174] usb 9-1: config 0 descriptor?? [ 201.921958][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 201.921973][ T36] audit: type=1326 audit(2000000076.182:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.6.1180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20a0d9af79 code=0x0 [ 202.115610][ T2174] hid-picolcd 0003:04D8:C002.0038: ignoring exceeding usage max [ 202.178566][ T2174] hid-picolcd 0003:04D8:C002.0038: No report with id 0x11 found [ 202.258535][ T347] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 202.317382][ T2174] usb 9-1: USB disconnect, device number 2 [ 202.409830][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.420808][ T347] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 202.429868][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.438415][ T347] usb 1-1: config 0 descriptor?? [ 202.443638][ T4241] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.663525][ T36] audit: type=1400 audit(2000000076.922:764): avc: denied { lock } for pid=4249 comm="syz.6.1185" path="socket:[37945]" dev="sockfs" ino=37945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 202.686737][ T36] audit: type=1400 audit(2000000076.922:765): avc: denied { ioctl } for pid=4249 comm="syz.6.1185" path="socket:[37948]" dev="sockfs" ino=37948 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.766439][ T4256] overlay: Bad value for 'metacopy' [ 203.078523][ T64] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 203.094632][ T347] usbhid 1-1:0.0: can't add hid device: -71 [ 203.100741][ T347] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.110964][ T347] usb 1-1: USB disconnect, device number 97 [ 203.239576][ T64] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.250337][ T64] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 203.261321][ T64] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.275512][ T64] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 203.284640][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.293097][ T64] usb 9-1: Product: syz [ 203.297257][ T64] usb 9-1: Manufacturer: syz [ 203.301855][ T64] usb 9-1: SerialNumber: syz [ 203.307062][ T64] usb 9-1: config 0 descriptor?? [ 203.529228][ T377] usb 9-1: USB disconnect, device number 3 [ 203.609017][ T4273] cgroup: noprefix used incorrectly [ 203.818535][ T377] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 203.849930][ T36] audit: type=1400 audit(2000000078.112:766): avc: denied { bind } for pid=4289 comm="syz.6.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.869168][ T2174] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 203.869273][ T36] audit: type=1400 audit(2000000078.112:767): avc: denied { name_bind } for pid=4289 comm="syz.6.1197" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 203.897512][ T36] audit: type=1400 audit(2000000078.112:768): avc: denied { node_bind } for pid=4289 comm="syz.6.1197" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 203.968909][ T377] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 203.977487][ T377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 203.985135][ T377] usb 9-1: can't read configurations, error -61 [ 204.010374][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 204.030175][ T2174] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 204.038533][ T2174] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 204.048946][ T2174] usb 1-1: config 220 has no interface number 2 [ 204.055198][ T2174] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.068511][ T2174] usb 1-1: config 220 interface 0 has no altsetting 0 [ 204.075283][ T2174] usb 1-1: config 220 interface 76 has no altsetting 0 [ 204.082133][ T2174] usb 1-1: config 220 interface 1 has no altsetting 0 [ 204.090156][ T2174] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.099193][ T2174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.107168][ T2174] usb 1-1: Product: syz [ 204.111329][ T2174] usb 1-1: Manufacturer: syz [ 204.115929][ T2174] usb 1-1: SerialNumber: syz [ 204.128528][ T377] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 204.278889][ T377] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 204.287544][ T377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 204.295139][ T377] usb 9-1: can't read configurations, error -61 [ 204.301617][ T377] usb usb9-port1: attempt power cycle [ 204.323966][ T2174] uvcvideo 1-1:220.1: Unknown video format 00000000-1100-0000-0000-000000000000 [ 204.333121][ T2174] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 204.339624][ T2174] usb 1-1: No valid video chain found. [ 204.345078][ T2174] usb 1-1: selecting invalid altsetting 0 [ 204.353152][ T2174] usb 1-1: USB disconnect, device number 98 [ 204.638552][ T377] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 204.659220][ T377] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 204.669205][ T377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 204.676936][ T377] usb 9-1: can't read configurations, error -61 [ 204.809114][ T377] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 204.830307][ T377] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 204.839715][ T377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 204.843600][ T36] audit: type=1400 audit(2000000079.102:769): avc: denied { getopt } for pid=4321 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.847283][ T377] usb 9-1: can't read configurations, error -61 [ 204.873221][ T377] usb usb9-port1: unable to enumerate USB device [ 205.158536][ T64] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 205.298393][ T4336] netlink: 'syz.2.1212': attribute type 13 has an invalid length. [ 205.306445][ T4336] erspan0: refused to change device tx_queue_len [ 205.309627][ T64] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 205.323910][ T64] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.333858][ T64] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.347053][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.353669][ T64] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 205.362730][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.371399][ T64] usb 1-1: config 0 descriptor?? [ 205.414068][ T36] audit: type=1400 audit(2000000079.672:770): avc: denied { lock } for pid=4344 comm="syz.2.1215" path="socket:[37306]" dev="sockfs" ino=37306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.778216][ T64] hid-picolcd 0003:04D8:C002.0039: ignoring exceeding usage max [ 205.838584][ T64] hid-picolcd 0003:04D8:C002.0039: No report with id 0x11 found [ 205.895963][ T4353] pim6reg1: entered promiscuous mode [ 205.901352][ T4353] pim6reg1: entered allmulticast mode [ 205.982916][ T64] usb 1-1: USB disconnect, device number 99 [ 206.248739][ T377] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 206.398546][ T377] usb 9-1: Using ep0 maxpacket: 32 [ 206.404696][ T377] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.416484][ T377] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 206.425530][ T377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.433558][ T377] usb 9-1: Product: syz [ 206.437700][ T377] usb 9-1: Manufacturer: syz [ 206.442305][ T377] usb 9-1: SerialNumber: syz [ 206.447366][ T377] usb 9-1: config 0 descriptor?? [ 206.453064][ T377] usb 9-1: bad CDC descriptors [ 206.457931][ T377] usb 9-1: unsupported MDLM descriptors [ 206.482496][ T4366] tipc: Failed to remove unknown binding: 66,0,0/0:424457755/424457756 [ 206.495626][ T4366] tipc: Failed to remove unknown binding: 66,0,0/0:424457755/424457756 [ 206.497625][ T4368] fuse: Bad value for 'fd' [ 206.504587][ T36] audit: type=1400 audit(2000000080.752:771): avc: denied { mounton } for pid=4367 comm="syz.0.1224" path="/255/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 206.654375][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.662900][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.671920][ T4362] veth0_virt_wifi: entered allmulticast mode [ 206.679072][ T4362] veth0_virt_wifi: left allmulticast mode [ 206.685383][ T64] usb 9-1: USB disconnect, device number 8 [ 206.798579][ T377] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 206.948520][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 206.954667][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.965693][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.975517][ T377] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 206.984615][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.993118][ T377] usb 1-1: config 0 descriptor?? [ 207.029684][ T4371] futex_wake_op: syz.2.1225 tries to shift op by 144; fix this program [ 207.403323][ T377] savu 0003:1E7D:2D5A.003A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 207.478537][ T2174] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 207.629489][ T2174] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.640668][ T2174] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 207.651720][ T2174] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.664729][ T2174] usb 9-1: config 0 interface 0 has no altsetting 0 [ 207.671356][ T2174] usb 9-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 207.680394][ T2174] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.688936][ T2174] usb 9-1: config 0 descriptor?? [ 207.694153][ T4379] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 207.719168][ T347] usb 1-1: USB disconnect, device number 100 [ 208.105201][ T2174] logitech 0003:046D:C218.003B: hidraw0: USB HID v0.08 Device [HID 046d:c218] on usb-dummy_hcd.8-1/input0 [ 208.116604][ T2174] logitech 0003:046D:C218.003B: no inputs found [ 208.304858][ T347] usb 9-1: USB disconnect, device number 9 [ 208.343046][ T36] audit: type=1400 audit(2000000082.602:772): avc: denied { create } for pid=4405 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 208.364219][ T36] audit: type=1400 audit(2000000082.602:773): avc: denied { sys_admin } for pid=4405 comm="syz.2.1237" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 208.385190][ T36] audit: type=1400 audit(2000000082.602:774): avc: denied { associate } for pid=4407 comm="syz.2.1237" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 209.154436][ T36] audit: type=1400 audit(2000000083.412:775): avc: denied { accept } for pid=4427 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.178542][ T347] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 209.328518][ T347] usb 9-1: Using ep0 maxpacket: 16 [ 209.334676][ T347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.345579][ T347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.355310][ T347] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.368083][ T347] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.377151][ T347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.385729][ T347] usb 9-1: config 0 descriptor?? [ 209.390737][ T64] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 209.549524][ T64] usb 1-1: No LPM exit latency info found, disabling LPM. [ 209.557403][ T64] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 209.568252][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.582979][ T64] usb 1-1: string descriptor 0 read error: -22 [ 209.589209][ T64] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 209.598273][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.607226][ T4428] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 209.807823][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.808256][ T347] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 209.816410][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.830377][ T64] usbhid 1-1:1.0: can't add hid device: -71 [ 209.837332][ T64] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 209.845931][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.854101][ T64] usb 1-1: USB disconnect, device number 101 [ 209.860138][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.867455][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.875944][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.883191][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.890405][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.897588][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.904792][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.912054][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.919268][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.926480][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.933718][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 209.940958][ T347] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 210.007653][ T347] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 210.015819][ T347] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 210.027234][ T347] microsoft 0003:045E:07DA.003C: no inputs found [ 210.033646][ T347] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 210.056326][ T4441] netlink: 'syz.6.1248': attribute type 4 has an invalid length. [ 210.066626][ T4441] netlink: 'syz.6.1248': attribute type 4 has an invalid length. [ 210.098225][ T36] audit: type=1400 audit(2000000084.352:776): avc: denied { read } for pid=4442 comm="syz.6.1249" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.098342][ T4443] syzkaller1: entered promiscuous mode [ 210.123805][ T4443] syzkaller1: entered allmulticast mode [ 210.383329][ T4447] 9pnet_fd: Insufficient options for proto=fd [ 210.698527][ T377] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 210.849546][ T377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.859771][ T377] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.869328][ T377] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.878372][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.886375][ T377] usb 1-1: SerialNumber: syz [ 211.093705][ T377] usb 1-1: 0:2 : does not exist [ 211.100109][ T377] usb 1-1: USB disconnect, device number 102 [ 211.838530][ T377] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 211.953030][ T581] usb 9-1: USB disconnect, device number 10 [ 211.988541][ T377] usb 1-1: Using ep0 maxpacket: 16 [ 211.995051][ T377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.003520][ T377] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 212.011796][ T377] usb 1-1: config 13 has no interface number 0 [ 212.020552][ T377] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 212.030739][ T377] usb 1-1: config 13 interface 50 has no altsetting 0 [ 212.039497][ T377] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 212.048589][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.056577][ T377] usb 1-1: Product: syz [ 212.060782][ T377] usb 1-1: Manufacturer: syz [ 212.065392][ T377] usb 1-1: SerialNumber: syz [ 212.070828][ T4462] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 212.150291][ T4478] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1261'. [ 212.159880][ T4481] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1261'. [ 212.181489][ T36] audit: type=1326 audit(2000000086.442:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.8.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 212.205023][ T36] audit: type=1326 audit(2000000086.442:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.8.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 212.228365][ T36] audit: type=1326 audit(2000000086.442:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.8.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 212.251687][ T36] audit: type=1326 audit(2000000086.442:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.8.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 212.275029][ T36] audit: type=1326 audit(2000000086.442:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.8.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 212.306396][ T377] usb 1-1: MIDIStreaming interface descriptor not found [ 212.320536][ T377] usb 1-1: USB disconnect, device number 103 [ 212.558544][ T581] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 212.708543][ T581] usb 9-1: Using ep0 maxpacket: 32 [ 212.714657][ T581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.725542][ T581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.735295][ T581] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.744325][ T581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.752754][ T581] usb 9-1: config 0 descriptor?? [ 212.805917][ T4490] x_tables: duplicate entry at hook 2 [ 212.814887][ T4490] netlink: 'syz.2.1265': attribute type 12 has an invalid length. [ 212.965786][ T581] usbhid 9-1:0.0: can't add hid device: -71 [ 212.978314][ T581] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 212.996312][ T581] usb 9-1: USB disconnect, device number 11 [ 213.091911][ T4505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4505 comm=syz.8.1270 [ 213.118567][ T377] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 213.268530][ T377] usb 1-1: device descriptor read/64, error -71 [ 213.362659][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 213.362675][ T36] audit: type=1400 audit(2000000087.622:810): avc: denied { ioctl } for pid=4523 comm="syz.2.1277" path="socket:[37802]" dev="sockfs" ino=37802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.518547][ T377] usb 1-1: device descriptor read/64, error -71 [ 213.758529][ T377] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 213.888532][ T377] usb 1-1: device descriptor read/64, error -71 [ 213.970998][ T4537] overlayfs: failed to clone upperpath [ 214.128536][ T377] usb 1-1: device descriptor read/64, error -71 [ 214.239018][ T377] usb usb1-port1: attempt power cycle [ 214.499178][ T36] audit: type=1400 audit(2000000088.762:811): avc: denied { name_bind } for pid=4542 comm="syz.2.1285" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 214.578537][ T377] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 214.599492][ T377] usb 1-1: device descriptor read/8, error -71 [ 214.729531][ T377] usb 1-1: device descriptor read/8, error -71 [ 214.968540][ T377] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 214.989596][ T377] usb 1-1: device descriptor read/8, error -71 [ 215.119537][ T377] usb 1-1: device descriptor read/8, error -71 [ 215.228625][ T377] usb usb1-port1: unable to enumerate USB device [ 215.570851][ T4548] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 215.578670][ T4548] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1287'. [ 215.588984][ T36] audit: type=1400 audit(2000000089.852:812): avc: denied { nlmsg_read } for pid=4547 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 215.627133][ T4554] fuse: Unknown parameter 'µ“0x0000000000000003' [ 215.634053][ T4554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4554 comm=syz.2.1290 [ 215.648004][ T36] audit: type=1326 audit(2000000089.912:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.671359][ T36] audit: type=1326 audit(2000000089.912:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.694749][ T36] audit: type=1326 audit(2000000089.912:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.718227][ T36] audit: type=1326 audit(2000000089.912:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.741527][ T36] audit: type=1326 audit(2000000089.912:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.764718][ T36] audit: type=1326 audit(2000000089.912:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.788000][ T36] audit: type=1326 audit(2000000089.912:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x7ffc0000 [ 215.826359][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 215.835564][ T4558] veth1_macvtap: left promiscuous mode [ 215.907113][ T4563] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 216.259499][ T4582] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1300'. [ 216.268525][ T64] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 216.419482][ T64] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.427516][ T64] usb 1-1: config 0 has no interface number 0 [ 216.433636][ T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.438524][ T581] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 216.444499][ T64] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.461801][ T64] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 216.470835][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.479454][ T64] usb 1-1: config 0 descriptor?? [ 216.599749][ T581] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.610044][ T581] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.619828][ T581] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.628947][ T581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.637010][ T581] usb 9-1: SerialNumber: syz [ 216.847857][ T581] usb 9-1: 0:2 : does not exist [ 216.853349][ T581] usb 9-1: unit 10 not found! [ 216.859962][ T581] usb 9-1: USB disconnect, device number 12 [ 216.869410][ T3148] udevd[3148]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.088799][ T64] usbhid 1-1:0.1: can't add hid device: -71 [ 217.094754][ T64] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 217.103881][ T64] usb 1-1: USB disconnect, device number 108 [ 217.598552][ T581] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 217.738636][ T581] usb 9-1: device descriptor read/64, error -71 [ 217.868567][ T377] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 217.978541][ T581] usb 9-1: device descriptor read/64, error -71 [ 218.018529][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 218.024555][ T377] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 218.033610][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.048735][ T377] usb 1-1: config 0 descriptor?? [ 218.218536][ T581] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 218.348529][ T581] usb 9-1: device descriptor read/64, error -71 [ 218.358228][ T377] usb 1-1: string descriptor 0 read error: -71 [ 218.366566][ T377] usb 1-1: Found UVC 0.00 device (2833:0201) [ 218.373471][ T377] usb 1-1: No valid video chain found. [ 218.379761][ T377] usb 1-1: USB disconnect, device number 109 [ 218.588619][ T581] usb 9-1: device descriptor read/64, error -71 [ 218.698608][ T581] usb usb9-port1: attempt power cycle [ 219.038689][ T581] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 219.059494][ T581] usb 9-1: device descriptor read/8, error -71 [ 219.168551][ T2174] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 219.189591][ T581] usb 9-1: device descriptor read/8, error -71 [ 219.319534][ T2174] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.330519][ T2174] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 219.341129][ T2174] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.350166][ T2174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.361356][ T2174] usb 1-1: invalid MIDI out EP 0 [ 219.372361][ T2174] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 219.428540][ T581] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 219.449496][ T581] usb 9-1: device descriptor read/8, error -71 [ 219.559913][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.568381][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.577409][ T2174] usb 1-1: USB disconnect, device number 110 [ 219.584698][ T581] usb 9-1: device descriptor read/8, error -71 [ 219.698588][ T581] usb usb9-port1: unable to enumerate USB device [ 220.068388][ T4647] netlink: 'syz.2.1325': attribute type 28 has an invalid length. [ 220.248620][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 220.248637][ T36] audit: type=1400 audit(2000000094.512:892): avc: denied { bind } for pid=4668 comm="syz.6.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.768537][ T581] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 220.919554][ T581] usb 9-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 220.928683][ T581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.937733][ T581] usb 9-1: config 0 descriptor?? [ 221.344839][ T581] thrustmaster 0003:044F:B651.003D: global environment stack underflow [ 221.353193][ T581] thrustmaster 0003:044F:B651.003D: item 0 4 1 11 parsing failed [ 221.361084][ T581] thrustmaster 0003:044F:B651.003D: parse failed [ 221.367471][ T581] thrustmaster 0003:044F:B651.003D: probe with driver thrustmaster failed with error -22 [ 222.050301][ T778] usb 9-1: USB disconnect, device number 17 [ 222.170781][ T4694] bridge0: port 3(syz_tun) entered blocking state [ 222.178644][ T4694] bridge0: port 3(syz_tun) entered disabled state [ 222.185117][ T4694] syz_tun: entered allmulticast mode [ 222.194741][ T4694] syz_tun: entered promiscuous mode [ 222.200214][ T4694] bridge0: port 3(syz_tun) entered blocking state [ 222.206657][ T4694] bridge0: port 3(syz_tun) entered forwarding state [ 222.216226][ T36] audit: type=1326 audit(2000000096.482:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.2.1343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff6d9af79 code=0x0 [ 222.245709][ T4699] overlayfs: missing 'lowerdir' [ 222.787745][ T4705] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1346'. [ 222.804159][ T36] audit: type=1400 audit(2000000097.062:894): avc: denied { getopt } for pid=4709 comm="syz.8.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.123737][ T36] audit: type=1400 audit(2000000097.382:895): avc: denied { map } for pid=4722 comm="syz.0.1351" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.153955][ T36] audit: type=1400 audit(2000000097.402:896): avc: denied { accept } for pid=4724 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.184432][ T4728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.361724][ T4731] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1353'. [ 223.421569][ T4747] loop9: detected capacity change from 0 to 7 [ 223.428301][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.436521][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.444446][ T3148] loop9: unable to read partition table [ 223.450424][ T4747] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.459178][ T4747] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.467069][ T4747] loop9: unable to read partition table [ 223.473414][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.481627][ T4747] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 223.481627][ T4747] ) failed (rc=-5) [ 223.495079][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.503294][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.511423][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.519486][ T3148] Buffer I/O error on dev loop9, logical block 0, async page read [ 223.568541][ T778] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 223.720701][ T778] usb 1-1: Using ep0 maxpacket: 32 [ 223.722836][ T4756] overlayfs: failed to clone upperpath [ 223.728811][ T778] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 223.740651][ T778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.749086][ T4756] overlayfs: failed to clone upperpath [ 223.758006][ T778] usb 1-1: config 0 descriptor?? [ 223.777204][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 224.166988][ T778] chicony 0003:04F2:0418.003E: item fetching failed at offset 3/7 [ 224.175468][ T778] chicony 0003:04F2:0418.003E: Chicony hid parse failed: -22 [ 224.182912][ T778] chicony 0003:04F2:0418.003E: probe with driver chicony failed with error -22 [ 224.193514][ T12] bridge_slave_1: left allmulticast mode [ 224.199232][ T12] bridge_slave_1: left promiscuous mode [ 224.204833][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.212344][ T12] bridge_slave_0: left allmulticast mode [ 224.217980][ T12] bridge_slave_0: left promiscuous mode [ 224.223631][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.308289][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 224.317898][ T36] audit: type=1400 audit(2000000098.572:897): avc: denied { setattr } for pid=4763 comm="syz.2.1367" name="CAN_RAW" dev="sockfs" ino=39272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.360471][ T12] veth1_macvtap: left promiscuous mode [ 224.366042][ T12] veth0_vlan: left promiscuous mode [ 224.371747][ T377] usb 1-1: USB disconnect, device number 111 [ 224.442686][ T36] audit: type=1326 audit(2000000098.702:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 224.466066][ T36] audit: type=1326 audit(2000000098.702:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 224.473352][ T4768] overlayfs: failed to clone upperpath [ 224.489663][ T36] audit: type=1326 audit(2000000098.702:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 224.518509][ T36] audit: type=1326 audit(2000000098.702:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 224.523150][ T4768] overlayfs: failed to clone upperpath [ 224.551884][ T4768] SELinux: Context is not valid (left unmapped). [ 225.138536][ T778] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 225.288536][ T778] usb 1-1: Using ep0 maxpacket: 16 [ 225.294616][ T778] usb 1-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 225.303399][ T778] usb 1-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 225.312530][ T778] usb 1-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.323549][ T778] usb 1-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.333440][ T778] usb 1-1: config 173 interface 0 has no altsetting 0 [ 225.340212][ T778] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 225.349248][ T778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.374066][ T4786] 9pnet_fd: Insufficient options for proto=fd [ 225.566575][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.575142][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.600870][ T4794] fuse: Unknown parameter 'ERò†Q?sŸ8ÃÏW¾ƒè´Fd>qÊy·¥h§º$Q¼[ H"îJ›â¬[žIpíC·L' [ 225.611044][ T4794] tipc: Enabling not permitted [ 225.616593][ T4794] tipc: Enabling of bearer rejected, failed to enable media [ 225.784619][ T4777] sock: sock_timestamping_bind_phc: sock not bind to device [ 225.992533][ T10] usb 1-1: USB disconnect, device number 112 [ 226.506975][ T4815] fuse: Bad value for 'group_id' [ 226.512017][ T4815] fuse: Bad value for 'group_id' [ 226.528846][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 226.528862][ T36] audit: type=1400 audit(2000000100.792:922): avc: denied { append } for pid=4816 comm="syz.0.1387" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 226.808596][ T377] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 226.958521][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 226.964561][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.975439][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.985174][ T377] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.997944][ T377] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 227.006978][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.015597][ T377] usb 1-1: config 0 descriptor?? [ 227.347917][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 227.424143][ T377] usbhid 1-1:0.0: can't add hid device: -71 [ 227.430152][ T377] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 227.438991][ T377] usb 1-1: USB disconnect, device number 113 [ 227.872701][ T4849] overlayfs: failed to clone lowerpath [ 227.884575][ T36] audit: type=1400 audit(2000000102.142:923): avc: denied { bind } for pid=4851 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.905235][ T36] audit: type=1400 audit(2000000102.162:924): avc: denied { read } for pid=4851 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.976223][ T4869] overlayfs: failed to clone upperpath [ 228.178513][ T10] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 228.329633][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 228.340619][ T10] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.350525][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.363649][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.370244][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 228.379270][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.388115][ T10] usb 1-1: config 0 descriptor?? [ 228.520737][ T36] audit: type=1400 audit(2000000102.782:925): avc: denied { setattr } for pid=4876 comm="syz.2.1409" path="socket:[40408]" dev="sockfs" ino=40408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.795527][ T10] hid-picolcd 0003:04D8:C002.0040: ignoring exceeding usage max [ 228.858549][ T10] hid-picolcd 0003:04D8:C002.0040: No report with id 0x11 found [ 228.998243][ T2174] usb 1-1: USB disconnect, device number 114 [ 229.598171][ T4910] kvm: kvm [4909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 229.607318][ T4910] kvm: kvm [4909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 229.617941][ T4910] kvm: kvm [4909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 229.628955][ T4910] kvm: kvm [4909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 229.638001][ T4910] kvm: kvm [4909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 229.808527][ T778] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 229.915478][ T4915] overlayfs: failed to clone upperpath [ 229.922469][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4915 comm=syz.8.1421 [ 229.936087][ T4915] tipc: Started in network mode [ 229.940963][ T4915] tipc: Node identity 4, cluster identity 4711 [ 229.947091][ T4915] tipc: Node number set to 4 [ 229.959480][ T778] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 229.968076][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.978496][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.988556][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.998949][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.008806][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.019157][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.029058][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.039279][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.049354][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.059624][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.069500][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.079823][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.090139][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.100476][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.110301][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.120611][ T778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.138535][ T778] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 230.147610][ T778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 230.156031][ T778] usb 1-1: Product: syz [ 230.160330][ T778] usb 1-1: Manufacturer: syz [ 230.164925][ T778] usb 1-1: SerialNumber: syz [ 230.173581][ T778] usb 1-1: config 0 descriptor?? [ 232.216566][ T36] audit: type=1400 audit(2000000106.472:926): avc: denied { execute } for pid=4939 comm="syz.8.1431" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=40557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.266965][ T4950] overlayfs: failed to clone upperpath [ 232.528263][ T2174] usb 1-1: USB disconnect, device number 115 [ 232.853037][ T4984] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 232.862720][ T36] audit: type=1400 audit(2000000107.122:927): avc: denied { relabelto } for pid=4983 comm="syz.8.1448" name="67" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 232.871358][ T2174] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 232.892934][ T36] audit: type=1400 audit(2000000107.122:928): avc: denied { associate } for pid=4983 comm="syz.8.1448" name="67" dev="tmpfs" ino=395 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 232.923258][ T36] audit: type=1400 audit(2000000107.122:929): avc: denied { write } for pid=4983 comm="syz.8.1448" name="67" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 232.948925][ T36] audit: type=1400 audit(2000000107.122:930): avc: denied { add_name } for pid=4983 comm="syz.8.1448" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 232.950388][ T4987] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1449'. [ 232.973418][ T36] audit: type=1400 audit(2000000107.122:931): avc: denied { create } for pid=4983 comm="syz.8.1448" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.002590][ T36] audit: type=1400 audit(2000000107.122:932): avc: denied { associate } for pid=4983 comm="syz.8.1448" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 233.023851][ T36] audit: type=1400 audit(2000000107.122:933): avc: denied { read open } for pid=4983 comm="syz.8.1448" path="/67/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.046450][ T36] audit: type=1400 audit(2000000107.152:934): avc: denied { remove_name } for pid=4196 comm="syz-executor" name="file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 233.073156][ T36] audit: type=1400 audit(2000000107.152:935): avc: denied { unlink } for pid=4196 comm="syz-executor" name="file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.078539][ T2174] usb 1-1: Using ep0 maxpacket: 16 [ 233.101370][ T2174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.112234][ T2174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.121975][ T2174] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 233.131357][ T2174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.139961][ T2174] usb 1-1: config 0 descriptor?? [ 233.548333][ T2174] playstation 0003:054C:05C4.0041: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 233.947028][ T2174] playstation 0003:054C:05C4.0041: Invalid byte count transferred, expected 49 got 0 [ 233.956604][ T2174] playstation 0003:054C:05C4.0041: Failed to retrieve DualShock4 firmware info: -22 [ 233.966077][ T2174] playstation 0003:054C:05C4.0041: Failed to get firmware info from DualShock4 [ 233.975051][ T2174] playstation 0003:054C:05C4.0041: HW/FW version data in sysfs will be invalid. [ 233.998667][ T4995] tmpfs: Bad value for 'nr_inodes' [ 234.147533][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.156121][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.167732][ T2174] playstation 0003:054C:05C4.0041: Failed to retrieve feature with reportID 2: -71 [ 234.177453][ T2174] playstation 0003:054C:05C4.0041: Retrying DualShock 4 get calibration report (0x02) request [ 234.188391][ T2174] playstation 0003:054C:05C4.0041: Failed to retrieve feature with reportID 2: -71 [ 234.197765][ T2174] playstation 0003:054C:05C4.0041: Retrying DualShock 4 get calibration report (0x02) request [ 234.208267][ T2174] playstation 0003:054C:05C4.0041: Failed to retrieve feature with reportID 2: -71 [ 234.217610][ T2174] playstation 0003:054C:05C4.0041: Failed to retrieve DualShock4 calibration info: -71 [ 234.227321][ T2174] playstation 0003:054C:05C4.0041: Invalid gyro calibration data for axis (3), disabling calibration. [ 234.238426][ T2174] playstation 0003:054C:05C4.0041: Invalid gyro calibration data for axis (4), disabling calibration. [ 234.249412][ T2174] playstation 0003:054C:05C4.0041: Invalid gyro calibration data for axis (5), disabling calibration. [ 234.260358][ T2174] playstation 0003:054C:05C4.0041: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 234.272094][ T2174] playstation 0003:054C:05C4.0041: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 234.283812][ T2174] playstation 0003:054C:05C4.0041: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 234.295524][ T2174] playstation 0003:054C:05C4.0041: Failed to get calibration data from DualShock4 [ 234.304723][ T2174] playstation 0003:054C:05C4.0041: Gyroscope and accelerometer will be inaccurate. [ 234.314524][ T2174] input: HID 054c:05c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0041/input/input47 [ 234.327108][ T2174] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0041/input/input48 [ 234.341387][ T2174] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0041/input/input49 [ 234.365844][ T2174] playstation 0003:054C:05C4.0041: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 234.405956][ T2174] usb 1-1: USB disconnect, device number 116 [ 234.708523][ T2174] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 234.859565][ T2174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.870463][ T2174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.880254][ T2174] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 234.889295][ T2174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.897767][ T2174] usb 1-1: config 0 descriptor?? [ 235.059206][ T5010] overlayfs: failed to clone upperpath [ 235.113913][ T5023] 9pnet_fd: Insufficient options for proto=fd [ 235.521278][ T2174] usbhid 1-1:0.0: can't add hid device: -71 [ 235.527285][ T2174] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 235.536073][ T2174] usb 1-1: USB disconnect, device number 117 [ 236.070263][ T5036] random: crng reseeded on system resumption [ 236.084402][ T5037] Unrecognized hibernate image header format! [ 236.090671][ T5037] PM: hibernation: Image mismatch: architecture specific data [ 236.098233][ T5036] Unrecognized hibernate image header format! [ 236.104376][ T5036] PM: hibernation: Image mismatch: architecture specific data [ 236.111914][ T5037] Unrecognized hibernate image header format! [ 236.118021][ T5037] PM: hibernation: Image mismatch: architecture specific data [ 236.438662][ T64] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 236.568565][ T64] usb 1-1: device descriptor read/64, error -71 [ 236.573769][ T5074] futex_wake_op: syz.8.1482 tries to shift op by 144; fix this program [ 236.583845][ T5074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1482'. [ 236.593161][ T5074] ip6tnl0: entered allmulticast mode [ 236.607158][ T5076] netlink: 6 bytes leftover after parsing attributes in process `syz.8.1483'. [ 236.633325][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1485'. [ 236.728810][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 236.808577][ T64] usb 1-1: device descriptor read/64, error -71 [ 237.048677][ T64] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 237.178517][ T64] usb 1-1: device descriptor read/64, error -71 [ 237.246162][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 237.246178][ T36] audit: type=1326 audit(2000000111.502:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.275619][ T36] audit: type=1326 audit(2000000111.502:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.299223][ T36] audit: type=1326 audit(2000000111.502:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.322519][ T36] audit: type=1326 audit(2000000111.502:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.345898][ T36] audit: type=1326 audit(2000000111.502:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.369314][ T36] audit: type=1326 audit(2000000111.502:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.392715][ T36] audit: type=1326 audit(2000000111.502:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.416190][ T36] audit: type=1326 audit(2000000111.502:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.439690][ T36] audit: type=1326 audit(2000000111.502:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.463012][ T36] audit: type=1326 audit(2000000111.502:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.8.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x7ffc0000 [ 237.568532][ T64] usb 1-1: device descriptor read/64, error -71 [ 237.678642][ T64] usb usb1-port1: attempt power cycle [ 238.018557][ T64] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 238.039749][ T64] usb 1-1: device descriptor read/8, error -71 [ 238.169727][ T64] usb 1-1: device descriptor read/8, error -71 [ 238.293436][ T5129] sock: sock_set_timeout: `syz.8.1501' (pid 5129) tries to set negative timeout [ 238.321371][ T5133] overlayfs: failed to clone upperpath [ 238.327360][ T5133] overlayfs: failed to clone upperpath [ 238.418519][ T64] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 238.439491][ T64] usb 1-1: device descriptor read/8, error -71 [ 238.569645][ T64] usb 1-1: device descriptor read/8, error -71 [ 238.678648][ T64] usb usb1-port1: unable to enumerate USB device [ 238.804149][ T5135] syzkaller1: entered promiscuous mode [ 238.809661][ T5135] syzkaller1: entered allmulticast mode [ 238.816836][ T5135] loop6: detected capacity change from 0 to 7 [ 239.011845][ T5156] netlink: 'syz.8.1512': attribute type 3 has an invalid length. [ 239.019642][ T5156] netlink: 944 bytes leftover after parsing attributes in process `syz.8.1512'. [ 239.056293][ T5165] fuse: Bad value for 'fd' [ 239.598650][ T778] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 239.611161][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1521'. [ 239.758512][ T778] usb 1-1: Invalid ep0 maxpacket: 64 [ 239.888520][ T778] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 240.038503][ T778] usb 1-1: Invalid ep0 maxpacket: 64 [ 240.043904][ T778] usb usb1-port1: attempt power cycle [ 240.388559][ T778] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 240.408919][ T778] usb 1-1: Invalid ep0 maxpacket: 64 [ 240.538532][ T778] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 240.558842][ T778] usb 1-1: Invalid ep0 maxpacket: 64 [ 240.564207][ T778] usb usb1-port1: unable to enumerate USB device [ 242.227007][ T5227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5227 comm=syz.0.1538 [ 242.355847][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 242.355865][ T36] audit: type=1326 audit(2000000116.612:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.8.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc462b9af79 code=0x0 [ 242.608516][ T778] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 242.758502][ T778] usb 1-1: Using ep0 maxpacket: 32 [ 242.764697][ T778] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 242.773041][ T778] usb 1-1: config 0 has no interface number 0 [ 242.779218][ T778] usb 1-1: config 0 interface 184 has no altsetting 0 [ 242.787299][ T778] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 242.796364][ T778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.804356][ T778] usb 1-1: Product: syz [ 242.808563][ T778] usb 1-1: Manufacturer: syz [ 242.813270][ T778] usb 1-1: SerialNumber: syz [ 242.818371][ T778] usb 1-1: config 0 descriptor?? [ 242.824244][ T778] smsc75xx v1.0.0 [ 243.432193][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 243.443070][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.152078][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.160644][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.280286][ T5262] 9pnet: Unknown protocol version 9p200 [ 244.303799][ T5267] tipc: Enabling of bearer rejected, media not registered [ 244.680209][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.688761][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.697265][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.705904][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.298199][ T5304] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1567'. [ 245.387794][ T36] audit: type=1400 audit(2000000119.642:958): avc: denied { write } for pid=5301 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 245.606696][ T36] audit: type=1400 audit(2000000119.862:959): avc: denied { connect } for pid=5308 comm="syz.8.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.159016][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1575'. [ 246.180948][ T36] audit: type=1400 audit(2000000120.442:960): avc: denied { mounton } for pid=5317 comm="syz.0.1573" path="/301/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 246.203094][ T36] audit: type=1400 audit(2000000120.442:961): avc: denied { mounton } for pid=5317 comm="syz.0.1573" path="/301/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 246.262980][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.271518][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.573049][ T36] audit: type=1400 audit(2000000120.832:962): avc: denied { create } for pid=5336 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.573535][ T5337] incfs: Options parsing error. -22 [ 246.598124][ T5337] incfs: mount failed -22 [ 246.832127][ T5359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1587'. [ 246.843157][ T5359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.853075][ T5359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.382339][ T5377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1594'. [ 247.477771][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.486305][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.534253][ T36] audit: type=1400 audit(2000000121.792:963): avc: denied { write } for pid=5379 comm="syz.0.1595" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.577256][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.585788][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.595898][ T5380] syzkaller0: entered promiscuous mode [ 247.601390][ T5380] syzkaller0: entered allmulticast mode [ 247.607672][ T5380] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 248.196022][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.204500][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.488769][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 248.499672][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 248.509401][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 248.519663][ T778] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 248.529178][ T778] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -110 [ 248.824840][ T5422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.833700][ T5422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.842300][ T5422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.850841][ T5422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.868117][ T5423] overlayfs: missing 'lowerdir' [ 249.430621][ T36] audit: type=1326 audit(2000000383.699:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.0.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7239af79 code=0x0 [ 249.680023][ T36] audit: type=1400 audit(2000000383.939:965): avc: denied { map } for pid=5452 comm="syz.8.1620" path="socket:[42542]" dev="sockfs" ino=42542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 249.827989][ T5461] netlink: 'syz.8.1624': attribute type 1 has an invalid length. [ 250.361551][ T36] audit: type=1400 audit(2000000384.620:966): avc: denied { map } for pid=5479 comm="syz.8.1632" path="socket:[41778]" dev="sockfs" ino=41778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.384854][ T36] audit: type=1400 audit(2000000384.620:967): avc: denied { read } for pid=5479 comm="syz.8.1632" path="socket:[41778]" dev="sockfs" ino=41778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.833936][ T5508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.842433][ T5508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.957500][ T5526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1647'. [ 253.905564][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.914153][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.934666][ T5549] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1655'. [ 254.064633][ T5559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=5559 comm=syz.8.1660 [ 254.367050][ T5574] netlink: 'syz.8.1665': attribute type 12 has an invalid length. [ 254.398070][ T5583] overlayfs: failed to clone upperpath [ 254.407166][ T5584] netlink: 'syz.6.1666': attribute type 1 has an invalid length. [ 254.415074][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1666'. [ 254.424126][ T5584] bridge0: port 1(bridge_slave_0) entered listening state [ 254.835340][ T5591] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 254.844995][ T36] audit: type=1400 audit(2000000390.101:968): avc: denied { relabelto } for pid=5590 comm="syz.2.1672" name="file0" dev="tmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 254.872026][ T36] audit: type=1400 audit(2000000390.101:969): avc: denied { associate } for pid=5590 comm="syz.2.1672" name="file0" dev="tmpfs" ino=3193 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 255.255617][ T5594] cgroup: Bad value for 'name' [ 255.270833][ T5596] ip6tnl0: left allmulticast mode [ 255.672067][ T36] audit: type=1400 audit(2000000390.931:970): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 256.647386][ T5622] tipc: Trying to set illegal importance in message [ 256.655854][ T5622] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1683'. [ 257.716246][ T5646] overlayfs: failed to clone upperpath [ 257.724188][ T36] audit: type=1400 audit(2000000392.991:971): avc: denied { ioctl } for pid=5641 comm="syz.0.1691" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.758980][ T5648] fuse: Bad value for 'fd' [ 257.825853][ T5657] netlink: 'syz.0.1695': attribute type 4 has an invalid length. [ 257.835162][ T5657] overlayfs: upper fs does not support tmpfile. [ 257.855622][ T5659] input: syz0 as /devices/virtual/input/input51 [ 257.880930][ T5661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.889446][ T5661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.414622][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.424107][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.432718][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.441231][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.449620][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.458068][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.466187][ T5668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5668 comm=syz.0.1700 [ 258.749523][ T36] audit: type=1326 audit(2000000394.011:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.8.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x0 [ 258.795444][ T5672] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1702'. [ 258.811171][ T36] audit: type=1400 audit(2000000394.071:973): avc: denied { write } for pid=5676 comm="syz.2.1703" name="file0" dev="tmpfs" ino=3265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.852880][ T5684] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 258.862781][ T36] audit: type=1400 audit(2000000394.121:974): avc: denied { relabelto } for pid=5669 comm="syz.8.1701" name="ptmx" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0" [ 258.895028][ T36] audit: type=1400 audit(2000000394.151:975): avc: denied { associate } for pid=5669 comm="syz.8.1701" name="ptmx" dev="tmpfs" ino=736 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_var_run_t:s0" [ 258.990412][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.997576][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.004637][ T5686] bridge_slave_0: entered allmulticast mode [ 259.010954][ T5686] bridge_slave_0: entered promiscuous mode [ 259.017385][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.024550][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.033230][ T36] audit: type=1400 audit(2000000394.301:976): avc: denied { relabelfrom } for pid=5690 comm="syz.0.1707" name="" dev="pipefs" ino=44207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 259.038096][ T5686] bridge_slave_1: entered allmulticast mode [ 259.056908][ T36] audit: type=1401 audit(2000000394.301:977): op=setxattr invalid_context="" [ 259.071137][ T5686] bridge_slave_1: entered promiscuous mode [ 259.162227][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.169327][ T5686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.176647][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.183706][ T5686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.226612][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.234586][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.244628][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.251691][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.261811][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.268964][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.300343][ T5686] veth0_vlan: entered promiscuous mode [ 259.314603][ T5686] veth1_macvtap: entered promiscuous mode [ 259.607461][ T64] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 259.778580][ T64] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.789613][ T64] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 259.800461][ T64] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.813255][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.820611][ T64] usb 3-1: New USB device found, idVendor=013c, idProduct=ff00, bcdDevice= 0.ff [ 259.829664][ T64] usb 3-1: New USB device strings: Mfr=129, Product=0, SerialNumber=0 [ 259.837841][ T64] usb 3-1: Manufacturer: syz [ 259.843092][ T64] usb 3-1: config 0 descriptor?? [ 259.848512][ T5711] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 259.998242][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.006786][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.382167][ T5715] netlink: 'syz.6.1711': attribute type 40 has an invalid length. [ 260.401280][ T5717] overlay: Unknown parameter ':' [ 260.407049][ T5717] input: syz0 as /devices/virtual/input/input52 [ 260.414723][ T5717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5717 comm=syz.6.1712 [ 260.458058][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.466574][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.475580][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 260.481582][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.491386][ T64] usb 3-1: USB disconnect, device number 104 [ 260.618416][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.626913][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.237447][ T377] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 261.388481][ T377] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.400142][ T377] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.411124][ T377] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.422410][ T377] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 261.431454][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.440427][ T5739] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.818544][ T5745] overlayfs: failed to clone upperpath [ 262.467697][ T377] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 262.475199][ T377] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input53 [ 262.488303][ T377] usb 3-1: USB disconnect, device number 105 [ 262.494304][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 262.580563][ T5760] overlay: ./file0 is not a directory [ 262.606643][ T36] audit: type=1400 audit(2000000397.861:978): avc: denied { setopt } for pid=5759 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.896883][ T36] audit: type=1400 audit(2000000398.151:979): avc: denied { map } for pid=5791 comm="syz.2.1738" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.167456][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 263.318541][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.329470][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.339220][ T10] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 263.348257][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.356742][ T10] usb 3-1: config 0 descriptor?? [ 263.482087][ T36] audit: type=1400 audit(2000000398.741:980): avc: denied { bind } for pid=5801 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 263.570479][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 263.584511][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.595791][ T10] usb 3-1: USB disconnect, device number 106 [ 263.646620][ T5812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.656070][ T5812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.897464][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 264.048440][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.059386][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.069132][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.082011][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.091381][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.100249][ T10] usb 3-1: config 0 descriptor?? [ 264.236353][ T5831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.244891][ T5831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.246056][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.261175][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.272814][ T36] audit: type=1400 audit(2000000399.531:981): avc: denied { attach_queue } for pid=5830 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 264.507086][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.516349][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.523827][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.531261][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.538695][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.546118][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.553522][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.560928][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.568868][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.576264][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.583683][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.591094][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.598503][ T10] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 264.606080][ T10] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 264.616168][ T10] plantronics 0003:047F:FFFF.0042: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.768496][ T36] audit: type=1400 audit(2000000400.031:982): avc: denied { setattr } for pid=5809 comm="syz.2.1745" name="/" dev="incremental-fs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.791672][ T581] usb 3-1: USB disconnect, device number 107 [ 264.848383][ T5847] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1756'. [ 265.111916][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.120683][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.430215][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 265.640338][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.648840][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.657561][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.666097][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.183198][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.191819][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.208539][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.217036][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.802435][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.811025][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.859212][ T5882] 9pnet: Could not find request transport: xen [ 266.865885][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.874370][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.882634][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.891101][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.447479][ T573] Bluetooth: hci1: command 0x1003 tx timeout [ 267.447484][ T488] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 267.484649][ T5893] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 267.668615][ T5902] fuse: Bad value for 'fd' [ 268.356473][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.366234][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.877493][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 268.898735][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.907212][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.027465][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 269.033571][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 269.044472][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.054257][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 269.067218][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 269.076249][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.084707][ T10] usb 3-1: config 0 descriptor?? [ 269.090475][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 269.338462][ T10] usb 3-1: USB disconnect, device number 108 [ 269.426992][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.435483][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.952196][ T5966] 9pnet_fd: Insufficient options for proto=fd [ 270.043446][ T5968] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1798'. [ 270.060904][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.069787][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.071405][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.086020][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.117450][ T2174] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 270.268577][ T2174] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 270.280105][ T2174] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.290052][ T2174] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.303222][ T2174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.309859][ T2174] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 270.318905][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.327386][ T2174] usb 3-1: config 0 descriptor?? [ 270.511971][ T5973] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1800'. [ 270.521430][ T5973] overlayfs: failed to clone lowerpath [ 270.611739][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 270.735155][ T2174] usbhid 3-1:0.0: can't add hid device: -71 [ 270.741145][ T2174] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 270.749857][ T2174] usb 3-1: USB disconnect, device number 109 [ 271.135219][ T36] audit: type=1326 audit(2000000406.391:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.8.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc462b9af79 code=0x0 [ 272.107350][ T36] audit: type=1400 audit(2000000407.361:984): avc: denied { create } for pid=6021 comm="syz.2.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 272.358313][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.367362][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.888958][ T6045] tmpfs: Invalid uid '0x00000000ffffffff' [ 272.889405][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.903865][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.921492][ T6050] fuse: Unknown parameter '&d' [ 272.926635][ T36] audit: type=1400 audit(2000000408.181:985): avc: denied { write } for pid=6049 comm="syz.8.1824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 273.317449][ T2174] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 273.425057][ T6083] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 273.434426][ T6083] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 273.458328][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.466789][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.477448][ T2174] usb 3-1: Using ep0 maxpacket: 32 [ 273.485691][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.498263][ T6089] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 273.505030][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.519550][ T2174] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.528812][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.537615][ T2174] usb 3-1: config 0 descriptor?? [ 273.549118][ T2174] hub 3-1:0.0: USB hub found [ 273.746281][ T2174] hub 3-1:0.0: 19 ports detected [ 273.751453][ T2174] hub 3-1:0.0: insufficient power available to use all downstream ports [ 273.946477][ T2174] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 273.952875][ T2174] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 273.961421][ T2174] usbhid 3-1:0.0: can't add hid device: -71 [ 273.967364][ T2174] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.987992][ T2174] usb 3-1: USB disconnect, device number 110 [ 274.015070][ T6099] TCP: TCP_TX_DELAY enabled [ 274.025932][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.035160][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.036611][ T36] audit: type=1400 audit(2000000409.301:986): avc: denied { setattr } for pid=6095 comm="syz.6.1837" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.044520][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.074069][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.086935][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.093012][ T6104] can: request_module (can-proto-0) failed. [ 274.096873][ T36] audit: type=1400 audit(2000000409.341:987): avc: denied { read } for pid=6103 comm="syz.8.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.113038][ T6108] can: request_module (can-proto-0) failed. [ 274.122540][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.479494][ T6115] EXT4-fs: dax option not supported [ 274.727736][ T2174] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 274.878396][ T2174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.888512][ T2174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.898032][ T2174] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 274.907060][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.915046][ T2174] usb 3-1: SerialNumber: syz [ 274.921875][ T2174] usb 3-1: 0:2 : does not exist [ 275.124202][ T2174] usb 3-1: USB disconnect, device number 111 [ 275.511337][ T36] audit: type=1400 audit(2000000410.771:988): avc: denied { read } for pid=6126 comm="syz.0.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 275.563143][ T6129] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1849'. [ 276.427457][ T64] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 276.521765][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.530289][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.539181][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.547692][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.578542][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.589543][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.599488][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 276.608733][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.618939][ T64] usb 3-1: config 0 descriptor?? [ 277.229705][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 277.235704][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.244586][ T64] usb 3-1: USB disconnect, device number 112 [ 277.752355][ T6150] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 277.752378][ T6150] rust_binder: Read failure Err(EFAULT) in pid:120 [ 277.761549][ T6150] rust_binder: Error while translating object. [ 277.768119][ T6150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.774339][ T6150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 278.017447][ T2174] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 278.178502][ T2174] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.189726][ T2174] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.199815][ T2174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.206421][ T2174] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 278.216489][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.226322][ T2174] usb 3-1: config 0 descriptor?? [ 278.632953][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.641487][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.851017][ T2174] usbhid 3-1:0.0: can't add hid device: -71 [ 278.857015][ T2174] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.865650][ T2174] usb 3-1: USB disconnect, device number 113 [ 279.556461][ T6182] kvm: kvm [6181]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 279.565310][ T6182] kvm: kvm [6181]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 279.597454][ T64] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 279.659485][ T6187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1867'. [ 279.668600][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 279.726781][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.735311][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.748543][ T64] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 279.759555][ T64] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.769473][ T64] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 279.782700][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.789437][ T64] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 279.797372][ T36] audit: type=1400 audit(2000000415.051:989): avc: denied { getopt } for pid=6191 comm="syz.8.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.798666][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.827766][ T64] usb 3-1: config 0 descriptor?? [ 280.435303][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 280.441362][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 280.451049][ T64] usb 3-1: USB disconnect, device number 114 [ 281.048932][ T6213] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.067494][ T6213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 282.022993][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.036238][ T36] audit: type=1400 audit(2000000417.291:990): avc: denied { create } for pid=6242 comm="syz.2.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 282.038129][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.098747][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1884'. [ 282.173350][ T6250] netlink: 'syz.2.1887': attribute type 15 has an invalid length. [ 282.310731][ T6255] tipc: New replicast peer: 255.255.255.255 [ 282.316887][ T6255] tipc: Enabled bearer , priority 10 [ 282.327835][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1882'. [ 282.347557][ T6255] tipc: Disabling bearer [ 282.850991][ T6274] usb 1-1: USB disconnect, device number 126 [ 282.928057][ T6278] rust_binder: 1148: no such ref 0 [ 283.597988][ T36] audit: type=1400 audit(2000000418.861:991): avc: denied { append } for pid=6290 comm="syz.0.1902" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.621548][ T377] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 283.654157][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1905'. [ 283.780466][ T377] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 283.788106][ T377] usb 3-1: can't read configurations, error -71 [ 284.648653][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.657284][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.047476][ T377] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 285.198392][ T377] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 285.209418][ T377] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.219531][ T377] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.232815][ T377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.239436][ T377] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 285.248476][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.256952][ T377] usb 3-1: config 0 descriptor?? [ 285.724837][ T6357] overlayfs: missing 'lowerdir' [ 285.864350][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 285.870378][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.880553][ T377] usb 3-1: USB disconnect, device number 117 [ 286.287034][ T36] audit: type=1400 audit(2000000421.541:992): avc: denied { create } for pid=6361 comm="syz.8.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 286.405992][ T6368] binder: Bad value for 'max' [ 287.157461][ T10] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 287.287440][ T10] usb 3-1: device descriptor read/64, error -71 [ 287.468885][ T6389] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 287.527458][ T10] usb 3-1: device descriptor read/64, error -71 [ 287.564809][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.573471][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.767446][ T10] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 287.867740][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1939'. [ 287.897721][ T10] usb 3-1: device descriptor read/64, error -71 [ 288.137451][ T10] usb 3-1: device descriptor read/64, error -71 [ 288.241737][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.250436][ T10] usb usb3-port1: attempt power cycle [ 288.253076][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.272179][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.280675][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.299805][ T6422] netlink: 'syz.6.1949': attribute type 3 has an invalid length. [ 288.317013][ T36] audit: type=1400 audit(2000000423.571:993): avc: denied { map } for pid=6426 comm="syz.6.1950" path="socket:[47079]" dev="sockfs" ino=47079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.340431][ T36] audit: type=1400 audit(2000000423.571:994): avc: denied { read } for pid=6426 comm="syz.6.1950" path="socket:[47079]" dev="sockfs" ino=47079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.473949][ T36] audit: type=1400 audit(2000000423.731:995): avc: denied { create } for pid=6432 comm="syz.8.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.587443][ T10] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 288.608404][ T10] usb 3-1: device descriptor read/8, error -71 [ 288.738419][ T10] usb 3-1: device descriptor read/8, error -71 [ 288.947846][ T36] audit: type=1400 audit(2000000424.211:996): avc: denied { create } for pid=6440 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.970158][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.978582][ T10] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 288.979068][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.999813][ T10] usb 3-1: device descriptor read/8, error -71 [ 289.128968][ T10] usb 3-1: device descriptor read/8, error -71 [ 289.237553][ T10] usb usb3-port1: unable to enumerate USB device [ 289.604738][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.613344][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.979723][ T6458] 9pnet_virtio: no channels available for device syz [ 290.143193][ T6466] tipc: Can't bind to reserved service type 0 [ 290.159457][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.168025][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.337451][ T2174] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 290.488526][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.499428][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.509157][ T2174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.522042][ T2174] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.531078][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.539622][ T2174] usb 3-1: config 0 descriptor?? [ 290.796274][ T36] audit: type=1400 audit(2000000426.051:997): avc: denied { setopt } for pid=6476 comm="syz.0.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.796831][ T6477] loop2: detected capacity change from 0 to 8388607 [ 290.825973][ T6223] Buffer I/O error on dev loop2, logical block 1048575, async page read [ 290.846359][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.854906][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.863415][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.871870][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.946875][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.954317][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.961756][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.969140][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.976513][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.983904][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.991284][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 290.998666][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.006039][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.013445][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.020924][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.028326][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.035694][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.043110][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.050516][ T2174] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 291.058072][ T2174] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 291.066893][ T2174] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 291.450877][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.459411][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.474306][ T6485] lo: entered allmulticast mode [ 292.046291][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.054820][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.063257][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.071724][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.299547][ T6498] overlayfs: missing 'lowerdir' [ 292.329869][ T6500] sit0: entered promiscuous mode [ 292.339614][ T6500] netlink: 'syz.6.1978': attribute type 1 has an invalid length. [ 292.347351][ T6500] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1978'. [ 292.377472][ T1156] usb 3-1: reset high-speed USB device number 122 using dummy_hcd [ 292.607941][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.616421][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.625773][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.634226][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.940185][ T6516] overlayfs: missing 'lowerdir' [ 293.199132][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.207615][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.607465][ T1156] usb 3-1: device descriptor read/64, error -71 [ 293.710583][ T6553] No source specified [ 293.729382][ T6556] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1998'. [ 293.817258][ T36] audit: type=1400 audit(2000000429.071:998): avc: denied { setopt } for pid=6558 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.845217][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.854550][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.927115][ T1156] usb 3-1: device firmware changed [ 293.932477][ T10] usb 3-1: USB disconnect, device number 122 [ 294.097454][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 294.248425][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.259934][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.270801][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.280965][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.293840][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.302873][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.311749][ T10] usb 3-1: config 0 descriptor?? [ 294.690122][ T6576] kvm: kvm [6575]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x6405 [ 294.701753][ T6576] kvm: kvm [6575]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x4c05 [ 294.714211][ T6576] kvm: kvm [6575]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xdd05 [ 294.723992][ T10] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 294.733245][ T10] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 294.741922][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 294.743148][ T6576] kvm_intel: kvm [6575]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x4f05 [ 294.760257][ T10] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 294.767950][ T10] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 294.775348][ T10] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 294.779168][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.783265][ T10] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 294.791494][ T36] audit: type=1400 audit(2000000430.041:999): avc: denied { listen } for pid=6575 comm="syz.0.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.818814][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.829894][ T10] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 295.006660][ T36] audit: type=1400 audit(2000000430.261:1000): avc: denied { create } for pid=6592 comm="syz.8.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 295.007962][ T6593] overlayfs: failed to clone upperpath [ 295.036217][ T36] audit: type=1400 audit(2000000430.301:1001): avc: denied { setattr } for pid=6592 comm="syz.8.2010" name="file0" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.058966][ T36] audit: type=1400 audit(2000000430.301:1002): avc: denied { write } for pid=6592 comm="syz.8.2010" name="file0" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.081493][ T36] audit: type=1400 audit(2000000430.301:1003): avc: denied { open } for pid=6592 comm="syz.8.2010" path="/295/bus/file0" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.128137][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.136608][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.390186][ T6596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.398676][ T6596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.436338][ T36] audit: type=1400 audit(2000000430.691:1004): avc: denied { getopt } for pid=6599 comm="syz.6.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.462411][ T6603] overlayfs: failed to resolve './bus': -2 [ 295.564031][ T6610] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2016'. [ 295.573150][ T6610] gretap0: entered promiscuous mode [ 295.584325][ T36] audit: type=1400 audit(2000000430.841:1005): avc: denied { accept } for pid=6609 comm="syz.8.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 295.915088][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.923571][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.165424][ T10] usb 3-1: USB disconnect, device number 123 [ 296.198315][ T6625] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 296.212395][ T36] audit: type=1400 audit(2000000431.471:1006): avc: denied { relabelto } for pid=6624 comm="syz.2.2023" name="file1" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0" [ 296.246634][ T36] audit: type=1400 audit(2000000431.471:1007): avc: denied { associate } for pid=6624 comm="syz.2.2023" name="file1" dev="tmpfs" ino=372 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:getty_var_run_t:s0" [ 296.441895][ T6650] fuse: Bad value for 'group_id' [ 296.446872][ T6650] fuse: Bad value for 'group_id' [ 296.523041][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.531505][ T6652] input: syz0 as /devices/virtual/input/input58 [ 296.557141][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.569179][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.579090][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.592331][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.604653][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.613659][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.622306][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.666402][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.675033][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.697542][ T2174] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 298.516689][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2039'. [ 299.418363][ T6681] SELinux: failed to load policy [ 299.706830][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 299.737441][ T2174] usb 3-1: device descriptor read/64, error -71 [ 299.754995][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.763580][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.776506][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.785620][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.998783][ T2174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.007381][ T2174] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 300.017766][ T2174] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 300.029170][ T2174] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.038383][ T2174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.046373][ T2174] usb 3-1: Product: syz [ 300.050751][ T2174] usb 3-1: Manufacturer: syz [ 300.055345][ T2174] usb 3-1: SerialNumber: syz [ 300.370136][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 300.370154][ T36] audit: type=1400 audit(2000000435.631:1016): avc: denied { map } for pid=6705 comm="syz.0.2049" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 300.677564][ T36] audit: type=1326 audit(2000000435.931:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.8.2050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc462b9af79 code=0x0 [ 300.729403][ T6711] overlayfs: failed to clone upperpath [ 301.300356][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.309748][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.212895][ T36] audit: type=1400 audit(2000000437.473:1018): avc: denied { map } for pid=6726 comm="syz.8.2056" path="socket:[48899]" dev="sockfs" ino=48899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.263214][ T36] audit: type=1400 audit(2000000437.473:1019): avc: denied { accept } for pid=6726 comm="syz.8.2056" path="socket:[48899]" dev="sockfs" ino=48899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.434073][ T2174] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 302.447439][ T2174] cdc_ncm 3-1:1.0: bind() failure [ 302.456183][ T2174] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 302.461305][ T6731] overlayfs: failed to resolve './file1': -2 [ 302.463152][ T2174] cdc_ncm 3-1:1.1: bind() failure [ 302.481138][ T6733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.481268][ T6733] rust_binder: Error while translating object. [ 302.489873][ T6733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 302.496045][ T6733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:378 [ 302.506737][ T2174] usb 3-1: USB disconnect, device number 124 [ 302.538070][ T6733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1025 sclass=netlink_tcpdiag_socket pid=6733 comm=syz.6.2058 [ 302.817465][ T2174] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 302.967458][ T2174] usb 3-1: Using ep0 maxpacket: 32 [ 302.973643][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.984656][ T2174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.994462][ T2174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 303.007257][ T2174] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 303.016297][ T2174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.024890][ T2174] usb 3-1: config 0 descriptor?? [ 303.440627][ T2174] input: HID 0458:5015 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5015.0045/input/input59 [ 303.453134][ T2174] input: HID 0458:5015 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5015.0045/input/input60 [ 303.465599][ T2174] input: HID 0458:5015 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5015.0045/input/input61 [ 303.480916][ T2174] kye 0003:0458:5015.0045: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 303.631846][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.640431][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.649956][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.659702][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.873838][ T2174] usb 3-1: USB disconnect, device number 125 [ 304.177457][ T2174] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 304.337450][ T2174] usb 3-1: Using ep0 maxpacket: 16 [ 304.343937][ T2174] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 304.352331][ T2174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.362591][ T2174] usb 3-1: config 0 has no interface number 0 [ 304.371218][ T2174] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 304.380288][ T2174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.388283][ T2174] usb 3-1: Product: syz [ 304.392423][ T2174] usb 3-1: Manufacturer: syz [ 304.396989][ T2174] usb 3-1: SerialNumber: syz [ 304.402119][ T2174] usb 3-1: config 0 descriptor?? [ 304.413946][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.422489][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.608696][ T2174] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 304.616841][ T2174] usb 3-1: bad CDC descriptors [ 304.621781][ T2174] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 304.631859][ T2174] usb 3-1: USB disconnect, device number 126 [ 304.789519][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2082'. [ 305.131029][ T6834] netlink: 'syz.2.2090': attribute type 16 has an invalid length. [ 305.150016][ T6834] rust_binder: 219: no such ref 0 [ 305.155096][ T6834] rust_binder: 219: no such ref 3 [ 305.160168][ T6834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 305.447476][ T581] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 305.608524][ T581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.619715][ T581] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 305.628837][ T581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.636817][ T581] usb 3-1: Product: syz [ 305.641006][ T581] usb 3-1: Manufacturer: syz [ 305.645798][ T581] usb 3-1: SerialNumber: syz [ 305.652144][ T581] usb 3-1: config 0 descriptor?? [ 305.872956][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.881581][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.889941][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.898424][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.063757][ T10] usb 3-1: USB disconnect, device number 127 [ 306.418363][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.420999][ T6868] netlink: 'syz.8.2102': attribute type 11 has an invalid length. [ 306.428277][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.434631][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2102'. [ 306.445671][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.460585][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.489450][ T6873] tipc: Enabling of bearer rejected, failed to enable media [ 306.577619][ T6880] EXT4-fs: dax option not supported [ 306.583160][ T6880] tipc: Failed to remove unknown binding: 66,0,0/4:4173857592/4173857593 [ 306.592019][ T6880] tipc: Failed to remove unknown binding: 66,0,0/4:4173857592/4173857593 [ 306.729743][ T4214] tipc: Subscription rejected, illegal request [ 306.733314][ T36] audit: type=1400 audit(2000000441.993:1020): avc: denied { create } for pid=6889 comm="syz.8.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 306.817453][ T2174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 306.947497][ T2174] usb 3-1: device descriptor read/64, error -71 [ 306.997610][ T6899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.998346][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.013359][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.187457][ T2174] usb 3-1: device descriptor read/64, error -71 [ 307.427443][ T2174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 307.528951][ T6901] support for the xor transformation has been removed. [ 307.558021][ T2174] usb 3-1: device descriptor read/64, error -71 [ 307.566621][ T6913] netlink: 'syz.0.2116': attribute type 4 has an invalid length. [ 307.591352][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.600675][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.611746][ T6921] netlink: 37 bytes leftover after parsing attributes in process `syz.8.2119'. [ 307.797454][ T2174] usb 3-1: device descriptor read/64, error -71 [ 307.907556][ T2174] usb usb3-port1: attempt power cycle [ 308.127844][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.136686][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.247656][ T2174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 308.268514][ T2174] usb 3-1: device descriptor read/8, error -71 [ 308.398479][ T2174] usb 3-1: device descriptor read/8, error -71 [ 308.637464][ T2174] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 308.660576][ T2174] usb 3-1: device descriptor read/8, error -71 [ 308.666446][ T6941] rust_binder: 1382: no such ref 0 [ 308.671889][ T6941] rust_binder: 1382: no such ref 1 [ 308.677059][ T6941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1382 [ 308.788459][ T2174] usb 3-1: device descriptor read/8, error -71 [ 308.815780][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2134'. [ 308.835753][ T36] audit: type=1400 audit(2000000444.093:1021): avc: denied { accept } for pid=6964 comm="syz.0.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 308.855230][ T36] audit: type=1400 audit(2000000444.093:1022): avc: denied { read } for pid=6971 comm="syz.6.2136" path="socket:[51445]" dev="sockfs" ino=51445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.908348][ T2174] usb usb3-port1: unable to enumerate USB device [ 308.922472][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.931343][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.531295][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.539824][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.977444][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 310.107449][ T10] usb 3-1: device descriptor read/64, error -71 [ 310.138870][ T6997] netlink: 'syz.8.2146': attribute type 16 has an invalid length. [ 310.146688][ T6997] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.2146'. [ 310.347442][ T10] usb 3-1: device descriptor read/64, error -71 [ 310.587431][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 310.665028][ T6999] fuseblk: Bad value for 'fd' [ 310.717450][ T10] usb 3-1: device descriptor read/64, error -71 [ 310.957450][ T10] usb 3-1: device descriptor read/64, error -71 [ 311.067527][ T10] usb usb3-port1: attempt power cycle [ 311.185952][ T36] audit: type=1400 audit(2000000446.443:1023): avc: denied { audit_write } for pid=7003 comm="syz.8.2149" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 311.207139][ T36] audit: type=1107 audit(2000000446.443:1024): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 311.407453][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 311.428438][ T10] usb 3-1: device descriptor read/8, error -71 [ 311.558442][ T10] usb 3-1: device descriptor read/8, error -71 [ 311.743049][ T36] audit: type=1400 audit(2000000447.003:1025): avc: denied { accept } for pid=7009 comm="syz.8.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 311.797429][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 311.818372][ T10] usb 3-1: device descriptor read/8, error -71 [ 311.948469][ T10] usb 3-1: device descriptor read/8, error -71 [ 312.057548][ T10] usb usb3-port1: unable to enumerate USB device [ 312.576541][ T36] audit: type=1400 audit(2000000447.833:1026): avc: denied { listen } for pid=7029 comm="syz.0.2160" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.588743][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 312.661442][ T36] audit: type=1326 audit(2000000447.923:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7029 comm="syz.0.2160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7239af79 code=0x0 [ 312.691598][ T7035] netlink: 'syz.2.2162': attribute type 4 has an invalid length. [ 312.699382][ T7035] netlink: 'syz.2.2162': attribute type 21 has an invalid length. [ 312.707183][ T7035] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2162'. [ 312.733397][ T36] audit: type=1400 audit(2000000447.993:1028): avc: denied { remount } for pid=7037 comm="syz.6.2163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 312.759098][ T36] audit: type=1400 audit(2000000448.023:1029): avc: denied { rename } for pid=7039 comm="syz.2.2164" name="bus" dev="incremental-fs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.782029][ T36] audit: type=1400 audit(2000000448.023:1030): avc: denied { add_name } for pid=7039 comm="syz.2.2164" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.823079][ T5686] ------------[ cut here ]------------ [ 312.828591][ T5686] WARNING: CPU: 1 PID: 5686 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 312.836653][ T5686] Modules linked in: [ 312.840598][ T5686] CPU: 1 UID: 0 PID: 5686 Comm: syz-executor Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 312.852327][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.862395][ T5686] RIP: 0010:drop_nlink+0xce/0x110 [ 312.867444][ T5686] Code: 04 00 00 be 08 00 00 00 e8 bf 25 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 57 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 312.887168][ T5686] RSP: 0018:ffffc90000f4fc60 EFLAGS: 00010293 [ 312.893368][ T5686] RAX: ffffffff81f145be RBX: ffff8881172307e0 RCX: ffff888114c5a600 [ 312.901390][ T5686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.909373][ T5686] RBP: ffffc90000f4fc88 R08: 0000000000000003 R09: 0000000000000004 [ 312.917338][ T5686] R10: dffffc0000000000 R11: fffff520001e9f7c R12: dffffc0000000000 [ 312.925315][ T5686] R13: 1ffff11022e46105 R14: ffff888117230828 R15: 0000000000000000 [ 312.933353][ T5686] FS: 000055557c3a1500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 312.942315][ T5686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.948910][ T5686] CR2: 000055557c3c4948 CR3: 000000011ac7c000 CR4: 00000000003526b0 [ 312.956875][ T5686] Call Trace: [ 312.960151][ T5686] [ 312.963074][ T5686] shmem_rmdir+0x5f/0x90 [ 312.967315][ T5686] vfs_rmdir+0x3e3/0x560 [ 312.971587][ T5686] incfs_kill_sb+0x109/0x230 [ 312.976182][ T5686] deactivate_locked_super+0xd5/0x2a0 [ 312.981553][ T5686] deactivate_super+0xb8/0xe0 [ 312.986224][ T5686] cleanup_mnt+0x406/0x4a0 [ 312.990644][ T5686] __cleanup_mnt+0x1d/0x40 [ 312.995059][ T5686] task_work_run+0x1e5/0x260 [ 312.999657][ T5686] ? __cfi_task_work_run+0x10/0x10 [ 313.004771][ T5686] ? __x64_sys_umount+0x12e/0x180 [ 313.009828][ T5686] ? __cfi___x64_sys_umount+0x10/0x10 [ 313.015194][ T5686] ? __kasan_check_read+0x15/0x20 [ 313.020221][ T5686] resume_user_mode_work+0x35/0x50 [ 313.025331][ T5686] syscall_exit_to_user_mode+0x63/0xb0 [ 313.030788][ T5686] do_syscall_64+0x63/0xf0 [ 313.035206][ T5686] ? clear_bhb_loop+0x50/0xa0 [ 313.039891][ T5686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.045780][ T5686] RIP: 0033:0x7ffac7d9c1d7 [ 313.050399][ T5686] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 313.070048][ T5686] RSP: 002b:00007ffef47a0bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 313.078480][ T5686] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffac7d9c1d7 [ 313.086437][ T5686] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef47a0cb0 [ 313.094404][ T5686] RBP: 00007ffef47a0cb0 R08: 00007ffef47a1cb0 R09: 00000000ffffffff [ 313.102563][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef47a1d40 [ 313.110543][ T5686] R13: 00007ffac7e30b3b R14: 000000000004c5aa R15: 00007ffef47a1d80 [ 313.118530][ T5686] [ 313.121624][ T5686] ---[ end trace 0000000000000000 ]--- [ 313.127144][ T5686] ================================================================== [ 313.135199][ T5686] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 313.141421][ T5686] Write of size 4 at addr 0000000000000168 by task syz-executor/5686 [ 313.149454][ T5686] [ 313.151758][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: syz-executor Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 313.151776][ T5686] Tainted: [W]=WARN [ 313.151780][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 313.151787][ T5686] Call Trace: [ 313.151792][ T5686] [ 313.151796][ T5686] __dump_stack+0x21/0x30 [ 313.151812][ T5686] dump_stack_lvl+0x140/0x1c0 [ 313.151824][ T5686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 313.151843][ T5686] print_report+0x3d/0x70 [ 313.151855][ T5686] kasan_report+0x162/0x1a0 [ 313.151870][ T5686] ? ihold+0x24/0x70 [ 313.151883][ T5686] ? _raw_spin_unlock+0x45/0x60 [ 313.151898][ T5686] ? ihold+0x24/0x70 [ 313.151911][ T5686] kasan_check_range+0x25a/0x2b0 [ 313.151926][ T5686] __kasan_check_write+0x18/0x20 [ 313.151938][ T5686] ihold+0x24/0x70 [ 313.151951][ T5686] vfs_rmdir+0x26a/0x560 [ 313.151961][ T5686] incfs_kill_sb+0x109/0x230 [ 313.151973][ T5686] deactivate_locked_super+0xd5/0x2a0 [ 313.151984][ T5686] deactivate_super+0xb8/0xe0 [ 313.151994][ T5686] cleanup_mnt+0x406/0x4a0 [ 313.152008][ T5686] __cleanup_mnt+0x1d/0x40 [ 313.152021][ T5686] task_work_run+0x1e5/0x260 [ 313.152033][ T5686] ? __cfi_task_work_run+0x10/0x10 [ 313.152044][ T5686] ? __x64_sys_umount+0x12e/0x180 [ 313.152055][ T5686] ? __cfi___x64_sys_umount+0x10/0x10 [ 313.152066][ T5686] ? __kasan_check_read+0x15/0x20 [ 313.152077][ T5686] resume_user_mode_work+0x35/0x50 [ 313.152091][ T5686] syscall_exit_to_user_mode+0x63/0xb0 [ 313.152103][ T5686] do_syscall_64+0x63/0xf0 [ 313.152117][ T5686] ? clear_bhb_loop+0x50/0xa0 [ 313.152132][ T5686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.152146][ T5686] RIP: 0033:0x7ffac7d9c1d7 [ 313.152156][ T5686] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 313.152165][ T5686] RSP: 002b:00007ffef47a0bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 313.152178][ T5686] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffac7d9c1d7 [ 313.152185][ T5686] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef47a0cb0 [ 313.152192][ T5686] RBP: 00007ffef47a0cb0 R08: 00007ffef47a1cb0 R09: 00000000ffffffff [ 313.152200][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef47a1d40 [ 313.152208][ T5686] R13: 00007ffac7e30b3b R14: 000000000004c5aa R15: 00007ffef47a1d80 [ 313.152216][ T5686] [ 313.152220][ T5686] ================================================================== [ 313.395887][ T5686] Disabling lock debugging due to kernel taint [ 313.402116][ T5686] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 313.409900][ T5686] #PF: supervisor write access in kernel mode [ 313.415948][ T5686] #PF: error_code(0x0002) - not-present page [ 313.421939][ T5686] PGD 8000000132b8a067 P4D 8000000132b8a067 PUD 0 [ 313.428422][ T5686] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 313.434469][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: syz-executor Tainted: G B W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 313.447634][ T5686] Tainted: [B]=BAD_PAGE, [W]=WARN [ 313.452627][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 313.462667][ T5686] RIP: 0010:ihold+0x2a/0x70 [ 313.467166][ T5686] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 313.486754][ T5686] RSP: 0018:ffffc90000f4fca0 EFLAGS: 00010246 [ 313.492795][ T5686] RAX: ffff888114c5a600 RBX: 0000000000000000 RCX: ffff888114c5a600 [ 313.500749][ T5686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.508697][ T5686] RBP: ffffc90000f4fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 313.516646][ T5686] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff8881172307ec [ 313.524594][ T5686] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 313.532544][ T5686] FS: 000055557c3a1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 313.541450][ T5686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.548017][ T5686] CR2: 0000000000000168 CR3: 000000011ac7c000 CR4: 00000000003526b0 [ 313.555967][ T5686] DR0: 0000000000000081 DR1: 000000000000000f DR2: 00000000000007ff [ 313.563939][ T5686] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.571888][ T5686] Call Trace: [ 313.575146][ T5686] [ 313.578059][ T5686] vfs_rmdir+0x26a/0x560 [ 313.582282][ T5686] incfs_kill_sb+0x109/0x230 [ 313.586850][ T5686] deactivate_locked_super+0xd5/0x2a0 [ 313.592197][ T5686] deactivate_super+0xb8/0xe0 [ 313.596852][ T5686] cleanup_mnt+0x406/0x4a0 [ 313.601334][ T5686] __cleanup_mnt+0x1d/0x40 [ 313.605729][ T5686] task_work_run+0x1e5/0x260 [ 313.610301][ T5686] ? __cfi_task_work_run+0x10/0x10 [ 313.615390][ T5686] ? __x64_sys_umount+0x12e/0x180 [ 313.620405][ T5686] ? __cfi___x64_sys_umount+0x10/0x10 [ 313.625754][ T5686] ? __kasan_check_read+0x15/0x20 [ 313.631021][ T5686] resume_user_mode_work+0x35/0x50 [ 313.636114][ T5686] syscall_exit_to_user_mode+0x63/0xb0 [ 313.641551][ T5686] do_syscall_64+0x63/0xf0 [ 313.645953][ T5686] ? clear_bhb_loop+0x50/0xa0 [ 313.650609][ T5686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.656482][ T5686] RIP: 0033:0x7ffac7d9c1d7 [ 313.660875][ T5686] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 313.680459][ T5686] RSP: 002b:00007ffef47a0bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 313.688849][ T5686] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffac7d9c1d7 [ 313.696802][ T5686] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef47a0cb0 [ 313.704752][ T5686] RBP: 00007ffef47a0cb0 R08: 00007ffef47a1cb0 R09: 00000000ffffffff [ 313.712709][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef47a1d40 [ 313.720656][ T5686] R13: 00007ffac7e30b3b R14: 000000000004c5aa R15: 00007ffef47a1d80 [ 313.728606][ T5686] [ 313.731603][ T5686] Modules linked in: [ 313.735483][ T5686] CR2: 0000000000000168 [ 313.739615][ T5686] ---[ end trace 0000000000000000 ]--- [ 313.745058][ T5686] RIP: 0010:ihold+0x2a/0x70 [ 313.749556][ T5686] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 3d 4e 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 7c 1c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 4d [ 313.769139][ T5686] RSP: 0018:ffffc90000f4fca0 EFLAGS: 00010246 [ 313.775186][ T5686] RAX: ffff888114c5a600 RBX: 0000000000000000 RCX: ffff888114c5a600 [ 313.783138][ T5686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.791086][ T5686] RBP: ffffc90000f4fcb0 R08: ffffffff88b8c947 R09: 1ffffffff1171928 [ 313.799035][ T5686] R10: dffffc0000000000 R11: fffffbfff1171929 R12: ffff8881172307ec [ 313.806985][ T5686] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 313.814936][ T5686] FS: 000055557c3a1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 313.823843][ T5686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.830405][ T5686] CR2: 0000000000000168 CR3: 000000011ac7c000 CR4: 00000000003526b0 [ 313.838355][ T5686] DR0: 0000000000000081 DR1: 000000000000000f DR2: 00000000000007ff [ 313.846304][ T5686] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.854252][ T5686] Kernel panic - not syncing: Fatal exception [ 313.860610][ T5686] Kernel Offset: disabled [ 313.864913][ T5686] Rebooting in 86400 seconds..