last executing test programs: 6.252166055s ago: executing program 1 (id=14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xb86026a, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc5, 0x2, 0xffffffff, 0x6, 0x7, "7f5972d49b67f3661c0196fe1d42c5d7cf38f6"}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 64) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x3ffffd, 0x0, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20000010) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x41, r6}) (async, rerun: 64) write$tun(r1, &(0x7f0000000200)={@void, @void, @eth={@random="176d20526fb4", @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x9, 0x30, 0x68, 0x0, 0x7, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x6, 0x4, {0x5, 0x4, 0x2, 0x28, 0x10, 0x68, 0x40, 0x0, 0x32, 0x6, @remote, @rand_addr=0x64010102}}}}}}}, 0x42) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) (async) r8 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000240)=0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 6.106614948s ago: executing program 1 (id=15): prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x12}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r1) capset(&(0x7f0000001440)={0x19980330}, &(0x7f0000001400)={0x0, 0x2}) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x85, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCSFF(r6, 0x40304580, 0x0) 5.24960072s ago: executing program 2 (id=17): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, &(0x7f0000000040)) r2 = socket(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000000000)=ANY=[@ANYBLOB="2e2e070c371303ed0133f2ff8689b3f20e2c12"]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x76) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x444, r11, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x94, 0x80, [@ibss={0x6, 0x2, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xc, 0x40}}, @fast_bss_trans={0x37, 0x67, {0x6, 0x2, "41f252467259e232af6976694c2eb605", "690405c27d42db4823753bff0f8a5bf834df17f85524e8c988576acf3438e04c", "ebc0111620cad5e757e3879e29169d42f7ff0902ea88676be88b21671789f1d7", [{0x3, 0x2, "b889"}, {0x2, 0xf, "14660ee1a7f4a06d930deaae221ac9"}]}}, @mesh_chsw={0x76, 0x6, {0x6, 0x8, 0x6, 0x4}}, @mic={0x8c, 0x10, {0xb89, "be5b262f5ee0", @short="0c1db4492a91c6e0"}}]}, @NL80211_ATTR_IE={0x171, 0x2a, [@perr={0x84, 0xfb, {0x4, 0xf, [{{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x1f}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x2e}, {{}, @broadcast, 0x2, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0xb}, {{}, @device_a, 0x1}, {{}, @device_b, 0x7ff, @void, 0xf}, {{}, @device_b, 0x800, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0xfffffff8, @value, 0x8}, {{}, @device_b, 0x9, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x36}, {{}, @device_b, 0x4, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x1000, @value, 0x2e}, {{0x0, 0x1}, @device_b, 0x955cb656, @value=@device_b, 0x13}]}}, @ibss={0x6, 0x2, 0x1}, @cf={0x4, 0x6, {0x7f, 0x6, 0x8, 0x1}}, @cf={0x4, 0x6, {0x0, 0xc, 0x5f08, 0xac2}}, @fast_bss_trans={0x37, 0x5a, {0x9, 0x1, "9739efeba3187a578e9fb213b0693aaf", "b4c3a8a1d612ac9d835375e5eaf0de8081d8c5e491654f6bfe6efdf95dd7ba99", "c3e6940576f042204f6c178baf00c96f35a965a79fc3db89b51c5ada4dc6ff95", [{0x4, 0x6, "9f2577862d85"}]}}]}, @NL80211_ATTR_IE={0xfa, 0x2a, [@mesh_chsw={0x76, 0x6, {0x6, 0x10, 0x8, 0x3}}, @tim={0x5, 0xa, {0x5, 0x9c, 0x7, "8dd5647b52caff"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x4, 0xa, @device_b, 0x1, 0x5, 0x2}}, @measure_req={0x26, 0xc5, {0x4, 0x8, 0x3, "40b5c537dc9ddd6ed9c4375a5372bd6e75be11634104be978a63f27eaf574f9fb685fccb8838b401310a7f8f97c8eb16f10947eb0c40285b04ea8de06481b184d49010c4683eb9b0bf1066c6495b755f35c4496a7bf2a437e6b6a8fb7331e3166b07e1ceb006648b725386bdea3286a550ae9894be5c605037289ef88fada6579a09ef7188218344de8d44b4b89cd418c3b7803deaa75496f7e1a2bec9a3993510735654d07d224788f8ed447987073404b0b90d1e4720b73a963d94e2be1b008b6a"}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x128, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x19, 0x2, "25f6a52e0b6ee3a03628328b661aea3e9f036351f7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdf, 0x3, "9e6073f7d76d809f2dd5ef4199bed8d49488e478b904a32372339a6cdb0c0cfe903359f2d4bb3efff876b4bf455f0d9a598ff0352af50ccdc011cea0b7549b3cfe530aa0f3edb7f6184b762348ca4d9fff6ec02531f3f371d971c5d99146db602f63367ecdc6dc785fc3f3b5fdb44f56417a26492b10309a1276d5cf9449d8f6b9e1d12c49131bbe0775d5d8773ebf2fc4eae9a5fd618e5cca463ad1542d29ce628ee332c520af28a9a185388bbef3b8d0d0697b4476efd5631dc13d1c3980e7bf2340a2697dc775c2c1523e7b1ca45fb28635ce75cb1b99b530fd"}, @NL80211_FTM_RESP_ATTR_LCI={0x26, 0x2, "ec95ac2e50a9f0128562adca115c04dc60504e2ea0ce5e85a121ce2b4990c85702ed"}]}, @NL80211_ATTR_BEACON_TAIL={0x4}]}, 0x444}, 0x1, 0x0, 0x0, 0x4000048}, 0x140) 5.081342229s ago: executing program 2 (id=18): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="40000000130001002bbd7000fbdbdf2504004f80040071662800bc800400c380080013803a48ad0418002e801400e9442ff4611233a8000000000000000000aa"], 0x40}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xc0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 4.984455201s ago: executing program 2 (id=19): syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x100017000, 0x1008000}) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x100017000, 0x1008000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) 4.983981331s ago: executing program 2 (id=20): creat(&(0x7f0000000000)='./file0\x00', 0x40) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, 0x0, 0x1}, 0xe) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r1], 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000140)=""/86, 0x56) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000900)="198108377d4a84ee0759d7bab78243fc290c5e463d45af702a00dda49f6c1ab3f348125fa44a25e5d20abb303230064de42f2e9c27d27555f45ca222584c840fd89c5704e5b98235c7acf786f6fcef4220d097ba896896204aa239f55efe357246ead89e1e39ae03b6baf891cfe8b08a0300e55f5035242004c882db57413cceee60fcd14e3df6c54332022636c03a0ef19e09564000c79a389134bd12ea04367329d01758a4f32e5f866fb1532edb6704836aff50f38c648230157c7b2902b323f6b2842069cecb93fd0ee8237e8670f32461713f376fba946be7cd53ac9da3e46c4698629e1a12802f7d1deae5affadde95a3c2b94b265d58431385a1c9e321fca2ecf848e65c453bd7970150fa7bffdde95389c1c4e50d31a66c7c3d6d8f1f7b0a0949bcb05a100002e99c816026cea3dabcf235c49c0e7c33730c9d96c319d", 0x141}], 0x1, &(0x7f00000003c0)}}], 0x2, 0x2400c8a0) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff030}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r8, 0x0, 0x38f9, 0x0) splice(r7, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) write(r3, &(0x7f0000000040), 0xffffff4a) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="7ec7ba67da011673ff1ab09e525585242784f25a94b9c1a68abdaf9f8add1006a67b4d693c1288f571c5170a818b005fdb1329cbfdf218310f40d1f304d996dc626d41898d87422f8bbb41206c39321b335fc70c9286ebdbb773955fe26f7c912cd9171c6d320a539fa594287d65bcb8b52f24e49a1ba39633cd52f1c1bf2930116650533617839f03127338b37b0d07242de37293ea67a40f2a4cd4cc5063766dac6d2766fe27e39a9154f81b08f957567d5997ae2ac9132fb043e493299254b85d88c6c24bbbd025319996e97994723530e334584477d2eb82c28b60bf2ff5b963ee93a2d8b0c02aeb1ab1e8f02d332611e22b66a6e906836600"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6d"]}]}, 0x184}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000400)='./file0\x00', 0x1a1841, 0x1f0) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/46, 0x2e) 3.652418865s ago: executing program 3 (id=26): socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x507, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0xf445, 0x2, r5}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r6 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r6, 0x7, 0x2, r5}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)) sendmmsg$inet(r2, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000040)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0xf0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004040) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 3.52137714s ago: executing program 3 (id=27): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x2, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xfe, 0x5}}}}}}}}]}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251b180000070021"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x80000001, 0x60, &(0x7f0000000140)="ac486ef3a2", 0x5, 0x0, 0x5, 0x0, 0x80, 0x6, 0x0}) 3.08138004s ago: executing program 1 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2519"], 0x18}}, 0x40000000) 2.999155644s ago: executing program 1 (id=29): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x10, 0x3, 0x4}}, 0x14) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000080)=0x8d}) (async) sync_file_range(r2, 0xa, 0xfffffffffffffffa, 0x2) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTAT(r4, &(0x7f0000000140)={0x43, 0x7d, 0x1, {0x0, 0x3c, 0x4, 0x4, {0x2, 0x2, 0x2}, 0x18000000, 0x2, 0x3, 0x2, 0x2, '--', 0x3, '#)]', 0x4, '@#\'-'}}, 0x43) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x7}, 0x4) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) write$P9_RFSYNC(r4, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) (async) r6 = dup3(r5, r5, 0x80000) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x1, 0x7ff, &(0x7f0000000280)=0x5a4}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2c4, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1b}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0xb, 0x1}, {0x9, 0x1}, {0x1b, 0x1}, {0xd, 0x1}, {0xc}, {0x1b}, {0x2}, {0x1}, {0x12}, {0xc}, {0x9}, {0xc}, {0x1b, 0x1}, {0x2, 0x1}, {0x1}, {0x18, 0x1}, {0x9}, {0x30, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4c0597cb811a3225, 0x1, 0x7, 0x0, {0x10, 0x9, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x0, 0x3}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x230, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0b55a82accf03c74f02f714886"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "031a71c610"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "687653deb367c628cd278bf92a"}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5cd2d03c118f3a265a9c73a969"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0fc7e1fe76b8e218ddbac9bffe"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d6601d42a4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1b30c3a336"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c134428048"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa5116db2a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e25c676bf9a90ff28b0716d79a"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "504bd6696539d1398a6b6e4518"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "677aa1992f"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a60a779c23"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e166185c73"}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6c, 0x1}, {0xc}, {0x2}, {0x48, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7f}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x2c4}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000700)) (async) sendto$inet_nvme_of_msg(r6, &(0x7f0000000740)={@r2t={{0x9, 0x7, 0x18, 0x7, 0x390}, 0x0, 0x2, 0x8, 0x8}, @void}, 0x80, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r6) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000800)=0x2a8) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000d40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000880)={0x464, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5795}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private0, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @loopback, 0x1}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x57}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46685124}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa466}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x65f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @local, 0xd91}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd9, 0x3, "7a28b5e8d21f72a71f94ad89628feadb89ed25cd065c22d1c39af595b7d14389fb2b005094f3176126b506b5cbf12b1a668a14caed8888b2b35e06888f9c0c5112d6b05b16bab59f6542c97716bd68d1b5876617df8c4d6647c427b68339a6bcd639f4f7d8f5bde813ef547c9f97729c19c89bc28a161ef84e4338c07abd3ffedd1cdef01e502ff05a3266cf28ee9c7f3cc65abb27b0bcd3cd702fa45040be9f26313282e1adc4db99f6c4f25d54620a5ff34f1fc40b6afda4c7f772aff85596f1ca20e4b1f8b7738c0c8466d26c9da9d49b041e93"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x33, 0x3, "29d072eceda64be04316b2b384893cf5be6aab324fc1431af8e2ec7d3a7eb0cb2b95e230cc457dbdffca4ad5920734"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "40cab379149c666d0a4005b5419d705a185976d9afddf67ad93917b710b952fb"}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xed3e0e9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) (async) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000d80)) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000e00)={r9, 0x0, 0x8, 0x100, 0xfffffffffffffffb, 0x2, [0x5, 0x7fffffff, 0x9, 0x2, 0x217, 0x2]}) r10 = getpgrp(0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r10, 0x2, 0x5004) (async) read(r6, &(0x7f0000000e80)=""/10, 0xa) (async) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000ec0)=0x0) fcntl$setown(r0, 0x8, r11) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) 2.998317064s ago: executing program 1 (id=30): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x100, 0x6) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write$hidraw(r4, &(0x7f0000000040)="43618e1a87ea4588d8244225b0", 0xd) 2.54601591s ago: executing program 0 (id=34): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c8070, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x21649e, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 2.492920821s ago: executing program 0 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffff, {}, 0x0, 0x4}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@nfs_export_on}], [], 0x2c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) preadv(r6, &(0x7f0000001540)=[{&(0x7f0000001680)=""/4110, 0x100e}], 0x1, 0x0, 0xe30d) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r7], 0x0}, 0x0) 2.344404933s ago: executing program 3 (id=36): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, 0x0) (async) munlockall() (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x480c2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000001dc0)={0x9, 0x0, 0x80000}, 0x20) (async) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2186a, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x5, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 32) 2.236478063s ago: executing program 3 (id=37): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x18}], 0x1}, 0x8000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x2, "f42a"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) connect$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x8000, @none, 0x4, 0x1}, 0xe) mknodat(r5, &(0x7f0000000340)='./file0\x00', 0x8000, 0xe169b7) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="002213"], 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000280)={{0x2, 0x4e22, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4c, {0x2, 0x4e20, @multicast2}, 'veth0_to_bond\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x7, 0x684500) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}], [], 0x6b}}) 1.956441972s ago: executing program 2 (id=38): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.852428512s ago: executing program 2 (id=39): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.03003679s ago: executing program 0 (id=40): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000047c0)='/sys/power/pm_wakeup_irq', 0x0, 0x180) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pivot_root(&(0x7f0000002080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.013418777s ago: executing program 0 (id=41): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4ea2, @multicast1}, 0x10) (async) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) (async) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x22, 0x0) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x80d, 0x8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}], 0x18}, 0x40) (async) sendto$unix(r5, &(0x7f0000000cc0)="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", 0x1000, 0x4008004, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005a40)=""/4091, 0xffb}], 0x1}, 0x5}], 0x1, 0x62, 0x0) 896.278716ms ago: executing program 0 (id=42): write$selinux_load(0xffffffffffffffff, 0x0, 0xdf9c) prlimit64(0x0, 0xe, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22001, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000a40)={0x0, 0x2, 0xed, {0xed, 0x6, "31a6a25325faa7fddaaf78f0faba72823248043640ff08bbeb52a12013e75e61fe8602382e68d554d8e7b8d630b8f45fdc3f949eef40de606b087dff8b17387253bbab218664e63f305e8c86f399c67c76ffa17a6dcc078bc265ab81a89a133a2fe812e0a500b113b673830f59f66bf0f514424e4b4415ad5f8b4f2204788aa366b75f52b3c71dcf311c8542305d590980b149d85deb139401d347b2a801218a627b10a0ff6c604f3a5481d8d43b841b0b101ddcd50e43b5420efd4476254e084cdfe3e1b7fbd81697a3834b3dbde07fde773b38b0bc6984ac7c212338123310151719ca01c9ab7b18f7bc"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00033100000031039dcf2f6f46357d1f66ac810eff0f1b88"]}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000a40)={0x0, 0x2, 0xed, {0xed, 0x6, "31a6a25325faa7fddaaf78f0faba72823248043640ff08bbeb52a12013e75e61fe8602382e68d554d8e7b8d630b8f45fdc3f949eef40de606b087dff8b17387253bbab218664e63f305e8c86f399c67c76ffa17a6dcc078bc265ab81a89a133a2fe812e0a500b113b673830f59f66bf0f514424e4b4415ad5f8b4f2204788aa366b75f52b3c71dcf311c8542305d590980b149d85deb139401d347b2a801218a627b10a0ff6c604f3a5481d8d43b841b0b101ddcd50e43b5420efd4476254e084cdfe3e1b7fbd81697a3834b3dbde07fde773b38b0bc6984ac7c212338123310151719ca01c9ab7b18f7bc"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00033100000031039dcf2f6f46357d1f66ac810eff0f1b88"]}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000040)='^\\\x8c\'\x00', &(0x7f0000000200)='./file0\x00', r4) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r6, &(0x7f00000001c0)={0x20, 0x0, r7, {0x8, 0x0, 0x8, 0xd}}, 0x20) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x38, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x9}]}) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x9}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 848.366987ms ago: executing program 0 (id=43): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f01dbbaa000670f01c50f380355fff30faeef0f01df660f72500f20e06635000002000f22e066b9800000c00f326635000100000f30640f013e7d27660f6205", 0x40}], 0x1, 0x51, 0x0, 0x0) r7 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377320200f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x21) r11 = eventfd2(0x8001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000000)={0x4, r11, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000150000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_control_io(r7, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x4, 0x4, "9467bd97", "152129fd"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x4, 0x0, 0x9, 0x1ff, 0x1}}}, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) link(0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) 373.593569ms ago: executing program 3 (id=44): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) (async) r1 = syz_open_pts(r0, 0xa0200) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') (async) dup3(r1, r0, 0x0) (async) pipe(0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 276.448421ms ago: executing program 3 (id=45): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)=']\x00', 0x200020, &(0x7f0000000100)={@align=0xffffffffffff14b4, {0x6, 0x4, 0x5, 0x1}}, 0xfff, &(0x7f0000000180), &(0x7f00000001c0)=0x6}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000240)=""/90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYBLOB="040485721c000000"], 0x20}], 0x1}, 0x0) syz_usb_connect$uac2(0x3, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000004099045710400001020301090272000301cb1003080b0002010b20a60904000000010120000924010210030900080904010000010220000904010101010220000924020100059d031009050109ff0305cd04082501036068010009040200000102200009040201010102200009058209000204f8040825014114e18921499a167d72e187a90500"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) pidfd_send_signal(r0, 0x17, &(0x7f00000002c0)={0x22, 0xfff, 0x7fffffff}, 0x0) 0s ago: executing program 1 (id=46): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, r0) (async) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000210000100fdfafffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000df0b000000000000ffffff7f030000000b00000027bd7000fc3f00000a0000004400000000000000480003006c"], 0x138}}, 0x0) (async) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r3 = getuid() (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000015000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add5e41f0000000000801aeaaec1", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) (async) setreuid(0xee00, r3) (async) keyctl$chown(0x4, r0, r3, 0x0) (async) r5 = accept4$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000001180), &(0x7f00000011c0)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 25.608839][ T36] audit: type=1400 audit(1773213619.680:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.612409][ T283] cgroup: Unknown subsys name 'net' [ 25.631516][ T36] audit: type=1400 audit(1773213619.680:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.658951][ T36] audit: type=1400 audit(1773213619.710:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.659440][ T283] cgroup: Unknown subsys name 'devices' [ 25.829937][ T283] cgroup: Unknown subsys name 'hugetlb' [ 25.835697][ T283] cgroup: Unknown subsys name 'rlimit' [ 26.012057][ T36] audit: type=1400 audit(1773213620.080:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.035349][ T36] audit: type=1400 audit(1773213620.080:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.060354][ T36] audit: type=1400 audit(1773213620.080:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.080829][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.092385][ T36] audit: type=1400 audit(1773213620.170:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.117848][ T36] audit: type=1400 audit(1773213620.170:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.128218][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.144260][ T36] audit: type=1400 audit(1773213620.190:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.177703][ T36] audit: type=1400 audit(1773213620.190:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.051545][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.058812][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.065960][ T292] bridge_slave_0: entered allmulticast mode [ 27.072490][ T292] bridge_slave_0: entered promiscuous mode [ 27.080713][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.087817][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.094916][ T292] bridge_slave_1: entered allmulticast mode [ 27.101325][ T292] bridge_slave_1: entered promiscuous mode [ 27.127375][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.134514][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.141850][ T290] bridge_slave_0: entered allmulticast mode [ 27.148266][ T290] bridge_slave_0: entered promiscuous mode [ 27.155784][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.163063][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.170372][ T290] bridge_slave_1: entered allmulticast mode [ 27.176632][ T290] bridge_slave_1: entered promiscuous mode [ 27.214420][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.221532][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.228692][ T293] bridge_slave_0: entered allmulticast mode [ 27.235004][ T293] bridge_slave_0: entered promiscuous mode [ 27.245056][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.252192][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.259513][ T293] bridge_slave_1: entered allmulticast mode [ 27.265821][ T293] bridge_slave_1: entered promiscuous mode [ 27.360466][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.367665][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.374862][ T291] bridge_slave_0: entered allmulticast mode [ 27.381219][ T291] bridge_slave_0: entered promiscuous mode [ 27.389493][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.396575][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.403741][ T291] bridge_slave_1: entered allmulticast mode [ 27.410167][ T291] bridge_slave_1: entered promiscuous mode [ 27.472526][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.479753][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.487064][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.494237][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.529649][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.536737][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.544113][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.551238][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.569788][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.576883][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.584231][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.591312][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.628591][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.635716][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.643059][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.650120][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.683664][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.691086][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.698533][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.705803][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.713296][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.720888][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.728290][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.736232][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.753279][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.760407][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.773953][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.781080][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.788820][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.795862][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.803679][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.810787][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.823019][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.830138][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.838021][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.845081][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.857846][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.865155][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.873853][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.880944][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.916064][ T290] veth0_vlan: entered promiscuous mode [ 27.950874][ T290] veth1_macvtap: entered promiscuous mode [ 27.958700][ T293] veth0_vlan: entered promiscuous mode [ 27.978644][ T292] veth0_vlan: entered promiscuous mode [ 27.985726][ T293] veth1_macvtap: entered promiscuous mode [ 28.024083][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.046816][ T291] veth0_vlan: entered promiscuous mode [ 28.058283][ T292] veth1_macvtap: entered promiscuous mode [ 28.095294][ T291] veth1_macvtap: entered promiscuous mode [ 28.170083][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.239143][ T353] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 28.251152][ T352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.677487][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.837529][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 28.844377][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.855177][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 28.865607][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.878719][ T10] usb 4-1: Product: syz [ 28.885144][ T10] usb 4-1: Manufacturer: syz [ 28.892499][ T10] usb 4-1: SerialNumber: syz [ 29.075760][ T386] syzkaller1: entered promiscuous mode [ 29.081313][ T386] syzkaller1: entered allmulticast mode [ 29.427463][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.587472][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 29.594069][ T66] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.607466][ T66] usb 2-1: config 179 has no interface number 0 [ 29.617660][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 29.647167][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 29.667471][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.697463][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 29.717162][ T66] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 29.737608][ T66] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 29.757511][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.767612][ T391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.119701][ T401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.153000][ T401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.205218][ T404] binder: Unknown parameter 'defcontext01777777777777777777777' [ 30.238457][ T401] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 30.304326][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 30.527457][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.545877][ T31] usb 2-1: USB disconnect, device number 2 [ 30.551800][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 30.551846][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 30.569427][ T31] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 30.617489][ T36] kauditd_printk_skb: 11199 callbacks suppressed [ 30.617508][ T36] audit: type=1326 audit(1773213624.690:11273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.649543][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.659736][ T36] audit: type=1326 audit(1773213624.720:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.689629][ T10] usb 4-1: USB disconnect, device number 2 [ 30.703842][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.714217][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.723605][ T401] audit: audit_backlog=65 > audit_backlog_limit=64 [ 30.730544][ T401] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 30.740907][ T36] audit: type=1326 audit(1773213624.720:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.765537][ T36] audit: type=1326 audit(1773213624.720:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.771486][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.788769][ T36] audit: type=1326 audit(1773213624.720:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.817822][ T401] audit: backlog limit exceeded [ 30.832860][ T66] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.847519][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.859476][ T36] audit: type=1326 audit(1773213624.720:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 30.866388][ T66] usb 3-1: SerialNumber: syz [ 30.897479][ T36] audit: type=1326 audit(1773213624.720:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5df9c799 code=0x50000 [ 32.170552][ T411] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.197869][ T436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 32.246936][ T443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 32.254279][ T443] overlayfs: failed to set xattr on upper [ 32.261605][ T443] overlayfs: ...falling back to redirect_dir=nofollow. [ 32.269110][ T443] overlayfs: ...falling back to index=off. [ 32.275037][ T443] overlayfs: ...falling back to uuid=null. [ 32.302658][ T443] SELinux: failed to load policy [ 32.329566][ T433] usb usb8: usbfs: process 433 (syz.3.27) did not claim interface 0 before use [ 32.339447][ T411] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.348528][ T411] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 32.356193][ T411] usb 4-1: can't read configurations, error -71 [ 32.722806][ T461] ======================================================= [ 32.722806][ T461] WARNING: The mand mount option has been deprecated and [ 32.722806][ T461] and is ignored by this kernel. Remove the mand [ 32.722806][ T461] option from the mount to silence this warning. [ 32.722806][ T461] ======================================================= [ 32.779844][ T463] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 32.791513][ T463] overlayfs: missing 'lowerdir' [ 33.048195][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.198019][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 33.204208][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.215196][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.225206][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 33.234466][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.243225][ T31] usb 1-1: config 0 descriptor?? [ 33.289036][ T66] usb 3-1: 0:2 : does not exist [ 33.296515][ T66] usb 3-1: USB disconnect, device number 2 [ 33.319868][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.417486][ T411] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.567446][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 33.573612][ T411] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 33.581840][ T411] usb 4-1: config 0 has no interface number 0 [ 33.588054][ T411] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.599109][ T411] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.609071][ T411] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 33.622070][ T411] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 33.631391][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.640165][ T411] usb 4-1: config 0 descriptor?? [ 33.654301][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 33.660446][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 33.671129][ T31] usb 1-1: USB disconnect, device number 2 [ 33.687460][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.837479][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 33.843905][ T66] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 33.852708][ T66] usb 3-1: config 0 has no interface number 0 [ 33.853650][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.860049][ T66] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 33.870040][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.883152][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 33.894513][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.902827][ T66] usb 3-1: Product: syz [ 33.907104][ T66] usb 3-1: Manufacturer: syz [ 33.911799][ T66] usb 3-1: SerialNumber: syz [ 33.917212][ T66] usb 3-1: config 0 descriptor?? [ 33.922787][ T475] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 34.097635][ T411] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 34.105864][ T411] logitech-djreceiver 0003:046D:C537.0001: unknown main item tag 0x0 [ 34.114092][ T411] logitech-djreceiver 0003:046D:C537.0001: collection stack underflow [ 34.122399][ T411] logitech-djreceiver 0003:046D:C537.0001: item 0 0 0 12 parsing failed [ 34.130993][ T411] logitech-djreceiver 0003:046D:C537.0001: logi_dj_probe: parse failed [ 34.135743][ T475] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 34.139535][ T411] logitech-djreceiver 0003:046D:C537.0001: probe with driver logitech-djreceiver failed with error -22 [ 34.364737][ T411] usb 4-1: USB disconnect, device number 4 [ 34.697507][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.848677][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.859124][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 34.874993][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.885588][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.893831][ T10] usb 1-1: Product: syz [ 34.898069][ T10] usb 1-1: Manufacturer: syz [ 34.902793][ T10] usb 1-1: SerialNumber: syz [ 34.911450][ T489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.949515][ T499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=499 comm=syz.3.45 [ 35.197498][ T411] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.259350][ T290] ------------[ cut here ]------------ [ 35.264900][ T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 35.272950][ T290] Modules linked in: [ 35.276941][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 35.288667][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.299236][ T290] RIP: 0010:drop_nlink+0xce/0x110 [ 35.304358][ T290] Code: 04 00 00 be 08 00 00 00 e8 ef 16 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 d7 af 03 cc e8 92 28 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 35.324186][ T290] RSP: 0018:ffffc9000b67fc40 EFLAGS: 00010293 [ 35.330337][ T290] RAX: ffffffff81f179de RBX: ffff888124dfc9c0 RCX: ffff88812039cc00 [ 35.338411][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.346455][ T290] RBP: ffffc9000b67fc68 R08: 0000000000000003 R09: 0000000000000004 [ 35.354715][ T290] R10: dffffc0000000000 R11: fffff520016cff80 R12: dffffc0000000000 [ 35.362785][ T290] R13: 1ffff110249bf941 R14: ffff888124dfca08 R15: 0000000000000000 [ 35.370474][ T411] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.370930][ T290] FS: 000055557d4b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.383786][ T411] usb 4-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40 [ 35.387562][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.387585][ T290] CR2: 00007f838ebf0000 CR3: 000000012431e000 CR4: 00000000003526b0 [ 35.398064][ T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.403284][ T290] Call Trace: [ 35.412311][ T411] usb 4-1: Product: syz [ 35.419529][ T290] [ 35.419546][ T290] simple_rmdir+0x153/0x260 [ 35.424194][ T411] usb 4-1: Manufacturer: syz [ 35.427087][ T290] vfs_rmdir+0x3e0/0x560 [ 35.430947][ T411] usb 4-1: SerialNumber: syz [ 35.434642][ T290] incfs_kill_sb+0x109/0x230 [ 35.434683][ T290] deactivate_locked_super+0xd8/0x2a0 [ 35.458503][ T290] deactivate_super+0xb8/0xe0 [ 35.463373][ T290] cleanup_mnt+0x406/0x4a0 [ 35.468047][ T290] __cleanup_mnt+0x1d/0x40 [ 35.472623][ T290] task_work_run+0x1e8/0x260 [ 35.477323][ T290] ? __cfi_task_work_run+0x10/0x10 [ 35.482535][ T290] ? __x64_sys_umount+0x12e/0x180 [ 35.487644][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.493087][ T290] ? __kasan_check_read+0x15/0x20 [ 35.498232][ T290] resume_user_mode_work+0x35/0x50 [ 35.503415][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 35.509036][ T290] do_syscall_64+0x63/0xf0 [ 35.513523][ T290] ? clear_bhb_loop+0x50/0xa0 [ 35.518346][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.524326][ T290] RIP: 0033:0x7f6204f9d9d7 [ 35.528824][ T290] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.548697][ T290] RSP: 002b:00007ffc2ea49c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.557221][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6204f9d9d7 [ 35.565306][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2ea49d20 [ 35.573376][ T290] RBP: 00007ffc2ea49d20 R08: 00007ffc2ea4ad20 R09: 00000000ffffffff [ 35.581438][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2ea4ae10 [ 35.589577][ T290] R13: 00007f6205032050 R14: 000000000000812c R15: 00007ffc2ea4bee0 [ 35.597753][ T290] [ 35.600826][ T290] ---[ end trace 0000000000000000 ]--- [ 35.608308][ T290] ================================================================== [ 35.616431][ T290] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 35.622735][ T290] Write of size 4 at addr 0000000000000168 by task syz-executor/290 [ 35.630750][ T290] [ 35.633134][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 35.633170][ T290] Tainted: [W]=WARN [ 35.633178][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.633190][ T290] Call Trace: [ 35.633205][ T290] [ 35.633213][ T290] __dump_stack+0x21/0x30 [ 35.633236][ T290] dump_stack_lvl+0x140/0x1c0 [ 35.633256][ T290] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.633298][ T290] print_report+0x3d/0x70 [ 35.633323][ T290] kasan_report+0x162/0x1a0 [ 35.633342][ T290] ? ihold+0x24/0x70 [ 35.633374][ T290] ? _raw_spin_unlock+0x45/0x60 [ 35.633392][ T290] ? ihold+0x24/0x70 [ 35.633428][ T290] kasan_check_range+0x25a/0x2b0 [ 35.633451][ T290] __kasan_check_write+0x18/0x20 [ 35.633476][ T290] ihold+0x24/0x70 [ 35.633510][ T290] vfs_rmdir+0x26a/0x560 [ 35.633526][ T290] incfs_kill_sb+0x109/0x230 [ 35.633546][ T290] deactivate_locked_super+0xd8/0x2a0 [ 35.633577][ T290] deactivate_super+0xb8/0xe0 [ 35.633599][ T290] cleanup_mnt+0x406/0x4a0 [ 35.633630][ T290] __cleanup_mnt+0x1d/0x40 [ 35.633663][ T290] task_work_run+0x1e8/0x260 [ 35.633681][ T290] ? __cfi_task_work_run+0x10/0x10 [ 35.633698][ T290] ? __x64_sys_umount+0x12e/0x180 [ 35.633731][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.633757][ T290] ? __kasan_check_read+0x15/0x20 [ 35.633783][ T290] resume_user_mode_work+0x35/0x50 [ 35.633814][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 35.633839][ T290] do_syscall_64+0x63/0xf0 [ 35.633856][ T290] ? clear_bhb_loop+0x50/0xa0 [ 35.633894][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.633918][ T290] RIP: 0033:0x7f6204f9d9d7 [ 35.633936][ T290] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.633959][ T290] RSP: 002b:00007ffc2ea49c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.633976][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6204f9d9d7 [ 35.633987][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2ea49d20 [ 35.633997][ T290] RBP: 00007ffc2ea49d20 R08: 00007ffc2ea4ad20 R09: 00000000ffffffff [ 35.634008][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2ea4ae10 [ 35.634034][ T290] R13: 00007f6205032050 R14: 000000000000812c R15: 00007ffc2ea4bee0 [ 35.634054][ T290] [ 35.634062][ T290] ================================================================== [ 35.882967][ T411] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 35.884052][ T290] Disabling lock debugging due to kernel taint [ 35.898358][ T290] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 35.898594][ T411] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 35.906203][ T290] #PF: supervisor write access in kernel mode [ 35.906220][ T290] #PF: error_code(0x0002) - not-present page [ 35.906233][ T290] PGD 800000010d77c067 P4D 800000010d77c067 PUD 0 [ 35.933715][ T290] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 35.939829][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G B W syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 35.941285][ T411] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 35.953156][ T290] Tainted: [B]=BAD_PAGE, [W]=WARN [ 35.953169][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.953182][ T290] RIP: 0010:ihold+0x2a/0x70 [ 35.977965][ T411] usb 4-1: USB disconnect, device number 5 [ 35.981754][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 1f 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 35.981781][ T290] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 36.013317][ T290] RAX: ffff88812039cc00 RBX: 0000000000000000 RCX: ffff88812039cc00 [ 36.019257][ T36] kauditd_printk_skb: 1847 callbacks suppressed [ 36.019326][ T36] audit: type=1400 audit(1773213630.000:13127): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.021338][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.021357][ T290] RBP: ffffc9000b67fcb0 R08: ffffffff88b8f947 R09: 1ffffffff1171f28 [ 36.029250][ T36] audit: type=1400 audit(1773213630.000:13128): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.049672][ T290] R10: dffffc0000000000 R11: fffffbfff1171f29 R12: ffff888124dfc9cc [ 36.049696][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 36.049709][ T290] FS: 000055557d4b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.049728][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.049744][ T290] CR2: 0000000000000168 CR3: 000000012431e000 CR4: 00000000003526b0 [ 36.059490][ T36] audit: type=1400 audit(1773213630.000:13129): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.065728][ T290] Call Trace: [ 36.065740][ T290] [ 36.065750][ T290] vfs_rmdir+0x26a/0x560 [ 36.102257][ T500] udevd[500]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.103187][ T290] incfs_kill_sb+0x109/0x230 [ 36.113569][ T36] audit: type=1400 audit(1773213630.000:13130): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.118732][ T290] deactivate_locked_super+0xd8/0x2a0 [ 36.118761][ T290] deactivate_super+0xb8/0xe0 [ 36.118782][ T290] cleanup_mnt+0x406/0x4a0 [ 36.131584][ T36] audit: type=1400 audit(1773213630.000:13131): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.148215][ T290] __cleanup_mnt+0x1d/0x40 [ 36.148259][ T290] task_work_run+0x1e8/0x260 [ 36.167111][ T36] audit: type=1400 audit(1773213630.000:13132): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.174507][ T290] ? __cfi_task_work_run+0x10/0x10 [ 36.174540][ T290] ? __x64_sys_umount+0x12e/0x180 [ 36.180081][ T36] audit: type=1400 audit(1773213630.000:13133): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.199913][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 36.199947][ T290] ? __kasan_check_read+0x15/0x20 [ 36.310224][ T290] resume_user_mode_work+0x35/0x50 [ 36.315392][ T290] syscall_exit_to_user_mode+0x63/0xb0 [ 36.320897][ T290] do_syscall_64+0x63/0xf0 [ 36.325364][ T290] ? clear_bhb_loop+0x50/0xa0 [ 36.330087][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.336015][ T290] RIP: 0033:0x7f6204f9d9d7 [ 36.340468][ T290] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 36.360195][ T290] RSP: 002b:00007ffc2ea49c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.368685][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6204f9d9d7 [ 36.376692][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2ea49d20 [ 36.384706][ T290] RBP: 00007ffc2ea49d20 R08: 00007ffc2ea4ad20 R09: 00000000ffffffff [ 36.392717][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2ea4ae10 [ 36.400721][ T290] R13: 00007f6205032050 R14: 000000000000812c R15: 00007ffc2ea4bee0 [ 36.408737][ T290] [ 36.411791][ T290] Modules linked in: [ 36.415822][ T290] CR2: 0000000000000168 [ 36.419993][ T290] ---[ end trace 0000000000000000 ]--- [ 36.425490][ T290] RIP: 0010:ihold+0x2a/0x70 [ 36.430066][ T290] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 1f 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 36.449711][ T290] RSP: 0018:ffffc9000b67fca0 EFLAGS: 00010246 [ 36.455819][ T290] RAX: ffff88812039cc00 RBX: 0000000000000000 RCX: ffff88812039cc00 [ 36.463834][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.471837][ T290] RBP: ffffc9000b67fcb0 R08: ffffffff88b8f947 R09: 1ffffffff1171f28 [ 36.479869][ T290] R10: dffffc0000000000 R11: fffffbfff1171f29 R12: ffff888124dfc9cc [ 36.487879][ T290] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 36.495901][ T290] FS: 000055557d4b4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.504859][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.511467][ T290] CR2: 0000000000000168 CR3: 000000012431e000 CR4: 00000000003526b0 [ 36.519493][ T290] Kernel panic - not syncing: Fatal exception [ 36.526154][ T290] Kernel Offset: disabled [ 36.530493][ T290] Rebooting in 86400 seconds..